Antivirus check getting fail in F5 APM policy

Turn up APM logging to debug and try again. Once it fails look in the access logs. You should a set of variables under session.check_software.av.last.* that'll be the collection of AV data for that session.