Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

SEP: Unmanaged detector reporting

  • 1.  SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 01:27 AM

    Hey Guys,

     

    I've been looking around the SEPM on where can I generate the unmanaged detector's complete list of rouge machines, we are currently using the  dashboard's "security issues". Is there really a way to view it as a report or as log?

     

    Thanks,



  • 2.  RE: SEP: Unmanaged detector reporting

    Trusted Advisor
    Posted Sep 02, 2013 01:29 AM

    Hello,

    To display the list of unauthorized devices that the client detects:

    1 In the console, click Home.

    2 On the Home page, in the Security Status section, click More Details.

    3 In the Security Status Details dialog box, scroll to the Unknown Device Failures table.

    4 Close the dialog box.

    Check these Articles:

    Configuring a client to detect unmanaged devices

    http://www.symantec.com/docs/HOWTO80763

    What does it mean to set a client as an Unmanaged Detector?

    http://www.symantec.com/docs/TECH183746

    Find Unmanaged Clients on a remote network location using the Unmanaged Detector

    http://www.symantec.com/docs/TECH96234

    Unmanaged Detector in SEP 12.1

    https://www-secure.symantec.com/connect/articles/unmanaged-detector-sep-121

    Check this Thread:

    https://www-secure.symantec.com/connect/forums/how-unmanaged-detector-works

    Hope that helps!!



  • 3.  RE: SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 01:32 AM

    First set a notification so that you can get notified whenever rouge machiens are found

    Setting notifications when using the "Unmanaged Detector" feature in the SEPM

     
    Open the SEPM home page : Under security Attention you have Notifications link. This shows you how many Un-Read notificatiosn you have saved in the SEPM.


  • 4.  RE: SEP: Unmanaged detector reporting



  • 5.  RE: SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 03:08 AM

    Hi I already said above that I'm using that procedure, I'm asking if is there a way to genarate a report on machines detected as unmanaged detector.

     

    Thanks,



  • 6.  RE: SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 03:10 AM

    Hi, I'm already using that procedure, I'm looking for a way to genarate a report about the machines detected by the unmanaged detectors, is there a way we can generate it on the Reports Menu or Monitors?

    Thanks,



  • 7.  RE: SEP: Unmanaged detector reporting



  • 8.  RE: SEP: Unmanaged detector reporting

    Trusted Advisor
    Posted Sep 02, 2013 03:54 AM

    Hello,

    Try these steps below:

    1. Login to SEPM
    2. Click on Monitors
    3. Click on Notifications tab
    4. Click on Notification Conditions
    5. Click Add
    6. Select Unmanaged Computers and edit the alert as you need
    7. This will send you an alert showing unmanaged computers as they are detected.

    Hope that helps!!



  • 9.  RE: SEP: Unmanaged detector reporting
    Best Answer

    Posted Sep 02, 2013 09:02 AM

    AFAIK, there is no report or log beyond the above proposals.

    However, as a workaround you could try to get the unmanaged clients through an SQL query:

    SELECT  CL.COMPUTER_NAME AS "Unmanaged Detector", DD.DELETED, 
      DD.IP_ADDRESS_TEXT
    FROM V_LAN_DEVICE_DETECTED AS DD
    INNER JOIN SEM_CLIENT AS CL ON DD.COMPUTER_ID = CL.COMPUTER_ID

    See here:

    https://www-secure.symantec.com/connect/forums/trouble-unmanaged-detector#comment-7046031

     



  • 10.  RE: SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 06:14 PM

    What has already been described by rafeeq and mithun are what is available



  • 11.  RE: SEP: Unmanaged detector reporting

    Posted Sep 02, 2013 11:00 PM

    Thanks, it worked.