Starting a manual scan on SEP for Linux clients

Products

• Endpoint Protection

Issue/Introduction

You would like to manually launch a Symantec Endpoint Protection (SEP) for Linux scan.

Environment

Release : 14.x

Component :

Resolution

A manual scan can be started either locally or initiated on the Symantec Endpoint Protection Manager (SEPM).

 

To initiate a manual scan from the SEPM:

1. Navigate to the Clients tab.
2. Right-click on client group choose ‘Run a command on the group’ and choose Scan.

Note:  The command can also be run for a specific machine by right-clicking on the client instead of the client group.

Be sure to choose the option for ‘Full scan’ as that is the only option that will work on Linux.

 

To launch a manual scan on SEP Linux agent 14.3 RU3 and newer, utilize the the following steps:

1. On a Linux client computer, navigate to the following location: 
   /opt/Symantec/sdcssagent/AMD/tools

    
2. Run the sav command as follows: 
   ./sav manualscan along with one of the available switches:

   manualscan -s <file list> | Starts a manual scan.

   manualscan -t             | Stops a manual scan in progress.
    

For more ./sav command options, review the following document:

“Managing your Linux client using the command line tool (sav)”

 

To manually launch a scan on SEP 14.3 MP1 and prior, utilize the following scan options:

The manualscan command has 3 options :

-s | --scan <file list>

 -c | --clscan <file list>

 -t | --stop

Examples:

Perform a manual scan on the /home directory.

[root@symantec_antivirus]# ./sav manualscan -s /home

Start a manual scan that does not return control to the command prompt until the scan is complete.

[root@symantec_antivirus]# ./sav manualscan -c /home

 Stops a manual scan that is in progress.

[root@symantec_antivirus]# ./sav manualscan -t