Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 4365 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Last Scheduled Scan Completed

fmm

Hi

I have scheduled a scan on all workstations via the Sophos Control Centre on the server. However, there were a few workstations which weren't being used so I took the liberty of running a scan via Sophos Endpoint and Control on the actual machines before the scheduled one, and turning them off after the scan had finished.

However, the 'Last scheduled scan completed' has not been updated to reflect that they have been scanned. I did a test and sure enough, this field only seems to be updated when a scan scheduled from the control centre has been completed.

It's slightly annoying that when I'm checking whether they have all been completed, there are some which are showing an old date for the last scan (i.e. the one scheduled via the Control Centre). Is there some way I can change this, or something I'm missing?

Thanks.

:36373


This thread was automatically locked due to age.
Parents
  • 0

    Hello fmm,

    [I was about to reply when I saw Jak beat me - so I did an additional check]
    if you think about it, you (as "extension" of the SCC console) can only be sure (and just to a certain extent) what has been scanned if you scheduled (or requested an immediate) scan. A scan initiated or scheduled locally on the client might have encompassed a small portion of the filesystem only, or been run excluding practically anything.

    Dunno about SCC but SEC has the Full system scan ... option (right-click on the client) which runs a Scan my computer scan and completion is reported to SEC.

    @Jak: As far as I understood a scan scheduled from SCC is reported and the question was about a scan scheduled on the client. To make sure I've tested with SEC 5.0/SESC 10.2) - and it showed that client-initiated scans are, as expected, not reported. Only those scheduled/initiated from SEC. Might be though that a full scan (Scan my computer) is - didn't want to wait that long :smileywink: - but then I'd expect it to be the case with SCC as well.

    Christian

    :36391
Reply
  • 0

    Hello fmm,

    [I was about to reply when I saw Jak beat me - so I did an additional check]
    if you think about it, you (as "extension" of the SCC console) can only be sure (and just to a certain extent) what has been scanned if you scheduled (or requested an immediate) scan. A scan initiated or scheduled locally on the client might have encompassed a small portion of the filesystem only, or been run excluding practically anything.

    Dunno about SCC but SEC has the Full system scan ... option (right-click on the client) which runs a Scan my computer scan and completion is reported to SEC.

    @Jak: As far as I understood a scan scheduled from SCC is reported and the question was about a scan scheduled on the client. To make sure I've tested with SEC 5.0/SESC 10.2) - and it showed that client-initiated scans are, as expected, not reported. Only those scheduled/initiated from SEC. Might be though that a full scan (Scan my computer) is - didn't want to wait that long :smileywink: - but then I'd expect it to be the case with SCC as well.

    Christian

    :36391
Children
No Data