Endpoint Protection

 View Only
  • 1.  How to Remediate Risks?

    Posted Aug 01, 2013 09:22 AM

    In SEPM console, I see several computers have risks, yet they are not infected.

     

    How do I clear these risks from the machines? I might be able to remote into them, what are my options?



  • 2.  RE: How to Remediate Risks?

    Posted Aug 01, 2013 09:24 AM

    Are you running 12.1?

    These will clear automatically by the SEPM. I would suggest running a full scan on the machine and if it turns up clean, it will report that to the SEPM and it should clear.

    Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

    Article:TECH165846  |  Created: 2011-07-28  |  Updated: 2011-09-14  |  Article URL http://www.symantec.com/docs/TECH165846

     



  • 3.  RE: How to Remediate Risks?

    Trusted Advisor
    Posted Aug 01, 2013 09:35 AM

    Hello,

    Agreed with above comments.

    In SEPM 12.1, the "Still Infected" number will go down automatically as the threat is completely removed from the network.

    This is a part of the enhanced management console.  The management server resets the Still Infected Status for a client computer once the computer is no longer infected. It gives a more accurate status for how many client computers really are infected.

    Check this Article:

    Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

    http://www.symantec.com/docs/TECH165846

    Secondly, I would suggest you to work on these Articles:

    Identifying the infected and at-risk computers

    http://www.symantec.com/docs/HOWTO80990

    Remediating risks on the computers in your network

    http://www.symantec.com/docs/HOWTO80936

    Hope that helps!!