Recent Sophos update has broken HIP checks on Global Protect

[VAsupport]

We have an issue that we have logged a PA TAC case but wanted to stick out a forum post to see if others are having this issue.

It seems when the machine upgrades Sophos from 2.20.11 to 2.20.13, we get the following message:

"Your AntiVirus is not updated". HIP checks then fail. The only thing changed is the version of Sophos, but the HIP checks don't care about versions, or arent meant to care about versions.

This issue is happening on multiple portals deployed, all running different versions of PAN-OS. 9.0.3-h3, 9.1.7 and 10.1.3

[RobertShawver]

Our workaround was to have the guy install the free Avast.

[GCBS_IT]

Hi Robert,

We actually tried Avast yesterday, too. It wouldn't enable Real Time Scanning because of the Sophos product being there -- even though we had disabled 'Live Protection' and Real Time Scanning. (I'm starting to wonder if you're not with the same organization as "Jeff V.". 😀)

[RobertGoodall]

I have just run into the same issue and this is fixed in 6.0.3 but I have not tried any other versions to see the same.

[Steph01]

We upgraded to 6.1.0 GP client and it resolves the issue

[BrentA]

DId you ever get a fix for this? I have the same problem with version 2022.4.1.1.

[Steph01]

When we upgraded GP client version to 6.1.0 it also resolved the issue for us 

[BrentA]

Interesting. I'll give that a go, I wasn't going to push that out until we upgraded our firewall fleet.

Thanks!

[BrentA]

No good 😞

It's fixed an issue with real time protection saying it was off though!

[RobertGoodall]

Hi Brent,

This is working in 6.0.4-21 GP version it retrieves all ant-malware stats have you tried 6.0.3 or .4 I think both worked for me.

Kind regards,

Rob

[BrentA]

Oh Interesting. I'll give that a go thanks!