[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] Urgent Help !! Problem with InterScan v3.5 on Solaris 2.6
Hi Marc, Configuring the InterScan to quarantine the infected files (and this is my actual setting) and then RESEND them after checking them, is really painfull and hard. So the Interscan currently quarantine about 7 to 13 infected file /day and 98% of them are infected by the previous viruses or to be correct "MACRO": GenericMac8_X97M and GenericMac_w97M I found in the InterScan web interface , a tab that says "Enable Macro Scan" So, I unchecked it and I'm waiting hopfully for the trendmicro support. Marc Jacquard wrote: > > You could configure the InterScan software to just let the virus mail > through with a warning attached to it. I do not know of any way to just > let certain files through. You could also quarantine the file and then > resend it after you check it out. You might try calling Trend and see what > they say. Try getting in touch with Norman Olpindo. He seems to really > know his stuff. > > Good Luck, > > MJ > > Marc Jacquard > SR. Systems Engineer (CCSA) > Fujitsu America, INC. > Hilo Office > email: [email protected] > Telephone:> Pager:> > -----Original Message----- > From: [email protected] > [mailto:[email protected]]On Behalf Of Jhon > Hardly > Sent: Tuesday, January 09, 2001 12:09 PM > Cc: Firewall-1 Mailing List (E-mail) > Subject: [FW1] Urgent Help !! Problem with InterScan v3.5 on Solaris 2.6 > > Hi everyone, > Our institut is using InterScan VirusWall (V3.5 on a Sparc Solaris > 2.6, With > the latest ScanEngine) > as a CVP with FW-1 to scan the mail traffic (only : no Ftp or Http scan). > We have a big problem with This Interscan because it stops some > Attatchements > [Mainly Microsoft Documents ( Word and Excel)] . The alerts say that these > Documents > contain one of the following Viruses > GenericMac8_X97M > GenericMac_w97M > When I Try to scan the "infected Documents" , My personnal antivirus (which > is > reguraly updated) , show > absolutely NO virus on the "infected Document". > So, the users are claiming that I'm must configure the InterScan to let > the > previous viruses pass thru it. > Has anyone any Idea about telling yhe Interscan , to not stop the prvious > "Virusses" > > Please help me !!!!!!! > > -- > Jhon Hardly > E-mail : jhon at iav dot ac dot ma > > ============================================================================ > ==== > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================================ > ==== -- Jhon Hardly E-mail : jhon at iav dot ac dot ma ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|