Doubt about Endpoint Security Behaviour

[Jesus_Cano]

Hello community,

we have a behaviour on our Endpoint Security platform thatI'm not sure if it's normal or not.

We have the example of our server " AMPLUSPRO"

1. On the following image. We find in Overview that "AMPLUSPRO" communicated with the manager at 11:08:

2. We go to the details of the server and see that it comunicates but also that the last update of the databse was Friday at 01:36

3. We forced the malware DB from the manager

4. We go to "push operations" and see that the order appears:

5. A few moment later we see that " AMPLUSPR" updated correctly

6. But, comming back to Overview we see that even after that the malware database wasn't been updated.

7. If we log in to the server, we se that the database it also upgrades. It seems that until you log in to the server, the database is not updated.

This is a normal behaviour?

Regards,

Aitor