Loading...

Knowledge Center


Security tags are not applied to virtual machines during MOVE Antivirus Agentless 4.5 NSX deployment
Technical Articles ID:   KB89342
Last Modified:  5/15/2017

Environment

McAfee MOVE Antivirus Agentless (MOVE AV Agentless) 4.5.x

Problem

Security tags (virusfound tag) are not applied to virtual machines during MOVE Antivirus Agentless 4.5 NSX deployment.

Solution

  • This is expected behavior when the primary action of the On Access Scan (OAS) policy is configured to Delete Files Automatically or Delete Files Automatically and Quarantine (assuming the Quarantine details have already been configured). When an EICAR file is detected and deleted on the client, the virusfound tag is applied and removed simultaneously. This can be observed in ePO Orion logs.
     
  • If the primary action of the OAS policy is configured to Deny Access to Files, the virusfound tag will be applied to the EICAR file and then removed when the next On Demand Scan (ODS) completes successfully.
     
  • If the primary action of the OAS policy is configured to Delete Files Automatically and Quarantine, (but the Quarantine details have not been configured), the virusfound tag will be applied to the EICAR file when detected.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.