The FX appliance issues warnings if the installed security content becomes outdated. This feature helps to ensure that Trellix appliances—offline appliances in particular—do not use outdated security content. By regularly downloading and installing the latest security content, you minimize false negative and false positive results.
This feature is supported in File Protect software release 8.0.0 and later.
The security content timestamp
The security content creation date is indicated by a timestamp embedded in the security content metadata.
In the appliance Web UI, the timestamp of the installed security content is displayed in the Content Version panel of the About page.
.png "All_DTI_SecurityContentTimeStamp_appliance_scap.png")
In the appliance CLI, the timestamp of the installed security content is displayed in the Timestamp (UTC) field of the show fenet security-content status command output. This timestamp is also displayed in the Web UI and the CLI command output of the managing Central Management System appliance. See the Central Management System Administration Guide.
Warnings for outdated security content
The appliance periodically checks the age of the installed security content by comparing its system clock time to the timestamp embedded in the security content metadata. If the security content is more than 5 hours old for network-connected appliances or more than 36 hours old for offline appliances, warnings are distributed as follows:
Email is sent to recipients who are configured to receive notifications for failure-level system events, provided that automatic security content updates are enabled.
The Web UI displays a warning message at the top of the Dashboard.
The output of a CLI command includes a warning message.