Endpoint Protection

I have a Symantec Endpoint Protection Manager 11.0.4

But, this time if i want to login SEPM, i always get the caution message : At the picture

The message display, many viruses still infected.. and then Symantec ThreatCon is Level 2.

would you like to help me solving this problems? i wait your answers soon. :)

Hi,

Click on more details to analyze report.

Check what report says, it will show you number of machine out of definitions, without scan etc..

It's showing still infected Viruses/Security risk - Check this as well.

I think you should clear still infected status, it's showing 107038 entries.

To clear it Click on Monitors --> Logs --> Select longest duration --> Click on View logs --> Select all and click on Clear infected status.

Threat leavel as of now is 2

try clearing the infected status if that comes again !!

Regarding the ThreatCon level, the SEPM ThreatCon is updated by Security Response. The level shown on your Manager should always match what is posted on the SR page.

http://www.symantec.com/business/security_response/landing/threats.jsp

RE: Still infected. - do what Chetan Savade suggested and go to the Monitors > Logs > Risks and issue a command to clear infected status on all machines by way of the drop down menu. You would have to do this for every page. If the machine is still infected recently, it would reappear and you may have to do some trouble shooting.

RE: ThreatCon level. It is what Thomas K have said. It is the global alert level as detected by Symantec from their servers worldwide. It does not reflect the threat level on your network.

To Chetan Savade : It works :) the message still infected hasn't displayed again..

But, for Quarantine how to i clean it? would to tell me the steps for cleaning viruses on Quarantine..

To Thomas K : thx for your solution.. but i don't know to solve it. Could you like to tell me the steps for solve ThreatCon be normal condition?

To all : thx very much for your any suggestion..

Iam also getting the same screen..i do clear the infected status but still iam getting as attention needed..what to do next..

Kindly help..

Hi,

you don't have nothing to solve regarding ThreatCon. Those details are pushed out by Symantec Security Response to your SEP console to keep you updated on the current globlal threat landscape.