Endpoint Protection

Hi all,

Are there any possibilities that the SEP server send an email out after it has updated the definition file? Is it ok that the email content or the subject include the def date or version?

Thanks for your help!!!

As of now there is no such settings inside the SEPM.
I really like this idea.. it wil be very helpful when Manager is failing the definitions download.
I would request you to add this suggestion under the idea section and this option should get implicated very soon :)

Thanks Rafeeq.

But do u think there is other way that can do the same thing like using a script to check the def regularly?

If you want to check defintion regularly it can be done without  a script you can do either of the 2:

1. create a email notfication
2. Create Report

Title: 'How to run reports in the Symantec Endpoint Protection Manager?'
Document ID: 2008061808582648
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008061808582648?Open&seg=ent

Title: 'About the different types of Symantec Endpoint Protection Manager Reports'
Document ID: 2009081409151448
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009081409151448?Open&seg=ent


Title: 'How to create email notifications in the event of risk outbreak or virus definitions out-of date in Symantec Endpoint Protection Manager (SEPM)'
Document ID: 2008032116480748
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008032116480748?Open&seg=ent

Prachand is right about creating notifications about out of virus defs.

However , Sam wanted to create a report, which would send out the defs with regards just to the manger and not with the clients.

the report should say , defs were successfully downloaded on the manager..however we do not have such options in the SEPM....

It would be great if there was a built-in solution for SEPM to send an email when new definitions have been downloaded or when it has failed.  What we have done is the following:

1. I created a notification alert to send me an email when the SEP client on the SEPM server is out of date.  We update only once a day, so this alerting solution has proven effective for us.

2. I have also configured a silent liveudpate scheduled taks to run a a later time at night in case the built-in SEPM Liveupdate fails to download the 32-bit AV defs when it's scheduled to.

Hope it helps....

Hi
How can I create/configure a silent liveupdate scheduled task? I would like to try this for an alternative before SEPM has the ability to send "new def has been arrived" notification. Thanks.

Hi MrSam,

check this...
How to schedule LiveUpdate or LiveUpdate Administrator to run more than once a day
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/7126f085b9e9a62d88256e7b006f5eef?OpenDocument


There is a script to get the information(Modified date) about  folder and sub folders. You can use this script to get the information about "Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content" folder.

It genarates and CSV file with information about all subfolder.
Try to modify the script to get more details.

You can also get the first 7lines of "Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}\90815019\Full\WHATSNEW.TXT" It has the def date...

Sorry.. I missed link to script...
http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/bb53b26e-fa3c-4e34-a1a6-651ad6f3c8bf

If you schedule the command luall.exe -s, it will alunch Liveupdate in silent mode...  You will probably need to include the full path to the LUALL.exe file when you configure the scheduled task..