Text only | Text with Images

NetXMS Support Forum

English Support => General Support => Topic started by: Dani@M3T on April 03, 2014, 10:10:25 AM

Title: DCIs System.AntiVirus broken
Post by: Dani@M3T on April 03, 2014, 10:10:25 AM
Are the Windows Agent DCIs System.AntiVirus* still broken. If yes, is it possible to fix for next release?

thanks
Dani
Title: Re: DCIs System.AntiVirus broken
Post by: Victor Kirhenshtein on April 09, 2014, 10:51:52 AM
Hi!

It seems to be working on my system:

Code Select

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.Active
1

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.DisplayName
Microsoft Security Essentials

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.UpToDate
1

C:\Source\NetXMS\x64\debug>


I've added additional debug to the agent to determine why it fails. I can provide you with intermediate agent build if you wish to test it.

Best regards,
Victor
Title: Re: DCIs System.AntiVirus broken
Post by: Dani@M3T on April 09, 2014, 01:29:09 PM
I use it for Win2012R2 nodes. When I re-enable my Test-DCI, I get a SYS_DCI_ACTIVE event and in 'Last Values' the value '<< ERROR >>'.

./nxget -e2 -a sha1 -s secret -Z secret 172.16.10.141 system.AntiVirusProduct.Active
500: Internal error

If you can give me the test build for Win_x64, I can test for you.

thanks
Dani

Title: Re: DCIs System.AntiVirus broken
Post by: Victor Kirhenshtein on April 09, 2014, 02:13:58 PM
You can try attached subagent.

Best regards,
Victor
Title: Re: DCIs System.AntiVirus broken
Post by: Dani@M3T on April 09, 2014, 02:38:46 PM
thanks

I replaced the subagent on one node but the same error. For debugging I started the agent with '-D 9'. I send you the logfile by email.

Dani
Title: Re: DCIs System.AntiVirus broken
Post by: Victor Kirhenshtein on April 09, 2014, 03:11:24 PM
Hi!

Can you check with some WMI tool that namespace root\SecurityCenter2 is available and that user agent is running under can access it?

Best regards,
Victor
Title: Re: DCIs System.AntiVirus broken
Post by: Dani@M3T on April 09, 2014, 06:35:54 PM
I'm not a WMI specialist but I tested on command line:
wmic /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName,productState /Format:List

and got a 'name space not found' message.
From a search in the internet: The name space root/SecurityCenter2 is not available on Windows Server (there is no SecurityCenter service)! I installed the NetXMS agent on a Win7 machine and there I got an answer with the DCI.
For System.AntiVirusProduct.Active, result '1' is ok?
Title: Re: DCIs System.AntiVirus broken
Post by: Victor Kirhenshtein on April 09, 2014, 07:10:22 PM
I don't work much with Windows lately, so I miss this fact. Yes, 1 is ok and 0 is not ok (not running or not up to date). I'll check if it is possible to get antivirus and firewall state via WMI on Windows Server.

Best regards,
Victor
Title: Re: DCIs System.AntiVirus broken
Post by: dersonik on April 18, 2016, 06:25:45 PM
The antivirus check still not working in the newest version can you fix this :)
Title: Re: DCIs System.AntiVirus broken
Post by: Tursiops on April 19, 2016, 02:28:10 AM
Windows Server does not have Security Center, hence you can't query this information on servers.
Text only | Text with Images