![]() ![]() On the client machine use the Windows Registry Editor to navigate to the following key: Server check: From the Symantec Endpoint Protection Management Server, Symantec Endpoint Protection Management Console: Select Policies -> Double-click the applied policy -> Under Windows Settings, Advanced Options -> Select Miscellaneous -> Select the Log Handling tab -> Under Log Retention -> Ensure "Delete logs older than" is set to 30 days or greater.Ĭriteria: If "Delete logs older than" is not set to 30 days or greater, this is a finding. Symantec Endpoint Protection 12.1 Managed Client Antivirus Logs are also useful when performing auditing and forensic analysis, supporting internal investigations, establishing baselines, and identifying operational trends and long-term problems. Routine log analysis is beneficial for identifying security incidents, policy violations, fraudulent activity, and operational problems. Log management is essential to ensuring that computer security records are stored in sufficient detail for an appropriate period of time. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |