We have epo orchestrator build 188 and move 3.6.200.Some time VMs report on the epo console that it not protected and when we test with EICAR file we found that the VM is protected.
after we unload and load the vmci driver with the command "fltmc unload/lod vsepflt " on the VM and the protection status will be correct.
This happen some time when a vm reboot or aa vmotion accure,and the epo console received the two event when we look on the threat event log (34432 "not protected" and 34431 "protected") ,but the protection statut still on "off".
some one can help us please.
thanks' for your response.
I dont have the agent epo on the VM .because it move agentless.
the only agent is on the Appliance "SVM"