Configuring Symantec Endpoint Protection (SEP) Agent Health Evaluation Settings
(Windows and Mac only)
You can choose how Symantec Endpoint Protection agent health data is evaluated and then displayed on the
SEP Agent Health
summary page and on the SEP Agent Health
page. You can apply these settings to particular groups of computers. The SEP agent health evaluation is based on the gathered inventory data.
By default, the
(Default Settings)
apply to all Windows and Mac client computers. The (Default Settings)
have no specific target. These settings are automatically applied to the client computers that are not found in the target of any other SEP agent health evaluation settings.When you create new SEP agent health evaluation settings and add a group of computers as a target, those computers are no longer evaluated by the
(Default Settings)
. However, if you turn off the new settings, the target computers, that are added to new settings, are not evaluated by (Default Settings)
.Note that if you clone the
(Default Settings)
, they are created as regular settings and are applied based on the configured target.- To configure new SEP agent health evaluation settings
- Do one of the following:
- In the Symantec Management Console, on theSettingsmenu, clickAll Settings. ExpandIntegrations>Symantec Endpoint Protection>Settings>SEP Agent Health Evaluation Settings.
- In the Summary View flipbook, on theSEP Agent Healthsummary page, in the top right corner, click theOpen SEP Agent Health Evaluation Settingsicon.
- On theSEP Agent Health Evaluation Settingspage, in the left pane, clickCreate new.To set or change the settings name, click the settings, and then clickRename. In theRename Itemdialog box, type the new name, and then clickOK.
- In the right pane, turn on the settings. In the upper right of the page, click the colored circle, and then clickOn.If you turn off the health evaluation settings, the SEP agent health status isUntrackedfor client computers that are targeted by these settings.
- In the right pane, configure the settings according to your needs:AntivirusThe SEP Antivirus protection may be enabled or disabled on client computers with SEP agent installed.When you enable this option, the SEP Antivirus is evaluated as healthy even when the Antivirus protection is disabled on the client computers with SEP agent installed.Antivirus ScanIf the last antivirus scan does not run within the time period that you specify, theLast Antivirus Scanis changed toNeeds attention.SEP FirewallThe SEP Firewall may be enabled or disabled on client computers with SEP agent installed.When you enable this option, the SEP Firewall is evaluated as healthy even when it is disabled on the client computers with SEP agent installed.Virus DefinitionsIf the last Virus Definitions revision date is older than the number of days that you specified, theVirus Definitions Statusis changed toNeeds attention.The Firewall status data is not available if the SEP agent does not contain the Firewall component. For example, for the SEP 14 agents that are installed on managed Mac client computers.
- UnderApplies To, on the toolbar, clickApply to, choose the computers that you want to add to the new evaluation settings.Ensure that one client computer with SEP agent installed, is not targeted by multiple health evaluation settings. If multiple settings are applied to one computer, the health evaluation is performed based on only one of the settings, even if the settings are disabled.
- (Optional) To restore the policy to its default settings, clickRestore Defaults.
- ClickSave changes.