We are currently seeing an issue wherein all AV/FW checks fail the Host Checker policy on client machines.
This issue has reportedly started since 00:00 hrs on 31 Dec 2013.
Juniper is currently aware of this issue and our Engineering Teams are working on resolving the same at the earliest.
This thread shall be updated with more details as soon as they are available.
Please check this PSN for more information
Just for the record... we are also having this issue. Juniper support said 2-3 hours for a fix. Apparently it is in the OPSWAT AV definition file that gets downloaded to the SA's every 15 minutes. I hope it is that simple. :-D
Please hurry.... my users are chomping at the bit!
Is the fact your AV definitions file has not been updated since 12/31/2013 03:12:12 related?
All my hostchecker users are failing AV checks - but if i add a manual rule to check for the definition file it works fine for them.