submissions to symantec blocked

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Richard Prossor (richard.prossor_at_prossor.com)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 10:59:09 -0000

I have Norton Corporate edition installed on my SBS. Part of the setup is
Central quarantine. The standard install submits any virus found to
Symantec. However my SBS is reporting the following error:

Event Type: Error
Event Source: Central Quarantine
Event Category: None
Event ID: 34053
Date: 12/02/2004
Time: 06:12:55
User: N/A
Computer: PROSSORNT01
Description:
An error was detected in a Central Quarantine sample.
[Sample Processing Error - Sample: needs attention from Tech Support]
ComputerName: PROSSORNT01
Address: 192.0.0.7 DNS name: prossornt01.prossorsnt.prossors.com
VirusName: W32.Swen.A@mm
FileName: Update6565.exe
Sample Status: Attention
Sample State: submitting
Failed to resolve communication error
attention: Contact Symantec technical support for assistance with this
sample.

I understand this is to do with ports being open in ISA. There is a symantec
article referring to this Document ID:2003091010413848 which states that I
need tohave ports 2847 and 2848 open outbound be able to reach the following
addresses:

To test connectivity, go to each of the following addresses:

    a.. http://gateways.dis.symantec.com:2847
    b.. https://gateways.dis.symantec.com:2848

If the connection is successful, the browser is redirected automatically to
the Security Response home page. If you cannot connect to both ports, verify
that the ports are not being blocked by your firewall.

I am currently able to reach the first but not the second. How do I open the
required port to be able to do this.

Regards

Richard Prossor

Relevant Pages

  • Re: how to check blocked port in windows 2000 prof edition
    ... Windows 2000 does not "block" ports, firewall software does that. ... Symantec software you installed included a firewall that's where I'd look ... After we install symantec antivirus 10, ...
    (microsoft.public.win2000.networking)
  • RE: norton internet security problems
    ... since you are so detailed of problem go to symantec support ... >When I go to the symantec site and run their security ... >the general rule and I don't know which of the other ports ...
    (microsoft.public.windowsxp.general)
  • Re: Firewall Problems With SBS2003 Std Server SP1
    ... now I have to either enter all of the exceptions on the XPSP2 type ... firewall, or get my port and program exceptions built into the ... These ports are needed to communicate with the Symantec Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Port 2848
    ... Which ports are used for communication in Symantec Quarantine Server 2.0? ... You want to know which TCP ports are used by the Symantec Quarantine Server ... Security Response auto-response server using the static ports 2847 and 2848 ...
    (Security-Basics)
  • help for ISA dummy
    ... I have NAV for SBS installed and I am getting an error "failed to ... communicate" when Central Quarantine tries to submit samples to Symantec. ...
    (microsoft.public.backoffice.smallbiz2000)