Dallas Security-DLP User Group

 View Only
  • 1.  SEP Components

    Posted Dec 04, 2012 05:15 PM

    So I'm working on a SEP remediation workflow and need some help with the components. There are components for Run Client Command Scan and Run Client Command Update Content and Scan which take an input of "Scan Type" but I have no idea what the context should be. I've tried names and GUIDs I've found in SQL but I have no clue what it should take. Does anyone have any idea? 


    Also is there an update policy component? Or would that be the same component as update content. Thanks in advance.


    SEP 12.1

    Workflow 7.1 Sp2

  • 2.  RE: SEP Components

    Posted Dec 04, 2012 06:31 PM

    SEP components are essentially wrappers for the SEP web services. I'll try and track down some API documentation.

  • 3.  RE: SEP Components
    Best Answer

    Posted Dec 05, 2012 12:59 PM

    Try the following:




  • 4.  RE: SEP Components

    Posted Dec 05, 2012 03:38 PM

    Thanks reecardo, I just came across these myself after looking at the database & schema map for SEP 12 with a little caveat as well. The commands you listed work if you run the component "Run Client Command Scan" but do not work if you use the command "Run Client Command Update Content And Scan". There are separate commands for that component which are along with all commands..


    Update_Now = Update Content
    ScanNow_Full = Full Scan
    ScanNow_Quick = Active Scan
    ScanNow_Custom = Custom Scan
    Update_ScanNow_Full = Update
    Content and Scan Full
    Update_ScanNow_Quick = Update
    Content and Scan Quick
    Update_ScanNow_Custom = Update
    Content and Scan Custom
    CancelScan = Cancel Scan
    Reboot = Restart
    ApOn = Turn Auto-Protect On
    ApOff = Turn Auto-Protect Off
    FwOn = Turn Firewall On
    FwOff = Turn Firewall Off
    DeleteQuarantine = Delete from
    Also, running smc.exe -updateconfig from the c:\program files\symantec\symantec endpoint protection\12.1xxxxxx\bin folder will update the policy on client.