mcafee groupshield & netshield - update

Hi.
My sbs2000 connects to the net via adsl, using ppp over ethernet protocol.
Since two weeks ago, I was using a modem and raspppoe to connect, but, as
you suggested, we decided to buy a router and remove pppoe -----"for obvious
security reasons"----
ok, installed the router on the second nic, ran ICW, and everything was
re-configured in few minutes and worked fine
but....
but, starting that day, the antivirus solution installed on the server,
mcafee groupshield and netshield, doesn't auto-update anymore.....
I tried configuring the Av to use or not use the proxy server, but the
result didn't change......
From the server I can surf the web, and even go, using explorer, to
ftp.nai.com where the updates are resident......but the av says "can't
connect to update server".....
Can you help me please???
Forgetting: all the clients are able to autoupdate their mcafee
virusscan....
thanks
bye

Gizmo
Mon Sep 29 13:14:06 CDT 2003

Hi Davide

This will ensure it works

If you go to ' under Internet Acceleration server , servers and arrays,
<servername>, Access Policy Protocol Rules '
Right mouse click Protocol Rules
Click New
Type a name for the rule, next
next screen is response to allow request, click Allow, next
Apply this rule to:..choose ' selected protocol '
Choose FTP download only, next
Then asked to when to use this schedule...choose always..next
Apply this rule to any request, next
Finish

Also ensure you configure update via proxy server and port 8080


"Davide Beggio" <xxxdbeggio@raminformatica.it> wrote in message
news:%23ocOizlhDHA.1864@TK2MSFTNGP10.phx.gbl...
> Hi.
> My sbs2000 connects to the net via adsl, using ppp over ethernet protocol.
> Since two weeks ago, I was using a modem and raspppoe to connect, but, as
> you suggested, we decided to buy a router and remove pppoe -----"for
obvious
> security reasons"----
> ok, installed the router on the second nic, ran ICW, and everything was
> re-configured in few minutes and worked fine
> but....
> but, starting that day, the antivirus solution installed on the server,
> mcafee groupshield and netshield, doesn't auto-update anymore.....
> I tried configuring the Av to use or not use the proxy server, but the
> result didn't change......
> From the server I can surf the web, and even go, using explorer, to
> ftp.nai.com where the updates are resident......but the av says "can't
> connect to update server".....
> Can you help me please???
> Forgetting: all the clients are able to autoupdate their mcafee
> virusscan....
> thanks
> bye
>
>

Davide
Tue Sep 30 03:26:03 CDT 2003


> Hi Davide
>
> This will ensure it works
>
> If you go to ' under Internet Acceleration server , servers and arrays,
> <servername>, Access Policy Protocol Rules '
> Right mouse click Protocol Rules
> Click New
> Type a name for the rule, next
> next screen is response to allow request, click Allow, next
> Apply this rule to:..choose ' selected protocol '
> Choose FTP download only, next
> Then asked to when to use this schedule...choose always..next
> Apply this rule to any request, next
> Finish
>
> Also ensure you configure update via proxy server and port 8080

Thank you Gizmo.
I created in "isa protocol rules" the rule you suggested me, I ensured that
netshield and groupshield was configured to use my proxy server on port
8080, but nothing changed......with groupshield it says "no update
available", with netshield "An unknown error occurred while reading from the
remote system and the connection was dropped" (this is what I found in the
log).....in the same log, I can read that it starts downloading the update
files, but then this error occures.......
When I was connecting with raspppoe (and before with an isdn modem), the
updates always succeded.....I still have the isdn modem, as the least chance
I would know if I can configure the av updater to use a dial-up
connection.......better than "manual update" that I'm doing now....
I hope you can help me.....
bye

Gizmo
Tue Sep 30 11:55:50 CDT 2003

Hi Davide ...ISA is the problem..sorry its not solved straight away.

What settings do you have when running ICW ? You do need to tick FTP


"Davide Beggio" <xxxdbeggio@raminformatica.it> wrote in message
news:u0n8lxyhDHA.2496@tk2msftngp13.phx.gbl...
>
> > Hi Davide
> >
> > This will ensure it works
> >
> > If you go to ' under Internet Acceleration server , servers and arrays,
> > <servername>, Access Policy Protocol Rules '
> > Right mouse click Protocol Rules
> > Click New
> > Type a name for the rule, next
> > next screen is response to allow request, click Allow, next
> > Apply this rule to:..choose ' selected protocol '
> > Choose FTP download only, next
> > Then asked to when to use this schedule...choose always..next
> > Apply this rule to any request, next
> > Finish
> >
> > Also ensure you configure update via proxy server and port 8080
>
> Thank you Gizmo.
> I created in "isa protocol rules" the rule you suggested me, I ensured
that
> netshield and groupshield was configured to use my proxy server on port
> 8080, but nothing changed......with groupshield it says "no update
> available", with netshield "An unknown error occurred while reading from
the
> remote system and the connection was dropped" (this is what I found in the
> log).....in the same log, I can read that it starts downloading the update
> files, but then this error occures.......
> When I was connecting with raspppoe (and before with an isdn modem), the
> updates always succeded.....I still have the isdn modem, as the least
chance
> I would know if I can configure the av updater to use a dial-up
> connection.......better than "manual update" that I'm doing now....
> I hope you can help me.....
> bye
>

stephen
Wed Oct 01 06:25:30 CDT 2003

At last, somebody else that's having this problem.

I now have 2 different clients using SBS 2000 and TVD and both are
experiencing the very same problem as Gizmo, with their Netshield
Autoupdate.

I have opened port 20 & 21 for FTP and still no joy.

Please help !

Stephen



"Gizmo :-\)" <dontwant@anymorespam.com> wrote in message news:<OjJw3O3hDHA.1932@TK2MSFTNGP11.phx.gbl>...
> Hi Davide ...ISA is the problem..sorry its not solved straight away.
>
> What settings do you have when running ICW ? You do need to tick FTP
>
>
> "Davide Beggio" <xxxdbeggio@raminformatica.it> wrote in message
> news:u0n8lxyhDHA.2496@tk2msftngp13.phx.gbl...
> >
> > > Hi Davide
> > >
> > > This will ensure it works
> > >
> > > If you go to ' under Internet Acceleration server , servers and arrays,
> > > <servername>, Access Policy Protocol Rules '
> > > Right mouse click Protocol Rules
> > > Click New
> > > Type a name for the rule, next
> > > next screen is response to allow request, click Allow, next
> > > Apply this rule to:..choose ' selected protocol '
> > > Choose FTP download only, next
> > > Then asked to when to use this schedule...choose always..next
> > > Apply this rule to any request, next
> > > Finish
> > >
> > > Also ensure you configure update via proxy server and port 8080
> >
> > Thank you Gizmo.
> > I created in "isa protocol rules" the rule you suggested me, I ensured
> that
> > netshield and groupshield was configured to use my proxy server on port
> > 8080, but nothing changed......with groupshield it says "no update
> > available", with netshield "An unknown error occurred while reading from
> the
> > remote system and the connection was dropped" (this is what I found in the
> > log).....in the same log, I can read that it starts downloading the update
> > files, but then this error occures.......
> > When I was connecting with raspppoe (and before with an isdn modem), the
> > updates always succeded.....I still have the isdn modem, as the least
> chance
> > I would know if I can configure the av updater to use a dial-up
> > connection.......better than "manual update" that I'm doing now....
> > I hope you can help me.....
> > bye
> >

Davide
Wed Oct 01 08:13:10 CDT 2003


"Gizmo :-)" <dontwant@anymorespam.com> ha scritto nel messaggio
news:OjJw3O3hDHA.1932@TK2MSFTNGP11.phx.gbl...
> Hi Davide ...ISA is the problem..sorry its not solved straight away.
>
> What settings do you have when running ICW ? You do need to tick FTP
>
I'm almost sure (99%) I ticked ftp last time I ran ICW (I did it when I
installed the router), today I can't re-run ICW, but tomorrow morning I'll
do it and see......
this problem is driving me crazy.......even if manual update using superdat
doesn't take long time, I'd like the av updates automatically......

I hope tomorrow I'll write you that I solved the problem....
thank you again
bye

Gizmo
Wed Oct 01 13:57:38 CDT 2003

LOL..Stephen...mine works..now...Davide has the problem

I know what you are going thru...I had to update manually on six sites until
out of the blue had an email from a sales person at mcafee. Told him the
problem he got technical onto me.. The rules setting fixed it on all
sites...

Still cant find the problem, let alone the solution in their knowledge base
though


"Davide Beggio" <xxxdbeggio@raminformatica.it> wrote in message
news:eXRlh2BiDHA.604@TK2MSFTNGP10.phx.gbl...
>
> "Gizmo :-)" <dontwant@anymorespam.com> ha scritto nel messaggio
> news:OjJw3O3hDHA.1932@TK2MSFTNGP11.phx.gbl...
> > Hi Davide ...ISA is the problem..sorry its not solved straight away.
> >
> > What settings do you have when running ICW ? You do need to tick FTP
> >
> I'm almost sure (99%) I ticked ftp last time I ran ICW (I did it when I
> installed the router), today I can't re-run ICW, but tomorrow morning I'll
> do it and see......
> this problem is driving me crazy.......even if manual update using
superdat
> doesn't take long time, I'd like the av updates automatically......
>
> I hope tomorrow I'll write you that I solved the problem....
> thank you again
> bye
>

Davide
Thu Oct 02 09:52:40 CDT 2003

Gizmo, this morning I ran ICW again and ensured choosing "activate ISA
packet filters", and ticked all the options (included FTP).
Then I created again the protocol rule you suggested me, ensured once again
that groupshield have been set to use my proxy server on port 8080, but it
GOES ON telling me "no update available" after less than one second.....(and
I know there are updates availables)......
I hope you can help me......
thanx a lot
bye

Gizmo
Thu Oct 02 15:01:14 CDT 2003

Hi Davide

Reading your posts again I see you have a router attached to your second
nic...I don't feel these are neccessary with ISA..This is one difference on
your site to mine and my clients...Is there a firewall in this router ?
Which router is it ?

What is the meaning of remove modem and pppoe in your initial post ? What
type of internet connection do you have...


"Davide Beggio" <xxxdbeggio@raminformatica.it> wrote in message
news:%23WPM5SPiDHA.692@TK2MSFTNGP12.phx.gbl...
> Gizmo, this morning I ran ICW again and ensured choosing "activate ISA
> packet filters", and ticked all the options (included FTP).
> Then I created again the protocol rule you suggested me, ensured once
again
> that groupshield have been set to use my proxy server on port 8080, but it
> GOES ON telling me "no update available" after less than one
second.....(and
> I know there are updates availables)......
> I hope you can help me......
> thanx a lot
> bye
>