When specifying latest, Puppet installs a package if absent and upgrades the package to a newer version when they become available. In this instance, an older version needs to be installed so the ensure command is commented out. This prevents the Java package from reverting back to its original version and uses the version that is currently installed.
Perform a puppet catalog run on the Malware Analysis appliance.
puppet agent -t
Start the rsaMalwareDevice service again.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.
Sometimes just having a package present isn't enough. You also want to ensure it stays up to date. By specifying latest,Puppet will install a package if absent and upgrade the package to newer versions when they become available. This last part is where latest differs from installed.