Installing current antivirus signatures corrects an outdated endpoint security state before the device connects to the network. The access restriction is preventive, but updating the signatures is a remediation action. Logging unsuccessful access attempts is detective because it records activity for investigation without correcting the underlying condition. (cisco.com)
Community Discussion