SEP Advanced Reporting

What if you could get more out of the Symantec Endpoint Protection data you already have?



Get more with SEP advanced reporting with SOLVE – comprehensive, real-time visibility with limitless drill-downs and detailed reporting for your SEP environment.


New Functionality:

  • Dashboards*:
    • System Health Check: overall infrastructure review
    • Upgrade Progress: project status as well as detailed errors for each machine
    • License Seat Count: remove duplicates and deleted agents. Only count agents with the most recent timestamps
    • SEP Deployment Status: view the status of the SEP agent deployments done via SEPM
    • Group Profile Serial Tracking: determine which agents the policies have applied to the group they reside in an which do not
  • Track SEP component details on all machines, and status of each
    • On/Off, not installed, off by policy, malfunctioning, not reporting
  • Outbreak Assistance
    • Easy, simple tracking: deleted, quarantined or left alone
  • Ease tedious, manual investigations


*The new dashboards that will be included in the next release are as follows:

Global Status

  • ThreatCon Level
  • Latest AV Definitions
  • Latest SONAR Definitions
  • Latest IPS Definitions
  • SEP Definition Distribution Status
  • AV Currency Status (Visual of clients out of date by number of days)
  • Agent Group Profile Serial Tracking
  • Agents Missing AV Definitions
  • Agents with Corrupt Definitions
  • GUPS with Out of Date AV Definitions


Global Protection Status (Status of components: On/Off, Not Installed, Off by Policy, Malfunctioning, Not Reporting)

  • AV Engine Status
  • Auto-Protection Status
  • Sonar Status
  • Network IPS Status
  • Download Protection Status
  • Memory Exploit Mitigation Status
  • Proactive Threat Protection Status
  • Network Firewall Status


Agent Version Distribution

  • SEP Client Versions (Drill down rollup table)
  • SEP Agent Version Distribution (Donut chart)


Client Events

  • Agent System Events
  • Agent Security Events
  • Agent Behavior Events
  • Agent Packet Events (Top 10)
  • Agent Traffic Events (Top 10)


Server Events

  • Server Client Logs
  • Server System Logs
  • Server Policy Logs



  • Total License Count
  • Total Licenses Consumed
  • Total Licenses Available
  • Licensed Products & Seat Count
  • License Table by Expiration Date



SOX compliance with SOLVE for SEP


SEP Advanced Reporting with SOLVE provides information about SEP infrastructure(s) in user-friendly web dashboards with an array of pre-defined content. SOLVE provides access to any dataset in the SEP database, allowing for unrivaled visualization of SEP data with drill down capabilities from key baselines and metrics in real time.

Unique in its ability to report because it connects directly to your SEP database, SOLVE digests and analyzes all the data in your environment, completely eliminating the need to copy data and install new hardware. SOLVE is easy to configure, fast to implement and friendly to all users.

Tailor your window into your SEP environment to determine very quickly what is working and what needs your immediate attention. SOLVE can drill down to specific asset details of full event data and configuration data allowing you to perform comprehensive investigations into events and areas of interest in seconds – all within a single interface.

Additionally, the highly customizable interface allows administrators to modify the view and presentation of the data to best suit their needs.


Get more with SOLVE for SEP – comprehensive, real-time visibility with limitless drill-downs and detailed reporting for your SEP environment.

Contact NorthStar for your free trial and see your SEP data differently.