Endpoint Protection

we have approx 90000 systems in our network. we enabled unmanaged detector and receving sysems IP. but problem is that in these IP many IP related to unix, mobile device, network devices and printer also. very difficult how to identify only windows system from this unmanaged detector report. through TTL value also very touch to ping IP to know Windows system. Please suggest other experts if using best practices to identify only windows system from report and later to manage this.

 

Regards

aks

get the list of the network devices like printer, switches and etc to have then excluded in your  unmanaged detector so that you can narrow down the results. on the other hand get a report from your deployment software like sccm or LANDesk or your AD and have them compared with the resultant IP address from unmanaged detector. This way you will get to know only the windows assets. 

This is about what you'll get with the unmanaged detectors. They report on all devices without SEP regardless of OS. You'll need to rely on other options/product you have in your network to compare against.

Hi, Use this article. How do I configure exceptions for the "unmanaged detector" from Symantec Endpoint Protection Manager (SEPM)? Url: https://support.symantec.com/en_US/article.TECH95592.html