I have had the antivirus scanner up for 1 1/2 days now. Today three email messages came through to my email that contained the Stration virus. Fortunately I have McAfee installed on the desktop and that deleted the virus. When I went out to Symantec's website, they were well aware of the virus as it has been in the wild since August of 2006, yet their AV software failed to detect it. Just my observation.
Deb Chard ILX Lightwave -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Donnelly Sent: Thursday, November 02, 2006 2:45 PM To: [email protected] Subject: RE: [IMail Forum] Symantec Antivirus Scan Engine I too noticed that 'scan all extensions', but after I had sent the email and I had found the other information (from the KB, but maybe it applies to an earlier release?). (Hmmm, why did it not scan my first message with a .pdf file? Something else to figure out! Maybe it did but the screen did not update? I did Reset the statistics at one point...) Glad to hear that you can now see updated info! I've not determined 100% as to what triggers an update to that screen, but your info about getting a virus, may be one of the triggers. Nope, I and the rest of the support (pre & post sale) folks do not want to 'blow off' anybody (it really is not in our nature, we actually like finding/knowing answers!). Just that we don't always know the answers for every possible question on every product and figuring out or otherwise finding out, sometimes takes a little while (and we [read as "me"!] are sometime stubborn, wanting to find it ourselves, not asking for help). And it seems that there are always new questions (how do you guys do it?) arriving, sometimes faster than we can smoothly handle. Yesterday was one of those days, for me (I cannot speak for the Tech Support folks), but today I had the time need to research (read "play") with this and well, it was not too tough to figure out... Glad to help & Thanks for your patience! Daniel Donnelly -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Deborah Chard Sent: Thursday, November 02, 2006 1:38 PM To: [email protected] Subject: RE: [IMail Forum] Symantec Antivirus Scan Engine Dan, When I looked at the status screen today, it had been updated. It appears that updating may not happen at all unless a virus is actually caught. I know one was caught as I received an email indicating this was so and now I see that 2400 files have been scanned. I had already downloaded the Java stuff as I was trying to look at the reports yesterday. Also, when I look at the AV tab on the blocking policy page, under File Types to be scanned, Scan all files regardless of extension is what is selected. I appreciate that you stuck with this, honestly I thought you guys were just going to blow me off. Thanks for your assistance. Deb -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Donnelly Sent: Thursday, November 02, 2006 11:00 AM To: [email protected] Subject: RE: [IMail Forum] Symantec Antivirus Scan Engine Deb, Actually you talked to pre-sales support, not Technical Support. It was me...filling in for the normal person who is on vacation. I know IMail pretty well, but AV is not too high on my expertise list... What I've found so far (on the brand new system I built) is that logging is not turned on by default, so you won't find any log information until you do that! Once I did that (Configuration, Logging and set Level to Verbose, I did not enable other logging like Windows or SMTP or SNMP), I could see the log contained start and stop information for the AV service. But a message passing through the system did not record anything in the log, at least with the settings I've tried so far. I suspect that one would have to send a message that has a virus in it, to see information recorded and I may be trying that in the very near future. I've also found that by default, AV scans only files that are executable, so testing with other file types will not result in files being scanned. That seems to be my first mistake... Testing with an executable did not show any statistics right away, but when I came back to that page after poking around, I now see: Total requests: 1 Total files scanned: 3 One note, the above happened only after I downloaded and installed the Sun Java stuff that was triggered when I clicked on the Reporting menu item, then the Statistics tab. Prior to this, I had seen only a broken link icon on that page and I did not install the Sun Java at the earlier time. Once the java was installed, I could see the Statistics screen and I did click the Generate Report button. And I did this all before I went back to the Status screen. Now when I send an email with an executable as the attachment, I can see the status information increment, the Requests by 1 and files scanned by 3 (it went to 6, not sure exactly why, but at this time I don't think that is really important). It took more than a few seconds for the values on screen to update. I'd estimate it was 30-40 seconds after I clicked Send on the client computer (the attachment was about 212kb, so transmission took only a couple of seconds). Daniel Donnelly Technical Sales Representative Ipswitch, Inc. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Deborah Chard Sent: Wednesday, November 01, 2006 5:02 PM To: [email protected] Subject: [IMail Forum] Symantec Antivirus Scan Engine I have 2006.1 with the Premium AntiSpam and the Symantec Antivirus scan engine. I had been running Imail 8.15 and I won't go on about all the problems I have run into trying to get this up and running. After convincing IMail that I needed an evaluation license for the Antivirus Scan Engine before I even considered upgrading to the Secure Server and giving up my current antivirus, I can't tell if Antivirus is scanning anything. The Symantec Antivirus Scan Engine Status screen indicates that 0 total files and 0 total MB have been scanned. I find nothing in the Windows Server log files indicating that anything has been scanned, nor do I find anything in the IMail logs or Symantec logs to indicate that anything was being scanned. The support team has been unable to help. Is anyone out there using the Symantec Antivirus scan engine? If so, any thoughts I what could be going on here? I am running this with the default configuration, nothing fancy. Thanks Deb Chard SysAdmin ILX Lightwave To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
