Skip to main content
Solved

New SEP/ Not on Antivirus Reporting

  • February 24, 2015
  • 2 replies
  • 17 views
T
Forum|alt.badge.img+7

Hi Jamf peeps,

Has anyone got the SEP extension attribute working with the new version of SEP (12.1.4013) and JSS 9.63 or above? When I load the extension attribute into the inventory display no machines load, it just sits on a loading beachball. I have tried one or 2 other scripts but none seem to be reliable, some machines report correct and the majority do not although the beach balling stops. Anyone have a script or something I could try or maybe a few pointers?

Best answer by Treger

Funnily enough, I have just put this in and it seems to be working pretty well:

#!/bin/sh
#
############################################################################
# Extension Attribute to display Security for Mac application version.
#
############################################################################
SEPVersion=/usr/bin/defaults read /Applications/Symantec Solutions/Symantec Endpoint Protection.app/Contents/Info CFBundleShortVersionString
echo "<result> v$SEPVersion </result>"

exit 0

    2 replies

    T
    Forum|alt.badge.img+7
    • Treger
    • Author
    • Contributor
    • Answer
    • February 24, 2015

    Funnily enough, I have just put this in and it seems to be working pretty well:

    #!/bin/sh
    #
    ############################################################################
    # Extension Attribute to display Security for Mac application version.
    #
    ############################################################################
    SEPVersion=/usr/bin/defaults read /Applications/Symantec Solutions/Symantec Endpoint Protection.app/Contents/Info CFBundleShortVersionString
    echo "<result> v$SEPVersion </result>"

    exit 0

    J
    Forum|alt.badge.img+14
    • Josh_Smith
    • Contributor
    • February 25, 2015

    What Treger said...that is working for me in 9.63.

    I also use this one to show the last virus definition date:

    #Check to see if SEP v12 is installed
SEPVERSION=$(/usr/bin/defaults read /Applications/Symantec Solutions/Symantec Endpoint Protection.app/Contents/Info CFBundleShortVersionString)
SEPVERSIONSHORT=${SEPVERSION:0:2}

if [ "$SEPVERSIONSHORT" == "12" ];
    then
        SEP12DEFINITIONSDIR=$(ls -td /Library/Application Support/Symantec/AntiVirus/*/ | grep -m 1 AntiVirus)
        WHATSNEW="$SEP12DEFINITIONSDIR""WHATSNEW.txt"
        RESULT12=$(/bin/date -j -f "%b %d, %Y" "$(cat "$WHATSNEW" | grep "Symantec Security Response" | awk '{print $5, $6, $7}')" "+%Y-%m-%d 00:00:00")
        echo "<result>$RESULT12</result>"
        exit 0
fi
    Terms & ConditionsCookie settingsAccessibility statement