The IVX appliance issues warnings if the installed security content becomes outdated. This feature helps to ensure that Trellix appliances—offline appliances in particular—do not use outdated security content. By regularly downloading and installing the latest security content, you minimize false negative and false positive results.
The security content timestamp
The security content creation date is indicated by a timestamp embedded in the security content metadata.
.png)
In the appliance CLI, the timestamp of the installed security content is displayed in the Timestamp (UTC) field of the show fenet security-content status command output. This timestamp is also displayed in the Web UI and the CLI command output of the managing Central Management System appliance. See the Central Management System Administration Guide.
Warnings for outdated security content
The appliance periodically checks the age of the installed security content by comparing its system clock time to the timestamp embedded in the security content metadata. When the security content is more than 5 hours old for network-connected appliances or more than 36 hours old for offline appliances, the show fenet security-content status command output includes a warning message.