Endpoint Protection Small Business Edition

Can Anyone give me the details on kind of reports are generated daily/weekly basis from SEPM. What kind of reports are important and what are reports provided to management. What are action taken on those reports.

This KB article should be a big help regarding the reports that can be generated

About the different types of Symantec Endpoint Protection Manager Reports

These are also very good:

References

2009081410023948 - About Application and Device Control reports and logs

• 2009081410270748 - About Compliance reports and logs
• 2009081410381448 - About Computer Status reports and logs
• 2009081410460448 - About Network Threat Protection reports and logs
• 2009081410532848 - About Risk reports and logs
• 2009081411032248 - About Scan reports and logs
• 2009081411193948 - About System reports and logs

In the end it will be your call on what you want to see but I would setting up alerting for Risks detected as well as New Risks. You can also setup reporting to show you over deployed license counts. SEP 12.1 has some default reports that are setup and automatically enabled. They will give you a weekly summary of risks on your networks and actions taken. You can check it out on the Reporting page in the SEPM.

daily report would be computer status report, which has all the offline and virus updates

weekly would be your scan report/ risk/compliance report.

Daily Status Report

Virus detection counts for cleaned, suspicious, blocked, quarantined, and deleted actions
Virus definition (Offline system and Out of Dated Systems)
Top ten risks and infections

Weekly Status Report

Compliance Report
Virus detection
Virus definition Upto Date(Offline system and Out of Dated Systems)
Risk distribution by day
Scan Report

These are the rport which are using on daily and weekly basis

Hi,

There are two weekly scheduled reports & seven pre-defined notifications configured by Symantec.

Schedule Reports location: SEPM --> Reports --> Scheduled Reports

Predefined Notifications location:

SEPM--> Monitors--> Notifications --> View Notifications --> Notifications Conditions

Refer this thread: https://www-secure.symantec.com/connect/forums/sepm-121-notification-reports-not-accurate#comment-7796521

To provide reports to the management you can refer these articles:

https://www-secure.symantec.com/connect/articles/metrics-using-data-sepm

https://www-secure.symantec.com/connect/articles/metrics-using-data-sepm-part2

https://www-secure.symantec.com/connect/articles/metrics-using-data-sepm-part-three

Thanks all, it was very helpful.