i feel your pain... We've been using HC for more than several years with similar experiences. We use more checks than AV, but the AV one is usually the one that pains me. Unfortunately i am not sure other products would offer a more hassle-free process. VPN vendors who offer compliance checcking are somewhat at the mercy of AV vendors when it comes to the ESAP releases. I do find Juniper's documentation limited in resolving AV related issues on my own, and someone always has a different issues. My suggestions: Advise users not to upgrade without checking with your IT if their product and version is currently supported (if it isnt, I generally recommend MSE, which gives me the least headaches). Second, I always test new ESAPs and Firmware releases on a test appliance against our enterprise AV product, and a few other AV products I "recommend to staff. I limit my support to a handful of AV products that i can test on my own (e.g. MSE, AVG). Wishing for a more hassle-free method for host checking.
... View more