ePolicy Orchestrator Events generated by VirusScan for Mac 9.6, 9.7, and 9.8
Technical Articles ID:
KB79259
Last Modified: 10/15/2021
Environment
McAfee ePolicy Orchestrator (ePO) 5.x
McAfee VirusScan for Mac (VSMAC) 9.8, 9.7, 9.6
Summary
Antimalware Event IDs
Event ID
|
Event Description
|
1024
|
Malware detected (Info)
|
1025
|
Malware cleaned (Info)
|
1026
|
Malware clean failed (Info)
|
1027
|
Malware deleted (Info)
|
1028
|
Malware delete failed (Info)
|
1034
|
Scan completed. No viruses found. (Info)
|
1038
|
Scan found infected files. (High)
|
1056
|
Malware quarantine (Info)
|
1057
|
Malware quarantine failed (Info)
|
1086
|
Scan error (Info)
|
1202 |
On-demand scan started (Info) |
1203 |
On-demand scan complete (Info) |
NOTES:
- For the Events to be forwarded to the ePO Server, ensure that all listed Events are enabled in ePO. This configuration can be set on the ePO server using the following steps:
- Click Menu, Configuration, Server Settings.
- Select Event Filtering, then click Edit at the bottom of the page.
- Select the Events you want the agent to forward to the server, then click Save.
- When triggered from the local console interface, the on-demand scan (Scan Now) does not generate these Events: 1202, 1203, 1034 and 1038.
|