Endpoint Compliance + unsupported anti-virus = Compliant?

[StackCap43382]

I just received confirmation from TAC that in the EP Compliance blade the AV check will return compliant if no supported AV is detected.

I've escalated this as other vendors we can set say 2 compliant AVs and a return of 0 is a connection reject.

What's the point of an AV check if the user can just uninstall it to get access?

[Chris_Atkinson]

Understand the use case but unfamiliar with the restriction, please also escalate it with your local SE as appropriate.

For understanding is this a BYOD environment or are there other restrictions preventing the systems being locked down further in terms of uninstall privileges etc?

[StackCap43382]

Hi Chris,

Already escalated.

It's to enforce compliance of 3rd party vendor devices connecting to the estate so exactly the same use-case as BYOD you mentioned. 

[StackCap43382 · Accepted solution]

R&D Confirmed it was a bug in the MAC Endpoint client. A new version will be released.

New behaviour will be restricted when non-supported AV is present.