Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 0 subscribers
  • Views 10755 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is it possible to view ackowledged errors in SEC

Apes

Hi

We have an issue with users using portable apps in our environment, which has been detected by issues scanning USB drives as they have been removed, as the drives no longer exist and no virsuses found on the devices the errors have been acknowledged.

However my manager has asked if we can report on how many instances we've had.  So does anyone know if it is possible to get an extract of all acknowledged errors.

Many thanks

Anthony

:57719


This thread was automatically locked due to age.
  • 0

    Hello Anthony,

    I can't really fathom out what your issue is and whether the errors you are talking about are actually errors or alerts. portable apps sounds like you are referring to Application Control but then there'd be nothing to acknowledge. Could you give one or two examples of these errors [that] have been acknowledged?

    Christian

    :57724
  • 0

    Hi Christian

    The errors were acknowledged since there was no issue, however as part of a factfinding attempt to show how widespread the use of widespread the use of Portable Apps is in our environment we are trying to find out how many alerts we have had where the client has failed to scan a file (that happenned to relate to Portable Apps) because the file no longer exists, as the USB stick it resides on has been removed.

    This is not an issue with SEC, more a query is it possible to view or export errors and alerts that have been acknowledged in SEC.

    Many thanks

    Anthony

    :57732
  • 0

    Hello Anthony,

    it's pretty hard (and arguably requires some reverse-engineering) to extract specific errors in a readable format whether acknowledged or not (well, the latter, outstanding, can be viewed with SEC but only per computer and not aggregated). IMO it's not worth the effort.

    where the client has failed to scan a file

    What kind of scans were these and why do you suspect Portable Apps in the first place? I wonder about the sensitivity of this method. How serious and important is this fact-finding (after the fact)? Who wants to show whom how widespread the use of Portable Apps is and with what intended result?

    Christian

    :57736
Unfiltered HTML