UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Symantec Endpoint Protection client Global Settings Heuristics Level must be set to Automatic, at a minimum.


Overview

Finding ID Version Rule ID IA Controls Severity
V-42647 DTASEP026 SV-55375r1_rule Medium
Description
Heuristics analyzes a program's structure, its behavior, and other attributes for virus-like characteristics. In many cases, it can protect against threats such as mass-mailing worms and macro viruses if they are encountered before updating virus definitions. Advanced heuristics looks for script-based threats in HTML, VBScript, and JavaScript files.
STIG Date
Symantec Endpoint Protection 12.1 Managed Client Antivirus 2014-10-01

Details

Check Text ( C-48917r1_chk )
Server check: From the Symantec Endpoint Protection Management Server, Symantec Endpoint Protection Management Console: Select Policies -> Double-click the applied policy -> Under Windows Settings, Advanced options, select Global Scan Options -> Under Bloodhound Detection Settings -> Ensure "Enable Bloodhound heuristic virus detection" is set to Automatic, at a minimum.

Criteria: If "Enable Bloodhound heuristic virus detection" is not set to Automatic, at a minimum, this is a finding.

Client check: Locate the Symantec Endpoint Protection icon in the system tray. Double-click the icon to open the Symantec Endpoint Protection configuration screen. On the left hand side, select Change settings -> Under Virus and Spyware Protection -> Select Configure Settings -> Under the Global Settings tab -> Under Scan Options -> Ensure "Enable Bloodhound heuristic virus detection" is set to Automatic at a minimum.

Criteria: If "Enable Bloodhound heuristic virus detection" is not set to Automatic, at a minimum, this is a finding.
Fix Text (F-48231r1_fix)
From the Symantec Endpoint Protection Management Server, Symantec Endpoint Protection Management Console: Select Policies -> Double-click the applied policy -> Under Windows Settings, Advanced options, select Global Scan Options -> Under Bloodhound Detection Settings -> Set "Enable Bloodhound heuristic virus detection" to Automatic, at a minimum.