Configuring Symantec Endpoint Protection (SEP) Agent Health Evaluation Settings

(Windows and Mac only)
You can choose how Symantec Endpoint Protection agent health data is evaluated and then displayed on the
SEP Agent Health
summary page and on the
SEP Agent Health
page. You can apply these settings to particular groups of computers.
The SEP agent health evaluation is based on the gathered inventory data.
By default, the
(Default Settings)
apply to all Windows and Mac client computers. The
(Default Settings)
have no specific target. These settings are automatically applied to the client computers that are not found in the target of any other SEP agent health evaluation settings.
When you create new SEP agent health evaluation settings and add a group of computers as a target, those computers are no longer evaluated by the
(Default Settings)
. However, if you turn off the new settings, the target computers, that are added to new settings, are not evaluated by
(Default Settings)
.
Note that if you clone the
(Default Settings)
, they are created as regular settings and are applied based on the configured target.
  1. To configure new SEP agent health evaluation settings
  2. Do one of the following:
    • In the Symantec Management Console, on the
      Settings
      menu, click
      All Settings
      . Expand
      Integrations
      >
      Symantec Endpoint Protection
      >
      Settings
      >
      SEP Agent Health Evaluation Settings
      .
    • In the Summary View flipbook, on the
      SEP Agent Health
      summary page, in the top right corner, click the
      Open SEP Agent Health Evaluation Settings
      icon.
  3. On the
    SEP Agent Health Evaluation Settings
    page, in the left pane, click
    Create new
    .
    To set or change the settings name, click the settings, and then click
    Rename
    . In the
    Rename Item
    dialog box, type the new name, and then click
    OK
    .
  4. In the right pane, turn on the settings. In the upper right of the page, click the colored circle, and then click
    On
    .
    If you turn off the health evaluation settings, the SEP agent health status is
    Untracked
    for client computers that are targeted by these settings.
  5. In the right pane, configure the settings according to your needs:
    Antivirus
    The SEP Antivirus protection may be enabled or disabled on client computers with SEP agent installed.
    When you enable this option, the SEP Antivirus is evaluated as healthy even when the Antivirus protection is disabled on the client computers with SEP agent installed.
    Antivirus Scan
    If the last antivirus scan does not run within the time period that you specify, the
    Last Antivirus Scan
    is changed to
    Needs attention
    .
    SEP Firewall
    The SEP Firewall may be enabled or disabled on client computers with SEP agent installed.
    When you enable this option, the SEP Firewall is evaluated as healthy even when it is disabled on the client computers with SEP agent installed.
    Virus Definitions
    If the last Virus Definitions revision date is older than the number of days that you specified, the
    Virus Definitions Status
    is changed to
    Needs attention
    .
    The Firewall status data is not available if the SEP agent does not contain the Firewall component. For example, for the SEP 14 agents that are installed on managed Mac client computers.
  6. Under
    Applies To
    , on the toolbar, click
    Apply to
    , choose the computers that you want to add to the new evaluation settings.
    Ensure that one client computer with SEP agent installed, is not targeted by multiple health evaluation settings. If multiple settings are applied to one computer, the health evaluation is performed based on only one of the settings, even if the settings are disabled.
  7. (Optional) To restore the policy to its default settings, click
    Restore Defaults
    .
  8. Click
    Save changes
    .