Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Which antivirus program for ISA 2004?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> Which antivirus program for ISA 2004? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Which antivirus program for ISA 2004? - 23.Sep.2005 5:43:00 AM   
Covani

 

Posts: 10
Joined: 22.Sep.2005
From: Istanbul
Status: offline 		I perused the topics but I couldt find any suggestion of an antivirus solution for ISA 2004.

which one would you recommend? which is not compatible?

- Symantec AntiVirus for (ISA) Server (I tried to install trial version but it isnt compatible)
- Panda ISASecure Antivirus (not tried yet)
- McAfee SecurityShield for MS ISA Server (not tried yet)
- Kaspersky Anti-Virus for MS ISA Server (I asked Kaspersky for Antivirus for ISA but they answered that it's not compatible with ISA 2004 yet)
- NOD32 (a friend of mine has recommend NOD32 but i've never heard about them)

I have symantec corporate 10 installed before, but i don't know if its ok when I set the ports open for live update. What do you think, is symantec corporate compatible with ISA 2004?

many thanks.

[ September 23, 2005, 05:44 AM: Message edited by: Covani ]
Post #: 1
RE: Which antivirus program for ISA 2004? - 23.Sep.2005 6:42:00 AM   
Covani

 

Posts: 10
Joined: 22.Sep.2005
From: Istanbul
Status: offline 		------------------

Compatibility of Symantec AntiVirus for Internet Security and Acceleration Server (ISA) with Microsoft ISA Server 2004

Situation:
You want to know if Symantec AntiVirus for Microsoft Internet Security and Acceleration Server 4.x is compatible with Microsoft ISA Server 2004.

Solution:
Symantec AntiVirus for Microsoft ISA Server 4.x is not compatible with Microsoft ISA Server 2004.

------------------

Installation of Symantec AntiVirus Corporate Edition 10.x stops at "Installing LiveUpdate" when using Microsoft ISA Server 2004 proxy

Situation:
You install Symantec AntiVirus 10.x or Symantec Client Security 3.x while you are connected through a Microsoft« Internet Security and Acceleration (ISA) Server 2004 proxy server. The installation stops at the message "Installing LiveUpdate."

Solution:
Symantec is investigating this problem to determine a solution. This document will be updated when new information or a solution is available.

To work around the problem, set an exclusion for Lucoms~1.exe on the Microsoft ISA Server 2004.
To learn how to set exclusions on the Microsoft ISA Server 2004, see Microsoft's documentation on the Microsoft ISA Server home page.

(in reply to Covani)
Post #: 2
RE: Which antivirus program for ISA 2004? - 23.Sep.2005 5:12:00 PM   
Covani

 

Posts: 10
Joined: 22.Sep.2005
From: Istanbul
Status: offline
quote:

Hello,

NOD32 does not conflict with ISA 2004 server, however you might not get the functionality you are looking for if you plan to use the server as a gateway. The server itself will be protected, however, NOD32 will not be able to scan the traffic on the server.

Thank you,
Eset Tech Support

------------------------------------------
Good afternoon,

Yes NOD32 will run quite happily alongside ISA Server running on Windows 2000/2003.

Kind regards

Dan Wills
Technical Support Engineer
Aspect Systems
------------------------------------------
Thank you for your enquiry.

Unfortunately, our latest version of Symantec Antivirus 10.0 is not yet compatible with ISA Server 2004 and we do not have yet an estimate date for the release of a compatible version.

If you have any further customer service queries, please do not hesitate to contact us again.

You can also access further information on our web site at the following address:

http://www.symantec.com/region/reg_eu/techsupp/enterprise/index.html

Kind regards,

Giorgia E. Tamellini
Symantec Enterprise Customer Service
Europe, Middle East and Africa
------------------------------------------
Currently, Kaspersky does not support MSFT ISA Server 2004, but we can cover your Windows 2003 servers.

I apologize for the typo, those quotes should have read "Kaspersky Antivirus File Server" not "Workstation". This product will protection file, folders, and volumes on Windows server environment (NT Server, Win 2000 Server, 2000 Advanced Server, 2003 Server, 2003 Advanced Server).

As for the ISA Server, Kaspersky does offer a product the integrates directly into MSFT ISA Server 2000. But they have not yet released a version that works with ISA Server 2004. This version is due to be released in the next 30-60 days. The KAV ISA package is licensed per protected Workstation.

Best regards,

Stefan Zauchenberger
Managing Partner
ICE Systems, L.L.C.
------------------------------------------


[ September 23, 2005, 05:18 PM: Message edited by: Covani ]

(in reply to Covani)
Post #: 3
RE: Which antivirus program for ISA 2004? - 23.Sep.2005 5:17:00 PM   
Jason Jones

 

Posts: 2265
Joined: 30.Jul.2002
From: United Kingdom
Status: offline 		Have you looked at Trend Micro IWSS? This doesn't integrate into ISA, but can be installed on the ISA server and be confifured to work with ISA.

Check out the third party forums and www.trendmicro.com

Also http://www.isaserver.org/IsaNews/2004bitdefender.html
http://www.gfi.com/webmon/

JJ

[ September 23, 2005, 06:05 PM: Message edited by: Jason Jones ]

(in reply to Covani)
Post #: 4
RE: Which antivirus program for ISA 2004? - 26.Sep.2005 7:21:00 AM   
msillmann

 

Posts: 27
Joined: 25.Apr.2005
Status: offline 		We're using Trend Micro IWSS (Build 2.0.x) and - speaking for our LAN w/ approx. 300 concurrent users/connections - I can NOT (!) recommend it.

There are still issues when insalling ISA 2004 and IWSS on the same box (Trend even says it won't work at all, but this isn't true, got it working for months now) - have a look at Trends Knowledge Base for further informations and go to
http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=40;t=000080 if you're interested in a working solution.

The only reason we use IWSS is that you get it for a small fee then licensing NeatSuite.

Trends support is really bad - they were not able to find a simple configuration error within fourteen days.

Points against the product: you can't install ISA 2004 w/ MSDE logging when installing IWSS on the same box (you will have to install it afterwards); speaking for our servers, Trends scanning service goes down serveral times a week, aso...

You might really want to have a look at software from other software producers.

[ September 26, 2005, 07:30 AM: Message edited by: msillmann ]

(in reply to Covani)
Post #: 5
RE: Which antivirus program for ISA 2004? - 26.Sep.2005 6:56:00 PM   
Jason Jones

 

Posts: 2265
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
quote:
Originally posted by msillmann:
We're using Trend Micro IWSS (Build 2.0.x) and - speaking for our LAN w/ approx. 300 concurrent users/connections - I can NOT (!) recommend it.

There are still issues when insalling ISA 2004 and IWSS on the same box (Trend even says it won't work at all, but this isn't true, got it working for months now) - have a look at Trends Knowledge Base for further informations and go to
http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=40;t=000080 if you're interested in a working solution.

The only reason we use IWSS is that you get it for a small fee then licensing NeatSuite.

Trends support is really bad - they were not able to find a simple configuration error within fourteen days.

Points against the product: you can't install ISA 2004 w/ MSDE logging when installing IWSS on the same box (you will have to install it afterwards); speaking for our servers, Trends scanning service goes down serveral times a week, aso...

You might really want to have a look at software from other software producers.
Interesting feedback, we have resisted IWSS for ages now, hoping Trend would port it to an ISA filter like WebProtect...still waiting! [Mad]

(in reply to Covani)
Post #: 6
RE: Which antivirus program for ISA 2004? - 17.Jan.2006 8:46:35 AM   
Covani

 

Posts: 10
Joined: 22.Sep.2005
From: Istanbul
Status: offline 		I tried McAfee Enterprise Virusscan 8.0i but uninstalled because of conflicts with ISA server.
Now using Nod32 2.5 Administrator Version with disabled IMON function.. No problems so far..



(in reply to Jason Jones)
Post #: 7
RE: Which antivirus program for ISA 2004? - 17.Jan.2006 10:39:02 AM   
elmajdal

 

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		i've been using SAV corporate edition since its 8.x version and i was using it with ISA 2000.

i then updated it to SAV 9.x and before 7 months i updated it to SAV 10.x and installed it on the same server with ISA 2004.


i have it working  as  expected with no errors at all.

all the u have to do when installing SAV on the same machine that isa is installed on , is to open the protocols SAV needs to communicate with its clients in your LAN.

2967 UDP Send Recieve
38293 UDP Send Recieve
2967 TCP Outbound

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to Covani)
Post #: 8
RE: Which antivirus program for ISA 2004? - 13.Mar.2007 11:48:16 AM   
ossiv5

 

Posts: 9
Joined: 19.Apr.2004
Status: offline 		hi,

i have found this posting from elmajdal.
my situation:
i have installed SAV 10.x on a server and the Antivirus-Client on the server with ISA-Server. what ports have i to open in this case?

bye

oscar

(in reply to elmajdal)
Post #: 9
RE: Which antivirus program for ISA 2004? - 13.Mar.2007 12:34:13 PM   
elmajdal

 

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		Hi ossiv,

read this : Allow Symantec AV communications if the SAV client is installed on your ISA 2004 Server

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to ossiv5)
Post #: 10
RE: Which antivirus program for ISA 2004? - 13.Mar.2007 2:31:44 PM   
ossiv5

 

Posts: 9
Joined: 19.Apr.2004
Status: offline 		Hi elmajdal,

thanks for your answer.
i have make the settings on my ISA Server 2006 like the tutorial.
the only thing: in my system-event-log i found the event. 5783.
before i install the SAV Client on the ISA Server this event was not there.

bye

oscar


(in reply to elmajdal)
Post #: 11
RE: Which antivirus program for ISA 2004? - 13.Mar.2007 3:51:52 PM   
elmajdal

 

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		More info will be helpful,like

source, category, type, description ....

is it a continuous event or only occured one time.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to ossiv5)
Post #: 12
RE: Which antivirus program for ISA 2004? - 14.Mar.2007 2:32:14 AM   
ossiv5

 

Posts: 9
Joined: 19.Apr.2004
Status: offline 		hi elmajdal,

here the info for the event:

Source: NETLOGON
Category: none
Type: Error
Event ID: 5783
Description:
The session setup to the Windows NT or Windows 2000 Domain Controller <server name 2> for the domain <domain name 2> is not responsive. The current RPC call from Netlogon on <server name 1> to <server name 2> has been cancelled.

And another important thing:
My ISA-Server has the SMTP-service activeted for SMTP-relay to my Exchange-Server. With the SAV Client installed i can't send or receive e-mails over this SMTP-service. It seems like the SAV Client does block the SMTP-service. Have i some settings to do in the SAV Client to prevent this reaction?

bye

oscar

(in reply to elmajdal)
Post #: 13
RE: Which antivirus program for ISA 2004? - 14.Mar.2007 3:33:13 AM   
ossiv5

 

Posts: 9
Joined: 19.Apr.2004
Status: offline 		hi,

i have notice something:
when i start the ISA-Firewall-Service manually after logon and not automatic during logon, then the event-id 5783 disappears.

the problem with the blocked SMPT-service remains.

bye

oscar

(in reply to ossiv5)
Post #: 14
RE: Which antivirus program for ISA 2004? - 14.Mar.2007 6:28:32 AM   
ossiv5

 

Posts: 9
Joined: 19.Apr.2004
Status: offline 		hi,

my problem with the blocked SMTP-service is resolved.
i found this article on Symantecs-homepage:

http://entkb.symantec.com/security/resultDisplay.do?gotoLink=3434&docType=1000&contextId=39262%3A3434.3587&clusterName=Fusion&contentId=ffe8b4fc-5a2b-4fb0-899f-993ce50ca2b9&responseId=127b797678790790%3A1b1fbf4%3A1114f121acd%3A-2d89&groupId=6&answerGroup=1&score=819&page=http%3A%2F%2Fservice1.symantec.com%2Fsupport%2Fent-security.nsf%2Fpfdocs%2F2004062508305148&result=0&excerpt=SMTP+gateway+servers+Preventing+the+scan+of+Symantec+Mail+Security+5+for+SMTP+product+directories+by+Symantec+AntiVirus+Corporate+Edition+version+10.x&resultType=5000#

it say's to non install the SAV client Internet-E-Mail-Autoprotect-function on an Exchange-Server or any other SMTP-Server. In my case i have installed the SMPT-service on the ISA-Server.

The problem with Event-ID 5783 remains.

bye

oscar

(in reply to ossiv5)
Post #: 15

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> Which antivirus program for ISA 2004? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts