For details on cookie usage on our site, read our Privacy Policy
Malware Scan on XDR
- LIVEcommunity
- Discussions
- Security Operations
- Cortex XDR Discussions
- Re: Malware Scan on XDR
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Malware Scan on XDR
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-19-2023 05:06 AM
Hello,
How long does it take for endpoints to go to failed/canceled state from in progress state when malware scan ran on endpoints?
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-22-2023 04:08 PM
Hi @RamyashreeMada,
Thank you for writing to Live Community. I'm not sure I fully understand your question.
Do you mean how long it will take the endpoint to go failed/cancelled in case the endpoint was disconnected or something interrupted the scan?
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-22-2023 08:46 PM
Yes, That's what I mean.
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-24-2023 09:40 AM - edited 01-24-2023 09:40 AM
1. In the instance the connection is lost between the Endpoint and XDR cloud, but the scan had already started the scan should be completed and report the status back online if it happens within 24 hours.
2. In the instance the machine was shut down halfway through the scan the scan should indeed be cancelled/failed. This information should arrive to the XDR console in around 5-7 seven minutes, as the the Cortex XDR agent initiates communication with Cortex XDR every five minutes by sending a heartbeat to the server.
You can read more about Agent and Server initiated communication here.
If this helped, please click 'Accept as Solution'.
- Agent Blocking files/processes dynamically based on conditions in Cortex XDR Discussions
- Disable Scheduled Scans on non-persistent VDI machines in Cortex XDR Discussions
- Enable Endpoint File Scanning Documentation - Clarification in Cortex XDR Discussions
- XDR Capabilities in Cortex XDR Discussions
- Endpoint scanning in Cortex XDR Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
