3.When the expired antivirus, User can also use compact.
If the License was activated in the ESM console, and not locally on the endpoint, all endpoints will be displayed as unlicensed, admin can do the management from ESM console, however the CES deployed on the endpoints will still be running and doing the av signatures updates, but only local management on each endpoint will be available.