Endpoint Protection

Is there any way to see which groups have IPS definitions in the reports.

All I can get them to show is which SEPM Server is dishing out the reports, It would be more helpful to see which machine groups were getting the definitons as I'd then be able to look at why certain groups haven't been getting them


Thanks

can be done i guess

 The tripped IPS events are reported under the Client Management Logs - Security Log
https://www-secure.symantec.com/connect/forums/display-tripped-ips-signatures-sepm-client

Is this what you are looking for ? 

Hi Vikram ,

Yes I can get them from there . Thanks :)

It's a bit long winded having to search each group individually though to see which ones are getting clients or not . I would have thought there'd be something similar to reports for AV definitions , but I guess not.

again , many thanks for your help.