That is the web server that the software uses for administration, if you
connect to http://localhost:8080/ from the box running NAV for Exchange 2.5
it should prompt you for a username/password.  However, it only requires a
password (I do not believe there is even an option to set a username) and
may have a blank password set (which is often the case if it is IP
restricted, as it should be).

I do not believe you can disable this, since it is required for
administration.  However, the manual is available online
(http://www.symantec.com/techsupp/enterprise/products/nav/nav-ms-exchange2/m
anuals.html) so you may want to peruse that to find out more.

If you use IP restriction and set a strong password that is the best you can
do with the NAV for Exchange 2.5  web server, also **make sure it isn't
allowed outside of your firewall or to any untrusted networks**...this
should minimize risk.

The other alternative is if you can upgrade to version 3.0 (now called
Symantec AntiVirus/Filter 3.0 for Microsoft Exchange) it uses IIS for the
web server and you can lock it down much better (since you have all the
control you would have on any IIS site) - plus the added benefit is that the
app installs in the System context instead of requiring a special account.

Eric

----- Original Message -----
From: "Martin Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, February 11, 2002 8:02 AM
Subject: Norton Antivirus for Exchange (Port 8080)




   We are currently running 2.5 norton antivirus for Exchange. Nessus
reports that port 8080 is open and might be possible to make this web server
execute. Now, can I close off this port? Has anyone else seen this???


     Thanks for your help...


             Martin

_________________________________________________________________
Join the world's largest e-mail service with MSN Hotmail.
http://www.hotmail.com



Reply via email to