Do not McAfee not provide a facility to automatically do this for you?
 
I haven't used McAfee but have used various other flavours (Sophos, Trend, AVG, CA)  and find it difficult to believe that this is not provided as part of the Software?


From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Dirk Bulinckx
Sent: 21 June 2006 13:41
To: Servers Alive Discussion List
Subject: RE: [SA-list] Checking anti-virus updates

What you could do is download the update.ini file from McAfee
http://download.nai.com/products/datfiles/4.x/nai/update.ini
 
That contains not only the version number of the dat file (in the [SuperDat-IA32] or [ZIP] or [SCM] or [Incremental] section under DATVersion) but also a checksum/filesize/filename for the latest .DAT file (and even a version/size/checksum for the engine).
 
 
Next step is then to check for the version/size/.... of the file you have on "your" system and compare both of them.
 
 
Looks like an interesting project....
Ian if you want an offer on this from Woodstone, then contact me offlist.
 
 

Dirk Bulinckx.

 


From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Dirk Bulinckx
Sent: Wednesday, June 21, 2006 2:31 PM
To: Servers Alive Discussion List
Subject: RE: [SA-list] Checking anti-virus updates

SA as such can't do the download, but you could do this via some external check.  BUT won't take just take a long time?  Isn't the version  (date/time) stamp somehow available in an easy format?
 

Dirk Bulinckx.

 


From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Vogl, Tom
Sent: Wednesday, June 21, 2006 2:26 PM
To: Servers Alive Discussion List
Subject: RE: [SA-list] Checking anti-virus updates

Ian,
 
Can you have SA do a download (FTP?) from McAfee and then do a binary file compare (FC) of your download vs whatever file you are using internally?
 
-Tom
 


From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, June 21, 2006 7:32 AM
To: Servers Alive Discussion List
Subject: [SA-list] Checking anti-virus updates


Folks,

Every morning our Service Desk do a manual check to see that our anti-virus infrastructure is up to date. Specifically, they check that the virus definitions file (from McAfee) on the central server is the latest one.

I'd love to automate that check, but I'm not sure how to do it. I can do a check on the timestamp of the file on the server, but I then need to be able to somehow test if that is the latest available file. As the updates come out from McAfee at irregular intervals (anything from a few times a day to a few times a week) doing an "older than x hours" isn't really adequate.

Any ideas? Is anyone else doing this?

Cheers,

Ian
_________________________________
Ian K Gray
OEL IS - European Infrastructure Support
Tel: +44 1236 502661
Mob: +44 7881 518854


To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.

To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.

To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.

To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.

To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.

Reply via email to