Computer Status log in Symantec Endpoint Protection Manager shows "Not infected" after Linux client detects a virus

Article:TECH172361  |  Created: 2011-10-20  |  Updated: 2012-08-22  |  Article URL
Article Type
Technical Solution



A Symantec AntiVirus for Linux (SAVFL) client is installed with the optional SAVFL Reporter component, and is configured to forward its logs to a Symantec Endpoint Protection Manager (SEPM).  The SAVFL client then detects an infection, but when the log is sent to SEPM, the status of the computer in the SEPM's Monitors > Logs > Computer Status Log > Infected shows "Not infected."


Symantec is investigating this problem in order to determine a solution. This document will be updated when new information or a solution becomes available.

Supplemental Materials


Article URL

Terms of use for this information are found in Legal Notices