Defender 离线病毒库问题

Question

背景：Windows Server 2019 物理隔离内网 

问题：2023年2月前，Windows Defender 离线病毒库可从https://www.microsoft.com/en-us/wdsi/defenderupdates的Microsoft Defender Antivirus for Windows 11, Windows 10, Windows 8.1, and Windows Server选择64-bit 下载，拷贝到内网Windows Server 2019执行即可升级病毒库； 但2月之后， 就一直执行不成功了， 执行后没任何反应， 版本创建时间也没有任何变化，请问怎么办？

Answer 1

Hello

If you're experiencing issues with updating the Windows Defender offline virus database on a physically isolated Windows Server 2019 intranet, you can try the following steps to troubleshoot and potentially resolve the problem:

Check Internet Connectivity (if available):

Ensure that the isolated server has the necessary internet connectivity, at least temporarily, to download the latest virus database updates. You can use a proxy server or a temporary internet connection for this purpose.

Review Proxy Settings (if applicable):

If you're using a proxy server for internet access, verify that the proxy settings on the server are correctly configured. Incorrect proxy settings can prevent the download of updates.

Check Windows Update Settings:

Ensure that Windows Update settings are configured correctly. Some Windows Defender updates may be delivered through Windows Update. Verify that the Windows Update service is running and configured to check for updates.

Check for Blocked Ports or Firewall Rules:

If you have a firewall or network security solution in place, ensure that it's not blocking the server's access to the Microsoft update servers. Check the firewall logs for any blocked traffic.

Temporary Access to an Isolated Server:

If you have access to another server with internet connectivity (even temporarily), you can download the latest virus database updates there and then transfer them to the isolated server using removable media (e.g., USB drive).

Review Group Policy Settings:

Check if there are any Group Policy settings that might be preventing the update process. Ensure that Group Policy is not configured to disable Windows Defender updates.

Check for Software Conflicts:

Sometimes, third-party security software or system management tools can interfere with Windows Defender updates. Ensure that there are no conflicting applications or settings.

Log Analysis:

Review the Windows event logs for any error messages or warnings related to Windows Defender updates. This can provide additional information about the issue.