Endpoint Protection

 View Only
  • 1.  Testing Reporting Component.

    Posted Oct 05, 2009 11:02 AM
    Hi All,

       I've been noticing for the past few weeks that my Symantec End Point Protection Manager Console has not reported any infections or threats. With the people that I am monitoring the chances of there NOT being anything infecting them are somewhere between me winning the Lottery and becoming President of Cuba, so I was wondering if there is any 'control' test to do in order to cause a false positive and generate a report on the SEP Manager console?


  • 2.  RE: Testing Reporting Component.
    Best Answer

    Posted Oct 05, 2009 11:06 AM
    Test any client will Eicar test String and check if you are getting the report.

    http://eicar.org/anti_virus_test_file.htm


  • 3.  RE: Testing Reporting Component.

    Posted Oct 05, 2009 12:56 PM
    Thanks this helped a lot. I see that SEP caught the infection locally and deleted it as expected however I do not see this as being reported on the Manager Console like it should. I will give it another hour or so before I panic. Thank you again.


  • 4.  RE: Testing Reporting Component.

    Posted Oct 05, 2009 01:10 PM
    Is client talking to the SEPM ( Green ball  on the client shiled )?
    which mode of communication you are using?


  • 5.  RE: Testing Reporting Component.

    Posted Oct 05, 2009 01:14 PM
    There is an option under the manager to "not report eicar infections".

    Click Admin
    Click Local Site
    Click Edit Site Properties
    Click Database Tab
    uncheck "Delete EICAR events"