Can someone please confirm whether offline clients (not connected to corporate network) forward all their logs/events to SEP Manager once they get back to the corporate network?

I need a solution

We have a SIEM deployment and our requirement is to make sure we get all endpoints’ logs, even those which were registered on SEP when these were not connected to SEPM i.e  offline from corporate network. However, I want to confirm that if a client computer is not on our corporate network and registers some events like USB scan, will this forward these events to SEP Manger as soon as they become connected to our corporate network?

FYI, we are using SEP 14.

Urgent response will be highly appreciated.



  • No Related Posts

Leave a Reply