Details

For antivirus software to be effective, it must be running at all times, beginning from the point of the system’s initial startup. Otherwise, the risk is greater for viruses, trojans, and other malware infecting the system during that startup phase.

Solution

From the ePO server console System Tree, select the Systems tab, select the asset to be checked, select Actions, select Agent, and select Modify Policies on a Single System. From the product pull down list, select VirusScan Enterprise 8.8.0. Select from the Policy column the policy associated with the On-Access General Policies. Under the General tab, locate the ‘Enable on-access scanning:’ label. Select the ‘Enable on-access scanning at system startup’ option. Select Save.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_McAfee_VirusScan88_Managed_Client_V5R21_STIG.ziphttps://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_McAfee_VirusScan88_Managed_Client_V5R21_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

• 800-53|SI-3c.1.
• CAT|I
• CCI|CCI-001242
• Rule-ID|SV-55134r1_rule
• STIG-ID|DTAM001
• Vuln-ID|V-6453

Source

• Tenable.com/audits