DCIs System.AntiVirus broken

[user54119]

Are the Windows Agent DCIs System.AntiVirus* still broken. If yes, is it possible to fix for next release?

thanks
Dani

[victor]

Hi!

It seems to be working on my system:

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.Active
1

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.DisplayName
Microsoft Security Essentials

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.UpToDate
1

C:\Source\NetXMS\x64\debug>

I've added additional debug to the agent to determine why it fails. I can provide you with intermediate agent build if you wish to test it.

Best regards,
Victor

[user54119]

I use it for Win2012R2 nodes. When I re-enable my Test-DCI, I get a SYS_DCI_ACTIVE event and in 'Last Values' the value '<< ERROR >>'.

./nxget -e2 -a sha1 -s secret -Z secret 172.16.10.141 system.AntiVirusProduct.Active
500: Internal error

If you can give me the test build for Win_x64, I can test for you.

thanks
Dani

[victor]

You can try attached subagent.

Best regards,
Victor

---

wmi.nsm

[user54119]

thanks

I replaced the subagent on one node but the same error. For debugging I started the agent with '-D 9'. I send you the logfile by email.

Dani

[victor]

Hi!

Can you check with some WMI tool that namespace root\SecurityCenter2 is available and that user agent is running under can access it?

Best regards,
Victor

[user54119]

I'm not a WMI specialist but I tested on command line:
wmic /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName,productState /Format:List

and got a 'name space not found' message.
From a search in the internet: The name space root/SecurityCenter2 is not available on Windows Server (there is no SecurityCenter service)! I installed the NetXMS agent on a Win7 machine and there I got an answer with the DCI.
For System.AntiVirusProduct.Active, result '1' is ok?

[victor]

I don't work much with Windows lately, so I miss this fact. Yes, 1 is ok and 0 is not ok (not running or not up to date). I'll check if it is possible to get antivirus and firewall state via WMI on Windows Server.

Best regards,
Victor

[dersonik]

The antivirus check still not working in the newest version can you fix this

[Tursiops]

Windows Server does not have Security Center, hence you can't query this information on servers.