Endpoint Protection

 View Only
  • 1.  SEP 14 Client Scan Logs

    Posted Feb 15, 2017 08:48 PM

    Hello,

    Using the SEPM console I push a full scan to a SEP Client.

    On the SEP client there does not appear to be any way to tell if an on demand scan is currently running.

    The only way I have found was to open the SEP client, click on Scan for Threats, and click on Run Active Scan. This give a popup saying "Another scan is in progress. Your scan will be queued if you want to continue with the scan."

    I want to find a strategy for a customer of mine.

    Cheers

    Cameron Mottus



  • 2.  RE: SEP 14 Client Scan Logs

    Posted Feb 15, 2017 08:55 PM

    Does the Scan log not show an entry with "Scanning..." in it?



  • 3.  RE: SEP 14 Client Scan Logs

    Posted Feb 15, 2017 09:15 PM

    You can use the event logs

    Symantec Endpoint Protection 12.1.x event log entries

    https://support.symantec.com/en_US/article.TECH186...



  • 4.  RE: SEP 14 Client Scan Logs

    Posted Feb 16, 2017 03:45 PM

    Hi Brian,

    No. I suspected there should be an intication in the "Scan for Threats" section of the client or in the event logs.

    The event logs only show scan that I kick off on the SEP client itself.

    I am just thinking. I will check the log setting in the AV and spyware policy and let you know.

     

    Hi Rafeeq,

    That is a broken link.



  • 5.  RE: SEP 14 Client Scan Logs

    Posted Feb 16, 2017 03:51 PM

    There is no option to enable adding logs for scans in the SEP client in the "Log Handling" section of the AV and Spyware policy.



  • 6.  RE: SEP 14 Client Scan Logs

    Posted Feb 16, 2017 03:56 PM

    This might be a SEP 14 issue.

    My SEP 12.1.6 client has them:

    2017-02-17 09_53_43-Virus and Spyware Protection Logs.png



  • 7.  RE: SEP 14 Client Scan Logs

    Posted Feb 16, 2017 04:08 PM

    This is the SEP 14 client.

    20170217_095924.jpg