Checking the version of the AntiVirus Engine and Definition

To ensure that Real-time, Recurring, and Scan Now scans are providing endpoints with the highest level of protection from malicious software, you must have the latest version of AntiVirus engine and definition on both the server and agents.

Agents download the engine and definitions file, used by the AntiVirus module to accurately detect, identify, and efficiently remove threats on endpoints, from the Ivanti Endpoint Security Server upon receiving notification that a newer version was retrieved from the Global Subscription Service (GSS) or a specified location. There are separate files for 32-bit and 64-bit systems. The server polls for engine upgrades and definition updates at regular intervals (by default, every 1 hour).

  1. To check the version of the AntiVirus engine and definition file on the server:
    1. Select Tools > Subscription Updates.
      The Subscription Updates page opens.
    2. Click the Configure button.
      The Subscription Service Configuration dialog opens.
    3. Select the AntiVirus tab.
      The version information is displayed in the AntiVirus engine & definition versions (Server) section.
  2. To check the version of the AntiVirus engine and definition file on an agent:
    1. Select Manage > Endpoints.
      The Manage > Endpoints page opens.
  1. Select the AntiVirus tab.
    The version is displayed in the AV Definition Version column (each row refers to a specific endpoint). You can apply the Last AV Definition Update filter to display only versions of a particular type (Current, Out of date, Error).

Generating an AntiVirus Definition Version Status Report enables reviewing the current versions for an entire network or specific endpoints and groups.

After Completing This Task:

If the version of the AntiVirus definitions is older on the endpoint than on the server, marked with a Warning icon , you should wait for the agent to download the latest definitions and then run a Scan Now (see Using Scan Now). If the problem persists, possible issues include:

  • Endpoint is offline.
  • Agent AntiVirus license has expired.
  • Network configuration problems.
  • Network outages.