

Update client machines via the Symantec Enterprise Console. HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion\public-opstateĬriteria: If the "LatestVirusDefsDate" is older than 7 calendar days from the current date, this is a finding. HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\public-opstate On the client machine use the Windows Registry Editor to navigate to the following key: Under the Status tab, observe the "Definitions:" area for Virus and Spyware Protection, Proactive Threat Protection, and Network Threat Protection.Ĭriteria: If the "Definitions:" date is older than 7 calendar days from the current date, this is a finding.

Double-click the icon to open the Symantec Endpoint Protection configuration screen. On the client machine, locate the Symantec Endpoint Protection icon in the system tray. Note: If the vendor or trusted site's files are also older than 7 days and match the date of the signature files on the machine, this is not a finding. Symantec Endpoint Protection 12.1 Managed Client Antivirus Without current virus definitions the virus scan will not be able to detect new viruses, putting the system and network at risk. Keeping virus signature files as current as possible is vital to the security of any system. These files are made available to antivirus clients as they are published. Antivirus signature files are updated almost daily by antivirus software vendors.
