Managing Antivirus Policies

After you have created one or more antivirus policies, you can perform policy management functions. You can manage antivirus policies centrally on the Antivirus Policies page, or on an endpoint's Details page or a group's page.

When you select a policy on the Antivirus Policies page the following functions are available:

• Assigning a policy
• Unassigning a policy
• Deleting a policy
• Editing a policy
• Enabling a policy
• Disabling a policy
• Exporting policy details

When you select a policy on an endpoint's Details page or a group's page, a more limited set of functions are available:

• Assigning a policy
• Unassigning a policy
• Exporting policy details

You cannot delete, edit, enable, or disable a policy at group or endpoint level because these actions could have an undesired effect if the policy also applies to other endpoints or groups.

Managing Antivirus Policies Centrally

You can manage antivirus policies centrally on the Antivirus Policies page.

The Antivirus Policies page lists all existing antivirus policies and enables you to perform a wide range of management functions on them. From here, you can assign the policies to endpoints and groups. You can also unassign, delete, and edit them, as well as enabling and disabling them.

Assigning a Policy

Use the AntiVirus Policies page to assign an existing policy to one or more endpoints or groups.

1. Select Manage > AntiVirus Policies.
   The AntiVirus Policies page opens.
2. Select a policy to assign.

Note:

• You can only select and assign one policy at a time.
• A policy can be assigned multiple times to different endpoints or groups.

The Assign button becomes available.

3. Click Assign.
   Depending on the type of policy selected, the relevant policy wizard opens at the Assign virus and malware scan policy to groups and/or endpoints page.
4. Build a list of targets (endpoints), using either or both of the following methods:

Important: Recurring scans will not run on an endpoint that is shutdown or hibernating at the scheduled scan time.

Method	Steps
To define targets using groups:	If the Groups section is not open, click its up arrow to open it. Select one or more endpoint groups by selecting their check boxes. Click Add. This adds the group(s) to the Assigned list.
To define targets using endpoints:	If the Endpoints section is not open, click its up arrow to open it. In the search field, do one of the following: Type an endpoint name (to search for a specific endpoint) Type part of an endpoint name (to search for similarly named endpoints) Leave it blank (to search for all available endpoints) Click the Search icon. Depending on what you typed, one or more endpoints will appear in the Name column, with their respective IP addresses. Select the check box for each endpoint you want to assign. Click Add. This adds the endpoint(s) to the Assigned list.

You can remove targets from the Assigned list by selecting the applicable check boxes and clicking Remove.

5. Click Finish.
   The policy has been assigned to one or more endpoints or groups.

Note: The Assigned column entry for that policy now contains:

• An Assigned link, which opens the policy wizard at the Assign virus and malware scan policy to groups and/or endpoints page. This enables you to change the endpoints or groups that the policy is assigned to.
• An Information icon, which displays a list of the endpoints or groups that the policy is assigned to.

Unassigning a Policy

On the Antivirus Policies page you can unassign policies that are currently assigned to endpoints or groups.

1. Select Manage > Antivirus Policies.
   The Antivirus Policies page opens.
2. Select a policy to unassign.

You can select more than one policy to unassign at a time.

The Unassign button becomes available.

3. Click Unassign.
   The Unassign Policy dialog opens, asking you to confirm the unassignment of the policy.
   

If you have selected more than one policy, the dialog lists the policies and gives you the option of viewing them and removing them from the list.

4. Click Yes.
   The selected policy is unassigned.

Deleting a Policy

Use the AntiVirus Policies page to delete unassigned policies.

1. Select Manage > AntiVirus Policies.
   The AntiVirus Policies page opens.
2. Select a policy to delete.

Note:

• Only unassigned policies can be deleted.
• You can only delete one policy at a time.

The Delete button becomes available.

3. Click Delete.
   The Delete Antivirus Policy dialog opens, asking you to confirm the deletion of the policy
   .



If you have selected an assigned policy, the dialog lists the associations (endpoints or groups) that must be removed before the policy can be deleted.

4. Click Yes.
   The selected policy is deleted.

Editing a Policy

Use the AntiVirus Policies page to select a policy and edit it with the relevant wizard.

1. Select Manage > AntiVirus Policies.
   The AntiVirus Policies page opens.
2. Select a policy to edit.

You can edit only one policy at a time.

The Edit button becomes available.

3. Click Edit.
   Depending on the type of policy selected, the relevant policy wizard opens.
4. Use the wizard to make the required changes to the policy. It provides the same functionality as when you are creating a policy. See Creating a Recurring Virus and Malware Scan Policy or Creating a Real-time Monitoring Policy for more information.
5. When you have made all required changes to the AntiVirus policy, click the wizard's Finish button.
   The AntiVirus policy has been edited.

Disabling a Policy

You can disable an AntiVirus policy, for troubleshooting purposes or when policy enforcement is temporarily not required, on the AntiVirus Policies page. By default, a policy is enabled upon creation.

Unlike deleting, by disabling a policy you retain the policy's details and can re-enable it later.

1. Select Manage > Antivirus Policies.
   The Antivirus Policies page opens.
2. Select one or more policies to disable.

You can only disable a currently enabled policy, identified by the Enabled icon in the Status column.

The Disable button becomes available.

3. Click Disable.
   The Confirm Disable Policy dialog opens, asking you to confirm the disabling of the policy.
   
4. Click Yes.
   The selected policy is disabled, and its Status icon changes to Disabled.

Enabling a Policy

Use the AntiVirus Policies page to select and enable antivirus policies.

1. Select Manage > AntiVirus Policies.
   The AntiVirus Policies page opens.
2. Select one or more policies to enable.

You can only enable a currently disabled policy, identified by the Disabled icon in the Status column.

The Enable button becomes available.

3. Click Enable.
   The selected policy is enabled, and its Status icon changes to Enabled.

Managing Antivirus Policies on the Endpoint

You can manage antivirus policies on a selected endpoint.

An endpoint's Details page has an Antivirus Policies tab. From here you can assign and unassign policies for the endpoint. You can also export details of the antivirus policies that apply to the endpoint.

Assigning an AntiVirus Policy on the Endpoint

You can assign one or more existing antivirus policies on an endpoint's Details page.

1. Select Manage > Endpoints.
2. Click the hyperlinked name of the desired endpoint.
   The endpoint's Details page opens to the Information tab.
3. Click the AntiVirus Policies tab.
   The AntiVirus Policies tab opens, displaying any policies that are already assigned to the endpoint.
4. Choose the type of policy to assign:

Option	Description
Recurring Virus and Malware Scan	Click Assign > Recurring Virus and Malware Scan.
Real-time Monitoring Policy	Click Assign > Real-time Monitoring Policy.

The Assign Policy dialog opens.

5. Select one or more policies to assign to the endpoint.
6. Click OK.
   The dialog closes and the policy is added to the list on the AntiVirus Policies tab.

When a policy is assigned on an endpoint, it is no longer displayed in the Assign Policy dialog that opens for that endpoint. This is because a specific policy can be assigned only once to an endpoint.

One or more AntiVirus policies have been assigned to the endpoint.

Unassigning an Antivirus Policy on the Endpoint

You can unassign antivirus policies from an endpoint on its Details page.

1. Select Manage > Endpoints.
2. Click the hyperlinked name of the desired endpoint.
   The endpoint's Details page opens.
3. Click the Antivirus Policies tab.
   The Antivirus Policies tab opens, displaying any policies that are already assigned to the endpoint.

4. Select one or more policies to unassign from the endpoint.

5. Click Unassign.
   The Unassign Policy dialog opens.
6. Click Yes.
   The dialog closes and the policy is removed from the list on the Antivirus Policies tab.

One or more antivirus policies are unassigned from the endpoint.

Managing Antivirus Policies on the Group

You can manage antivirus policies on a selected group.

A group's page has an Antivirus Policies view. From here you can assign and unassign policies for the group. You can also export details of the antivirus policies that apply to the group.

Assigning an AntiVirus Policy on the Group

You can assign one or more existing AntiVirus policies on a group's page.

1. Select Manage > Groups.
2. Select a group from the Browser.
3. Select the AntiVirus Policies view.
   The AntiVirus Policies view is displayed, showing any policies that are already assigned to the group.
4. Choose the type of policy to assign:

Option	Description
Recurring Virus and Malware Scan	Click Assign > Recurring Virus and Malware Scan.
Real-time Monitoring Policy	Click Assign > Real-time Monitoring Policy.

The Assign Policy dialog opens.

5. Select one or more policies to assign to the group.
6. Click OK.
   The dialog closes and the policy is added to the list in the AntiVirus Policies view.

The policy is no longer displayed in the Assign Policy dialog that opens for that group. This is because a specific policy can be assigned only once to a group.

One or more AntiVirus policies have been assigned to the group.

Unassigning an Antivirus Policy on the Group

You can unassign antivirus policies from a group on its group page.

1. Select Manage > Groups.
2. Select a group from the Browser.
3. Select the Antivirus Policies view.
   The Antivirus Policies view is displayed, showing any policies that are already assigned to the group.
4. Select one or more policies to unassign from the endpoint.
5. Click Unassign.
   The Unassign Policy dialog opens.
6. Click Yes.
   The dialog closes and the policy is removed from the list of policies assigned to the group.

One or more antivirus policies are unassigned from the group.