[WEBMON] virus scanner not updating

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

[WEBMON] virus scanner not updating

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI WebMonitor >> [WEBMON] virus scanner not updating

Page: [1]

Message

<< Older Topic Newer Topic >>

[WEBMON] virus scanner not updating - 14.Aug.2005 11:43:00 PM

paulfarris

Posts: 7
Joined: 14.Aug.2005
From: London
Status: offline

After installing webmon3 beta I am receiving the following message:

GFI WEB Monitor: The virus scanning updates failed to be updated properly: Error 12029 has occurred.

Can anyone help pls?

Post #: 1

RE: [WEBMON] virus scanner not updating - 15.Aug.2005 12:29:00 AM

Ian.turvey

Posts: 13
Joined: 14.Aug.2005
From: London
Status: offline

check you log for the ISA server look for avx you should then be able to determine why the updates are not being processed.

Most likely you need to modify/create a rule to allow the connection

(in reply to paulfarris)

Post #: 2

RE: [WEBMON] virus scanner not updating - 15.Aug.2005 10:40:00 PM

paulfarris

Posts: 7
Joined: 14.Aug.2005
From: London
Status: offline

Thanks. I have checked my logs but cannot find the problem.

Do you know what rule I need to create (ports/protocols etc)?

(in reply to paulfarris)

Post #: 3

RE: [WEBMON] virus scanner not updating - 16.Aug.2005 2:30:00 AM

Ian.turvey

Posts: 13
Joined: 14.Aug.2005
From: London
Status: offline

Hi Did you find any entries against avx?

Do you run other GFI software?

You could make a rule like the following

Create computer name sets (servers requiring gfi updates)

Creat a domain name set containing all the GFI update sites
66.98.238.101
66.98.238.102
216.218.202.30
update.gfi.com

Create a new rule

GFI update

Allow
local host and server name sets that need updating

To
GFI doamin name set

Users

All

Please let me know how you get on.

Ian.

(in reply to paulfarris)

Post #: 4

RE: [WEBMON] virus scanner not updating - 16.Aug.2005 5:59:00 AM

paulfarris

Posts: 7
Joined: 14.Aug.2005
From: London
Status: offline

I do not run any other gfi software.

I have the rule in place but the virus checker is still not updating.

I cannot find any mention of avx on the monitoring/logging view.

Any other suggestions?

(in reply to paulfarris)

Post #: 5

RE: [WEBMON] virus scanner not updating - 16.Aug.2005 10:51:00 PM

Ian.turvey

Posts: 13
Joined: 14.Aug.2005
From: London
Status: offline

Silly question but you have enabled the virus option in the configuration?

You have looked for all of the following in the logs

66.98.238.101
66.98.238.102
216.218.202.30
update.gfi.com

Check your gfi services are all running.

Normally I create a specific user with the the right permission and use this user for the GFI services.

Also check to make sure you have a rule allowing local host to access the above addresses.

Ian

(in reply to paulfarris)

Post #: 6

RE: [WEBMON] virus scanner not updating - 17.Aug.2005 1:24:00 AM

paulfarris

Posts: 7
Joined: 14.Aug.2005
From: London
Status: offline

Hi, thanks. the virus checking is enabled. The gfi service is running. It is running under a domain admin account. I have the rule enabled.

I have installed the beta (12th Aug 2005 version) on an ISA 2004 and ISA 2000 machine. Both will not update virus checker or block adult sites. No traffic blocked, in the logs, to yahoo or the virus update site.

Both have "Checking failed. [ Connection failed. [object Error] +]" on the site check list and "Last update check failed.Error 12029 has occurred" on the bitdefender screen.

Any suggestions?

(in reply to paulfarris)

Post #: 7

RE: [WEBMON] virus scanner not updating - 17.Aug.2005 2:19:00 AM

Ian.turvey

Posts: 13
Joined: 14.Aug.2005
From: London
Status: offline

Please try the following

Create a new access rule

GFI WebMonitor Access (if does not exist)

Allow

Selected Protocols
HTTP
HTTPS
FTP

From
Local Host

To
WebMonitor Update Servers

(if WebMonitor Update server dose not exist - create under the url sets

WebMonitor update servers
http://search.yahoo.com

)

All users

Once created

In ISA go to monitoring
Edit the filter and include

http://search.yahoo.com

in url contains

run the query

Try the SiteTester.HTA

and look at the ISA log you should see the entries

Destination Host Name
search.yahoo.com

Log Time
17/08/2005 13:07

Destination IP
216.109.117.133

Destination Port
80

Protocol
http

Action
Allowed Connection

Rule
GFIWebMonitor Access

Client IP
127.0.0.1

Client Username
anonymous

Source Network
Local Host

Destination Network
External

HTTP Method
GET

URL
http://search.yahoo.com/search?p=hostname%3Awww.playboy.com&ei=UTF-8&fl=0&vm=p&dups=1&fr=FP-tab-web-t&dups=1&n=20

(in reply to paulfarris)

Post #: 8

RE: [WEBMON] virus scanner not updating - 21.Aug.2005 7:33:00 PM

mactak

Posts: 1
Joined: 21.Aug.2005
Status: offline

Hi Paulfa.
Wich port on your ISA you use as a proxy service?
Do you have restricted anonymous access to internet from clients?
If no, you must to edit SiteJudge.js with notepad.
i have proxy service listen on 3128.
I do it and SiteCheck feature is working now, but antivirus update still don't work.

(in reply to paulfarris)

Post #: 9