#102248 - 2003-06-18 09:22 PM
Symantec Antivirus CE 8.1
|
Allen
KiX Supporter
   
Registered: 2003-04-19
Posts: 4567
Loc: USA
|
Thought I would pass along some info I had to figure out the hard way.
It appears Symantec has changed the manual way of updating the AV Parent Server on version 8.1. In the past we downloaded the updated definitions from their FTP, ran the Intelligent Updater, and from there, the server pushed it out to the clients. (For some stupid reason, LiveUpdate is not allowed on our corporate network.) This has worked fine since at least version 7.5. After upgrading to 8.1 I began to notice none of our clients were getting the lastest defs. Finally, after some posts on symantec they offered a solution... they changed the way it updates and it is now necessary to download a XDB file before the server can push the defs to the server. Not sure if I have to do this every time, and have posted another question asking this. For those interested, below is the link to the Symantec posts (you may have to copy and paste the link).
http://servicenews.symantec.com/cgi-bin/displayArticle.cgi?article=16388&group=symantec.support.network.sav.general&mini_version=sav_8_ce&product=sav_ce&product_name=Symantec+AntiV irus+Corporate+Edition&submit=Post&tpre=ep&version_name=8.x&
|
|
Top
|
|
|
|
#102250 - 2003-06-19 07:04 PM
Re: Symantec Antivirus CE 8.1
|
cmarti
Hey THIS is FUN
Registered: 2001-02-26
Posts: 297
Loc: Little Rock, AR
|
The xdb download let your clients receive a delta when using the vdtm method clients automatically getting defs when the parent gets them) of receiving defs. This cuts down the definition download size from 3+mb to around 150kb. If the client defs are too old it will push out a full def download to them. It also pushes a full def download about once every 7 days to them anyway to make sure the def file they have is not corrupted.
I had set up downloading the xdb file with 8.01. Then 8.1 came out, then Symantec pulled it because of symevnt problems. Now they've rereleased it..
90% of our client machines are 7.60, which is cool because even with downloading the xdb it still pushes a vdb file to 7.x clients instead of the delta. I actually have to download the xdb and the symcdefsx86.exe file. I extract the x86 and push the defs to another server in a different server group that's owned by another group.
Here's a copy of the batch file that I use just in case.. code:
:ClearDirectories Echo y| del e:\platdefs\*.* Echo y| del c:\vdb\*.*
:GetDefs ftp -s:platdefs.txt>c:\scripts\logs\platlog.log Dir e:\platdefs\symcdefsx86.exe |find /I " 0 symcdefsx86.exe" IF %ERRORLEVEL% == 0 goto DownloadError Dir e:\platdefs\nav8up.exe |find /I " 0 navup8.exe" IF %ERRORLEVEL% == 0 goto DownloadError
:Extract e: cd platdefs navup8 E:\PLATDEFS\symcdefsx86.exe /q /extract /vdb "c:\vdb" ECHO The attached file is the results of the ftp of the definitions from symantec.>C:\SCRIPTS\LOGS\COPYDEFS.LOG ECHO If these are NEW definitions, they will automatically be pushed out to client machines.>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ECHO This runs from \\myprimaryparent\C$\scripts\Platdefs.bat>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ECHO.>>C:\SCRIPTS\LOGS\COPYDEFS.LOG
:CopyDefs COPY E:\Platdefs\*.xdb "c:\program files\sav\" IF '%ERRORLEVEL%' == '0' ( ECHO Definitions successfully copied to myprimaryparent>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ) Else ( ECHO. ECHO UNABLE TO COPY DEFINITIONS TO \\myprimaryparent\C$\PROGRAM FILES\Sav!!!>>C:\SCRIPTS\LOGS\COPYDEFS.LOG )
COPY E:\Platdefs\*.xdb "\\parent\c$\program files\sav\" IF '%ERRORLEVEL%' == '0' ( ECHO Definitions successfully copied to parent>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ) Else ( ECHO. ECHO UNABLE TO COPY DEFINITIONS TO \\parent\C$\PROGRAM FILES\Sav!!!>>C:\SCRIPTS\LOGS\COPYDEFS.LOG )
COPY c:\vdb\*.* "\\AnotherParentInADifferentServerGroup\VPHOME\" IF '%ERRORLEVEL%' == '0' ( ECHO Definitions successfully copied to AnotherParentInADifferentServerGroup>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ) Else ( ECHO. ECHO UNABLE TO COPY DEFINITIONS TO \\AnotherParentInADifferentServerGroup\Vphome!!!>>C:\SCRIPTS\LOGS\COPYDEFS.LOG )
COPY c:\vdb\*.* "\\AnotherParentInADifferentServerGroup\c$\Program Files\Nav\" IF '%ERRORLEVEL%' == '0' ( ECHO Definitions successfully copied to AnotherParentInADifferentServerGroup>>C:\SCRIPTS\LOGS\COPYDEFS.LOG ) Else ( ECHO. ECHO UNABLE TO COPY DEFINITIONS TO \\AnotherParentInADifferentServerGroup\c$\Program Files\Nav\!!!>>C:\SCRIPTS\LOGS\COPYDEFS.LOG )
:Email blat.exe C:\SCRIPTS\LOGS\COPYDEFS.LOG -attacht "c:\scripts\logs\platlog.log" -t me@mycompany.com -s "Antivirus Definition download on %computername%."
:THEEND
I also download liveupdate defs from a different batch file, and push them out to a dfs share, which is about 5 servers. I have the liveupdate clients, home machines, getting their defs from a dfs share. I have onsite client machines set up for liveupdate, but don't use it. It's just a security blanket....
L8tr..
|
|
Top
|
|
|
|
#102254 - 2003-06-24 03:03 AM
Re: Symantec Antivirus CE 8.1
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11631
Loc: CA
|
What a joy. See, this is the EXACT reason why I "tet" updates before rolling them out.
You just got lucky with this one Les, similar issues have happened in the past for the 7.x version as well.
I've actually been to the local Symantec office where they write the code and test the code. They have a very cool automated system, but I guess you can't test everything. Although I would have thought something like this would have been caught before it was made available.
|
|
Top
|
|
|
|
#102256 - 2003-06-24 03:27 AM
Re: Symantec Antivirus CE 8.1
|
Allen
KiX Supporter
   
Registered: 2003-04-19
Posts: 4567
Loc: USA
|
Les,
I hope you are kidding.
It's been a few years since my breakup with McAfee... We ended up disabling VirusShield on the PCs because of all the problems it caused. I hope they are better now than in the past...
|
|
Top
|
|
|
|
Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 640 anonymous users online.
|
|
|