SEP policies documentation

[Migration User]

Hi, how do you document the policies you implement over client groups in SEPM? What do you show executives and auditors? Word docs with screenshots, any kind of spreadsheet format.....? How can you make sure changes are prevented and if they do happen (mistake or not), you know what the accepteble policy was to restore it? Any ideas would be more than welcome.

Thanks,

M

[Migration User]

How can you make sure changes are prevented

Make limited admin accounts and set their permissions for groups to 'read only'.

and if they do happen (mistake or not), you know what the accepteble policy was to restore it? 

Policies created in the SEPM can be exported to a .dat file. You can import that .dat file any time you are worried it has been changed.

[Migration User]

Thank you Jeremy for your response.

Tha Indeed limited admins takes care of that concern, and reimport the .dat files from backup.

Besides doing an internal documentation in word/pdf with screenshots to reflect what's out there in production, is there any other recommended procedure? Read the dat files like xml and open in excel maybe? I tried that for AV policy, changing dat extenstion to .xml, but I don't get all the hundreds of settings in the policy. This would be an idea for future releases, that we could pull an html report, let's say, with policy settings we implement. Let me know if you have any other idea for such.

Thanks,

M

[Rafeeq]

you need to change the.dat  to .zip and then extract , you will find the main.xml
try this

How to see the contents of an exported Policy

1. Export the policy to a file sample.dat

2. rename the sample.dat file to sample.zip

3. unzip the file. File contains a file named main.xml

[Migration User]

nice tip Rafeeq, this will come in handy

[Migration User]

Thanks, I have done that. Do you view that as a viable way to document policies or prefer the screenshot GUI in text editors?

Thanks you.

M

[Rafeeq]

I have a format which can be used to document policies, in necessary places you can use the screen shot so that the management understands it..:)
I will PM the template to you.. let me know if that suits your need.
 

[Migration User]

Thanks, Rafeeq, useful stuff.

[Migration User]

Rafeeq, can you pm that template to me as well?
Thanks in advance.

[uspange]

Hi Rafeeq, I´d be interested in that converter as well ... thx!

[Migration User]

Hi
Rafeeq, can you send me that template as well?
Thanks!

[Migration User]

im interested as well

[Migration User]

Hi, i´m interested as well. Thanks

[Migration User]

Hi

I am also looking for a template like this.
Will it be possible to get it from you.?

[MDubya]

love to see your template if your still offering it.

Thanks,

-Mike

[Migration User]

Hi Rafeeq

Do you still have the template:-)

Could I have a copy?

Regards

[Migration User]

Thanks

[Migration User]

Could I get a copy of your template also.
Thanks

[ℬrίαη]

I also would like to see the template if possible

[Migration User]

Can I get a copy of the template? I am trying to document all the policy settings for our certification. Thanks

[Migration User]

can i get this too? I'm in the documentation stage in our test area... would be nice to have a nicely formatted doc to go to production with...

[Migration User]

I am interested in this template but I am also sure that there will be more people after me asking the same... Woudl it be possible to make this document public?
Thanks in advance

[Rafeeq]

Hello All,


I will upload this under downloads section... Will send you all PM once its approved from ERic.

[Migration User]

sounds good. i gave up trying to use excel to map the xml file

[Migration User]

Any updates on this?

[Rafeeq]

https://www-secure.symantec.com/connect/downloads/sep-policy-documentation-symantec-endpoint-run-book

[MDubya]

May I please have access to your download page?

Thanks,

-Mike

[MPAULA]

Hi Rafeeq!

Releases the template for me too, please.

I can't acess link for download.

Thanks,

[Migration User]

This is my first post on the forums, and I was very excited to see this topic come up as soon as registered.  It is exactly what I was looking for!  Rafeek, thank you for the tip on getting it into an .xml file!  Would I be able to access your template?  Thank you!

[Migration User]

Access Restricted

[Migration User]

May I please have access to your download page? https://www-secure.symantec.com/connect/downloads/sep-policy-documentation-symantec-endpoint-run-book

[Rafeeq]

Hello All,

You should be able to access the document now; Please let me know if this was helpful.

[Migration User]

 

 Nope still no access

 

 

Access Restricted

We're sorry, but the author of this page as restricted access to it.

If you have questions about why you can't access this page, please contact us.

[Rafeeq]

Hope Admin would allow it soon. Its  not restricted by Me

[Migration User]

I'll be wainting for the template also and thanks

[Hogan Chen]

Looked like the admins are still sleeping.

[Migration User]

Hi everyone. It seems like the downloads are working now (at least for me). If this is not working could you please PM me. I have a call with Eric tomorrow and I can make sure he is aware of the problem so it gets fixed. Sorry about the slow response from the Symantec Team on this, I know everyone is excited about Rafeeq's template ;)

Thanks,
Grant

[Migration User]

Hi folks,

The file you are requesting is in a queue that requires a review.  We'd hate to publish a file that inadvertently has "an issue" with it.  Rafeeq has created a great tool here, and it's now published for your use.  I'm also featuring the file in the download section (at the top)...

If you ever need to reach us, please don't hesitate to PM myself or the other admins.  There are roughly 50 threads a day started in the SEP community, so there will inevitably be a few that slip by our watchful eye.

Thanks everyone for your patience, and I hope you enjoy and find the file useful.  Thanks Rafeeq!

Best,

Eric

[Migration User]

I was under the impression that this tool would output the settings from our policy but it appears that it's a document that requires SEP admins to manually input the policy settings.

is this correct?

[Rafeeq]

Its only a template...document