We currently run Sybari's Antigen v6.2 on an Exch 5.5SP4 box, but we also own the McAfee product. Does anyone have any specific concerns about running both? Does it sound disastrous and totally paranoid, or do you agree that redundant is not worse in this case.
Keith Beahm, Network Engineer Stinson Mag & Fizzell, P.C. 816.691.3374 [EMAIL PROTECTED] 816.918.0988 -----Original Message----- From: Sebastian, Didy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 11:24 AM To: Exchange Discussions Subject: RE: Groupshield For Exchange Version 4.5 Just want to say thanks to those for the information. Didy > -----Original Message----- > From: Durkee, Peter [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, October 30, 2001 5:01 PM > To: Exchange Discussions > Subject: RE: Groupshield For Exchange Version 4.5 > > If you are currently using the client piece of Groupshield you should > remove your old version of Groupshield entirely and install the new from > scratch, rather than trying to upgrade to the new version. > > Grab the Message Body Scanner utility from the NAI website, and install it > after you get Groupshield installed or upgraded. This is the piece that > allows you to detect the kak.worm and other viruses that are embedded in > the message body. > > When you're asked if you want to quarantine viruses in a folder or > database, pick database. This is necessary if you want to use the add-on > utility that allows you to determine where messages are being sent from > and to. > > If you can't pry hotfix 7 out of NAI, set the action to take on virus > detection, under the On Access tab, to "Quarantine without attempting to > disinfect." This is because before hotfix 7, Groupshield didn't always > copy successfully with the Magistr virus when trying to clean it. Of > course if you decide to filter out all EXE attachments that's a moot > point. > > -Peter > > > -----Original Message----- > From: Randal, Phil [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, October 30, 2001 1:52 > To: Exchange Discussions > Subject: RE: Groupshield For Exchange Version 4.5 > > > In a nutshell, yes. > > Make sure Exchange is patched to at least SP4. > > Beg, borrow, or steal Hotfix 7 for Groupshield and apply > as soon as possible. This is a critical update, needed for > core functionality of the product. I would not try to run > Groupshield without it. Actually, I did, which is why I > make this comment :-( > > You'll need to edit the registry on the exchange server > > In > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\VirusSca > n > set the OpenRetryDelay value to at least 0x500 (we use 0x800 here). > > http://support.microsoft.com/support/kb/articles/Q264/7/31.ASP > > recommends an even higher value. > > And after changing this key, you'll need to restart the Exchange > IS service. NAI claims you don't need to, but, not so in our > experience. > > Cheers, > > Phil > --------------------------------------------- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: Sebastian, Didy [mailto:[EMAIL PROTECTED]] > > Sent: 30 October 2001 09:20 > > To: Exchange Discussions > > Subject: Groupshield For Exchange Version 4.5 > > > > > > Can anyone tell me if they have had issues with upgrading > > their virus scan > > software to Groupshield version 4.5 > > > > I have been told that there can be problems. > > > > Thanks in advance, > > Didy > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ______________________________________________ > This message is private or privileged. If you are not the > person for whom this message is intended, please delete it > and notify me immediately, and please do not copy or send > this message to anyone else. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
