Endpoint Protection

 View Only
  • 1.  generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 27, 2011 07:46 PM

    Hi

     

    I am looking for find information about all client which are managed by SEPM. I want to know which defination revision has been installed on all SEP client managed by SEPM. Like a report which show client name ( PC name) and virus deifnation version installed on them??

     

    I cannot find a way to do it.. Any help would be really great.

     

     

    Regards

    Sam



  • 2.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 27, 2011 08:15 PM
    Go to Monitor, Logs Tab, them run a computer status report. Export it to text, open exel, import to excel. All clients will show with all the information your wanting and much more


  • 3.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 28, 2011 05:21 AM

    Hi Sam,

    There are many excellent reports that can be generated from the SEPM. Here is some recommended reading about the different types of info that can be sumamarized and displayed:

    About the different types of Symantec Endpoint Protection Manager Reports
    Article: TECH95538 | Created: 2009-01-14 | Updated: 2009-01-14 |
    Article URL http://www.symantec.com/docs/TECH95538

    Viewing risks
    Article: HOWTO55115 | Created: 2011-06-29 | Updated: 2011-09-09 |
    Article URL http://www.symantec.com/docs/HOWTO55115

    About Risk reports and logs
    Article: TECH95543 | Created: 2009-01-14 | Updated: 2009-01-14 |
    Article URL http://www.symantec.com/docs/TECH95543

    One Connect Forum "Idea" (enhancement request) that followers of this thread may wish to support.....

    Add PTP Information to SEPM Computer Status Reports
    https://www-secure.symantec.com/connect/ideas/add-ptp-information-sepm-computer-status-reports


    Hope this helps!  Do update the thread with any additional questions.



  • 4.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 28, 2011 11:58 AM

    If you are using SQL as DB you can write a SQL query to export only Hostname, IP and Virus Definitions.

     http://www.symantec.com/docs/DOC2411



  • 5.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 28, 2011 01:40 PM
    You can also install IT Analytics for SEP


  • 6.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Sep 28, 2011 01:54 PM

    Correct as as thatdude said you can install It Analytics its really good.



  • 7.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Oct 05, 2011 05:55 PM

    Cheers

     

    Thanks to all



  • 8.  RE: generate report about Virus definition installed on All SEP CLIENTS managed by SEPM

    Posted Oct 06, 2011 07:10 PM

    Hi. I have rights to read the data in the SEM5 database, so I create a new data connection inside of Excel.

    This is the query I run against the DB:

     select i.computer_name
    , agent_version
    , pat.version as vd_version
    , dateadd(s,convert(bigint,LAST_UPDATE_TIME)/1000,'01-01-1970 00:00:00') lastupdatetime
    , g.name as group_name
    , OPERATION_SYSTEM
    , i.CURRENT_LOGIN_USER
    , i.MAC_addr1
    , i.ip_addr1_text
    , i.DELETED
    from sem_agent as sa with (nolock) left outer join pattern pat on sa.pattern_idx=pat.pattern_idx
    inner join v_sem_computer i on i.computer_id=sa.computer_id
    inner join identity_map g on g.id=sa.group_id
    inner join identity_map p on p.id=sa.last_server_id
    inner join identity_map s on s.id=sa.domain_id
    inner join identity_map q on q.id=sa.last_site_id
    where
    (sa.agent_type='105' or sa.agent_type='151') and sa.deleted='0' and I.DELETED = 0
    order by group_name, operation_system, i.COMPUTER_name 

    This code comes from http://www.altirigos.com/vbulletin/sep/12007-sep-reports.html

    As the date of the definitions is more important to me than the revision, I also do a calculation of =datevalue(left(vd_version_cell,10)) with conditional highlighting. Anything older than =today()-10 is orange and =today()-30 is red.