If you are currently using the client piece of Groupshield you should remove your old 
version of Groupshield entirely and install the new from scratch, rather than trying 
to upgrade to the new version. 

Grab the Message Body Scanner utility from the NAI website, and install it after you 
get Groupshield installed or upgraded. This is the piece that allows you to detect the 
kak.worm and other viruses that are embedded in the message body. 

When you're asked if you want to quarantine viruses in a folder or database, pick 
database. This is necessary if you want to use the add-on utility that allows you to 
determine where messages are being sent from and to.

If you can't pry hotfix 7 out of NAI, set the action to take on virus detection, under 
the On Access tab, to "Quarantine without attempting to disinfect." This is because 
before hotfix 7, Groupshield didn't always copy successfully with the Magistr virus 
when trying to clean it. Of course if you decide to filter out all EXE attachments 
that's a moot point.

-Peter


-----Original Message-----
From: Randal, Phil [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 30, 2001 1:52
To: Exchange Discussions
Subject: RE: Groupshield For Exchange Version 4.5


In a nutshell, yes.

Make sure Exchange is patched to at least SP4.

Beg, borrow, or steal Hotfix 7 for Groupshield and apply
as soon as possible.  This is a critical update, needed for
core functionality of the product.  I would not try to run
Groupshield without it.  Actually, I did, which is why I
make this comment :-(

You'll need to edit the registry on the exchange server

In
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\VirusScan
set the OpenRetryDelay value to at least 0x500 (we use 0x800 here).

http://support.microsoft.com/support/kb/articles/Q264/7/31.ASP

recommends an even higher value.

And after changing this key, you'll need to restart the Exchange
IS service.  NAI claims you don't need to, but, not so in our
experience.

Cheers,

Phil
---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

> -----Original Message-----
> From: Sebastian, Didy [mailto:[EMAIL PROTECTED]]
> Sent: 30 October 2001 09:20
> To: Exchange Discussions
> Subject: Groupshield For Exchange Version 4.5
> 
> 
> Can anyone tell me if they have had issues with upgrading 
> their virus scan
> software to Groupshield version 4.5
> 
> I have been told that there can be problems.
> 
> Thanks in advance,
> Didy
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

______________________________________________
This message is private or privileged.  If you are not the
person for whom this message is intended, please delete it
and notify me immediately, and please do not copy or send
this message to anyone else. 



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to