Cisco AnyConnect Host Scan AV Force Update

[sr2290723]

Hi,

I am doing a VPN posture testing using Cisco AnyConnect 4.5 on ASA 5520, using HostScan 4.3. One of the requirement is to enable automatic AV definition update if the AV definition is not updated for the last 7 days. We are using Symantec Endpoint Protection 12.x and 14.x

I have checked the Force Virus Definitions Update option in ASDM.

So far, the endpoint assessment is doing great. Once the endpoint do not meet the requirement, a message will appear accordingly. However, I think the force virus definition update is working, because I didn't see any LiveUpdate session triggered, nor I saw anything in the logs.

Any suggestion ?

Thanks,

Wiyandi

[sr2290723]

I found the following statement in ISE Posture, but likely related to my issue :

Because of architectural changes in Symantec products, ISE posture cannot support remediation from Symantec AV 12.1.x and onwards.

Can someone confirm this ?