How to handle VirusScan updates

[Former Member]

Hello,

do i have to make all VirusScan updates by EPO tasks for managed machines?

I recognized that a lot of VirusScans were not updated since a few month under "AutoUpdate" in the VirusScan console.

If so, any suggestions and a "How-To" would be great.

Regards

[Former Member]

Hello @Former Member 

Thanks for your post.

I would like to suggest you to please create a Product Update Task and schedule it for Daily, So by this way task will trigger daily and DAT will get updated everyday.

Please check-in the DAT package in Current Branch.

If you are looking for the VSE patch upgrade in that case process would be same only you need to check-in the VSE Patch Package in ePO Master Repository Current Branch.

If they are not in current branch in that case you need to make changes in the policy and need to set the policy as per the packaged branch.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[Hem]

Hello @ILT ,

Good morning,

just quick clarification, is update failing and machines are not running latest DAT or you are raising that stats (last run time stamp etc) is not updated in VSE console?

By default, there will be default Auto update task which would automatically scheduled to run at 5:00 PM local time. In addition to this, you can always create 'Product update' task, select DAT/engine required components which want to update in 'Product update task'.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[cdinet · Accepted solution]

This might help get you started with setting up a task.

https://docs.mcafee.com/bundle/epolicy-orchestrator-5.10.0-product-guide/page/GUID-2D5C3744-1BC2-42B...

[Former Member]

Hello,

I'm wondering why the default update task isn't running on the machines.

[cdinet]

That can be set by policy.  The VSE general options policy has an option to disable the default autoupdate task.  That might be set there to disable it.  It is better to have a task configured via epo that can be more controllable by schedules, randomization and what gets updated or not.  The default task updates everything, which could inadvertently push out patches that you aren't ready to push out yet.