You can use the Process Monitor to verify that antivirus or anti-spyware software is a running on a device. If the monitor does not find the specified program running, an associated action notifies you of this potentially harmful vulnerability.
For this example, you will configure and assign a Process Monitor that checks to see if Norton AntiVirus™ is running on a device. You will also configure and assign an Email Action to notify you if the monitor fails.
To configure the Process Monitor:
Norton AntiVirus Monitor
.rtvscan.exe
.rtvscan.exe
process running on the device to which the monitor is assigned, the monitor is considered down.Tip: Click Advanced to set the SNMP timeout and number of retries, and to decide if the monitor is used in Discovery.
After configuring the Norton AntiVirus Monitor, you need to assign it to the device(s) that you want to check are running the monitor. In the next steps of this example, you assign the monitor to a single device, and then, using the Action Builder, configure and assign an Email Action to notify you when the monitor goes down.
Tip: You can also assign the monitor to multiple devices at one time via Bulk Field Change. For more information, see Assigning a monitor to multiple devices.
To assign the Norton AntiVirus Monitor, and configure and assign an Email Action:
rtvscan.exe
on the device for 20 minutes.Note: On the console, ensure that the Mail Destination tab is selected.
Norton AntiVirus Email Notification
.%ActiveMonitor.Name has failed (%Device.HostName)
. This message indicates the monitor's name, its failed state, and the hostname of the device on which the monitor has failed.This %ActiveMonitor.Name has failed on %Device.Address.
Please restart the Norton AntiVirus software on this device.
----------------------------------------
This mail was sent on %System.Date at %System.Time
Ipswitch WhatsUp Gold
This message indicates that the Norton AntiVirus software has stopped on the specified device and that it should be restarted.
Tip: Optionally, you can add a link to the Device Status or Mobile Device Status report for the device to which the monitor is assigned.