Endpoint Protection

 View Only

  • 1.  Learned Applications.... Which computer?

    Posted Apr 07, 2010 09:00 PM
    Hello All and Happy (late) Easter! :P

    I have installed Endpoint Protection on several machines and SEPM on a server. Now... I can get the notifications of learned applications sent to my email with a .mht attachment, which is great. But the problem I face is, How do I know which computer is running these applications? Sometimes the reports only contain one application, sometimes about 50!

    So, How can I determine which pc is launching these applications because the reports don't tell me!
    Example below:
    -*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/
    Symantec Endpoint Protection 
      
    Notification Events
     
    31 March 2010 7:08 PM to 31 March 2010 7:38 PM                         Print   Save   Close   
    Learned Applications

    Time                         Application  Path 
    31/03/2010 19:32:51  COH32.exe  C:/Program Files/Common Files/Symantec Shared/COH 
    31/03/2010 19:32:21  COH32.exe  C:/Program Files/Common Files/Symantec Shared/COH 
    -*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/-*/
     
    Can anyone shed any light on this one?
    Thank you in advance!
    Chris.


  • 2.  RE: Learned Applications.... Which computer?

    Posted Apr 07, 2010 09:06 PM
    Thats  a problem, it does not show computer name!


  • 3.  RE: Learned Applications.... Which computer?

    Posted Apr 08, 2010 08:16 AM

    Getting a bulk report out of this is next to impossible.


  • 4.  RE: Learned Applications.... Which computer?

    Posted Apr 08, 2010 08:47 AM

    You could always query the SQL DB to see if you can pull out PCs by name.


  • 5.  RE: Learned Applications.... Which computer?

    Posted Apr 08, 2010 10:35 AM
    The reporting in v11 is absolutely rubbish, you just have to hope everything is working ok.
    Cant even get a report to see which PC's don't have the latest definitions and the idea of a status page is that you can click to drill down to a problem,
    but you just  get a bigger graph of what you can already see. Plus you can only see events for the last 24hours - What about Weekends !!!

    How you can get to V11 of a product and still have a useless console beats me.




  • 6.  RE: Learned Applications.... Which computer?

    Posted Apr 08, 2010 12:04 PM
    @ Wayne

    On the Monitors page ---> Logs ---> Computer Status for the log type

    You can also pick a time frame of Past 24 hours, past week, past month, current month, past three months, past year, or make a custom


  • 7.  RE: Learned Applications.... Which computer?
    Best Answer

    Posted Apr 08, 2010 03:37 PM
    Reports Rubbish?  Yes, ridiculously so...  Come on, when is some of the garbage in SEP going to get taken out?  It's been what, almost 2 years now?  ...and how many Maintenance Releases and patches?  Quite a few.

    I mean really, a "Learned Application" alert that doesn't tell you what machine has had a new application installed?  Who's idea (and incredible oversight) was that?  I hate to be disrespectful to the great minds that contribute to a product like this (and I mean that), but how did this happen, and WHEN IS IT GOING TO BE FIXED????!!!

    Those of us who have been painfully enduring all the sometimes debilitating effects of SEP "upgrades" have been begging for some common sense to be applied to report development since day one.  When is there going to be some improvement?  What Maintenance Release are we waiting for?  And, when is it coming?

    The idea that as "Ditto" stated above, "you just have to hope everything is working ok." is so true that it's scary, and certainly is not what we are paying our S&M (Support & Maintenance) fees for - pun intended.


  • 8.  RE: Learned Applications.... Which computer?

    Posted Apr 08, 2010 07:48 PM
    lol Wow.... I didn't think i'd get that big of a responce. Glad to see i'm not the only one who is unsatisfied with this product!!! lol The only reason i'm using it is because it was already paid for.

    So I hate to think I'm right about not being able to get computer names in my reports.... Might as well TURN THEM OFF!!!! Wasting valuable space in my emails at 150kb a pop. Rubbish.

    The console needs to have  ALL THE OPTIONS IN ONE SPOT!!! Like one big blue link that says Options, then have the different categories by Tabs in the window or a navigation menu..... wow what a novel idea... everything in one convenient location...

    Sooooo many options scattered EVERYWHERE!!! It's near impossible to get a good setup if you are a beginner....

    I'm glad I'm not the ony one who is frustrated with the console....

    Thank you for helping me massage my temples... "Woo-Saah..."