Re: symantec antivirus can not auto update behind isa 2004
From: Alberto Dallagiacoma (Alby_at_Work)
Date: 09/16/04
- Next message: Emyeu: "ISA client, is it a must..."
- Previous message: Xuan Fang: "IE Bypass Issued"
- In reply to: tomding: "Re: symantec antivirus can not auto update behind isa 2004"
- Next in thread: Rick Dilley: "Re: symantec antivirus can not auto update behind isa 2004"
- Reply: Rick Dilley: "Re: symantec antivirus can not auto update behind isa 2004"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 16 Sep 2004 11:58:00 +0200
Hello,
Here's how I solved the problem:
1. I created a new computer object called "Antivirus Server" with the
corresponding IP address.
2. I created a domain set called "Symantec liveupdate" corresponding to
*.symantecliveupdate.com
3. I created the following access rule: Action: allow, Protocols: HTTP,
From: Antivirus Server, To: Symantec liveupdate, Users: "All Users" and
"System and Network Service", Schedule: Always, Content: all content types
4. I disabled the schedule in the Symantec System Center and I scheduled the
liveupdate activity with a scheduled taks executing the following command:
"C:\Program Files\SAV\VPDN_LU.exe" /silent.
The security context of the scheduled task is NT AUTHORITY\SYSTEM
HTH,
Alberto, Italy
"tomding" <tomding1968@163.com> ha scritto nel messaggio
news:ugRgORsmEHA.1716@TK2MSFTNGP12.phx.gbl...
> thanks for reply.
> I find more people meet the problem as me.Could you describe the two ways
> step by step?
> I allow all domain users to access internet by all protocols in isa 2004
> server.
> I scheduled LiverUPdate into Symantec System Center,but I can not
understand
> you saying "you have to change
> the security context of the 'Symantec Antivirus Server' service, setting
an
> user that have an allow rule on the ISA Server."
>
> I find "Symantec AntiVirus Definition Watcher service" started by
> localsytem,and I create an allow rule on ISA Server for the "System and
> Network Service" group,but it does not work still.
>
> BTW,I find all windows os behind isa 2004 can not autoupdate as the
> symantec. it is hard work to modify all servers and clients config behind
> isa 2004.so I hope to find a way in isa 2004 server to resolve all
> autoupdate or scheduled update problems.
>
> "Alberto Dallagiacoma" <Alby@Work> дÈëÓʼþ
> news:%233N9wOlmEHA.4004@TK2MSFTNGP10.phx.gbl...
> > Hi,
> > How didi you schedule LiveUpdate?
> > If you created a scheduled task, you have to add an allow rule for the
> user
> > you assiged to the scheduled task.
> > If you scheduled LiverUpdate into Symantec System Center, you have to
> change
> > the security context of the "Symantec Antivirus Server" service, setting
> an
> > user that have an allow rule on the ISA Server.
> > In the scheduled task case, you may set SYSTEM as accoutndesignated to
run
> > the task and create an allow rul on ISA Server for the "System and
Network
> > Service" group.
> >
> > HTH,
> > Alberto, Italy
> >
> > "tomding" <tomding1968@163.com> ha scritto nel messaggio
> > news:ePIRGohmEHA.2968@TK2MSFTNGP14.phx.gbl...
> > > My symantec antivirus Server and clients are behind ISA 2004 stand
> > version.I
> > > can manually run Live Update but the scheduled updates fail with an
> event
> > ID
> > > 16, saying "Download of virus definition file from LiveUpdate server
> > failed.
> > > 00000001." Does this have something to do with the ISA server?Do I
need
> to
> > > create a custom packet filter? Or is there another issue
> > > going on? Thanks.
> > >
> > >
> >
> >
>
>
- Next message: Emyeu: "ISA client, is it a must..."
- Previous message: Xuan Fang: "IE Bypass Issued"
- In reply to: tomding: "Re: symantec antivirus can not auto update behind isa 2004"
- Next in thread: Rick Dilley: "Re: symantec antivirus can not auto update behind isa 2004"
- Reply: Rick Dilley: "Re: symantec antivirus can not auto update behind isa 2004"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
