Appendix: Additional security scanner information

Overwrites the default behavior of the security scanner (scan and repair settings) for only the current security assessment or remediation scan job. The ScanRepairSettings ID is a number value.

Changes the default scan and repair settings for any subsequent security assessment or remediation scan job by writing the scan and repair settings to the device's local registry. Use the exact syntax to the left, with both switches in the command line. The ScanRepairSettings ID is a number value.

NOTE: You can use this option to change the default scan and repair settings for a device without having to do a full agent configuration deployment to the device.

Shows the scanner UI on the end user device.

Shows a Cancel button on the scanner UI that lets the end user cancel the scan.

Timeout value in seconds.

NOTE: If the value is set to -1, then the scanner UI waits for the end user to manually close it.

Identifies which security content type is being scanned for. The number codes for the different security content types are:

0 - vulnerability

1 - spyware

2 - security threat

3 - LANDesk updates

4 - custom definition

5 - blocked application

6 - software updates

7 - driver updates

8 - antivirus

100 - all types

Identifies the security content group being scanned for. This option overrides specific content type parameters, if present.

Enables or disables the autofix feature.

Tells the scanner which group or vulnerability to repair (remediate). You can specify All for vulnerabilities in order to repair all detected vulnerabilities instead of a single vulnerability by its ID.

Removes the specified patch from the patch repository.

Lets you display a text message that prompts the end user.

A string that allows the end user to cancel repair if using a repair prompt.

A timeout value for the repair prompt in seconds. If it's set to -1, then the prompt waits for the end user to close it manually.

A string for the default action for vulscan to take if timeout expires for repair prompt. Acceptable values include start and close.

A string to retrieve the patch or patches needed for repair, without installing them.

Forces peer only download.

Same as /local.

Maximum percentage of bandwidth to use when downloading.

Use this parameter to reboot a machine if needed.

A string that determines vulscan's reboot behavior when repairing. Acceptable values: always, never, or empty (anything else). If anything else, then vulscan will reboot if needed.

A string that displays a text message to the end user in a reboot prompt.

A string that allows the end user to cancel reboot if using a reboot prompt.

Timeout value of reboot prompt in seconds. If set to -1, then the UI waits for the user to close it manually.

A string that determines the action for vulscan to take if timeout value expires for reboot prompt. Acceptable values: reboot, close, snooze.

Number of snoozes. Vulscan decrements each time the user clicks Snooze on the reboot prompt.

Number of seconds for vulscan to sleep between snoozes.

Path to original MSI location.

Username for MSI directory.

Password for MSI directory.

Don't launch vulscan via core tech.

Prevents sleeping during definition scan.

Doesn't get mutex, scans multiple instances.

Don't get a new version of vulscan.

Don't look for msxml.

Same as autofix=false. Overrides autofix settings if present.

Dumps vulnerability data directly from Web service.

Pulls in vulnerability data (from /dump).

Output scan results.

Input scan results.

Overrides log file name.

Identifies core server name.

Removes delta file base information (wipes out application data directory).

Clears all vulnerability scan information.