This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New Report

Hi,

I am looking to add a report to Sophos Enterprise Console 5.2.1 to email a report monthly of computers that have not updated in the last 30 days, is this possible?

 Regards,

:47309


This thread was automatically locked due to age.
Parents
  • Hello AlexAmbler,

    [monthly report] of computers that have not updated in the last 30 days

    if this means computers that are more than 30 days out-of-date then an endpoint could run up to 60 days without the latest protection. Even if it simply means that you intend to check for out-of-date computers only once per month this isn't best practice. Within one week normally  more than 100 detections are added or updated and naturally these are not unimportant.

    You shouldn't wait too long before taking action - of course it depends on your exposure to (the newest) threats. In principle it is possible to identify problem endpoints automatically, it likely requires some effort to make it useful and watertight though. Depends on how frequently you encounter updating issues and the absolute number of endpoints. It's probably not worth the effort for a  few per week.

    Last but not least - you can select the out-of-date computers using the console. The dashboard Protection link lists connected out-of-date computers (the same result is shown when you select Managed connected out-of-date computers from the View: drop-down). The drop down lets you also select all out-of-date computers. Select the Update Details tab and use Ctrl-C (or Edit->Copy from the menu bar) to copy the data from the current view to the Clipboard in tab-delimited format.

    Christian

    :47369
Reply
  • Hello AlexAmbler,

    [monthly report] of computers that have not updated in the last 30 days

    if this means computers that are more than 30 days out-of-date then an endpoint could run up to 60 days without the latest protection. Even if it simply means that you intend to check for out-of-date computers only once per month this isn't best practice. Within one week normally  more than 100 detections are added or updated and naturally these are not unimportant.

    You shouldn't wait too long before taking action - of course it depends on your exposure to (the newest) threats. In principle it is possible to identify problem endpoints automatically, it likely requires some effort to make it useful and watertight though. Depends on how frequently you encounter updating issues and the absolute number of endpoints. It's probably not worth the effort for a  few per week.

    Last but not least - you can select the out-of-date computers using the console. The dashboard Protection link lists connected out-of-date computers (the same result is shown when you select Managed connected out-of-date computers from the View: drop-down). The drop down lets you also select all out-of-date computers. Select the Update Details tab and use Ctrl-C (or Edit->Copy from the menu bar) to copy the data from the current view to the Clipboard in tab-delimited format.

    Christian

    :47369
Children
No Data