Microsoft Forefront Endpoint Protection Application

Microsoft.FEPS.Application :: 2.1.1116.111 (Management Pack)

Microsoft Forefront Endpoint Protection for Servers Management Pack that defines Microsoft Forefront Endpoint Protection for Servers operational elements.

Management Pack Elements

Show Management Pack References

Categories

Category (1)

Monitoring

Discovery (11)
Monitors

AggregateMonitor (3)
DependencyMonitor (6)
UnitMonitor (11)

Rule (6)
Recovery (7)
Task (11)

Presentation

ConsoleTask (1)
FolderItem (6)
Folder (1)
View (6)

Categories (1)

	ID	Target
	Cat.Microsoft.FEPS.Application.RemoteDesktop.Task	Microsoft.FEPS.Application.RemoteDesktop.Task

Discoveries (11)

	DisplayName	ID	Target	Enabled
	Protected Client Candidate Discovery	Microsoft.FEP.ProtectedClientCandidate.Discovery	Microsoft.Windows.Client.Computer	False
	Protected Endpoint Discovery	Microsoft.FEP.ProtectedServer.Discovery	Microsoft.FEP.ProtectedServerCandidate	True
	Protected Server Candidate Discovery	Microsoft.FEP.ProtectedServerCandidate.Discovery	Microsoft.Windows.Server.Computer	True
	Protected Endpoints Watcher Contains Antimalware Activity Discovery	Microsoft.FEP.ProtectedServersWatcher.MalwareActivity.Discovery	Microsoft.FEP.ProtectedServersWatcher	True
	Protected Endpoints Watcher Contains Protected Endpoint Discovery	Microsoft.FEP.ProtectedServersWatcher.ProtectedServer.Discovery	Microsoft.FEP.ProtectedServersWatcher	True
	Protected Endpoints Watcher Contains Protected Endpoint Candidate Discovery	Microsoft.FEP.ProtectedServersWatcher.ProtectedServerCandidate.Discovery	Microsoft.FEP.ProtectedServersWatcher	True
	Protected Endpoints Watcher Contains Unprotected Endpoint Discovery	Microsoft.FEP.ProtectedServersWatcher.UnprotectedServer.Discovery	Microsoft.FEP.ProtectedServersWatcher	True
	FEP Protected Endpoints with Antimalware Engine Disabled Group Discovery	Microsoft.FEP.ProtectedServersWithAntimalwareEngineDisabledGroup.Discovery	Microsoft.FEP.ProtectedServersWithAntimalwareEngineDisabledGroup	True
	FEP Protected Endpoints with Out-of-Date Definitions Group Discovery	Microsoft.FEP.ProtectedServersWithOutofDateDefinitionsGroup.Discovery	Microsoft.FEP.ProtectedServersWithOutofDateDefinitionsGroup	True
	FEP Protected Endpoints with Real-time Protection Disabled Group Discovery	Microsoft.FEP.ProtectedServersWithRTPOffGroup.Discovery	Microsoft.FEP.ProtectedServersWithRTPOffGroup	True
	FEP Protected Endpoints with Real-time Protection Disabled or Windows Firewall Off Group Discovery	Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup.Discovery	Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup	True

Aggregate Monitors (3)

	DisplayName	ID	Target	Algorithm	Category	Enabled	Alert Generate	Accessibility
	Malware Outbreak	Microsoft.FEP.MalwareOutbreak.FEP.Aggregate.Monitor	Microsoft.FEP.SecurityRootCause.MalwareActivity	BestOf	Custom	True	False	Public
	Forefront Endpoint Protection	Microsoft.FEP.ProtectedServer.FEP.Aggregate.Monitor	Microsoft.FEP.ProtectedServer	WorstOf	Custom	True	False	Public
	Forefront Endpoint Protection	Microsoft.FEP.UnprotectedServer.FEP.Aggregate.Monitor	Microsoft.FEP.UnprotectedServer	WorstOf	Custom	True	False	Public

Dependency Monitors (6)

	DisplayName	ID	Target	Algorithm	Source Monitor	Relationship	Category	Enabled	Alert Generate	Accessibility
	Antimalware Definitions	Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitions.Monitor	Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions	WorstOf	Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor	Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer	Custom	True	False	Public
	Antimalware Definitions Age	Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitionsDate.Monitor	Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions	WorstOf	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Monitor	Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer	Custom	True	False	Public
	Antimalware Engine	Microsoft.FEP.SecurityRootCause.AntimalwareEngine.AMStatus.Monitor	Microsoft.FEP.SecurityRootCause.AntimalwareEngine	WorstOf	Microsoft.FEP.ProtectedServer.AMStatus.Monitor	Microsoft.FEP.AntimalwareEngineReferencesProtectedServer	Custom	True	False	Public
	Active Malware	Microsoft.FEP.SecurityRootCause.MalwareActivity.ActiveMalware.Monitor	Microsoft.FEP.SecurityRootCause.MalwareActivity	WorstOf	Microsoft.FEP.ProtectedServer.ActiveMalware.Monitor	Microsoft.FEP.MalwareActivityReferencesProtectedServer	Custom	True	False	Public
	Additional Actions Pending	Microsoft.FEP.SecurityRootCause.MalwareActivity.PendingAdditionalActions.Monitor	Microsoft.FEP.SecurityRootCause.MalwareActivity	WorstOf	Microsoft.FEP.ProtectedServer.PendingAdditionalActions.Monitor	Microsoft.FEP.MalwareActivityReferencesProtectedServer	Custom	True	False	Public
	Malware Outbreak	Microsoft.FEPS.ProtectedServersWatcher.MalwareOutbreak.Monitor	Microsoft.FEP.ProtectedServersWatcher	Percentage	Microsoft.FEP.SecurityRootCause.MalwareActivity.OutbreakMonitor	Microsoft.FEP.ProtectedServersWatcherContainsMalwareActivity	Custom	True	True	Public

Unit Monitors (11)

	DisplayName	ID	Target	Category	Enabled	Alert Generate	Accessibility
	Active Malware	Microsoft.FEP.ProtectedServer.ActiveMalware.Monitor	Microsoft.FEP.ProtectedServer	SecurityHealth	True	True	Public
	Antimalware Engine	Microsoft.FEP.ProtectedServer.AMStatus.Monitor	Microsoft.FEP.ProtectedServer	Custom	True	True	Public
	Antimalware Definitions	Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor	Microsoft.FEP.ProtectedServer	Custom	True	True	Public
	Antimalware Definitions Age	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Monitor	Microsoft.FEP.ProtectedServer	Custom	True	True	Public
	Windows Firewall	Microsoft.FEP.ProtectedServer.FWStatus.Monitor	Microsoft.FEP.ProtectedServer	Custom	False	True	Public
	Additional Actions Pending	Microsoft.FEP.ProtectedServer.PendingAdditionalActions.Monitor	Microsoft.FEP.ProtectedServer	SecurityHealth	True	True	Public
	Real-time Protection	Microsoft.FEP.ProtectedServer.RTPStatus.Monitor	Microsoft.FEP.ProtectedServer	Custom	True	True	Public
	Vulnerability Protection	Microsoft.FEP.ProtectedServer.ServerProtection.Monitor	Microsoft.FEP.ProtectedServer	Custom	True	False	Public
	Malware Outbreak	Microsoft.FEP.SecurityRootCause.MalwareActivity.OutbreakMonitor	Microsoft.FEP.SecurityRootCause.MalwareActivity	Custom	True	False	Public
	Client Deployment	Microsoft.FEP.UnprotectedServer.DeploymentFailure.Monitor	Microsoft.FEP.UnprotectedServer	Custom	True	True	Public
	Machine Ping	Microsoft.FEPS.SecurityRootCause.MalwareActivity.PingMonitor	Microsoft.FEP.SecurityRootCause.MalwareActivity	Custom	True	False	Public

Rules (6)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	Periodic evaluation of active malware health	Microsoft.FEP.ActiveMalwareMonitorFallbackTriggerRule	Microsoft.FEP.ProtectedServer	SecurityHealth	True	False
	Client Pending Restart	Microsoft.FEP.AlertForDeploymentPendingRebootAlertRule	Microsoft.FEP.ProtectedServerCandidate	Custom	True	True
	Repeated Malware Infection Rule	Microsoft.FEP.AlertForRepeatedInfectionRule	Microsoft.FEP.ProtectedServer	SecurityHealth	True	True
	Collect Security Events Rule	Microsoft.FEP.CollectSecurityEventsRule	Microsoft.FEP.ProtectedServer	EventCollection	True	False
	Periodic evaluation of deployment failure health	Microsoft.FEP.DeploymentFailureFallbackTriggerRule	Microsoft.FEP.ProtectedServerCandidate	SecurityHealth	True	False
	Malware Cleaned Alert Rule	Microsoft.FEP.MalwareCleanedAlertRule	Microsoft.FEP.ProtectedServer	Custom	True	True

Recoveries (7)

	DisplayName	ID	Target	Monitor	Reset Monitor	Category	Enabled	Accessibility
	Start Antimalware Service	Microsoft.FEP.ProtectedServer.AMStatus.Recovery	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.AMStatus.Monitor	True	Maintenance	false	Internal
	Update Antimalware Definitions	Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Recovery.Error	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor	True	Operations	false	Internal
	Update Antimalware Definitions (Critical)	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Recovery.Error	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Monitor	True	Operations	false	Internal
	Update Antimalware Definitions (Warning)	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Recovery.Warning	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Monitor	True	Operations	false	Internal
	Turn Firewall On	Microsoft.FEP.ProtectedServer.FWStatus.Recovery	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.FWStatus.Monitor	True	Maintenance	false	Internal
	Enable Real-time Protection	Microsoft.FEP.ProtectedServer.RTPStatus.Recovery	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.RTPStatus.Monitor	True	Maintenance	false	Internal
	Restart Computer	Microsoft.FEPS.ProtectedServer.Reboot.Recovery.Warning	Microsoft.FEP.ProtectedServer	Microsoft.FEP.ProtectedServer.PendingAdditionalActions.Monitor	True	Operations	false	Internal

Agent Tasks (11)

	DisplayName	ID	Target	Accessibility	Category	Enabled
	Stop Scan	Microsoft.FEPS.Application.AbortScan.Task	Microsoft.FEP.ProtectedServer	Internal	Maintenance	True
	Turn Windows Firewall Off	Microsoft.FEPS.Application.FirewallOff.Task	Microsoft.FEP.ProtectedServer	Internal	Operations	True
	Turn Windows Firewall On	Microsoft.FEPS.Application.FirewallOn.Task	Microsoft.FEP.ProtectedServer	Internal	Operations	True
	Full Scan	Microsoft.FEPS.Application.FullScan.Task	Microsoft.FEP.ProtectedServer	Public	Maintenance	True
	Disable NIS	Microsoft.FEPS.Application.NISOff.Task	Microsoft.FEP.ProtectedServer	Internal	Operations	True
	Enable NIS	Microsoft.FEPS.Application.NISOn.Task	Microsoft.FEP.ProtectedServer	Public	Operations	True
	Quick Scan	Microsoft.FEPS.Application.QuickScan.Task	Microsoft.FEP.ProtectedServer	Internal	Maintenance	True
	Retrieve Endpoint Settings	Microsoft.FEPS.Application.RetrieveCCSettings.Task	Microsoft.FEP.ProtectedServer	Internal	StateCollection	True
	Disable Real-time Protection	Microsoft.FEPS.Application.RTPOff.Task	Microsoft.FEP.ProtectedServer	Internal	Operations	True
	Enable Real-time Protection	Microsoft.FEPS.Application.RTPOn.Task	Microsoft.FEP.ProtectedServer	Public	Operations	True
	Update Antimalware Definitions	Microsoft.FEPS.Application.UpdateSignatures.Task	Microsoft.FEP.ProtectedServer	Public	Maintenance	True

Console Tasks (1)

	DisplayName	ID	Target	Accessibility	Enabled
	Remote Desktop Connection	Microsoft.FEPS.Application.RemoteDesktop.Task	Microsoft.FEP.ProtectedServer	Internal	True

Folder Items (6)

	DisplayName	ID	FolderName	ElementID
	Dashboard	Microsoft.FEP.Views.Dashboard	Microsoft.FEP.Views	Microsoft.FEP.Views.Dashboard
	Endpoints with FEP	Microsoft.FEP.Views.ProtectedServers	Microsoft.FEP.Views	Microsoft.FEP.Views.ProtectedServers
	Active Alerts	Microsoft.FEP.Views.SecurityAlertsView	Microsoft.FEP.Views	Microsoft.FEP.Views.SecurityAlertsView
	Security Events	Microsoft.FEP.Views.SecurityEventsView	Microsoft.FEP.Views	Microsoft.FEP.Views.SecurityEventsView
	Task Status	Microsoft.FEP.Views.TaskStatus	Microsoft.FEP.Views	Microsoft.FEP.Views.TaskStatus
	Endpoints without FEP	Microsoft.FEP.Views.UnprotectedServers	Microsoft.FEP.Views	Microsoft.FEP.Views.UnprotectedServers

Folders (1)

	DisplayName	ID	ParentFolder	Accessibility
	Forefront Endpoint Protection	Microsoft.FEP.Views	Microsoft.SystemCenter.Monitoring.ViewFolder.Root	Internal

Views (6)

	DisplayName	ID	Target	Type	Accessibility	Visible
	Dashboard	Microsoft.FEP.Views.Dashboard	Microsoft.FEP.ProtectedServersWatcher	Microsoft.SystemCenter.DashboardViewType	Public	True
	Endpoints with FEP	Microsoft.FEP.Views.ProtectedServers	Microsoft.FEP.ProtectedServer	Microsoft.SystemCenter.StateViewType	Public	True
	Active Alerts	Microsoft.FEP.Views.SecurityAlertsView	Microsoft.FEP.ProtectedServersWatcher	Microsoft.SystemCenter.AlertViewType	Public	True
	Security Events	Microsoft.FEP.Views.SecurityEventsView	Microsoft.FEP.ProtectedServer	Microsoft.SystemCenter.EventViewType	Internal	True
	Task Status	Microsoft.FEP.Views.TaskStatus	Microsoft.FEP.ProtectedServer	Microsoft.SystemCenter.TaskStatusViewType	Public	True
	Endpoints without FEP	Microsoft.FEP.Views.UnprotectedServers	Microsoft.FEP.UnprotectedServer	Microsoft.SystemCenter.StateViewType	Public	True