Loading...

Knowledge Center

How to determine which computers have an Extra.DAT installed via ePolicy Orchestrator reporting
Technical Articles ID:   KB59410
Last Modified:  6/27/2018
Rated:

Environment

McAfee Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.x
McAfee ENS Threat Prevention 10.x
McAfee ePolicy Orchestrator (ePO) 5.x
McAfee VirusScan Enterprise 8.8

Summary

This article explains how to view an ePO report that displays a count of computers that have an Extra.DAT applied, and to create a report of all systems that have applied a specific Extra.DAT.

Solution

Follow these steps to create a report of all systems that have applied an Extra.DAT (after checking in the Extra.DAT file into ePO and allowing it to run on the systems):

NOTE: This report only indicates whether an Extra.DAT is applied. It does not indicate which Extra.DAT is applied, for example, whether it is an older Extra.DAT or the newest Extra.DAT. See Solution 2 to create a report of systems that have applied a specific Extra.DAT.
  1. Log on to the ePO console.
  2. Click Queries & Reports.
  3. Click New Query.
  4. Select Managed Systems under Result Types and click Next.
  5. Select Boolean Pie Chart under Chart type.
  6. Select Number of for the Pie slice values, and do one of the following based on the product:
    • For Endpoint Security: Locate Endpoint Security Threat Prevention Systems and select Names of threats that Extra.DAT can detect.
    • For VirusScan Enterprise: Locate VirusScan Enterprise Properties and select Extra DAT (VirusScan Enterprise).
  7. Click Configure Criteria and do one the following based on the product:
    • For Endpoint Security:
      1. Under the Available Properties column, scroll down to locate Endpoint Security Threat Prevention Systems and click Names of threats that Extra.DAT can detect.
      2. Select Value is not blank under the Comparison column and click OK.
    • For VirusScan Enterprise:
      1. Under the Available Properties column, scroll down to locate VirusScan Enterprise Properties and click Extra DAT (VirusScan Enterprise).
      2. Select Value is not blank under the Comparison column and click OK.
         
  8. Click Next.
  9. Select the columns you want to display in the drill-down table, such as Names of threats that Extra.DAT can detect or Extra DAT (VirusScan Enterprise), and click Next.
  10. Select any Filters you want to apply to the results and click Run.
The report displays any Extra.DAT file entries reported back for computers.

Solution

Follow these steps to create a compliance report of all systems that have applied a specific Extra.DAT (after checking in the Extra.DAT file into ePO and allowing it to run on the systems):
  1. Log on to the ePO console.
  2. Click Queries & Reports.
  3. Click New Query.
  4. Select Managed Systems under Result Types and click Next.
  5. Select Boolean Pie Chart under Chart type.
  6. Select Number of Managed Systems for the Pie slice values.
  7. Click Configure Criteria and do one the following based on the product:
    • For Endpoint Security:
      1. Under the Available Properties column, scroll down to locate Endpoint Security Threat Prevention Systems and click Names of threats that Extra.DAT can detect.
      2. Select Equals under the Comparison column, type the name of the Extra.DAT under the Value column, and click OK.
    • For VirusScan Enterprise:
      1. Under the Available Properties column, scroll down to locate VirusScan Enterprise Properties and click Extra DAT (VirusScan Enterprise).
      2. Select Equals under the Comparison column, type the name of the Extra.DAT under the Value column, and click OK.
  8. Click Next.
  9. Select the columns you want to display in the drill-down table, such as Names of threats that Extra.DAT can detect or Extra DAT (VirusScan Enterprise), and click Next.
  10. Select any Filters you want to apply to the results and click Run.
     

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below