Re: Trend Micro Client Server for SMB

Disabling the firewall DID solve the problem. My clients are now connecting
to the server properly and without delay.

I am looking into the SBS documentation to do a better job with my DNS
configuration. Thanks for the heads up.

"Les Connor [SBS Community Member - SBS M" wrote:

> I did forget to mention the Trend firewall on the SBS, didn't I ;-). Ensure
> it's off *everywhere* or you *will* have issues unless you want to configure
> it.
>
> Additionally, ensure you locate the A/V recommendations for a domain
> controller kb article (MS) and make the exclusions listed.
>
> Lastly, your network configuration is not right, and is adding to the
> problem. There should be no references to external DNS servers anywhere on
> your lan. The only external DNS listed should be a forwarder in DNS on the
> SBS. You can use your device for DHCP if you want, but it doesn't have the
> scope options that the SBS DHCP server has configured by default, and you
> will suffer as a result, whether you realize it or not.
>
> http://www.smallbizserver.net and click on networking, or read the SBS help
> file which has lots of very good information on this topic.
>
> --
> Les Connor [SBS Community Member - SBS MVP]
> -----------------------------------------------------------
> SBS Rocks !
> ----------------------
> "Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
> understand." - Confucius
>
>
> "Joe H" <JoeH@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:F9C6D6AE-017D-4AC1-8348-0D643D4ADAF1@xxxxxxxxxxxxxxxx
> > Les:
> >
> > I think I might have resolved the issue, but not sure. The Trend personal
> > firewall was enabled on the instance of Office Scan running on the SBS2003
> > server. I disabled it on all the instances running Office Scan. Will
> > test
> > later to determine if that fixes the problem.
> >
> > The configuration I have set up is as follows:
> > 1. Stateful firewall connected to the internet connection (DSL). Internal
> > IP of the firewall is 192.168.1.1 and it serves DHCP to all the clients on
> > the SBS2003 network.
> >
> > 2. DNS is set up on the SBS2003 server.
> >
> > 3. The SBS2003 clients have three DNS servers listed (configured through
> > DHCP)
> > a. the SBS2003 server is primary
> > b. the DNS servers of the ISP are secondary and tertiary
> >
> > This configuration has been functioning with no issue for more than a
> > year.
> > It is only after I installed the TrendMicro product that I started having
> > this problem.
> >
> > The product I installed is the Client Server Messaging Security for SMB,
> > so
> > it has an Exchange component also.
> >
> > I will test later when I get to the office and see if disabling the
> > firewall on the server helps.
> >
> > Tks,
> > Joe
> >
> > "Les Connor [SBS Community Member - SBS M" wrote:
> >
> >> Hi Joe,
> >>
> >> Long login times are typically a symptom of DNS misconfiguration. If you
> >> post the output of 'ipconfig /all' run from a client and from a
> >> workstation,
> >> we can check that.
> >>
> >> So far as Trend CSM is concerned - the Trend firewall can cause some
> >> issues.
> >> But it's disabled by default, AFAIK. In the Security Dashboard | Security
> >> Settings Tab, Desktops group > Configure | Firewall ... see that the
> >> firewall is not selected and click 'save'. From a workstation, you can
> >> r-click the officescan icon to start the client application, and check
> >> the
> >> personal firewall tab to ensure it's disabled.
> >>
> >> Some other things you might look at are the event logs, especially on the
> >> workstations. Any clues there?
> >>
> >> --
> >> Les Connor [SBS Community Member - SBS MVP]
> >> -----------------------------------------------------------
> >> SBS Rocks !
> >> ----------------------
> >> "Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
> >> understand." - Confucius
> >>
> >>
> >> "Joe H" <JoeH@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:645D0B54-D030-4BAB-92E5-E0019EF33812@xxxxxxxxxxxxxxxx
> >> >I just recently completed installation of Trend Micro Client Server for
> >> >SMB
> >> > with 4 Office Scan clients. Now, my client machines take close to 15
> >> > minutes
> >> > for the login. This started happening after installing the Trend Micro
> >> > product. I just did a basic installation. The installation is on a
> >> > vanilla
> >> > install of SBS2003 network, with no SQL server and no ISA server.
> >> >
> >> > Any ideas would be very much appreciated.
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: SBS VPN setup?
    ... And if you have a hardware firewall you haven't flashed in years they just got in through a exploit. ... SBS plugs into a switch with the other computers and the switch is plugged into a firewall appliance with 2-nics. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ... > learn and test the RWW solution before deploying it. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet on nodes
    ... disabled state (someone please confirm this for SBS Standard, ... firewall service should result in 'ISA lockdown'. ... print' from both the server and a WS. ... Was not able to connect to the internet on the WS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... Ethernet adapter Server Local Area Connection: ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall on a single NIC SBS2003 Standard edition
    ... Frank McCallister SBS MVP ... > " Well, if you're wanting to run the firewall on a single NIC, you aren't ... Don't ask the server to do *everything*, ... > internet traffic from the workstations don't have to go through the SBS. ...
    (microsoft.public.windows.server.sbs)
Loading