Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

SEP Components

Created: 04 Dec 2012 • Updated: 06 Dec 2012 | 3 comments
This issue has been solved. See solution.

So I'm working on a SEP remediation workflow and need some help with the components. There are components for Run Client Command Scan and Run Client Command Update Content and Scan which take an input of "Scan Type" but I have no idea what the context should be. I've tried names and GUIDs I've found in SQL but I have no clue what it should take. Does anyone have any idea? 

 

Also is there an update policy component? Or would that be the same component as update content. Thanks in advance.

 

SEP 12.1

Workflow 7.1 Sp2

Comments 3 CommentsJump to latest comment

reecardo's picture

SEP components are essentially wrappers for the SEP web services. I'll try and track down some API documentation.

reecardo's picture

Try the following:

ScanNow_Full

ScanNow_Quick

ScanNow_Custom

SOLUTION
b3tts32's picture

Thanks reecardo, I just came across these myself after looking at the database & schema map for SEP 12 with a little caveat as well. The commands you listed work if you run the component "Run Client Command Scan" but do not work if you use the command "Run Client Command Update Content And Scan". There are separate commands for that component which are along with all commands..

 

Update_Now = Update Content
ScanNow_Full = Full Scan
ScanNow_Quick = Active Scan
ScanNow_Custom = Custom Scan
Update_ScanNow_Full = Update
Content and Scan Full
Update_ScanNow_Quick = Update
Content and Scan Quick
Update_ScanNow_Custom = Update
Content and Scan Custom
CancelScan = Cancel Scan
Reboot = Restart
ApOn = Turn Auto-Protect On
ApOff = Turn Auto-Protect Off
FwOn = Turn Firewall On
FwOff = Turn Firewall Off
DeleteQuarantine = Delete from
Quarantine
 
Also, running smc.exe -updateconfig from the c:\program files\symantec\symantec endpoint protection\12.1xxxxxx\bin folder will update the policy on client.