Change the level of compressed files to scan in Symantec Endpoint Protection Manager

Products

• Endpoint Protection

Issue/Introduction

You would like to know how to change the number of levels in compressed files to scan in Symantec Endpoint Protection Manager.

You notice that the SEP client (managed), is not able to detect malware from files inside multiple levels of a compressed file (ex: zip), after running an on-demand scan.

 

Environment

Symantec Endpoint Protection Manager 14.x

Symantec Endpoint Protection 14.x

 

Resolution

By default, the value of "Number of levels to expand if there are compressed files within compressed files" in SEPM is 3.

You can change this value by navigating to:

1. Policies > Virus and Spyware Protection,

2. Double click to edit the existing Virus and Spyware Protection policy,

3. On the "Virus and Spyware Protection Policy" window, click "Administrator-Defined Scans",

4. Under "Administrator-On-demand Scan" section, click Edit,

5. On "Edit Administrator On-demand Scan" window, click "Advanced Scanning Options.."

6. On "Compressed Files" tab, change the value of "Number of levels to expand if there are compressed files within compressed files", then OK.