It runs on either Windows NT or 2000. This also provides the ability to push configuration settings and virus definition file updates to the desktops that it manages. Infected items are isolated, and forwarded to the Central Quarantine. A new virus definition can then be sent to the customer. Support is important and Symantec have worked particularly hard in this area.
Corporate support is now completely separate from the support to single users.
Using heuristics, Symantec's Bloodhound technology identifies the unknown virus or malicious code. It then checks to see if there are any macros attached to files, and what the behaviour patterns are, before it decides if it is infected or not. This provides real-time protection, so that if suspicious activity is encountered by Bloodhound when a file is being opened it will not only detect it but clean it as well. Once it has been forwarded on to SARC for analysis a new definition can be sent to the customer without delay. What this technology accomplishes is the ability to update scanning engines and provide other updates without the need to reinstall, re-deploy or reboot.