I just noticed a new issue today with Microsoft’s ForeFront UAG and Trend Micro Deep Security.
The UAG does not recognise the Trend Micro Deep Security Agent as a compliant antivirus product and therefore any clients using the Trend Micro Deep Security agent will not gain privileged session access to the UAG.
Interestingly enough, the UAG ForeFront Endpoint Scanner detects the Trend Firewall component.
To confirm this is from a physical desktop with the DS agent installed. The DS agent is offering anti-malware protection, not a Deep Security Virtual Appliance, so the UAG should be able to detect it.
I can understand virtual servers or desktops not being recognised there will not be way for the UAG to verify whether the client has AV services running on it.
What I have done is following the instructions here to try and customise the endpoint components detection script.
Thankfully the detection script DETECTION.VBS already has Trend Micro Office Scan so I have added a new check ‘DetectTrendMicroDeepSecurityAntiVirus’ in the script for Trend Micro Deep Security to validate whether it is installed and running but determining whether it is up to date is beyond me.
I have escalated to Trend Engineering to see if they can assist.