Endpoint Protection

 View Only

  • 1.  WHat does the action list mean by "Log Only"

    Posted May 23, 2017 05:24 AM
      |   view attached

    I see a couple of machines on which the file is quarantined and after 2-3 minutes showing as "Log only"

    Does "Log only" mean... no action is taken? what to do for such cases?

    How can we clear the qurantine , to prove that the files are cleared from the PC?

    Attachment(s)

    xls
    fadi2.xls   26 KB 1 version


  • 2.  RE: WHat does the action list mean by "Log Only"

    Posted May 23, 2017 05:59 AM
    It means sep had tried to act on the same file twice and since it was quarantined in the first place it didn't find the file the second time hence it's just logging the event and letting you know. Nothing to worry. But if you see only one entry of that file with log only it means sep didn't have the required permission to remediate the file or it was looked by other process and needs your manual intervention to remove the file from the machine.


  • 3.  RE: WHat does the action list mean by "Log Only"

    Posted May 23, 2017 07:53 AM

    Exactly what it says - it only logged instead of taking action. You need to manually remove.