Hello,
My environment is running SEP 12.1. Just logged into the SEPM and clicked on "Symantec Endpoint Protection Daily Status" under Favorite Reports. One of the virus detections I reviewed in this report shows that an item was quarantined. There are a few pieces of information about that detection including "Action Required." For this one detection "Action Required" is equal to Yes. So I copied the workstation ID, went into Monitors and checked the Risk Logs for this machine. I found a corresponding event for the malware that was detected on that machine. I see that there is a + sign in the Action column. If I click on this + sign, I have 3 options. Is this the Action Required that I saw in the Daily Status Report? If not, what does action required mean in that Daily Status report?
Thanks in advance,
Bob