Forum Discussion

James_P_133560's avatar
James_P_133560
Icon for Nimbostratus rankNimbostratus
Jul 17, 2014

APM Antivirus (EPSEC/OPSWAT) checking

Hi all,   First post, long-time crawler.   We are currently doing a proof of concept using the built-in APM client-side antivirus checking (EPSEC/OPSWAT) for compliance. I've got everything se...
BIG-IP Access Policy Manager (APM)
design
opswat
security
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Jul 17, 2014

Hi James,

 

The date is in epoch and you can use a site like http://www.epochconverter.com/ to find out the human readable time.

 

Kaspersky database dated Apr 20, 2014 gives db_time=1405626209 (Human Time: Thu, 17 Jul 2014 19:43:29 GMT

 

SEP database dated Jul 17, 2014 gives db_time=1405569600 (Human Time: Thu, 17 Jul 2014 04:00:00 GMT)

 

Are you sure the Kaspersky version is dated 4/20/14? Can you post all the session variables from the AV check so we can review?

 

I wouldn't recommend using an iRule to enforce the db age as that is what the product is supposed to do. Before you do that lets see if we can shed some light on the real issue.

 

Regards, Seth