The antivirus program signature files must be updated daily.

From Windows Server 2016 Security Technical Implementation Guide

Associated with: CCI-000366

SV-87895r1_rule The antivirus program signature files must be updated daily.

Vulnerability discussion

Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Using the virus scan program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

Check content

If V-19910 from a McAfee antivirus STIG has been applied to the system, this is NA. Verify the antivirus program is configured to update the signature file on a daily basis. If the antivirus program is not configured to update the signature file on a daily basis, this is a finding. It may not be possible for systems to receive the updates on a daily basis due to various factors. If the signature file is more than a week old, this is a finding. The version numbers and the date of the signature file can generally be checked by starting the antivirus program. The information may appear in the antivirus window or be available in the Help >> About window. The location varies from product to product.

Fix text

Configure the antivirus program to update the signature file at least every 24 hours.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.