Understanding the Policy Serial Number of the Symantec Endpoint Protection Manager

book

Article ID: 156507

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

This document describes the policy serial number as used in Symantec Endpoint Protection.

Resolution

The policy serial number is used to identify the last time a policy change occurred for a group in the Symantec Endpoint Protection Manager (SEPM).The SEPM updates a group's policy serial number every time that the client's security policy is changed. When a Symantec Endpoint Protection (SEP) client connects to the SEPM, it receives the latest security policies and the latest policy serial number from its manager.

The policy serial number is made of two elements. See the example below:

A3AF-01/30/2012 23:50:54 284

"A3AF" are the first four digits of the Group ID. All Groups ID can be found in %SEPM%\data\outbox\agents. Each Group ID maps to a subfolder in the agents folder which contains all policies for that specific group.

"01/30/2012 23:50:54 284" is the last modification date and time in GMT of the policies for that particular group.