Endpoint Protection

I have a need get a list of the "Last Connected IP" addresses for our Symantec clients. In SEPM, if you go to a client's Properties and click the Network tab, there is a Last Connected IP field listed at the top. This isn't necessarily the same as the main IP address listed for the client - the main IP is usually a private IP and the Last Connected IP is external.

I haven't found a report that includes this information; I've tried the Computer Status>Client Inventory Details report and the Computer Status log, but the external "Last Connected IP" is included. I am also unable to locate the attribute in SEPM's SQL database to query it, although I know it must be there somewhere. 

Can anyone find a way to retrieve a list of Last Connected IPs?

is this happening when your clients report to SEPM when connected thru VPN ? have you tried to export the computer status log from Monitors>> Logs tab ?

I checked the Table SEM_Agent from the schema guide, it does not say anything about what it means, its blank with no comments

https://support.symantec.com/en_US/article.DOC8633.html

I belive that its the IP ( in case of dual IP) which is used to connect to SEPM

or 

SEPM IP ( In case of multiple SEPMs in case of fail over)

it might be symantec internal better to have a case created to get it clarified, when you do , please dont forget to update this thread.

We have our SEPM servers exposed so that clients outside the network can still check in and get policy updates, etc. The regularly listed IP address (the one shown that's normally associated with the hostname) of each external client lists the IP address their personal router gives them, such as 192.168.0.x. The only way we can determine a geographical location of the external client is by looking at the Last Connected IP, which is their external IP.

As I stated, this information is not included in the Computer Status Log.

Deleting duplicate comment.