> Source: [sk180987](https://support.checkpoint.com/results/sk/sk180987)

# sk180987 - Scan Start\Stop Events have an incorrect Severity status 

| Property | Value |
|----------|-------|
| Solution ID | sk180987 |
| Date Created | 2023-05-15 |
| Last Modified | 2023-05-16 |
| Technical Level | General |
| Products | Security Gateway, Endpoint Security, Check Point Portal |
| Versions | R82.10, R82, R81.20, Cloud, Cloud, E89.X, E88.X |
| OS | Windows |
| Platform | Open Server |

## Symptoms

- * The Anti-Malware logs have an incorrect severity for the detections.
* All Scan start/stop/pause events are shown with the Critical severity status.

## Solution

This is expected behavior for all Endpoint Security clients versions lower than E87.00.   

![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180987/critical202305151541261.png)   

![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180987/sample202305151542573.png)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content