Endpoint Protection

Good day
I´m having issues with this Home page's status now in RED.

I have 277 clients and I am having issues with the reports on the home page, maybe calculations are wrong?
If i click on Virus Defs Distribution the report says that I have 277 PCs and on HOME PAGE\Security Status\Preferences\(currently in RED) I have thresholds at 10%
So 277 clients, 10% = 27.7
The only number that approaches that will be Virus defs= 15, but if I check the report these 15 machines aren't older than 10 days. And i've enabled / disabled all of the checkboxes and the only one that turns the Security Status GREEN \ RED is "Pctg of computers running out of date defs"
How do i fix this? is there like a reg fix ?
Thanks a lot.

Hi Negilg,

Kinldy click on more details link and you will get a clear idea about what is failing.

Regards,
Nirav Mistry

51 still infected ?
what were those. I too have quite high number of still infected. does it mean that sep is unable to clean these?

You can clear the still infected status.

• Go to Monitor tab.
• Select the logs tab and generate the reports for Computer status.
• You would find the entries with red diamonds.
• Select all of them using Control Key and click.
• On the top you will find clear infected status blue link.
• Click on that and it will help you to clear the infected status.

Which will also resolve the issue  of RED status on home tab.

Regards,
Nirav Mistry.

Nirav if  I click on more details I see these 51 PCs with all sorts of viruses. The thing is like Bijay asks why is it taking time to clean them and refresh those numbers? Also if I go and click on Monitors select those Red Diamonds and clean its status by hand that would not be a solution. SEP has to clean and report STATUS OK.
But that still does not give me an answer as to why is it putting a RED Status. According to the metrics on Security Status I am not reaching that 10%. I only have 13 machines (threshold would be 27, right) outdated by 5 days at most (threshold is 10 days) .

Any Ideas?

Hi Nigelg,

The Still Infected count shows the total number of risks or computers that a scan would continue to classify as infected. For example, computer may still be infected because Symantec Endpoint Protection can only partially remove the risk. After you investigate the risk, you can clear the Still Infected count from the Computer Status log.

When you click on more details what is the percentage of clients it is showing.

Regards,
Nirav Mistry.