setting update antivirus apm

You can use above KB and below article - Endpoint inspection | BIG-IP Edge Client operations guide (f5.com)

when CLIENTSSL_HANDSHAKE {
    # Placeholder for checking client's antivirus status
    # You would need to implement a way to get the client's antivirus status
    set antivirus_status [HTTP::header "X-Client-Antivirus-Status"]

    if { $antivirus_status eq "outdated" } {
        reject
    }
}

also you can try this in lab or sanbox.