The information that OnGuard sees and uses comes from the detection engine and if you don't see the last daily scan time, it may not be reported.
I would recommend you to open a support case with Aruba TAC as they have better information about very specific questions like these.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Sep 08, 2022 09:54 AM
From: Mohanad Abdelrazik
Subject: Clearpass posture antivirus | Symantec endpoint protection LastScanTime
Hello Everyone
We have 2 types of Symantec scans configured all on PC's:
Type 1 is Active: Daily - only the most commonly Infected areas. Duration: 1-2 minutes
Type 2 is Full: Weekly - Scans your entire computer and can run in the background Duration: 30-120 minutes up to days depending on data size
OnGuard always send the posture request LastScanTime value always come from weekly full scan and full scan is not completed on the most of users and get quarantined
I need to match on daily scan
------------------------------
BR,
Mohanad
------------------------------