RE: Symantec AV reporting metrics.

Thanks Ted,

If I understand, I just need to install the 10.1 and the reporting server in
one of my primary and that is it?

Is there any eval version of it? I will like to test it on my lab first.
BTW, is the 10.1 affected by the recent Symantec products vulnerability?

Thanks,
Serge

-----Message d'origine-----
De : Ted Senn [mailto:ted.senn@zurichna.com] 
Envoyé : mardi 6 juin 2006 14:24
À : serge.vondandamo@wanadoo.fr
Cc : focus-virus@securityfocus.com; 'sekure'
Objet : RE: Symantec AV reporting metrics.

I am running Reporting server without any problem on version 10, and 9
servers.  The agent installs and reports back to the reporting server. You
may need a special group with 10.1 for the reporting server only, but the
reporting will work with the lower version AV servers ( agent will not
install on NT systems)


Ted Senn
Distributed Security
 

                      "Serge Vondandamo"

                      <serge.vondandamo@         To:      "'sekure'"
<sekure@gmail.com>                                          
                      wanadoo.fr>                cc:
<focus-virus@securityfocus.com>                                        
                                                 Subject: RE: Symantec AV
reporting metrics.                                     
                      06/05/2006 03:30

                      PM

 

 





Sekure and all,

Thanks but we don't have version 10.1 and unfortunately, I have to find a
way to report with the versions we have. I may suggest to upgrade but that
will not be possible now - IT Ops folks and other IS Managers will be
difficult to convince - given the heavy IT Governance and change process we
have in place.

We currently have version 8 in few sites, version 9 and 10 in the majority
of the sites.

Paul, your pointers are more than welcome!!!

Thanks,
Serge



-----Message d'origine-----
De : sekure [mailto:sekure@gmail.com]
Envoyé : lundi 5 juin 2006 20:51
À : Serge Vondandamo
Cc : focus-virus@securityfocus.com
Objet : Re: Symantec AV reporting metrics.

Symantec Corp AV 10.1 has a reporting server module, which provides
pretty pictures for lots of these metrics.

On 6/3/06, Serge Vondandamo <serge.vondandamo@wanadoo.fr> wrote:
> All,
>
> I have been tasked to develop Symantec AV reporting metrics.
> The metrics should help provide visual information (graphs, tables, etc)
to
> Senior management on weekly, monthly, quarterly and annual basis per
region
> and WW if needed.
>
> I am focusing on providing the followings:
>
> - Number of AV clients per region,
> - Number of AV engines, versions, per region,
> - Information on AV defs per region, frequency of updates, versions of AV
> definitions, age of AV definitions (i.e. two weeks old, two months old,
very
> old, etc).
> - Status of AV clients per region - i.e. auto-protect enabled or
disabled,
> threat found, old definitions, etc.
> - Any other information that will be useful for big boss not interested
on
> technical data.
>
>
> I am looking for pointers, idea and suggestion from those who have
already
> done so; I will not try to re-invent the wheel ;)
>
> Thanks for your inputs.
>
> Regards,
> Serge Vondandamo, HND, CISSP, CCNA.








******************* PLEASE NOTE *******************
This E-Mail/telefax message and any documents accompanying this
transmission may contain privileged and/or confidential information and is
intended solely for the addressee(s) named above.  If you are not the
intended addressee/recipient, you are hereby notified that any use of,
disclosure, copying, distribution, or reliance on the contents of this
E-Mail/telefax information is strictly prohibited and may result in legal
action against you. Please reply to the sender advising of the error in
transmission and immediately delete/destroy the message and any
accompanying documents.  Thank you.