Enabling application learning

You can enable learned applications for a group or a location, which collects information about the applications that the client computers run. The clients then keep track of every application that runs and send that data to the management server.
Because learned application data is forwarded to the management server by individual
Symantec Endpoint Protection
clients, the
Symantec Endpoint Protection Manager
bears the majority of the processing duties in ensuring this data is processed and stored in the SQL Server database. The more systems that forward learned application data, and the larger variety of applications run in an environment, the more information has to be temporarily stored, and then processed by the
Symantec Endpoint Protection Manager
. This can generate higher wait times on other SEP client data such as operational state data, or security log data. In very busy environments, this can generate CPU or memory issues for already under-resourced SEPMs.
The Mac and Linux clients do not support learned applications.
To enable application learning for a group
  1. In the console, click
    Clients
    , select a group, and then click
    Policies
    .
  2. On the
    Policies
    tab, click
    Communications Settings
    .
  3. In the
    Communications Settings
    dialog box, check
    Learn applications that run on the client computers
    , and then click
    OK
    .
To enable application learning for a location
  1. In the console, click
    Clients
    , select a group, and then click
    Policies
    .
  2. On the
    Policies
    tab, select the location, and then expand
    Location-specific Settings
    .
  3. To the right of
    Communications Settings
    , click
    Tasks
    , and then uncheck
    Use Group Communications Settings and
    click
    Edit Settings
    .
  4. In the
    Communications Settings for
    location name
    dialog box, check
    Learn applications that run on the client computers
    , and then click
    OK
To enable application learning for the site
  1. In the console, click
    Admin
    >
    Servers
    , and then click
    Edit Site Properties
    .
  2. On the
    General
    tab, check
    Keep track of every application that the clients run
    .
  3. To reduce the size of the default database, check
    Delete learned application data after x days
    . If you have trouble updating the management server database, Symantec recommends you enter 7.
  4. Click
    OK
    .
You can set up a notification to be sent to your email address when each client in a group or location runs an application. See: