Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual page 133

See
on page 130.
For more information about handling viruses and outbreaks on a network, see
the knowledge base article,
You use the Reports and Monitors features in the console to determine what
computers are infected and to view the results of remediation.
See
Table 11-2
Step Task
Step 1 Identify infected and
at-risk computers
Step 2 Update definitions and
rescan
Preventing and handling virus and spyware attacks on client computers"
Best practices for troubleshooting viruses on a
Monitoring endpoint protection"
Remediating risks on client computers
Description
You can get information about infected and at-risk computers from
Symantec Endpoint Protection Manager. On the Home page, check the
Newly Infected and the Still Infected counts in the Virus and Risks Activity
Summary. The Newly Infected count is a subset of the Still Infected count.
The Newly Infected count shows the number of infected and at-risk
computers during the time interval that you specify in the summary.
Note: Unremediated SONAR detections are not counted as Still Infected.
They are part of the Suspicious count in the summary.
Computers are considered still infected if a subsequent scan detects them
as infected. For example, a scheduled scan might partially clean a file.
Auto-Protect subsequently detects the file as a risk.
Files that are considered "still infected" are rescanned when new definitions
arrive or as soon as the client computer is idle.
See Identifying the infected and at-risk computers"
You should make sure that clients use the latest virus and spyware
definitions.
For the clients that run on Windows computers, you should also make sure
that your scheduled and on-demand scans use the Insight Lookup feature.
You can check the definitions date in the Infected and At Risk Computers
report. You can run the Update Content and Scan command from the Risk
log.
When the Virus and Risks Activity Summary on the Home page shows the
Still Infected and the Newly Infected counts are zero, then all risks are
eliminated.
See Managing content updates"
Managing Virus and Spyware Protection
Remediating risks on the computers in your network
on page 261.
on page 251.
133
network.
on page 134.