Moved from Home products provisionally to Business > ePO for better support.
Moving again to VirusScan.
This is the kind of thing VSE Access Protection can be configured to do (i.e. block or warn on the execution of a specific applications) but it has to be configured appropriately.
...And yes, any AP rule trigger will submit an event to the ePO server centrally unless configured otherwise.
Alright, is there any way i can view all my virus alert?
let say i am not connected to network. will that trigger submit event to ePO server?
Thanks for the reply!
Not being connected to a network is unlikely to be considered a malware event, or in fact any event to be sent to ePO.
Please remember ePO is primarily designed to report on McAfee software and its function, not the local machine or network.
So you would get events generated, say, for 'on-access scanner disabled'.
Anyway all potential events are listed in the ePO server's event filter description:
Menu - Configuration - Server Settings - Event Filtering - Edit
Although I would strongly recommend against modifying from the default values blindly, as enabling certain events could cause a deluge of data to the ePO server that may make it struggle.
ok so from what you said it doesn't send virus detection(s). It only sends out information related to McAfee??
Ummm, information related to McAfee would include virus detections as that is the primary function of VirusScan.
So it will send virus detection events for sure. They are one and the same thing
Perhaps it would be easier if you called into McAfee support to discuss, that may make it clearer for you.