Monitor Agent Scan Status?

[Former Member]

Is there a way to see the scan status of an agent from the ePolicy Orchestrator 4.5?  In other words, can I see like the percentage of completion for an agent that is currently scanning?

Thanks,

Casey

[JoeBidgood]

By scanning I'm assuming you mean running an on-demand scan task - if so, then I'm afraid not, no: this information is not reported back to ePO.

Sorry

Regards -

Joe

[EStanicki]

Bringing up a super old thread I know. Is this still the case? It seems like a crazy oversight that we cannot see the status of an active scan. Some scans take 1 hour some take 10 hours. Just tell the users there in lockdown for an indeterminate amount of time?

[cdinet]

The agent only reports a started and completed status as it is received from ENS.  So if you want ens to report a status as it is occurring, that would be an enhancement request for that product, but that might be difficult to set.  How frequently would you want it to report or at what stages?  All that is relative to every system

[cdinet]

The on demand scan log would show if it is complete, still in progress, failed, etc. and is located in C:\ProgramData\McAfee\Endpoint Security\Logs

[EStanicki]

Thank you for following up!

Its really strange to me that it would be a feature request to an Enterprise grade AntiVirus software solution to be able to see the status of an active scan in the management interface. It would seem odd if this was never requested.

The only other solution is to remotely access a possibly infected computer to be able to see what the status is? In the EPO interface you have to make some grand assumptions that because I see 'Scan Started' and don't see 'Scan Completed' that it is still running but there is no way to confirm this other than looking through a txt file on the PC.

Where can I submit a feature request?

[cdinet]

As for status, if you are referring to whether there were any detections or not, the agent would send any detected event items, so you would see that in threat events.  Analyzer version would also show whether it was on demand or on access.  By my comment regarding status, I meant any in progress status messages, not any results of said scan.