Understanding the Policy Serial Number of the Symantec Endpoint Protection Manager


Article ID: 156507


Updated On:


Endpoint Protection


This document describes the policy serial number as used in Symantec Endpoint Protection.


The policy serial number is used to identify the last time a policy change occurred for a group in the Symantec Endpoint Protection Manager (SEPM).The SEPM updates a group's policy serial number every time that the client's security policy is changed. When a Symantec Endpoint Protection (SEP) client connects to the SEPM, it receives the latest security policies and the latest policy serial number from its manager.

The policy serial number is made of two elements. See the example below:

A3AF-01/30/2012 23:50:54 284

"A3AF" are the first four digits of the Group ID. All Groups ID can be found in %SEPM%\data\outbox\agents. Each Group ID maps to a subfolder in the agents folder which contains all policies for that specific group.

"01/30/2012 23:50:54 284" is the last modification date and time in GMT of the policies for that particular group.