In PCS 9.1R12, You can define the Integrity Check Tool to scan periodically
or through scheduled
scan. Go to System > Configuration > Security > Miscellaneous
- It performs the Integrity check in the file system every 1 hour, 2 hours, 6 hours, 12 hours, 24 hours are per the below screenshot.
- It performs Integrity check in the file system as per administrator preferred set timings.
If any new files, you can observe this in the event logs.
Go to System > Logs/Monitoring > Event Logs
If any new detected files observed in the event logs, Please go to the below section and download the scanner snapshot and provide to Ivanti/Pulse TAC support.Go to Maintenance > Troubleshooting > System Snapshot.
Note: For filtering Integrity Tool Scan Start
, newly detected files
use the below ID's to filter in the event logs section.id='SYS32039' - Integrity Checker Failed: Detection 1 new files!id='SYS32087' - Integrity Checker Tool: Integrity Scan Started!id='SYS32088' - Integrity Checker Tool: Integrity Scan Finished!Recommendation:-
In the event logs, if you observed Critical id='SYS32039' immediately open a support case and take the device offline and share the scanner snapshot file to Ivanti/Pulse TAC support to identify the whether is False.