Collecting Antivirus Software Information
=========================================

Policy Server communicates with the Agent to collect antivirus software
information that is installed on your Windows devices.

These antiviruses can also be detected via Agentless WMI query.
See: :doc:`/monitoring/network-nodes/wmi-info-scan` 

List of Supported Antivirus
---------------------------

Check all Antivirus supported with Genian NAC by version.

+---------------+------------------------------------+---------------+
|Vendor         |Product                             |Genian Version |
+===============+====================================+===============+
|Ahnlab         |AhnLab V3 Endpoint Security         |3.5.0          |
+---------------+------------------------------------+---------------+
|Ahnlab         |AhnLab V3 Internet Security         |3.5.0          |
+---------------+------------------------------------+---------------+
|Ahnlab         |AhnLab V3 Net for Windows Server    |3.5.0          |
+---------------+------------------------------------+---------------+
|ESTSecurity    |Alyac Enterprise                    |5.0.3          |
+---------------+------------------------------------+---------------+
|ESTSecurity    |Estsecurity AIYak V2 V3             |3.5.0          |
+---------------+------------------------------------+---------------+
|Hauri          |ViRobot                             |5.0.3          |
+---------------+------------------------------------+---------------+
|Hauri          |Virobot Desktop                     |5.0.3          |
+---------------+------------------------------------+---------------+
|Hauri          |ViRobot Security 1.0                |5.0.59         |
+---------------+------------------------------------+---------------+
|INCA           |nProtect Anti-Virus/Spyware         |5.0.3          |
+---------------+------------------------------------+---------------+
|SGA Solution   |VirusChaser                         |5.0.3          |
+---------------+------------------------------------+---------------+
|Avira          |Internet Security Suite             |5.0.3          |
+---------------+------------------------------------+---------------+
|Avira          |Avira Antivirus Pro V15             |5.0.3          |
+---------------+------------------------------------+---------------+
|Avira          |Avira Endpoint Security V15         |5.0.3          |
+---------------+------------------------------------+---------------+
|Avira          |Avira Free Antivirus V15            |5.0.3          |
+---------------+------------------------------------+---------------+
|BitDefender    |Bitdefender Antivirus Plus          |5.0.14         |
+---------------+------------------------------------+---------------+
|BitDefender    |Bitdefender Internet Security       |5.0.14         |
+---------------+------------------------------------+---------------+
|BitDefender    |Bitdefender Total Security          |5.0.14         |
+---------------+------------------------------------+---------------+
|CrowdStrike    |CrowdStrike FALCON Sensor           |5.0.29         |
+---------------+------------------------------------+---------------+
|Cylance        |CylancePROTECT                      |5.0.24         |
+---------------+------------------------------------+---------------+
|ESET           |ESET Endpoint Security              |5.0.3          |
+---------------+------------------------------------+---------------+
|ESET           |ESET Internet Security              |5.0.3          |
+---------------+------------------------------------+---------------+
|ESET           |ESET Smart Security                 |5.0.3          |
+---------------+------------------------------------+---------------+
|ESET           |ESET NOD32 Antivirus                |5.0.3          |
+---------------+------------------------------------+---------------+
|F-Secure       |F-Secure Anti-Virus                 |5.0.15         |
+---------------+------------------------------------+---------------+
|Kaspersky      |Antivirus                           |5.0.3          |
+---------------+------------------------------------+---------------+
|Kaspersky      |Kaspersky Endpoint Security         |3.5.0          |
+---------------+------------------------------------+---------------+
|McAfee         |McAfee VirusScan Enterprise         |4.0.23/3.5.19  |
+---------------+------------------------------------+---------------+
|McAfee         |McAfee Total Procetion              |5.0.24         |
+---------------+------------------------------------+---------------+
|McAfee         |McAfee Endpoint Security            |5.0.24         |
+---------------+------------------------------------+---------------+
|Microsoft      |MS Forefront                        |4.0.7/3.5.1    |
+---------------+------------------------------------+---------------+
|Microsoft      |MS Security Essentials              |5.0.3          |
+---------------+------------------------------------+---------------+
|Microsoft      |MS System Center                    |5.0.3          |
+---------------+------------------------------------+---------------+
|Microsoft      |Windows Defender                    |4.0.14         |
+---------------+------------------------------------+---------------+
|Panda Security |Panda Endpoint Protection Plus      |5.0.30         |
+---------------+------------------------------------+---------------+
|Sophos         |Endpoint                            |5.0.17         |
+---------------+------------------------------------+---------------+
|Sophos         |Home                                |5.0.17         |
+---------------+------------------------------------+---------------+
|Symantec       |Symantec Endpoint Protection        |4.0.2/3.5.0    |
+---------------+------------------------------------+---------------+
|Trend Micro    |OfficeScan                          |3.5.0          |
+---------------+------------------------------------+---------------+
|Trend Micro    |APex One                            |5.0.42         |
+---------------+------------------------------------+---------------+
|Check Point    |Endpoint Security                   |5.0.42         |
+---------------+------------------------------------+---------------+


Collect Antivirus Software Information
--------------------------------------

#. Go to **Policy** in the top panel.
#. Go to **Policy > Node Policy > Agent Action** in the left Policy panel.
#. Find and click **Collect Antivirus Software Information** in the Agent
   Action window.

Under **General** section:

#. For **CWP Message**, add message to be displayed in accordance with the
   Policy.
#. For **Label**, add labels to help categorize your plugins with custom labels
   that appear in the "Description" field.

Under **Agent Action** section:

#. For **Boolean Operator**, leave as default **OR.**
#. For **Settings**, leave the default and click **Add** button to include
   others if they are not listed.
#. Click **Update.**
#. Go to Node **Policy** in the left Policy panel.
#. Click the **Default Policy** in Node Policy window.
#. Find **Agent Action** section, click **Assign.**
#. Find **Collect Antivirus Software Information** in the **Available**
   section. Select and drag it into the **Selected** section.
#. Click **Add.**
#. Click **Update.**