Remiediate Antivirus on devices that fail APM AV policy check

I am implementing APM for external device connections one of the checks is Antivirus. If the device is a corporate device I want to automate the updating of the antivirus files as much as is possible...