HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Storages\Filesystem\RealTimeScan On the machine use the Windows Registry Editor to navigate to the following key: If "When Auto-Protect is disabled, enable after" is selected and the time limit is not set to 5 minutes or less, this is a finding. On the left hand side, select Change settings -> Under Virus and Spyware Protection -> Select Configure Settings -> Under the Auto-Protect tab -> Select Advanced -> Under Automatic enablement -> Ensure "When Auto-Protect is disabled, enable after" is selected -> Ensure time limit is set to 5 minutes or less.Ĭriteria: If "When Auto-Protect is disabled, enable after" is not selected, this is a finding. Double-click the icon to open the Symantec Endpoint Protection configuration screen. GUI check: Locate the Symantec Endpoint Protection icon in the system tray. Symantec Endpoint Protection 12.1 Local Client Antivirus STIG Otherwise, the risk is greater for viruses, Trojans, and other malware infecting the system during that startup phase. For antivirus software to be effective, it must be running at all times, beginning from the point of the system's initial startup.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |