System Symantec Software Monitor

This option group area of the policy contains monitoring functions for Symantec software. Currently the monitored ancillary applications are Symantec AntiVirus and Symantec Endpoint Security. The policy automatically detects if the host machine has Symantec AntiVirus and Symantec Endpoint Security installed. Therefore, even if both areas of monitoring are enabled, only one area detects and generates events. This behavior is to thwart double event generation, which could confuse an administrator.