RE: Symantec AV reporting metrics.

Ted Senn <[email protected]> Tue, 6 Jun 2006 07:23:54 -0500
Newsgroups gmane.comp.security.virus
Message-ID <OFDCD84DB5.3474A52F-ON86257185.0043EC5C-86257185.0043F82A@email.zurich.com>
I am running Reporting server without any problem on version 10, and 9
servers.  The agent installs and reports back to the reporting server. You
may need a special group with 10.1 for the reporting server only, but the
reporting will work with the lower version AV servers ( agent will not
install on NT systems)


Ted Senn
Distributed Security
                                                                                                                                 
                      "Serge Vondandamo"                                                                                         
                      <serge.vondandamo@         To:      "'sekure'" <[email protected]>                                          
                      wanadoo.fr>                cc:      <[email protected]>                                        
                                                 Subject: RE: Symantec AV reporting metrics.                                     
                      06/05/2006 03:30                                                                                           
                      PM                                                                                                         
                                                                                                                                 
                                                                                                                                 




Sekure and all,

Thanks but we don't have version 10.1 and unfortunately, I have to find a
way to report with the versions we have. I may suggest to upgrade but that
will not be possible now - IT Ops folks and other IS Managers will be
difficult to convince - given the heavy IT Governance and change process we
have in place.

We currently have version 8 in few sites, version 9 and 10 in the majority
of the sites.

Paul, your pointers are more than welcome!!!

Thanks,
Serge



-----Message d'origine-----
De : sekure [mailto:[email protected]]
Envoyé : lundi 5 juin 2006 20:51
À : Serge Vondandamo
Cc : [email protected]
Objet : Re: Symantec AV reporting metrics.

Symantec Corp AV 10.1 has a reporting server module, which provides
pretty pictures for lots of these metrics.

On 6/3/06, Serge Vondandamo <[email protected]> wrote:
> All,
>
> I have been tasked to develop Symantec AV reporting metrics.
> The metrics should help provide visual information (graphs, tables, etc)
to
> Senior management on weekly, monthly, quarterly and annual basis per
region
> and WW if needed.
>
> I am focusing on providing the followings:
>
> - Number of AV clients per region,
> - Number of AV engines, versions, per region,
> - Information on AV defs per region, frequency of updates, versions of AV
> definitions, age of AV definitions (i.e. two weeks old, two months old,
very
> old, etc).
> - Status of AV clients per region - i.e. auto-protect enabled or
disabled,
> threat found, old definitions, etc.
> - Any other information that will be useful for big boss not interested
on
> technical data.
>
>
> I am looking for pointers, idea and suggestion from those who have
already
> done so; I will not try to re-invent the wheel ;)
>
> Thanks for your inputs.
>
> Regards,
> Serge Vondandamo, HND, CISSP, CCNA.
>
>
>








******************* PLEASE NOTE *******************
This E-Mail/telefax message and any documents accompanying this
transmission may contain privileged and/or confidential information and is
intended solely for the addressee(s) named above.  If you are not the
intended addressee/recipient, you are hereby notified that any use of,
disclosure, copying, distribution, or reliance on the contents of this
E-Mail/telefax information is strictly prohibited and may result in legal
action against you. Please reply to the sender advising of the error in
transmission and immediately delete/destroy the message and any
accompanying documents.  Thank you.