Ensuring_Security_Compliance
Use Security Compliance to determine flaws, deploy solutions, and maintain your security infrastructure.
Remember the following:
Compliance Report includes online and offline clients, but not roaming clients.
OfficeScan queries the connection status at the time of assessment. Results will not display changes made after assessment.
When using role-based accounts, you can retain the scan compliance and scheduled compliance report settings for your account.
Manually resolve OfficeScan client issues if the Security Compliance tabs are unable to resolve the issue.
To enforce compliance on clients managed by the OfficeScan server: >>>
Security Compliance > Compliance Assessment > Compliance Report
Select the domain from the Client Tree Scope and click Assess.
Only the Components tab displays clients before 10.5. Services, Scan Compliance, and Settings will only display OfficeScan 10.5 clients.
From the Services tab:
View computers with non-compliant services.
Select computers from the query result.
Click Restart OfficeScan Client to force the client restart.
After performing another assessment and the client still appears as non-compliant, manually verify the client service.
From the Components tab:
View computers with components inconsistent with the OfficeScan server.
Select computers from the query result.
Click Update Now to force clients to download components.
From the Scan Compliance tab:
Scan Compliance only assesses clients if Scheduled Scan has been enabled.
View computers that have not been scanned.
Specify one or both of the following:
Number of days a client has not performed Scan Now or Scheduled Scan
Number of hours the remote or scheduled scan task has been running
If the number of days or hours is exceeded, the client is treated as non-compliant.
Select computers from the query result.
Click Scan Now to force clients to perform a manual scan.
OfficeScan disables the Scan Now option if the client exceeded the time specified for remote or scheduled scan to avoid repeating the scan.
From the Settings tab:
View computers with settings inconsistent with the client tree domain settings.
Select computers from the query result.
Click Apply Domain Settings to ensure that client settings are consistent with the domain settings.
Select the domain from the Client Tree Scope and click Assess again. If the same clients appear, manually verify OfficeScan client issues. Refer to Troubleshooting Resources.
Recommended tasks:
Within the Compliance Report tabs, click a number link to display all affected computers in the client tree.
To save the list of computers to a file, click Export.
See also: