For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Brander_27's avatar
Eric_Brander_27
Icon for Nimbostratus rankNimbostratus
May 03, 2012

Microsoft Security Essentials suddenly not passing FirePass AV check

I've updated to the latest HF for our FirePass but it still doesn't recognize Microsoft's free AV as a valid AV solution. This has been working for ages and suddenly stopped so I suspect it's an updat...
BIG-IP Access Policy Manager (APM)
remote access
security
Mike_Ho's avatar
Mike_Ho
Icon for Cirrus rankCirrus
May 14, 2012
Looking for feedback from others affected. I installed HF-386082-1 and while it detects Microsoft Security Essentials it cannot seem to identify the age of the database. Example:

 

 

\Session Variable%session.detected_av.av_2.agent_id%= ' OPSWAT_AV '

 

Session Variable%session.detected_av.av_2.data_version%= ' 1.0 '

 

Session Variable%session.detected_av.av_2.protect%= ' '

 

Session Variable%session.detected_av.av_2.update%= ' '

 

Session Variable%session.detected_av.av_2.need_update%= ' '

 

Session Variable%session.detected_av.av_2.expression_id%= ' '

 

Session Variable%session.detected_av.av_2.name%= ' MicrosoftAV '

 

Session Variable%session.detected_av.av_2.features%= ' 1 '

 

Session Variable%session.detected_av.av_2.engine_version%= ' 1.1.8304.0 '

 

Session Variable%session.detected_av.av_2.database_version%= ' 1.125.1774.0 '

 

Session Variable%session.detected_av.av_2.database_signature%= ' '

 

Session Variable%session.detected_av.av_2.database_time%= ' undefined '

 

Session Variable%session.detected_av.av_2.monitor%= ' enabled '

 

Session Variable%session.detected_av.av_2.last_scan%= ' 2012.05.14 03:52:26 '

 

Session Variable%session.detected_av.av_2.gui_state%= ' hidden '

 

Session Variable%session.detected_av.av_2.description%= ' Microsoft%20Security%20Essentials '

 

Session Variable%session.detected_av.av_2.database_age%= ' unknown '

 

Session Variable%session.detected_av.av_2.r_log_0%= ' Criteria failed - older than 10 days: unknown '

 

Session Variable%session.detected_av.av_2.r_log_1%= ' Criteria failed - older than 10 days: unknown '

 

Session Variable%session.detected_av.av_2.r_log_2%= ' Criteria failed - older than 10 days: unknown '

 

 

I checked a test box and its definitions were last updated today (5/14) at 0152 PDT.