HIP anti-virus configurations

[darren_g]

Hi folks.

I've recently upgraded my firewalls and added the Global protect license, and I need a bit of insight into HIP configurations.

We recently bought out a second company which primarily uses BYOD devices. I'm a bit wary of adding them into VPN access because I'm not confident all of them are diligent in maintaining virus scanners and definitions.

If I configure a HIP object which simply has "Anti-Malware" set to "Is Installed", with real-time protection enabled and virus definition age set to a maximum of 3 days old but don't add any vendor or product names, will that catch the majority of use cases?

Or do I have to list every possible vendor to catch them all?

Thanks