 Integrity enforcement checks and remediation
I want my integrity clients to be checked for their symantec DAT version. If this is too out of date I want the remediaition to force them to update from my internal AV server.
I have enabled all the relevant firewall ports - i.e allowing communication from client to AV server over AV ports without SVC checks, but my symantec guy says there is no way we can force the client to do an upgrade. All they suggest is we get the AV server to poll the clinets every 10 minutes.
This way my clients may have to wait 10 mins to become compliant and be allowed in.
This is no good. Has anyone set up a likewise remediaition? If this is all symantec has to offer I could do this with a manually created SVC file. |