IBM Tivoli and Cisco - Manual (Page 440)

422 Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
Two additional files are created in the $BINDIR/tcmremed/work directory.
These are:
TCRNavScan.spd Software package definition file. This is a text meta file
containing all of the package configuration information.
TCRNavScan.spb Resulting software package block binary file. This file
is being published on the Web page and is
downloaded to the client workstation during the
remediation process.
6. Now you are ready to test the remediation process. On a client workstation,
which indicates to have the latest antivirus scan violation or warning, as
shown on Figure 8-38, click the Fix Now button.
Figure 8-38 Remediation handler interface with the warning
Important: These .spd and .spb files were created as a side effect of
running the sputil.sh utility. Editing these files will not change the content of
the package posted on the Web Gateway and used during remediation.