Endpoint Protection

 View Only
  • 1.  Report on unknown device failures

    Posted Sep 18, 2017 09:25 AM

    Hello. We've just migrated to Symantec from McAfee and are in the process of deploying clients, so am quite new to Symantec. I've enabled 2 machines (one on each of our subnets) as Unmanaged Detectors and can view the results under Home > Security Status > Security Status Details > Unknown Device Failures. Ideally what I'd like to do now is produce a report on these devices so I can identify them further and act (resolving the ip address to a name would be nice but even just a list of IPs would do). Can anyone help with any advice on this? Thanks.



  • 2.  RE: Report on unknown device failures

    Posted Sep 18, 2017 09:36 AM

    You can add a notification for this under Monitors >> Notifications tab >> Notification Conditions

    Add the one for "Unmanaged computers"

    You'll start receiving emails with the info on them.



  • 3.  RE: Report on unknown device failures

    Posted Sep 18, 2017 09:56 AM

    Thanks for the reply. Will this send one email per device (I currently have about 200 devices) or does it roll all the unmanaged drives into one notification?



  • 4.  RE: Report on unknown device failures

    Posted Sep 18, 2017 09:58 AM
    It will aggregate based on how often the SEPM does this check so there will be multiple emails with devices that may show up multiple times.