Forum Discussion
Anzine321
Altocumulus
Altocumulussetting update antivirus apm
hi
How to check antivirus update version on apm, i want to makesurevthe setting if client have older antivirus should be automatically or no?
thanks
- Lucas_Thompson
Employee
Here's an article about how to check the version:
https://my.f5.com/manage/s/article/K14207
Here's an article about how to update it:
https://my.f5.com/manage/s/article/K48955220
Anzine321hi
Thanks for information
Is that mean antivirus base on epsec list ? for example client connect to apm and have older version and the client should upgrade version bevore access to apm ?
- zamroni777
Nacreous
the opswat epsec is basically plugin that enables apm client app to read antivirus status.
therefore, epsec cannot force the av autoupdate.if you are using enterprise av, usually the auto update is controlled by policy.
i suggest you set it to everyday or less because av signature is updated daily nowadays.
and allow clients to download the update from internet in addition to dowload from intranet av servers.
- Aswin_mk
Cumulonimbus
You can use above KB and below article - Endpoint inspection | BIG-IP Edge Client operations guide (f5.com)
when CLIENTSSL_HANDSHAKE {
# Placeholder for checking client's antivirus status
# You would need to implement a way to get the client's antivirus status
set antivirus_status [HTTP::header "X-Client-Antivirus-Status"]if { $antivirus_status eq "outdated" } {
reject
}
}also you can try this in lab or sanbox.
