Antivirus agent status report has outdated details (old antivirus signature)

Question

Hello everyone,

I have a client that is trying to get reports using the following:

1. Sign in to the Microsoft Intune admin center.
2. Select Reports > Microsoft Defender Antivirus to open the default reports view, which is the Summary page. The Summary page displays aggregate details for the Antivirus reports, supports a Refresh, and reflects the data found in Antivirus agent status report.
3. Select the Reports tab > Antivirus agent status to open the report.
4. Select Generate report (or Generate again) to retrieve current data.

The Antivirus "Signature version" that we get from the report is outdated and not correct for most devices.

We have tried the following report, from the security center instead:

1. Go to https://security.microsoft.com, and sign in.
2. Choose Reports > Device health  

It generates a real time report of the connected devices with correct Antivirus "Signature version".

Our questions are:

• Does the Intune report have a definite timeframe where it tries to pull the information from the devices?
• If not, why aren't the reports from Intune contain the correct or up-to-date details?
• The second report unfortunately only generates stats and infos from the connected devices at the time.

Thank you for your time.

Regards,

SAID.

Answer 1

Hi Said A The Antivirus agent status report in Intune is updated every 8 hours for Windows 10 devices and every 24 hours for other Windows devices. If the report is showing outdated information, it's possible that the devices haven't checked in with Intune within that timeframe. Another possibility is that there's a delay in the processing of the report data. As for the Security Center report, it generates real-time data for connected devices, so it will always display the most up-to-date information. However, it doesn't have the same level of detail as the Antivirus agent status report in Intune.