The "File reputation lookup alert" notification introduced in Symantec Endpoint Protection Manager 12.1 Release Update 5 (RU5) does not display any details. The alert only contains the number of computers affected. Expected behavior for the notification is to contain details like:
- Computer
- Current User
- IP Address
- Domain Name
- Server Name
- Group Name
- Product Version
- File Reputation Detection (reason for the alert)
- Event Time
Additionally the
when clicked the embedded "Report" link in the notification, does not bring up the report, but instead returns a SEPM login screen. After entering valid login credentials a blank page is displayed.