Administrator Guide

How to update antimalware denitions manually
By default, Endpoint Protection checks for updated antimalware denitions every eight hours. You should not need to update antimalware
denitions manually; this is optional.
Antimalware updates are applied automatically by Windows Server Update Services (WSUS). Part of the initial installation and setup of
Endpoint Protection included conguring WSUS to approve antivirus and antimalware updates automatically.
To update denitions manually, in the Operations console, do the following. We recommend that if you want to update antimalware
denitions manually, you do this outside of peak usage hours:
1 In the Monitoring workspace, expand Forefront Endpoint Protection. Select either Dashboard or Endpoints with FEP.
2 Multi-select the computers on which you want to update antimalware denitions.
3 In the Tasks pane, under Protected Endpoint Tasks, click Update Antimalware Denitions.
4 In the Update Antimalware Denitions dialog box, verify the list of target computers, and then click Run.
How to verify that updates are working
To verify that WSUS is applying current antivirus and antimalware denitions, review the logs in the Operations console:
1 In the Monitoring workspace, expand Forefront Endpoint Protection, and then click Security Events.
2 Look for Event ID (Event Number) 2000.
The following is a sample of a security event that shows the antimalware version number, with the current and previous signature version.
Figure 51. Verify updates are working
Managing certicates
It is recommended that you use a public key infrastructure (PKI) management tool to track the expiration and renewal of required
certicates. By default, this is not installed as part of Dell Hybrid Cloud System for Microsoft.
The following are common management tasks for certicates. You will need to perform most of these tasks at regular intervals.
• View the certicates to determine whether or not certicates are self-signed, and when certicates will expire.
• If you have not already done so, replace self-signed certicates with CA-signed certicates to help improve the security of Dell Hybrid
Cloud System for Microsoft.
Security
127