Client shows up as 'AV Stopped' in CMEP when it shouldn't

Usage and Config Security
1

(imported topic written by SystemAdmin)

Greetings! I put CPM on a client and it was listed as healthy in CMEP Overview, but I noticed it was also running windows defender, so I used a fixlet to disable windefender and now that particular client shows up as an orange ‘AV Stopped’ wedge in CMEP. Why is this? It’s still running CPM, it’s fully updated. Does anyone know why?

Thanks in advance

/Ef

2

(imported comment written by Xie_Ran91)

Looks like this is a bug.

I think current logic is to show this computer has an AV installed and the service is stopped.

It should check if there is any other AV running or not. I will file a bug and track this.

3

(imported comment written by SystemAdmin)

Thank you kindly, please let me know what you find =)

/Ef