Endpoint Protection

I have a v.10 secondary server that is a Reporting Server with other v.10 servers pointing their reporting agents to it.  It is properly uploading all data to my SEPM. 

I'd like to take down this secondary server, but don't want to install the Reporting server on another v.10 server.  Does anyone know for fact if a reporting agent (not server) can be pointed directly to the SEPM and upload properly, or does the upload have to come only from a proper Reporting Server?

Thank you.

We have 5 SAV10 servers in our environment (1 parent, 4 secondary). We setup the reporting agent on the Primary to point to SEPM. This was replicated to all Secondary servers.

No that is not possible, You need to have a Reporting server , then only the reporting clients can forward the logs to the server  and that logs will be sent to the SEPM



Title: 'How to configure Symantec Endpoint Protection Manager to receive SAV 10.x logs'
Document ID: 2008060509525048
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008060509525048?Open&seg=ent

It seems to be possible.  Definitely when you point the primary server to the SEPM, this setting is pushed to the secondary servers (unless they're not inheriting).  As well, I uninstalled my Reporting Server after I found the other v.10 server's reporting agent was already pointing to the SEPM and not the v.10 Reporting Server. 

So long as the servers have Reporting Agents installed, they should be collecting data from their respective clients.  I don't see why they couldn't forward this to the SEPM.  The link provided above doesn't specify whether the servers have to be a Reporting Server, specifically.

SEPM seems to be getting the correct information uploaded to it after I uninstalled the Reporting Server.  I'll leave it overnight and check in the AM to be sure uploading is happening properly.

Hello Justin,

You are correct, its reporting agents

Can Symantec Endpoint Protection Reporting gather data from legacy Symantec AntiVirus Reporting agents?
Yes. You can point the existing reporting agents to the Symantec Endpoint Protection Manager. Turn on the legacy client data log processing, and then all the data appears in the new console.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007071909500548