First thing to know is: is there any detection at all?
And what you must configure? The queries are predefined and will show the threats detected in past 24h or 7 days.
If i run the report Malware Detection History report i am getting the report of malware but that too till Dec-2011 after that i am not getting any detection on malware also, is there anything i am doing wrong ? basically i want to know is there any infected system on my network can u please help me on this ?
Thanks a lot
In the VSE:Threats Detected in the Last 24 Hours
In the filtering i have added 2 things apart from default query
1) and Threat Handled (equals) to (False)
2) and Event ID (Does Not Equal) (1059)
You must know if your systems are communicating with ePO server properly.
A good way to know this is looking at your System Tree and filtering by Last Commucation.
Or looking at your Compliance dashboard.
Try to remove these filters and see if you get any results.
The System are communicating with ePO perfectly as i have configure the compliance report which show all the system are having latest Dat files.
Okay will remove these filtering and see
Oh Oh Perfect removed the First Filter and got the result 3 Detection ;-) and it is already deleted :-) now my doubt is the query is running fine right bec i dont have any result from 1st of January :-(
I'm not sure if I understand what you mean.
Sorry, Let me explain you, See if i run the VSE: Threats Detected in the Last 24 Hours i am getting result saying 3 detected which are detections of December 2011, after that i am not getting any detection so the query is perfect right i mean if epo found any detection later it will show me right ?