Scan all clients from Symantec Endpoint Protection Manager

Products

• Endpoint Protection

Issue/Introduction

This article explains how to initiate an immediate full-system scan across all managed clients using the Symantec Endpoint Protection Manager (SEPM) console to contain active malware threats

Cause

A virus has infected client machines on your network and is spreading to other machines.

Resolution

Steps to launch a full system scan on all managed SEP clients

1. Log in to the Symantec Endpoint Protection Manager.
2. Click the Clients tab on the right side.
3. In the View Clients area, right-click on your site. By default, this is listed as 'My Company', you will be prompted to confirm that, click in 'Yes'
4. From the context menu, select 'Run a command on the group'.
5. From the context sub-menu, select 'Scan'.
6. In the Select Scan Type window, select 'Full Scan'.
7. Click 'OK'.
8. You will be prompted to confirm that you wish to run the scan, click 'Yes'.
9. A message will come up stating the command has been issued, click 'OK'.

Note: The SEPM console broadcasts the scan command to all targeted clients. The overall command status will remain Incomplete until every targeted client reports back. If any client is offline or fails to communicate, the status will show as incomplete—even if all active clients have successfully completed the scan.

You can monitor progress in the console under Monitors > Command Status.

Additional Information

Command Status

Virus removal and troubleshooting on a network

Note: For SEP 16 agents (ESA) managed in Symantec Endpoint Security Cloud, refer to [List of agentcli Commands] for details on initiating a scan using agentcli doscan: List of agentcli Commands