SEP Components

[Migration User]

So I'm working on a SEP remediation workflow and need some help with the components. There are components for Run Client Command Scan and Run Client Command Update Content and Scan which take an input of "Scan Type" but I have no idea what the context should be. I've tried names and GUIDs I've found in SQL but I have no clue what it should take. Does anyone have any idea? 

 

Also is there an update policy component? Or would that be the same component as update content. Thanks in advance.

 

SEP 12.1

Workflow 7.1 Sp2

[Migration User]

SEP components are essentially wrappers for the SEP web services. I'll try and track down some API documentation.

[Migration User]

Try the following:

ScanNow_Full

ScanNow_Quick

ScanNow_Custom

[Migration User]

Thanks reecardo, I just came across these myself after looking at the database & schema map for SEP 12 with a little caveat as well. The commands you listed work if you run the component "Run Client Command Scan" but do not work if you use the command "Run Client Command Update Content And Scan". There are separate commands for that component which are along with all commands..

 

Update_Now = Update Content

ScanNow_Full = Full Scan

ScanNow_Quick = Active Scan

ScanNow_Custom = Custom Scan

Update_ScanNow_Full = Update

Content and Scan Full

Update_ScanNow_Quick = Update

Content and Scan Quick

Update_ScanNow_Custom = Update

Content and Scan Custom

CancelScan = Cancel Scan

Reboot = Restart

ApOn = Turn Auto-Protect On

ApOff = Turn Auto-Protect Off

FwOn = Turn Firewall On

FwOff = Turn Firewall Off

DeleteQuarantine = Delete from

Quarantine

 

Also, running smc.exe -updateconfig from the c:\program files\symantec\symantec endpoint protection\12.1xxxxxx\bin folder will update the policy on client.