Endpoint Protection

 Hi,
Can any one tell me SEP services that should be running when no scan is being carried out . Please define the corrective actions if the services are not running e.g. restart SEP/PC, log call to Symantec, redeploy software etc....

The same processes as when a scan is running (only less memomry consuming)

Rtvscan.exe (scanning process), Smc.exe (Symantec management client), ccSvcHst.exe (Symantec event manager), SmcGui.exe & ccApp.exe, that's should be all of the client processes &(and SNAC.exe if you have NAC too).

The services are:

• Symantec Endpoint Protection
• Symantec Management Client (if you shut it down, all others are stopped)
• Symantec event manager