Endpoint Protection

Hello,

i have a question. On one of the Symantec AntiVirus Servern is AMS installed. The AMS send me an E-Mail if Symantec AntiVirus detects an Virus or something linke this.
It works fine but i am not sure if all E-Mails are actually.
Is it possible to check the Server? How i can be sure that a Alert is actually? Is it possible that the AMS send me E-Mails from old Virus Alerts?




regards
Kai Schumacher

Please find the testing instruction as per this article.

How to configure AMS to send email alerts when Symantec AntiVirus Corporate Edition detects a risk

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003032809291348

To test the new AMS "Virus Found" email alert

AMS will not sent old virus alerts. However in case you need to check you can check the time stamp and also the logs on the client machine.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003032809291348

Run a full scan in the safe mode on the computer from where the alert is coming this will help you to verify if the alert is correct or not


Is it generating mutiple alerts for the same event ??

Title: 'Multiple AMS alerts generated for a single event.'
Document ID: 2009100908271848
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009100908271848?Open&seg=ent
 

Thanks for all the answers.
I have read something about problems with AMS, in this case there was an corrupt file so the alert do not work correctly. I have tested the alert and it works fine.

regards
Kai Schumacher