Running a Symantec Scan

Content Authoring BigFix.me
1

Hi,

I am a new BigFix user and have been trying to create a Symantec scan via a Task

I can confirm that when I run the following command from the cmd line, it works like a charm (i.e., the log on the Symantec Client shows that the scan ran)

When I try to create the task:

I only type in the following command on the Action section of the task creation:

dos " C:\Program Files (x86)\Symantec\Symantec Endpoint Protection>DoScan.exe" /C /ScanAllDrives

The action runs and shows as “Completed” under “status”, but the scan does not start as per the log.

The log shows as:

Relevant - Test - Run Symantec Scan (fixlet:82306)
At 15:17:26 -0700 -
ActionLogMessage: (action:82306) Action signature verified for Execution
ActionLogMessage: (action:82306) starting action
At 15:17:26 -0700 - actionsite (http://myserver.com:52311/cgi-bin/bfgather.exe/actionsite)
Command started - dos " C:\Program Files (x86)\Symantec\Symantec Endpoint Protection>DoScan.exe" /C /ScanAllDrives (action:82306)
At 15:17:29 -0700 -
Report posted successfully
At 15:17:29 -0700 - actionsite (http://myserver.com:52311/cgi-bin/bfgather.exe/actionsite)
Command succeeded dos " C:\Program Files (x86)\Symantec\Symantec Endpoint Protection>DoScan.exe" /C /ScanAllDrives (action:82306)
At 15:17:29 -0700 -
ActionLogMessage: (action:82306) ending action
At 15:17:29 -0700 - mailboxsite (http://myserver.com:52311/cgi-bin/bfgather.exe/mailboxsite14677928)
Not Relevant - Test - Run Symantec Scan (fixlet:82306)
At 15:19:47 -0700 -
Report posted successfully

Can you please tell me if there is anything I am missing? For the action script section?

-NoobToBigFix

2

Short version: add this line to your actionscript before you start the scan

action uses wow64 redirection false

Long version: the BES Client is 32-bit and for backward compatibility all actions run in 32-bit mode. Unless you specify otherwise, any calls to “C:\Program Files” are redirected to C:\Program Files (x86), and any calls to C:\Program Files (x86) go… (nowhere?)

And also, I’m hoping you have a typo but

Should be Symantec Endpoint Protection\DoScan.exe

3

Thank you so much! That worked!