Administrator Guide

Table Of Contents
More Information:
http://go.microsoft.com/fwlink/?linkid=37020&name=Virus:DOS/EICAR_Test_File&threatid=2147519003
Malware Severity:
Severe
How to update antimalware de
nitions manually
By default, Endpoint Protection checks for updated antimalware denitions every eight hours. You should not need to update antimalware
denitions manually; this is optional.
Antimalware updates are applied automatically by Windows Server Update Services (WSUS). Part of the initial installation and setup of
Endpoint Protection included conguring WSUS to approve antivirus and antimalware updates automatically.
To update denitions manually, in the Operations console, do the following. We recommend that if you want to update antimalware
denitions manually, you do this outside of peak usage hours:
1 In the Monitoring
workspace, expand Forefront Endpoint Protection. Select either Dashboard or Endpoints with FEP.
2 Multi-select the computers on which you want to update antimalware denitions.
3 In the Tasks pane, under Protected Endpoint Tasks, click Update Antimalware Denitions.
4 In the Update Antimalware Denitions dialog box, verify the list of target computers, and then click Run.
How to verify that updates are working
To verify that WSUS is applying current antivirus and antimalware denitions, review the logs in the Operations console:
1 In the Monitoring workspace, expand Forefront Endpoint Protection, and then click Security Events.
2 Look for Event ID (Event Number) 2000.
The following is a sample of a security event that shows the antimalware version number, with the current and previous signature version.
Figure 71. Verify updates are working
Managing certicates
It is recommended that you use a public key infrastructure (PKI) management tool to track the expiration and renewal of required
certicates. By default, this is not installed as part of Dell Hybrid Cloud System for Microsoft.
The following are common management tasks for certicates. You will need to perform most of these tasks at regular intervals.
132 Security