Endpoint Protection

how to find the system which is not connected with manager server?

To find unmanage clients

Configuring a client to detect unmanaged devices

http://www.symantec.com/docs/HOWTO80763

What does it mean to set a client as an Unmanaged Detector?

http://www.symantec.com/docs/TECH183746

Edit

Find Unmanaged Clients on a remote network location using the Unmanaged Detector

http://www.symantec.com/docs/TECH96234

Unmanaged Detector in SEP 12.1

https://www-secure.symantec.com/connect/articles/unmanaged-detector-sep-121

To display the list of unauthorized devices that the client detects:

1 In the console, click Home.

2 On the Home page, in the Security Status section, click More Details.

3 In the Security Status Details dialog box, scroll to the Unknown Device Failures table.

4 Close the dialog box.

Step to configure the notification

1. Login to SEPM
2. Click on Monitors
3. Click on Notifications tab
4. Click on Notification Conditions
5. Click Add
6. Select Unmanaged Computers and edit the alert as you need
7. This will send you an alert showing unmanaged computers as they are detected.

Monitors - logs - Select computer status report

select advanced tab ( blue link)

Online Status select ( Offline)

create the report, these are the ones which are not connected and offline

The client on-line status report shows you the number of computers in each group or subnet that are on-line or off-line, depending on the report choice.

To see the client computer names, follow the below steps:

1. Click on the Monitors tab.
2. Click on the Logs tab.
3. Click on the Log type drop down menu.
4. Select Computer Status.
5. Click on Advanced Settings
6. Select Additional Filters
7. Click Apply
8. In the bottom right locate "Off-line status:" and select from the drop down the desired filter.
   Note: Additionally you can use other filters as needed and also you can save this filter to be used in the future.


9. Click on the View Log button to view the results and obtain the computer name(s) and IP address(es).

An unmanaged detector only shows you clients which don't have SEP installed. Is this what you mean?

Or simply clients that haven't connected?

The computer status report will show you machines that are 'offline' as long you set the offline status under the Advanced settings.

If you choose to use the unmanaged detector to report your unmanaged clients, remember that the unmanaged detector will report ANY gratuitous ARP traffic... so even devices without the capability for SEP client installs (routers, switches, printers, mobile devices) may be reported back to the SEP manager.

my understanding is i require the unmanage information.