Symantec Endpoint Protection

1. On your local drive (typically C:\), select Program Files directory-> Symantec > Symantec Endpoint Protection > SymCorpUI.exe program is present.
2. Go to 'Start' button, select 'Control Panel', select Performance and Maintenance’, select 'Administrative Tools', and select 'Services'.
3. Symantec services:’Symantec Endpoint Protection’, ‘Symantec Event Manager’, ‘Symantec Management Clien’t, and ‘Symantec Settings Manager’ appear under 'Services(local)', with 'Status: Started' and 'Startup Type: Automatic'.


Services Window

4. Press Control/Alt/Delete keys to bring up the 'Windows Security' dialog box, select 'Task Manager'. Under 'Processes', six (6) Symantec processes (ccApp.exe, ccSvcHst.exe, Rtvscan.exe, Smc.exe, Smcgui.exe, SymCorpUI.exe) should be listed.


II. Is it running properly?

a. Right click on the Symantec “shield” in the lower right of the task bar, select Open Symantec Endpoint Protection, the Symantec Endpoint Protection window should come up. The ‘Status’ should be green, ‘Your computer is protected. No problems detected’. 

Open SEP


Note: If you have any problems, please contact your local administrator.

Check for up-to-date 'Virus Definition File'


1. In the SEP window , check that the date next to 'Definitions:' is recent. 

Note: 'LiveUpdate' (Item 3 in Figure 4) is pre-configured to check for updates hourly, if there is a network connection. You can click on the 'LiveUpdate' button to do a manual update. 

If you have any problems, please contact your local administrator.

How are 'LiveUpdates' done for off-site computers?

1. 'LiveUpdate' (Item 3 in Figure 4) is configured to first check the SLAC server for downloads, and if that is not available it will go to the Symantec server for downloads. Therefore computers within the SLAC internal network will primarily use the SLAC server, and computers off-site will go to the Symantec server. 'LiveUpdate' is pre-configured for you to check for updates hourly. You can click on the 'LiveUpdate' button to do a manual update.

How do I do a scan?

1. To scan you local drives, you can right click on the drive, folder or file you want to scan within 'Windows Explorer' window. 


a. Select 'Scan for viruses'. 


2. You can do an ‘Active Scan’’ or ‘Full Scan’ within the SEP program. 

a. Bring up the SEP window (See ‘Is it running properly?’ above). Click on ‘Scan for threats’ 

Note: There is a weekly scan scheduled for local drives on a user's computer. A user cannot currently schedule scans, but can scan at any time.

Users will not be able to scan the network drives (e.g., V drive or home directory Z drive) since this will impede performance on the servers, and anti-virus procedures on the servers are maintained by the Computing Division (CD) system administrators. The real time scanner on the local computer automatically scans every file that has been opened, moved, copied, or executed. In addition, the servers are also running Antivirus software.