I've just updated a batch of clients from 10.3.0 to 10.3.1 - some of these now show the Ant-virus 'Up to date' status as unknown - the reason for this is that there are too many IDEs reported, and checking the client Sophos Anti-virus folder confirms additional files. It seems that the update process doesn't clear out all the old IDEs.
Telling the client to update via the console doesn't fix it, and reprotecting (while it usually works) is overkill.
If I manually synchronise (read copy/paste) the IDEs with an up to date workstation the client then reports as compliant.
I've noticed this before after other version updates and they usually clear down after a couple of days, however I'd rather it didn't happen in the first place or the client handled this gracefully after the update.
This thread was automatically locked due to age.