Anti-Virus not reporting in TNI

[mswann]

Hello,

On several recent scans, I find that some machines report NO anti virus present.

Yet when I actually visit that machine to check on the av....it is present, updated and running.

 

Can you assist with this issue?

 

This is on machines where av is pushed from a server so the local install should be default.

 

Thanks in advance for any hints on this one.

Marianne

[Support]

Please provide us with the information on the affected computers: Windows version and antivirus title and version.

[mswann]

Please provide us with the information on the affected computers: Windows version and antivirus title and version.

 

Thank you.....here is the info:

 

XP Pro SP3 running AVG Network Edition vers. 8.5

 

on a different pc:

 

XP Pro SP3 running Symantec Corporate Edition Vers. 10.0

[monsta]

Hello!

 

Same here:

Operating Systems: XP Pro, Vista Business, Server2008x64, Win7x64

Antivirus: Symantec Endpoint Protection 11.0.5002.333

 

//monsta

[Support]

Detection of antiviruses is not supported on server systems. You can find more information in our FAQ: https://docs.softinventive.com/tni/faq/program-usage-questions/#No-antivirus-installed
As for the other systems, it is possible that the antivirus does not support reporting of its status via WMI. Can you please check if this antivirus is displayed in the Windows Security Center (for example on Windows XP SP3)?

[aseadmin]

Hello.

 

We have the same problem:

 

Operation system: Vista Business SP2

Antivirus: Kaspersky Lab 6.0.4.1212

[Support]

aseadmin,

What type of product do you have exactly? For example: Kaspersky Work Space Security, or Kaspersky Antivirus, or Internet Security, etc.

[aseadmin]

aseadmin,

What type of product do you have exactly?

 

Antivirus: Kaspersky 6.0 for Windows Workstations MP4 ver. 6.0.4.1212 (Products for Business: Kaspersky Business Space Security)

[Support]

Do you have Windows Security Center enabled on that computer? Is this antivirus displayed there?

[mswann]

Do you have Windows Security Center enabled on that computer? Is this antivirus displayed there?

 

Hello.....from my previous post, I can say that antivirus is displayed in Security Center on the XP Pro SP3 with Symantec Corporate Edition.

 

I cannot verify that the AVG Network Edition is displayed in Security Center.

 

"Thank you.....here is the info:

 

XP Pro SP3 running AVG Network Edition vers. 8.5

 

on a different pc:

 

XP Pro SP3 running Symantec Corporate Edition Vers. 10.0"

 

Thanks,

Marianne

[Support]

We will check this issue once again, and probably will be able to provide a fix in the next update.

[Hemo2]

I've been testing/reviewing TNI in demo mode and thought I would add my two cents on what I found initially with TNI and Symantec Endpoint Protection.

 

I am looking in TNI under the "Custom Report" and added the "Antivirus name" and "Antivirus status" columns.

 

 

Workstation with Windows XP Professional w/SP3 and Symantec Endpoint Protection v11.0.5002.333

(Please note, on our XP machines under the Security Center, we "turned off" the recommendations for antivirus and selected the option that "we will monitor it ourself".)

--------------------------------------------------

TNI properly reports "Symantec Endpoint Protection" for the antivirus name.

TNI properly reports "up to date, enabled" for the antivirus status.

 

Workstation with Windows 7 Professional and Symantec Endpoint Protection v11.0.5002.333

(Note, SEP does show up under the Control Panel - Action Center - Security list and properly shows it's status there under the 'virus protection' section.)

--------------------------------------------------

TNI shows a blank field (nothing) for the antivirus name.

TNI shows "not found" for the antivirus status.

[Support]

We're glad that it works fine for Windows XP. As for Windows 7, Microsoft has changed the way antiviruses should report their status, and we will add full support for this in the new version of the program.

[shaq]

I have scanned client workstations with TNI few times today using 'Auto Deployed agent(SMB) & also Agent Free (RPC/DCOM) connection method. But 12 workstations are displaying after scanning that 'Antivirus Not Found'. I have attached (see attachement) two screen shots of OS and Mcafee information of one of the 12 client machine.

I have checked the 'File & Printer Sharing' (TCP Port: 139,445,137,138) and it is checked on.

I also have uninstalled Mcafee & redeployed from server and in the client workstation, Mcafee displaying fine (see shot) in the client machine but TNI is still displaying 'Antivirus found' after scanning.

 

Your help in this matter would be appreciated.

 

Thanks

 

Shaq

[Support]

Is this antivirus displayed properly in Windows Security Center on those computers? If not, TNI is not able to detect it.

[shaq]

I have attached a link to view the screen shot of client workstation security center display.

 

Mcafee have been deployed from network servers to manage all of our client workstations. TNI is not reporting antivirus on 12 machines only. The security center display (screen shot image) of the rest of the client machines are displaying the same way and TNI is reporting Antivirus presence except 12 of the machines as I mentioned.

Question arises how TNI is reporting other machines except 12?

Any suggestions?

 

Thanks

[Support]

TNI detects antiviruses using their Windows Management Instrumentation (WMI) interface. It is possible that it was not set up properly on these computers. However if all the computers are set up in the same way (both the Security Center settings and antivirus deployment), unfortunately I'm not able to locate the reason for this.

You can use the following script (run it locally on one of the problematic computers) to see if the antivirus is really registered in WMI or not. Copy this code to a text file, give it a "vbs" extension and run:

Set wbemServices = GetObject("winmgmts:\\.\root\SecurityCenter")
Set wbemObjectSet = wbemServices.InstancesOf("AntiVirusProduct")
For Each wbemObject In wbemObjectSet
   WScript.Echo "Antivirus name: " & wbemObject.displayName
Next

[shaq]

I will run the script and give you update.

 

I appreciate your help

 

Thanks