host checker issue with Mac OSX and ESAP 2.8.8

[brookaveli]

My enterprise is using ESAP 2.8.8, and the list of products supported includes Sophos Anti-Virus 9.x for Mac. I have a user who has successfully installed Sophos 9.4 and as far as she knows has run a full scan with 0 threats found. Host checker is telling her "Sophos Anti-Virus 9.4.0 does not comply with policy. Compliance requires successful complete system scan."

The Sophos logs say "Scan completed at 2015-11-15 21:10:30 -0500. 827815 files scanned, 0 items detected, 7 issues." She provided screenshots showing that the scan is set to "scan all files and folders on this Mac."

Is host checker failing because of the "7 issues" referenced in the logs? It appears that they are related to some corrupt .tmp files. The anti-virus software doesn't offer to quarantine them or anything like that. I'm not a Mac user so I wasn't sure if she should just delete these files and re-scan, or if there is another step she needs to take to allow Host Checker to access the anti-virus scan results.

Note: I have cross-posted at the Sophos support forum with some screen captures. [url]http://community.sophos.com/products/free-antivirus-tools-for-desktops/f/17/t/10981[/url]

Thanks,
Brook

[jbeakley]

Brook,

This is a known issue with Opswat (the third-party infrastructure we use to determine endpoint posture/configuration). Pulse Secure created a ticket with Opswat for fixing this (It has to be fixed from Opswat side and will go in the ESAP package once Opswat team releases fix for it). In short, the issue is happening because the Opswat SDK was not able to query the Scan status of Sophos AV on Mac.

If you contact a Pulse Secure Global Support Center representative about this, you may want to reference tickets:
PRS-334091
PRS-334607

Apologies for the inconvenience.

-JB

[brookaveli]

JB, thank you for your response. I will pass this information on to our users as well as the IT folks who administer the software. By any chance, do you have any experience with or know of any free Mac AV software that is able to be correctly detected by ESAP 2.8.8?

-Brook