The antivirus program signature files must be kept updated.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40175	WN12-GE-000003	SV-52133r2_rule	ECVP-1	High

Description
Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing the virus scan program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

Description

Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing the virus scan program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

STIG	Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide	2016-06-08

Details

Check Text ( C-46945r1_chk )
If V-19910 from an antivirus STIG has been applied to the system, this is NA. Verify the signature file for the virus scan program is up to date. If the antivirus program signature file is not dated within the past 7 days, this is a finding. The version numbers and the date of the signature file can generally be checked by starting the antivirus program. The information may appear in the antivirus window or be available in the Help > About window. The location varies from product to product.

Check Text ( C-46945r1_chk )

If V-19910 from an antivirus STIG has been applied to the system, this is NA.

Verify the signature file for the virus scan program is up to date.

If the antivirus program signature file is not dated within the past 7 days, this is a finding.

The version numbers and the date of the signature file can generally be checked by starting the antivirus program. The information may appear in the antivirus window or be available in the Help > About window. The location varies from product to product.

Fix Text (F-45159r1_fix)
Configure the antivirus program to update the signature file at least every 7 days. More frequent (daily) updates are recommended.