locked
Client security management console spyware & virus logs RRS feed

  • Question

  • Hi

    I want to make sure that Forefront is working correctly and catching viruses/anti spyware.  On the management console it displays alerts and malware detected as zero.  Is this correct?  I would have assumed we'd have had some viruses/spyware detected.

    thanks!
    Tuesday, July 14, 2009 1:56 PM

Answers

  • Hi!

    If a threat was successfully removed by forefront it does not nessesarily report this to the centar console. it depends on what logging level you have setup in your FCS policy. Default level is "3" and that does not report if the action was successful (if it is a single event, multiple infections are reported).

    So..check you policy that you deployed. (it's on the very last tab in the policy)

    What i usually do at the FCS deployment stage is that i set the policy to 5, just to get all the info from the clients. and then when i fel comfortable i lower it on most of the computers but keep the 5 on sensetive computers. 


    /Johan
    MCSE, forefront spec | www.msforefront.com
    Tuesday, July 14, 2009 9:19 PM

All replies

  • Hi!

    If a threat was successfully removed by forefront it does not nessesarily report this to the centar console. it depends on what logging level you have setup in your FCS policy. Default level is "3" and that does not report if the action was successful (if it is a single event, multiple infections are reported).

    So..check you policy that you deployed. (it's on the very last tab in the policy)

    What i usually do at the FCS deployment stage is that i set the policy to 5, just to get all the info from the clients. and then when i fel comfortable i lower it on most of the computers but keep the 5 on sensetive computers. 


    /Johan
    MCSE, forefront spec | www.msforefront.com
    Tuesday, July 14, 2009 9:19 PM
  • Thank you Johan!  I'll give that a go....

    Sue
    Wednesday, July 15, 2009 9:45 AM