

This monitor returns the number of events when the Forefront Endpoint Protection client scan has encountered an error and stopped.

This service helps protect users from malware and other potentially unwanted software.Įvent: Scan encountered error and stopped This monitors returns the CPU and memory usage of the Microsoft Antimalware service. In the message field, this component returns the date of the last installed update. This component monitor returns the number of days that have passed from the last definition update of the antivirus and antispyware modules. Pending Reboot – This component returns whether there is a need for a reboot due to a threat action.Pending Offline Scan – This component returns whether there is a need for an offline scan.

Pending Manual Steps – This component returns whether there is a need for manual steps due to a threat action.Pending Full Scan – This component returns whether there is a need for a full scan due to a threat action.255 – Script cannot check the action status from WMI.This monitor returns antimalware infection status of FEP client. Firewall Service Running – This component returns the status of the Windows Firewall service.Firewall Enabled – This component returns the status of the Windows Firewall.NIS Enabled – This component returns the status of the Network Inspection System (NIS).Behavior Monitor Enabled – This component returns the status of the behavior monitor.Protection Enabled – This component returns the status of FEP protection technology.Antispyware Enabled – This component returns the status of Antispyware component.Antivirus Enabled – This component returns the status of Antivirus component.This component returns the status of the following services: 255 – Script cannot check the service status from WMI.This monitor returns the anti-malware health and firewall status of FEP client. If you believe an abnormality exists, examine the Windows System log for details. Returned values other than zero may indicate an abnormality. Component monitorsĪll event monitors should return values of zero. Windows Administrator on the target server. WinRM must be installed and properly configured on the target server and WMI access to the target server. Use this SAM application monitor template to monitor the status of Microsoft Forefront Endpoint Protection (FEP) 2010 client installed on a Windows machine by using PowerShell and Event monitors. Microsoft Forefront Endpoint Protection 2010 (Client)
