Endpoint Protection

 View Only
  • 1.  Intrusion Prevention Signatures

    Posted Apr 15, 2009 03:06 PM
    Hi

    I am running SEPM 11.0.4000.2295

    The dashboard (Home tab) tells me that there is one client with old intrusion prevention signatures
    Drilling into the report shows me the exact same information with percentages (wow thanks)

    I figured the computer status 'log' would show me which machine has the old signatures, but it only contains A/V definitions.

    Does anyone know how I can determine which computer has the old definitions?
    This should be simple, but is somehow not obvious in the UI.

    Thanks!



  • 2.  RE: Intrusion Prevention Signatures

    Posted Apr 15, 2009 03:57 PM
    I think this depends on how you say old definitions, on the logs, computer status logs, Click the link advance settings, then select an old virus def there, then click the button view log.


  • 3.  RE: Intrusion Prevention Signatures

    Posted Apr 15, 2009 04:04 PM
    Paul,

    if he wants to see old Intrusion Preventions Signatures, wouldn't he choose IDS version under the advanced settings?


  • 4.  RE: Intrusion Prevention Signatures

    Posted Apr 15, 2009 05:10 PM
    Goto Search Clients in the Group section and select: Search field: Intrustion Prevention Signatures Comparison Operator: = Value: version of the IDS that you are looking for


  • 5.  RE: Intrusion Prevention Signatures

    Posted Apr 15, 2009 05:13 PM
    Ya, sorry made a mistake I thought its Virus Defs.. Peace!


  • 6.  RE: Intrusion Prevention Signatures

    Posted Apr 20, 2009 11:34 AM
    Thank you, this works.
    I still would like to see IDS signatures in the computer status report.



  • 7.  RE: Intrusion Prevention Signatures

    Posted Apr 20, 2009 01:44 PM
    Hi Matt, as what Rick said, on the logs, computer status logs, Click the link advance settings, then select Intrusion Prevention. But on the logs it's not displayed even on the exported logs.

    However you can do a a summary Report, it will summarize workstations/clients with the Intrusion Prevention Signatures.