Just want to say thanks to those for the information. Didy
> -----Original Message----- > From: Durkee, Peter [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, October 30, 2001 5:01 PM > To: Exchange Discussions > Subject: RE: Groupshield For Exchange Version 4.5 > > If you are currently using the client piece of Groupshield you should > remove your old version of Groupshield entirely and install the new from > scratch, rather than trying to upgrade to the new version. > > Grab the Message Body Scanner utility from the NAI website, and install it > after you get Groupshield installed or upgraded. This is the piece that > allows you to detect the kak.worm and other viruses that are embedded in > the message body. > > When you're asked if you want to quarantine viruses in a folder or > database, pick database. This is necessary if you want to use the add-on > utility that allows you to determine where messages are being sent from > and to. > > If you can't pry hotfix 7 out of NAI, set the action to take on virus > detection, under the On Access tab, to "Quarantine without attempting to > disinfect." This is because before hotfix 7, Groupshield didn't always > copy successfully with the Magistr virus when trying to clean it. Of > course if you decide to filter out all EXE attachments that's a moot > point. > > -Peter > > > -----Original Message----- > From: Randal, Phil [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, October 30, 2001 1:52 > To: Exchange Discussions > Subject: RE: Groupshield For Exchange Version 4.5 > > > In a nutshell, yes. > > Make sure Exchange is patched to at least SP4. > > Beg, borrow, or steal Hotfix 7 for Groupshield and apply > as soon as possible. This is a critical update, needed for > core functionality of the product. I would not try to run > Groupshield without it. Actually, I did, which is why I > make this comment :-( > > You'll need to edit the registry on the exchange server > > In > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\VirusSca > n > set the OpenRetryDelay value to at least 0x500 (we use 0x800 here). > > http://support.microsoft.com/support/kb/articles/Q264/7/31.ASP > > recommends an even higher value. > > And after changing this key, you'll need to restart the Exchange > IS service. NAI claims you don't need to, but, not so in our > experience. > > Cheers, > > Phil > --------------------------------------------- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: Sebastian, Didy [mailto:[EMAIL PROTECTED]] > > Sent: 30 October 2001 09:20 > > To: Exchange Discussions > > Subject: Groupshield For Exchange Version 4.5 > > > > > > Can anyone tell me if they have had issues with upgrading > > their virus scan > > software to Groupshield version 4.5 > > > > I have been told that there can be problems. > > > > Thanks in advance, > > Didy > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ______________________________________________ > This message is private or privileged. If you are not the > person for whom this message is intended, please delete it > and notify me immediately, and please do not copy or send > this message to anyone else. > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
