Endpoint Protection does not show HI "Additional Text notification" when its quarantined from the Advance Threat Protection
Last Updated May 31, 2019
Symantec Endpoint Protection (SEP) does not show HI "Additional Text notification" when it quarantined from Advanced Threat Protection (ATP).
With SEPM/SEP 14.0 or MP1 with NO ATP:
Created the HI Policy with Antivirus requirement.
Antivirus Signature File date checking
Under Advanced Settings=> Added Additional text for HI Fails and Passes
Updated the SEP Policy correctly
Once the Hi Failed/Passed we can see the Additional Text notification. After that we don't see the notification which is working as designed. Or if we restart the SMC or restart the computer we see the initial only.
With SEPM/SEP 14.0 with ATP configured.
SEPM is configured with ATP and it shows healthy.
Assign the default HI Policy to the group, where in HI policy only requirement is "Always do Host Integrity checking". And also added the Additional text.
Assign the default Quarantine F/w policy to the same group.
Ran isolate command from ATP which correctly reaches to the SEP Client.
SEP shows quarantine successfully but don't see any Additional text notification.
Working as Designed.
Working as 'Designed'.
When SEP moves to quarantine it doesn't show the "Addition text" pop-up, whether from Symantec Network Access Control (SNAC) or ATP.
Addition Text pop-up only happens when computer restarts or when SMC restarts.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe