Security

Ask something
Discussion Locked

ISA Server

0 helpful
5 replies

by dweideman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi everyone,

I have ISA Server running on a SBS 2000 server and uses Exchange 2000. All SPs have been installed. For virus detection I have Symantec AV Corporate Edition. I do not want to loose security but I do want my AV program to use LiveUpdate. At the moment it keeps telling me that I must check my Internet connection and try again. My internet connection is a 64kB leased line. Thus, with 24 hour internet connection I cannot understand that it wants to tell me that I do not have an internet connection. I have chosen the option that it must use the same connection as IE. Is there perhaps another way that I can do it? Maybe a setting on the ISA server to allow it to connect to Symantec's site? It uses FTP to connect for the LiveUpdate. I can ftp to any site using an IE browser.

Thank you all

5 replies

by cg it

.

The below link is from symantec's support page on configuring Live Update. Don't know if that is any help to you. I do know that ISA server has many configuration options and one or more of them may be dening symantec an outside connection. Check ISA server's acess rules [including days and times rule] protocol rules and firewall rules.

symantec.com/SUPPORT/sharedtech.nsf/docid/1999121613163206e.

Provide a little more detail on how ISA is configured as by default, ISA denys access unless configured otherwise by a rule, filter or protocol.

by leon_guerrero

This is from the Symantec Site:
--------------------------------------------------
Settings needed to configure your firewall for LiveUpdate

Situation:
You want to configure a firewall to enable LiveUpdate to access the Internet.

Solution:
LiveUpdate requires unblocked Internet access. If you are using a firewall, then it must be configured to allow this or LiveUpdate will fail.

The following is the information that is needed to configure your firewall to allow this access. For instructions on how to enter these settings, read your firewall's documentation or contact the manufacturer.

Ports, protocol, and the file information

LiveUpdate requires access to ports 80 (HTTP), 21 FTP) and 443 (HTTPS).

The protocol used isTCP.

The file that accesses the Internet is Lucomserver.exe. By default that file is located in C:\Program Files\Symantec\LiveUpdate.
The domains that LiveUpdate accesses are symantec.com, symantecliveupdate.com, and akamai.net. When access to one domain is blocked or otherwise fails, LiveUpdate attempts to access one of the other listed domains.
--------------------------------------------------
Check your site and content rules, protocol rules, and IP packet filters to make sure port 80, 21, and 443 are allowed out to the Internet.

This discussion is closed to new replies.