topic Re: Endpoint Compliance + unsupported anti-virus = Compliant? in Endpoint

Endpoint Compliance + unsupported anti-virus = Compliant?

StackCap43382 — Mon, 28 Nov 2022 10:04:43 GMT

I just received confirmation from TAC that in the EP Compliance blade the AV check will return compliant if no supported AV is detected.

I've escalated this as other vendors we can set say 2 compliant AVs and a return of 0 is a connection reject.

What's the point of an AV check if the user can just uninstall it to get access?

Re: Endpoint Compliance + unsupported anti-virus = Compliant?

Chris_Atkinson — Mon, 28 Nov 2022 13:56:35 GMT

Understand the use case but unfamiliar with the restriction, please also escalate it with your local SE as appropriate.

For understanding is this a BYOD environment or are there other restrictions preventing the systems being locked down further in terms of uninstall privileges etc?

Re: Endpoint Compliance + unsupported anti-virus = Compliant?

StackCap43382 — Mon, 28 Nov 2022 14:01:04 GMT

Hi Chris,

Already escalated.

It's to enforce compliance of 3rd party vendor devices connecting to the estate so exactly the same use-case as BYOD you mentioned.

Re: Endpoint Compliance + unsupported anti-virus = Compliant?

StackCap43382 — Fri, 13 Jan 2023 11:43:30 GMT

R&D Confirmed it was a bug in the MAC Endpoint client. A new version will be released.

New behaviour will be restricted when non-supported AV is present.