Forum Discussion

GrantP_378315's avatar
GrantP_378315
Icon for Nimbostratus rankNimbostratus
Dec 03, 2018

Big IP APM Posture Check fail

Big IP APM Posture Check fail

 

Logging onto the client with the domain user as normal but the posture check fails with the message: "Your client’s Anti-Virus does not meet the policy, please use a device with a suitable Anti-Virus client or check you Anti-Virus policy is up to date with updates."

 

However, as a test I created a local user on the same client and if i run the browser as that user (right-click run-as) then the AV policy check passes

 

I've run the F5 OPSWAT OESIS Diagnose tool on the client for both the failing domain user and the succeeding local user and there is no obvious difference in the log output

 

However in F5WinInfo log viewer there is a definite difference. The failing line in the logterminal.txt says:

 

2018-12-03,11:26:40:341, 10108,13940,OesisInspector, 1, \ProductFinder.h, 188, ProductFinder:Run(), Exception occurred. Error=-30 - Not supported - OESIS_InvokeMethod(PRODUCT_ID__GENERIC, SECI_OESISCORE, MID_OESIS_CORE_FINDINSTALLEDPRODUCTSIMPLEMENTINGINTERFACE, L"", &interfaceToFind, &basicProductsInfo),result=error=-30 - Not supported - OESIS_InvokeMethod(PRODUCT_ID__GENERIC, SECI_OESISCORE, MID_OESIS_CORE_FINDINSTALLEDPRODUCTSIMPLEMENTINGINTERFACE, L"", &interfaceToFind, &basicProductsInfo)

 

Info 2018-12-03 11:26:40:344 OesisInspector \ProductFinder.h, ProductFinder:Run(), leave (check failed)

 

But when I run the browser as the local user, this line does not appear and the AV checks proceed as normal, ending with:

 

Info 2018-12-03 11:25:44:741 OesisInspector \ProductFinder.h, ProductFinder:Run(), leave (check passed)

 

Any ideas why the check is failing for the domain user when the AV is clearly not the issue?

 

2 Replies

    • GrantP_378315's avatar
      GrantP_378315
      Icon for Nimbostratus rankNimbostratus

      Didn't solve it as such, but the issue is a corrupted windows profile.

       

      The option of rebuilding the profile was too onerous, so for now I have a Windows batch file that launches the browser as the local user I set up and that works