Last Scan Age

Microsoft.SCEP.Linux.ScanAge.Monitor (UnitMonitor)

This monitor detects computers that have have not performed a scan in the past seven days.

Knowledge Base article:

Summary

It is recommended that clients should perform a weekly scheduled scan.

Causes

The root cause for this condition is the misconfiguration of scheduled scan.

Resolutions

You can perform a quick scan or full scan. It is also advised to schedule a weekly full scan by changing the deployed policy, or by changing the scan configuration locally on the client computer.

Element properties:

Target	Microsoft.SCEP.Linux.ProtectedServer
Parent Monitor	Microsoft.SCEP.Linux.ProtectedServer.Agregate.Monitor
Category	SecurityHealth
Enabled	True
Alert Generate	False
Alert Auto Resolve	True
Monitor Type	Microsoft.SCEP.Linux.ScanAge.MonitorType
Remotable	True
Accessibility	Public
RunAs	Default

Source Code:

<UnitMonitor ID="Microsoft.SCEP.Linux.ScanAge.Monitor" Accessibility="Public" Enabled="true" Target="SCEPLinuxLibrary!Microsoft.SCEP.Linux.ProtectedServer" ParentMonitorID="Microsoft.SCEP.Linux.ProtectedServer.Agregate.Monitor" Remotable="true" Priority="Normal" TypeID="SCEPLinuxLibrary!Microsoft.SCEP.Linux.ScanAge.MonitorType" ConfirmDelivery="true">

  <Category>SecurityHealth</Category>

  <OperationalStates>

    <OperationalState ID="UIGeneratedOpStateId39e0b79780c24171b908c16aef7de5aa" MonitorTypeStateID="Healthy" HealthState="Success"/>

    <OperationalState ID="UIGeneratedOpStateId31fcb2a7c8d646f7ad1a0daa7b0a1cfc" MonitorTypeStateID="Warning" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <Interval>28800</Interval>

    <TargetSystem>$Target/Host/Property[Type="Unix!Microsoft.Unix.Computer"]/NetworkName$</TargetSystem>

    <MaxScanAge>7</MaxScanAge>

  </Configuration>

</UnitMonitor>