Forum Discussion

Anzine321's avatar
Anzine321
Icon for Altocumulus rankAltocumulus
Jul 09, 2024

setting update antivirus apm

hi

How to check antivirus update version on apm, i want to makesurevthe setting if client have older antivirus should be automatically or no?

 

thanks

    • Anzine321's avatar
      Anzine321
      Icon for Altocumulus rankAltocumulus

      hi

      Thanks for information

      Is that mean antivirus base on epsec list ? for example client connect to apm and have older version and the client should upgrade version bevore access to apm ?

      • zamroni777's avatar
        zamroni777
        Icon for Nacreous rankNacreous

        the opswat epsec is basically plugin that enables apm client app to read antivirus status.
        therefore, epsec cannot force the av autoupdate.

        if you are using enterprise av, usually the auto update is controlled by policy.
        i suggest you set it to everyday or less because av signature is updated daily nowadays.
        and allow clients to download the update from internet in addition to dowload from intranet av servers.

  • You can use above KB and below article - Endpoint inspection | BIG-IP Edge Client operations guide (f5.com)

     

    when CLIENTSSL_HANDSHAKE {
        # Placeholder for checking client's antivirus status
        # You would need to implement a way to get the client's antivirus status
        set antivirus_status [HTTP::header "X-Client-Antivirus-Status"]

        if { $antivirus_status eq "outdated" } {
            reject
        }
    }

    also you can try this in lab or sanbox.