Welcome to ISAserver.org

Antivirus update

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Antivirus update

Page: [1]

Message

<< Older Topic Newer Topic >>

Antivirus update - 15.Jan.2010 8:37:13 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi everybody,
I have a rule which allows access to the internet to all my users, but also in that same rule in the extension option I block the download of many extensions like .exe and many others. My antivirus uses the .exe to update the virus definitions and I have to remove the rule everytime I want the antivirus to update. Is there a way to allow only my antivirus to download this .exe extension?

Thanks in advance!!

Post #: 1

Featured Links*

RE: Antivirus update - 15.Jan.2010 10:04:44 AM

IanC

Posts: 338
Joined: 11.Jul.2007
From: UK
Status: offline

You can create another access rule, used only for communication with AV servers. Then place the new rule above your general Web access rule.

Ian

_____________________________

Ian Currie

nAppliance TMG/UAG Appliances - EMEA
www.surefront.co.uk

(in reply to isa_rooky)

Post #: 2

RE: Antivirus update - 15.Jan.2010 11:30:45 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi Ian and thanks for your quick reply,
The AV I'm using is Microsoft Security Essentials and there's no specific address to communicate with the servers to update the antivirus definition file. What should I do in this case?

(in reply to IanC)

Post #: 3

RE: Antivirus update - 15.Jan.2010 12:13:06 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

initiate an update and check the logs, there have to be a set of URLs that the software is getting its update from.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to isa_rooky)

Post #: 4

RE: Antivirus update - 15.Jan.2010 12:13:09 PM

IanC

Posts: 338
Joined: 11.Jul.2007
From: UK
Status: offline

If a single server is used to download the definition file, you can use its IP address as the rule's source. Otherwise, create a URL Set containing the AV site's URL and make this the destination.

Hope this helps.

Ian

_____________________________

Ian Currie

nAppliance TMG/UAG Appliances - EMEA
www.surefront.co.uk

(in reply to isa_rooky)

Post #: 5

RE: Antivirus update - 15.Jan.2010 2:16:55 PM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi again Ian,
Each antivirus is installed individually on each machine and when the antivirus updates it doesn't show up the address from where it takes the definition file. I don't know what to do exactly. I want to use this antivirus because is working pretty well and is free.

(in reply to IanC)

Post #: 6

RE: Antivirus update - 21.Oct.2010 2:27:29 AM

TechFan

Posts: 24
Joined: 9.Dec.2004
Status: offline

Did you find an answer. We are trying to figure out how to allow some Vista Home appliances we have that run security essentials to get their updates without full internet access. But, every time we tell it to check for updates, it fails. . .

I can't find a list of update servers anywhere and the one server we find in the logs has been permitted already. . .

(in reply to isa_rooky)

Post #: 7

RE: Antivirus update - 21.Oct.2010 9:07:45 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi guys and thanks for replying, but I decided to change my antivirus. Now I'm using Eset Nod 32 and works pretty well with ISA Server 2006 Standard Edition.

(in reply to TechFan)

Post #: 8

RE: Antivirus update - 21.Oct.2010 9:49:42 AM

TechFan

Posts: 24
Joined: 9.Dec.2004
Status: offline

Yes, we use Kaspersky's internal to the firewall without issues, but we have some appliance like devices that don't need our standard AV, so I would still like to get this working. . .

(in reply to isa_rooky)

Post #: 9

RE: Antivirus update - 23.Oct.2010 4:10:49 AM