eG Monitoring
 

Measures reported by WinSecurityTest

Windows Security Center (WSC) is a comprehensive reporting tool that helps administrators establish and maintain a protective security layer around Windows systems to monitor the system's health. The Windows Security Center also monitors third party security products such as firewall, antivirus, antimalware and antispyware, installed on the system. For the security products to be compliant with Windows and report the status of those products to the Action Center successfully, the products should be registered with the security center. The security products communicate any status change that has been detected recently to the security center using private APIs. The security center, in turn, communicates these updates to the Action Center, where they are finally displayed to the user logged into the system. In large environments where multiple desktops are installed, administrators may not be able to individually monitor whether the firewall is upto date or are there any system updates that are pending etc. To cater to the needs of such administrators, eG Enterprise offers a specialized WinSecurityTest test that instantly collects all information related to the Windows Security Center of each desktop in the target environment and display them in a single console.

This test auto-discovers the security products installed on the target Windows host, and for each security product reports the current definition status and the current protection status. Using these details, administrators are alerted to the systems on which the automatic updates are outdated and virus protection turned off. By closely monitoring the status, administrators can take necessary actions before the end users become vulnerable to virus threats or malicious attacks.

Outputs of the test : One set of results for every security product:provider combination on the Windows host being monitored.

The measures made by this test are as follows:

Measurement Description Measurement Unit Interpretation
Definition_status Indicates the current status of this security product.   The values reported by this measure and its numeric equivalents are mentioned in the table below:

Measure Value Numeric Value
Unknown 20
Up to date 15
Out of date 10

Note:

By default, this measure reports the Measure Values listed in the table above to indicate the current state of this security product. The graph of this measure however, represents the status of a server using the numeric equivalents only.

Use the detailed diagnosis of this measure, to know about the name of Windows system on which the product is running, the file paths of product executables and the current status of the product.
Real_time_protect_status Indicates the real-time protection status of this security product.   The values reported by this measure and its numeric equivalents are mentioned in the table below:

Measure Value Numeric Value
Unknown 25
Snoozed 20
On 15
Expired 10
Off 0

Note:

By default, this measure reports the Measure Values listed in the table above to indicate the current protection status of this security product. The graph of this measure however, represents the status of a server using the numeric equivalents only.