NetXMS Support Forum

Are the Windows Agent DCIs System.AntiVirus* still broken. If yes, is it possible to fix for next release?

thanks
Dani

Hi!

It seems to be working on my system:


C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.Active
1

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.DisplayName
Microsoft Security Essentials

C:\Source\NetXMS\x64\debug>nxget -e0 127.0.0.1 system.AntiVirusProduct.UpToDate
1

C:\Source\NetXMS\x64\debug>


I've added additional debug to the agent to determine why it fails. I can provide you with intermediate agent build if you wish to test it.

Best regards,
Victor

I use it for Win2012R2 nodes. When I re-enable my Test-DCI, I get a SYS_DCI_ACTIVE event and in 'Last Values' the value '<< ERROR >>'.

./nxget -e2 -a sha1 -s secret -Z secret 172.16.10.141 system.AntiVirusProduct.Active
500: Internal error

If you can give me the test build for Win_x64, I can test for you.

thanks
Dani

You can try attached subagent.

Best regards,
Victor

thanks

I replaced the subagent on one node but the same error. For debugging I started the agent with '-D 9'. I send you the logfile by email.

Dani

Hi!

Can you check with some WMI tool that namespace root\SecurityCenter2 is available and that user agent is running under can access it?

Best regards,
Victor

I'm not a WMI specialist but I tested on command line:
wmic /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName,productState /Format:List

and got a 'name space not found' message.
From a search in the internet: The name space root/SecurityCenter2 is not available on Windows Server (there is no SecurityCenter service)! I installed the NetXMS agent on a Win7 machine and there I got an answer with the DCI.
For System.AntiVirusProduct.Active, result '1' is ok?

I don't work much with Windows lately, so I miss this fact. Yes, 1 is ok and 0 is not ok (not running or not up to date). I'll check if it is possible to get antivirus and firewall state via WMI on Windows Server.

Best regards,
Victor

The antivirus check still not working in the newest version can you fix this

Windows Server does not have Security Center, hence you can't query this information on servers.