Hello,

My environment is running SEP 12.1.  Just logged into the SEPM and clicked on "Symantec Endpoint Protection Daily Status" under Favorite Reports.  One of the virus detections I reviewed in this report shows that an item was quarantined.  There are a few pieces of information about that detection including "Action Required."  For this one detection "Action Required" is equal to Yes.  So I copied the workstation ID, went into Monitors and checked the Risk Logs for this machine.  I found a corresponding event for the malware that was detected on that machine.  I see that there is a + sign in the Action column.  If I click on this + sign, I have 3 options.  Is this the Action Required that I saw in the Daily Status Report?  If not, what does action required mean in that Daily Status report?

Thanks in advance,

Bob