Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Sym AV 8 Corp Problems

Status
Not open for further replies.

plattze

IS-IT--Management
Feb 2, 2004
73
AU
im using 8.0.1.821 of Symantec AntiVirus Corporate Edition, and from the CD I installed Symantec System Center Console onto my workstation to manage everything locally. The version of System Center Console which was installed was version 5.0


I'm trying to tighten up our AV structure in our company, but I'm having some trouble.

I've created two groups for the single symantec AV Server have running, servers and workstations. Obvious who goes where.

Now, I am trying to configure Exchange/outlook email protection for every workstation which has SAVCE installed (everyone). I right click on the group -> configure exchange -> set what I want, then OK. BUT, the settings are not propergating to any client inside that group. At all. No error messages are given or anything, but when I go onto any client, and look at it's Exchange preferences, it still hasnt changed.

This is what I want and I would be really appreciative if someone could help me.

1) Exchange/Outlook. When a virus arrives in someones inbox, they NEVER actually get the virus email. Rather, it immediately gets quarantined, and instead they recieve an email saying a virus was detected, and it's been moved to quarantine with instructions on how to remove. I also want myself (sys admin) to recieve an email saying person X has recieved an email from Person Y which has V virus.
2) How do I stop clients from disable realtime protection? BUT still allow them to specify exclusion folders.
3) How can I do a group wide purge of all virus's? I want to select the workstation group, and do it, and when it's complete, not every client in that group has had it's quarantine purged and it's virus status cleared. And anyone who may still have a virus to let me know about it.

I'm having a VERY annoying problem of System Center Console showing someone as infected, with the virus being in there quarantine, but SAVCE not allowing me to delete the virus or anything. Says "Symantec AntiVirus cannot perform this action on 1 of the files your selected."

Finally, whats the latest version of System Center Console, and how to do update to it?

I really appreciate the help. :)
 
Thanks, Yep I've read them.

I've figured out why the settings werent propergating and how to lock settings.

Can someone help me with the exchange configuration problem. When I send the eicar test virus file to someone (to test) - firstly, outlook 2003 doesn't do anything. The email loads, then the realtime protections kicks in. With Outlook XP, it loads, the email has been renamed etc as my config, BUT when the user opens the email, the realtime protection still kicks in. I've set the exchange/outlook plugin to Quarantine first, then delete. When I go to the client, have a look at virus log, it shows realtime protection picked it up. Shouldn't the exchange plugin have detected it?

At the moment, the virus still exists in the email. I want AV to stop the virus from appearing in there inbox, merely just email them (and me) saying they GOT a virus and it's been quarantined.

This doesnt seem to be in the doc.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top