Endpoint Protection

Trying to use the learned applications feature but I don't see anything in the logs. I've had this running for a few days now so I would think something should be in there?

followed all the steps? you should have all the features of sep installed

https://www-secure.symantec.com/connect/forums/blocking-specific-executables-sep#comment-3835851

I've gotten asked about this a few times by customers. Kind of hidden within SEPM. Try this:

To enable this feature:

Admin >> Select your Local Site >> Select Edit Site Properties >> On the General tab, tick the box "Keep track of every application that the clients run"

To turn it on and have logs uploaded to SEPM for a group:

Clients >> Select the group you want to turn it on for >> Policies tab >> Select Communication Settings under Settings >> Under Upload, tick the box 'Learned aopplications that run on the client computers" This will enable the feature and get a list of the applications run on the computers

To view logs for this feature:

Policies >> Select Search for Applications under Tasks >> On this box you can mix and match based on what you are looking for

Thanks, all looks good now. Somehow I missed the first step of enabling.