Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Anti-virus Update Issues

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI WebMonitor >> Anti-virus Update Issues Page: [1]
Login
Message << Older Topic   Newer Topic >>
Anti-virus Update Issues - 15.Jun.2009 1:44:28 PM   
Carl72x

 

Posts: 4
Joined: 15.Jun.2009
Status: offline
Environment:
Windows Server 2003 SP2
Windows ISA Server 2004 SP3
GFI WebMonitor 2009 (build 20090515) licensed

Problem:
Every time we try to update the A/V definitions for both BitDefender and Norman we get an error message on their respective pages in WebMon.  An example of the error is "Anti-virus last updated on:  Last update check failed.Status: 200 ContentType: text/html; charset=ISO-8859-1 Next try: 06-15 14:46"

After google-ing the only suggestion I've seen is to disable the compression filter in ISA, but this didn't work.  Any insight would be great. 
Post #: 1
RE: Anti-virus Update Issues - 15.Jun.2009 4:03:45 PM   
DrewE

 

Posts: 1032
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
Is there anything "upstream" from the Microsoft ISA server, perhaps another proxy, firewall, security appliance, corporate office Internet connection, etc.

Also, if you enter http://www.thisdomainclearlydoesnotexist.net/ are you taken to an "Internet Explorer cannot display the webpage" error, or are you redirected to something else like your Internet Providers "search page"?

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to Carl72x)
Post #: 2
RE: Anti-virus Update Issues - 16.Jun.2009 10:59:13 AM   
Carl72x

 

Posts: 4
Joined: 15.Jun.2009
Status: offline
We have a Cisco PIX 515E between the Internet and ISA.  Also when trying bogus URLs we are directed to the "IE cannot display this page" page

(in reply to DrewE)
Post #: 3
RE: Anti-virus Update Issues - 16.Jun.2009 11:03:46 AM   
DrewE

 

Posts: 1032
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
Can you tell us if the Cisco PIX logs show it is blocking any traffic out from out application?

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to Carl72x)
Post #: 4
RE: Anti-virus Update Issues - 16.Jun.2009 11:54:00 AM   
Carl72x

 

Posts: 4
Joined: 15.Jun.2009
Status: offline
I'm still working on getting access to the PIX, but I have found in ISA that when I try update the AV definitions we get multiple entries that look like:

Initiated Connection SERVER1 6/15/2009 12:50:50 PM
Log type: Firewall service
Status: The operation completed successfully.
Rule: -
Source: Local Host (SERVER1.contoso.net 127.0.0.1:35302)
Destination: Local Host (SERVER1.contoso.net 127.0.0.1:1007)
Protocol: Unidentified IP Traffic (TCP:1007)
User: -
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 0ms Original Client IP: 127.0.0.1
Client agent: -

and:
Closed Connection SERVER1 6/15/2009 12:50:39 PM
Log type: Firewall service
Status: A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.
Rule: -
Source: Local Host (SERVER1.contoso.net 127.0.0.1:35250)
Destination: Local Host (SERVER1.contoso.net 127.0.0.1:1007)
Protocol: Unidentified IP Traffic (TCP:1007)
User: -
Additional information
Number of bytes sent: 5480 Number of bytes received: 480608
Processing time: 0ms Original Client IP: 127.0.0.1
Client agent: -

If that is of any help...

(in reply to DrewE)
Post #: 5
RE: Anti-virus Update Issues - 18.Jun.2009 3:40:42 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline
Hi, Please check with GFI if your license key is valid.

(in reply to Carl72x)
Post #: 6
RE: Anti-virus Update Issues - 18.Jun.2009 3:18:40 PM   
Carl72x

 

Posts: 4
Joined: 15.Jun.2009
Status: offline
it is a valid license, i just upgraded it from WebMonitor 2004 on the customer login site. It doesn't matter anyway, I reinstalled and so far so good. Thanks for the help.

(in reply to davidf)
Post #: 7
RE: Anti-virus Update Issues - 19.Jun.2009 9:58:39 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline
Most probably your WM2009 was still using your WM4 license key in such case our redirection server will return http 200 instead of 302  redirect to update server.

(in reply to Carl72x)
Post #: 8
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI WebMonitor >> Anti-virus Update Issues Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts