Jump to content

Voyager3

Members
  • Posts

    4
  • Joined

  • Last visited

About Voyager3

  • Rank
    Newbie
    Newbie

Profile Information

  • Location
    Australia
  1. Hi thanks for the report suggestion, I can at least see what scans have been run now I think some sort of ability to copy the complete scan log from a client to the server would be a good thing thanks again Keith
  2. Hello I'm the network admin for a small less business, less than 100 staff but spread over 5 offices and 3 time zones with 60/40 ratio of laptops to desktop machines As you noted,with ESET 5 remote admin the pcs, provide all client logs to the server. This means I can check things like user initiated CD/DVD/USB drive scan logs, and I can see detailed scan results even when the laptop is not currently connected. As to what I get from it, ESET flags things like password encypted files like ZIPs RARs 7ZIPs as scan failures in the scan log. They are not viruses or threats, they are just failures, but as we know password protected files can also be attack vectors for a variety of malware. If I see password protected files in USB scan logs I can contact the staff person and investigate further if needed. Also, if a machine reports a virus, I need to know not just what it was and that it's been cleaned or deleted the more important question is how it got there. The client security logs are a valuable source of information for these processes. With ESMC 7 I've looked into the "Scans in last 30 days" report but as far as I can tell it only reports on scheduled scan tasks that are driven by the ESMC server. I cant see a way for it to report on local/user initiated scans or scan jobs configured inside profiles. For example if a user plugs in a USB drive they are given the option to run a scan. If there's a way of modifying or creating a custom report template to include these locally initiated scans , I'd be very interested I understand that as you say for scaling you limit the log information provided to the server and if looking at 1000's of clients it makes sense to limit what is stored on the server, but is there any way in ESMC 7 to turn on full log reporting for a group or even just an individual client? thanks and regards Keith
  3. Hi I'm migrating from remote Admin 5.3 to ESMC7. In 5.3 it's very easy, I right click the computer, go to Data for this Client, Scans and it shows me the full history of scans - regardless of whether they were the result of a scheduled scan or initiated by the user, and then I can drill down further and see the scan summary and extras like the list of files that couldn't be checked. It's pretty impressive. With ESMC7 seems all I can get is any scheduled tasks. And there doesn't seem to be any way to create a custom task that would pull the information from the client. Seems a lot more work for me that I have to remote on to the client to see the scan information. Are you suggesting the scan history does not meet the criteria of "important subset of data" in managing clients? or are you saying that although ESMC 7 is considerably newer it's actually in some ways a less comprehensive product than the old 5.3? thanks Keith
  4. Hi on a client pc, I can go into tools log files computer scan and see a history of scans. Is there a way for me to see this log in SMC7? In the SMC I've looked through the options under computer> logs> SysInspector, Log Collector and Diagnostics Logs but it doesn't seem to be there and doesn't seem an obvious way to get the client log on the SMC. Can anyone assist? thanks in advance Keith
×
×
  • Create New...