topic Re: Anti Malware and Anti Bot update interval from Endpoint Server in Endpoint

Anti Malware and Anti Bot update interval from Endpoint Server

nagaraja_cs — Wed, 29 Apr 2020 15:23:11 GMT

Hi Team,

What is the interval of Anti Malware signature update from Endpoint Server and where we can set this parameter ?

Re: Anti Malware and Anti Bot update interval from Endpoint Server

nagaraja_cs — Thu, 30 Apr 2020 03:25:05 GMT

Hi Team,

Is there any information on this ?

It is bit urgent.

Re: Anti Malware and Anti Bot update interval from Endpoint Server

nagaraja_cs — Thu, 30 Apr 2020 13:18:39 GMT

Hi Team,

There should be some setting for this.

I want to understand it,we are stucked with Audit team.

Re: Anti Malware and Anti Bot update interval from Endpoint Server

Chris_Atkinson — Thu, 30 Apr 2020 13:25:54 GMT

4 hours is the default as outlined in the Endpoint Management admin guide.

Please refer:

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_EndpointSecurity_AdminGuide/SignaturesUpdate.html

Re: Anti Malware and Anti Bot update interval from Endpoint Server

Chris_Atkinson — Thu, 30 Apr 2020 13:27:59 GMT

@PhoneBoy please move this to the Endpoint area 🙂

Re: Anti Malware and Anti Bot update interval from Endpoint Server

nagaraja_cs — Thu, 30 Apr 2020 13:34:45 GMT

Hi Chris,

4 hours is the update interval from Endpoint Client to Endpoint Server.

Endpoint Client will request for Anti Malware update every 4 hrs.

But how frequent the Endpoint Server will send request to Check Point Cloud update server for the downloading the updates like Anti Malware,Anti Bot,Application Control and URL Filtering ?

Re: Anti Malware and Anti Bot update interval from Endpoint Server

nagaraja_cs — Tue, 07 Jul 2020 12:01:26 GMT

Hi Guys,

Is there any information on this ?

Re: Anti Malware and Anti Bot update interval from Endpoint Server

MikeB — Tue, 07 Jul 2020 15:30:32 GMT

As far as I know Endpoint Server update interval for Anti-Malware is 30 minutes.
The Endpoint Client is 4 hours by default (but is configurable in the policy)

For anti-bot, App Control and URL Filtering I understand that the endpoint client consults ThreatCloud directly (If offline signatures in the client doesn’t find a match)

Re: Anti Malware and Anti Bot update interval from Endpoint Server

laiju — Tue, 01 Dec 2020 08:38:51 GMT

Hi Mike,

According to the admin guides it refers to the same but when Endpoint server is updating Anti-Malware signatures from central Malware definition server is not referred anywhere. We have an issue in a client in which we may require to change the update time from 12 noon to midnight but unable to find an option for the same. If someone could advise on the same which can help us.

Thanks in advance.

Cheers!