• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

What "object" identifies that a full system scan is complete?

I am still not able to use the Pulse Secure VPN client because it appears that it can't determine that a full system scan has completed. This used to work prior to updates around June of this year.  Does anyone know what "object" was used,  and in which directory, to mark that a full system scan had completed?   I would like to pass that on to support at the VPN vendor.

Replies

Kudos0

Re: What "object" identifies that a full system scan is complete?

HareSystemsSupport:

I am still not able to use the Pulse Secure VPN client because it appears that it can't determine that a full system scan has completed. This used to work prior to updates around June of this year.  Does anyone know what "object" was used,  and in which directory, to mark that a full system scan had completed?   I would like to pass that on to support at the VPN vendor.

I'm not sure the Norton provides an external indicator of when the last full system scan was. I'm not sure I understand why a VPN would care about it.

Wouldn't something wanting to verify your computer is secure be more concerned with the last time your antivirus updated?

Compare:
Last updated: a year ago, last full system scan: 10 minutes ago
vs
Last updated: 10 minutes ago, last full system scan: never

Perhaps since the VPN cares (for some reason) about the last scan it would make more sense to ask the VPN vender how they are checking rather than to ask Norton how their program would answer some 'unspecified query' from the Pulse Secure VPN client.

Also a wild guess for you: "Some sort of WMI query".

Kudos0

Re: What "object" identifies that a full system scan is complete?

Pulse Secure says it uses Host Checker to verify the security status of the local PC.  There have been problems previously with Host Checker erroneously indicating that Norton antivirus definitions were not up to date.  This happened when Norton switched to SDS definitions and Host Checker continued to look in the wrong place for virus definitions.

These issues were resolved.  If these earlier cases are a guide, the best step to take would be to alert Pulse Secure about the issue and let them follow up with Norton to determine the cause and arrive at a solution.

Kudos0

Re: What "object" identifies that a full system scan is complete?

SendOfJive:

Pulse Secure says it uses Host Checker to verify the security status of the local PC.  There have been problems previously with Host Checker erroneously indicating that Norton antivirus definitions were not up to date.  This happened when Norton switched to SDS definitions and Host Checker continued to look in the wrong place for virus definitions.

These issues were resolved.  If these earlier cases are a guide, the best step to take would be to alert Pulse Secure about the issue and let them follow up with Norton to determine the cause and arrive at a solution.

But why is it checking these things?

Kudos0

Re: What "object" identifies that a full system scan is complete?

password_password:
But why is it checking these things?

Host Checker

Description

  • Endpoint devices can be checked prior to and during a remote access session to verify an acceptable device security posture requiring installed/running endpoint security applications (antivirus, personal firewall, etc.), as well as check for IT-required Operating System versions, patch level, browser type, and many other requirements.
  • Custom-built checks for specialized customer requirements are also supported.
  • Noncompliant endpoints can be quarantined, denied access, or granted access, depending on administrator defined policies.
  • Whenever possible, Host Checker automatically remediates noncompliant endpoints by updating software applications that do not comply to corporate security policies.


Benefits

  • Ensures that endpoint devices meet corporate security policy requirements before being granted network access. 
  • Remediates devices and quarantines users, when necessary.
  • Can ensure that no potentially sensitive data is left behind on the endpoint device.

 https://www.pulsesecure.net/connect-secure/tech-info/

Kudos0

Re: What "object" identifies that a full system scan is complete?

Host Checker checks things according to a policy set by the administrators of the VPN instance (in this case at the client I'm working for).  "Full System Scan" is just one of the things it checks for.  My question is more about what it is looking for, and where should it find it.  I feel like this problem is very much like the issue when the definitions moved from one directory to another concurrent with the change to SDSDefs. I don't have access to the community at Pulse  so I'll see if I can get the client to ask them but if anyone here knows what directory/file/"object" is looked for let me know.

Kudos0

Re: What "object" identifies that a full system scan is complete?

A company to company request is more likely to get the information you are requesting than a user trying to get the inner workings of an anti virus product.

You may not be able to access the Pulse community, but you should be able to contact their support and get them to work it out with Norton.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.