1

Does anyone know why SW is reporting my Offiecscan clients with so many “unknown status”?

av_status.JPG

3 Spice ups
2

Double check the obvious stuff - firewall?

3

Nope, SW is reporting this from clients both in the same subnet as well as different subnets. Not a hardware firewall issue and Windows firewalls are turned off while local on the domain.

4

Interesting, I have Trend Micro Officescan A/V and the widget on my dashboard is doing something similar.

The list of “Up to Date” computers is just my desktops and laptops (except the Spiceworks host). The “Unknown Status” computers are the same list of desktops and laptops but with the servers added in as well.

My Spiceworks host is placed in the “Out of Date” section, but it did that in 4.7 as well.

5

TimJ42 wrote:

Interesting, I have Trend Micro Officescan A/V and the widget on my dashboard is doing something similar.

The list of “Up to Date” computers is just my desktops and laptops (except the Spiceworks host). The “Unknown Status” computers are the same list of desktops and laptops but with the servers added in as well.

My Spiceworks host is placed in the “Out of Date” section, but it did that in 4.7 as well.

It seems to me that SW is correctly reporting the OfficeScan program version (10). I don’t know if the unknown is to represent the client pattern file version and if is up to date or not…

6

Did a bit of digging into my install. A WMI query on “AntiVirusProduct” only returns one A/V product, Trend AntiVirus.

Checking the complete profile for a laptop or desktop shows two entries under AntiVirus, Trend Micro OfficeScan Client and Trend Micro OfficeScan AnitVirus. The former doesn’t exist in WMI, so the version result is unknown. The latter returns the WMI value, 10.0. Servers don’t have the WMI SecurityCenter section, so they only display Trend Micro OfficeScan Client in the complete profile.

That looks like it matches what I see in the A/V widget. Not sure why SW is picking up two A/V installs when only one in is WMI.

7

I’m having exactly the same problems with Trend Micro and SW.

I would really like to get this fixed as at this point it’s pretty useless report for us. and i would really like to see the status of our Antivirus at glance

AVStatus.jpg

8

I am also suffering from this (glad I’m not the only one!).

I’m getting trend listed twice on config tabs as well. Local windows Firewall is disabled and all machines are one the same network.

Very strange.

2_X_AV.png

9

This will be because officescan isn’t reporting back to the windows security center correctly.

10

akp982 wrote:

This will be because officescan isn’t reporting back to the windows security center correctly.

If that was the case, wouldn’t all my workstations be getting unprotected warnings poping up from Security Center? I am not.

11

Here’s what WMIC is saying about my antivirus status… just run this on command prompt:

C:>WMIC /Node:localhost /Namespace:\root\SecurityCenter2 Path AntiVirusProduct Get displayName,productState /Format:List

displayName=Trend Micro OfficeScan Antivirus
productState=266240

And on the picture you can see how spiceworks 5.0.60041 has detected it twice!

spice-trend.jpg

12

If not already done, follow at least #1 - #3 of this how-to: Troubleshooting Spiceworks Inventory Inconsistencies - Spiceworks …

BTW: SW 6.0.60600 has fixed smoe issues with AV detecting at W2k3 - See More Info

13

For any other OfficeScan admins out there with this same issue, breathe a sigh of relief. Help is on it’s way! After working with both Marcelo and Ben at Spiceworks, Ben has identified the issue. Spiceworks is working on a fix and should have it in beta soon.

Look for beta version to be released as early as next week…

+1 to Ben Brookshire

+1 to Marcelo Alcazar

14

bytesnake wrote:

If not already done, follow at least #1 - #3 of this how-to: Troubleshooting Spiceworks Inventory Inconsistencies - Spiceworks …

BTW: SW 6.0.60600 has fixed smoe issues with AV detecting at W2k3 - See More Info

holy **** when did 6.0 come out :wink:

15

lol…ya I think the next beta release will be 5.1