Application Control Policy and Actions Reports showing no results

Issue

Running the Application Control Reports "Application Control Policy Report" or any of the reports in the Application Control Policy Enforcement folder opens the reports but no results are returned.  This applicable to versions 7.0 and 7.1 of ACS.

This is caused by the deletion of File Resources by the a task present within the Symantec Software Management

Resolution

The reports depend on information gathered at the SMP agent computers which is then tied to information gathered by the SMP server.  There are several configuration items which need to be verified if this process is not working properly and one item from the release notes which needs to be addressed as well.

• Review the article How to Disable the Clean up File Resources Task
• Verify the Resource Discovery settings.
  • Go to Application Control > Configuration > Arellia Infrastructure > Resource Discovery > Resource Discovery Agents and make sure the File Agent Discoverer is enabled. It gives a visual indication (grayed out or normal). If grayed out, right-click and enable it.
  • Then check the Default File Inventory Policy. Go to Application Control > Configuration > File Inventory Agent for Windows > Settings and make sure it is enabled and that the interval is a day of less (for test; production could be a week).  Also the Priority should be 10 and the Interval should be 100.
  • Finally verify that the Resource Discovery Update task (found at Application Control > Configuration > Arellia Infrastructure > Resource Discovery has executed within the last half-hour.  If it has not please enable and test.  If is still does not work please contact support.

Note: It will take some time for the data to be re-inventoried, but it should be done generally within a day. If the ACS agent is uninstalled/reinstalled or it is installed on a new client then the data should start repopulating even sooner.