mbrady-cyber mbrady-cyber I apologize for the errors there, but I'm not aware of any known issues that would explain the behavior. Have either of you been able to collect the referenced log files and create a case through Customer Support for an investigation?
Yes, I have opened a case but I have not received any reply back from support after submitting the logs.
Eventually what I see is that the clients will display the following message:
Often, it takes a while for this message to appear on the clients. Normally, the "Protected by an older version of antivirus software" appears in the Central Admin console, not on the clients themselves.
When the client displays the "product is out of date message," I find the product version is as follows:
If I manually initiate "Check for Updates," the AV status will go back to "green" once the new update has been installed.
The strange thing is that the product version is exactly the same after applying the update:
So I think what causes this problem is that the AV has a problem processing an update. Computer goes offline, rebooted, etc. during an update. The update might not be related to an AV version update at all as all of our clients have the same AV version. More likely the update involves a definition update or something like this. If a problem does occur when processing an update, the AV reports back that there is a problem processing the update. Then, the Central Admin interface interprets this "couldn't install a definition" update as "the product version is out of date."
If the client is actually displaying the "product out of date" message, then running the "check update" may fix this issue.
Other times, I've found that manually running the "Check Update" does nothing. Instead, I have to wait until the automatic "check update" process runs a couple times successfully. Then, clients' status changes from "Protected by an older version of antivirus software" to "Antivirus software updated" on their own in the Central Admin console.
In terms of calling support and collecting logs, this process never goes well. I submitted a ticket with logs over a month ago and have not received a response despite repeated attempts to follow-up with them. Moreover, log collection is tricky as we have our "Host Preferences" setup so that no one can make changes to the "Preferences." Thus, the "Enable Debug" logging is greyed out. We really need a better way of collecting log files. Do you have a "log collection" tool that can be run? This might help get support the information that they need.
pcatonoutpost I think I found your case, where there may have been a disconnect between the Support representative. Could you check your email for their logs request, dated 11/13/20 ? If not, simply call back in at your convenience when you have access to one of the affected machines so that we may gather the necessary information for a detailed investigation.
