How do I scan a CD or DVD?
When media is inserted into a CD-ROM or DVD-ROM drive, the drive is excluded from Auto-Protect scans*. Infected files found on the media (CD or DVD) cannot be altered by Symantec Endpoint Protection, because the media is readonly.
* "Excluded from Auto-Protect" means that the CD/DVD is not scanned as soon as it is inserted into the drive, but the files on the CD are scanned by Auto-Protect as soon as they are accessed as long as Auto-Protect is configured to scan files upon access. See steps below to confirm that Auto-Protect is configured to scan files upon access.
Auto-Protect will block the files from accessing the hard drive, so there is no threat to the system. However, the only way to remove the original infected file is to take the media out of the CD-ROM or DVD-ROM drive and physically destroy it.
If you want to scan CD-ROM or DVD-ROM drives, you have two options:
How to configure Auto-Protect to scan files upon access from within the Symantec Endpoint Protection Manager:
Note: This option is better if you need to change this setting for managed Symantec Endpoint Protection clients.
How to determine whether Auto-Protect is configured to scan files upon access from the Symantec Endpoint Protection client:
Note: This option is better if you need to change this setting for unmanaged Symantec Endpoint Protection clients.