Forefront Client Security TechCenter >
Forefront Client Security Forums
>
Forefront Client Security Alerting and Monitoring
>
Client security management console spyware & virus logs
Client security management console spyware & virus logs
- Hi
I want to make sure that Forefront is working correctly and catching viruses/anti spyware. On the management console it displays alerts and malware detected as zero. Is this correct? I would have assumed we'd have had some viruses/spyware detected.
thanks!
Answers
- Hi!
If a threat was successfully removed by forefront it does not nessesarily report this to the centar console. it depends on what logging level you have setup in your FCS policy. Default level is "3" and that does not report if the action was successful (if it is a single event, multiple infections are reported).
So..check you policy that you deployed. (it's on the very last tab in the policy)
What i usually do at the FCS deployment stage is that i set the policy to 5, just to get all the info from the clients. and then when i fel comfortable i lower it on most of the computers but keep the 5 on sensetive computers.
/Johan
MCSE, forefront spec | www.msforefront.com- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, July 21, 2009 8:29 AM
- Proposed As Answer byNick Gu - MSFTMSFT, ModeratorThursday, July 16, 2009 9:13 AM
All Replies
- Hi!
If a threat was successfully removed by forefront it does not nessesarily report this to the centar console. it depends on what logging level you have setup in your FCS policy. Default level is "3" and that does not report if the action was successful (if it is a single event, multiple infections are reported).
So..check you policy that you deployed. (it's on the very last tab in the policy)
What i usually do at the FCS deployment stage is that i set the policy to 5, just to get all the info from the clients. and then when i fel comfortable i lower it on most of the computers but keep the 5 on sensetive computers.
/Johan
MCSE, forefront spec | www.msforefront.com- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, July 21, 2009 8:29 AM
- Proposed As Answer byNick Gu - MSFTMSFT, ModeratorThursday, July 16, 2009 9:13 AM
- Thank you Johan! I'll give that a go....
Sue
