Hello All,
I recently upgraded Symantec protection engine 7. to 7.5 since then i have a issue. I keep getting error " through ssecls it says unable to connect to Symantec protection engine " i am using a proxy which has user name and password. This use to work with 7. Strangely if i remove the contents from liveupdate.xml then it’s working.
Any Suggestion would be of great help.
Hello,
I have upgrade the Scan Engine from version 5 to Protection Engine version 7.0.2 on the Windows 2008 server.
I have an issue when i try to update the AV Definition of the Protection Engine. I got the following error in the web interface : Java LiveUpdate Error.
And in the windows log, i have only the following message
There was an error running content update, scanning will continue using the original definitions
Date/time of event = 2014-01-29 15:14:33
Event Severity Level = Error
Definitions = Virus definitions
Error Message = Java LiveUpdate Error
Update Method = LiveUpdate
Symantec Protection Engine IP address = XX.XX.XX.XX
Symantec Protection Engine Port number = 1344
Uptime (in seconds) = 1242
How can i resolve my issue to update the AV Definition ?
Thanks,
Barnabe
Hi guys,
I faced an invalid argument when defining the administrator port during the symantec protection engine installation
I installed the jre, jdk on my solaris 11 VM. However, i faced an invalid argument error when defining the administrator port.
<<< You answered '8004'. >>>/var/tmp//installj9aqAN/checkinstalll9aqAN[129]: /home/larry/.-larry--symcinst-2014-06-10-20:24:21-20118/SYMCScan/installer: SYMCScan/installer: cannot execute [Invalid argument]
May i know how do i solve this issue?
OS : Solaris 11
Hi All,
Does updating licence in Symantec Protection Engine(SPE) causes any problem or issue in performance of SPE i.e. stops the services, vfilers connection etc.
Thanks in advance.
Hi we're still running Scan Engine 5.x which I understand is now well and truly EOL (as of March 2014), but die to other technical factors, such as our servers hosted by VMWare 4.5 we are unable to upgrade currently to Protection Engine. Adding to this, a recent network change by the customer's network sullier has rendered all direct updates unfeasible meaning we need to implement an internal liveupdate server.
Will it still be possible to update Scan Engine from Live Update and how long will the definition files still be compatible with scan engine 5.x products?
Will it be possible to set up a Liveupdate v2 server to disseminate virus definition files to these old Scan Engine servers?
Thanks
Steve
Hi
We're looking at our options for virus protection on one of our applications. This is currently running on a Red Hat server hosted by vSphere 4.5. Due to customer decisions we are unable to upgrade vSphere at this time.
Can anyone tell me what has driven the supportability statement that Protection Engine for Cloud Services 7.0.x is only supported on vSphere 5.x?
Is this statement only for hypervisor-based scanning or does it also apply if the protection engine is to be installed onto a virtual guest with a supported O/S which happens to be hosted on vsphere 4.5?
Thanks
Steve
Where can i find a JAVA SDK and java API documentation for the protection engine for cloud services 7.5?
I am reading through the documentation. Please help me understand a few things.
1. FILEMOD - options when set will make the symantec engine scan my files in place? Does my file need to be in a network drive or can it be in a local drive?
2. I see you can set up the engine in scan-only mode where it wont try to repair the file. Now can we quarantine this scan-only file once the result comes back with any threats? We dont have to repair the file. Is it possible to do this?
3. When a file is quarantined and it is a false postive, how do we retrieve the file from quarantine. quarantining doesnt mean just moving the file from one directory to another. it does more than that right?
please help. thanks.
sir,
can u please define the below message. how i can troubleshoot this error .
There was an error running content update(Insight) Date/time of event = 2014-09-02 21:29:26 Event Severity Level = Error Insight Content Name = Insight symVT Content Error Message = ID-55 Update Method = LiveUpdate Symantec Protection Engine IP address = 192.xxx.xxx.xxx Symantec Protection Engine Port number
We are currently evaluating Symantec Protection Engine for uploading documents. We are testing this in Windows 2008 server using WebServices.
We are getting "LICENSE_NA" as the response even for EICAR file. We also verified the connection status and it seems it is fine. We are getting Connection status as "ERR_SUCCESSFUL_CON".
Is this really a limitation with the Trail version or are we missing any configuration?
I am having some issues implementing the file scanner with the Protection Engine for Cloud Services. We are trying out this product to use in a web application to scan documents uploaded by our users. I installed the 30 day trial of the Protection Engine onto one of our local servers here without too much issue.
Now that the service is running, I am attempting to create a simple C# application to send a byte array to the engine to scan and get a response back from our server letting me know if the document came back clean or if it is considered a threat. I have read through the documentation that I could find about the implementation of such an application and am still coming up short of a solution. I have also looked through the example code provided in the SDK for implementing the file scanner but the example seems to be built to show all of the options available for configuration of the service, when I only need to know how to use the File Stream Scanner.
If anyone can provide a code snippet, preferrably in C# (C or Java are fine as well), that gives me the ability to simply set my server IP, port number, and byte array and will send the file to the Protection Engine to scan, I would be very thankful!
If any additional information is needed, please do not hesitate to ask!
Thanks in advance,
Joe
[EDIT]:
I was able to finally figure out how to interface with the service to send files to scan, but I'm now having the same issue as the last post on this forum where the EICAR file I send to the server is returning a value of "LICENSE_NA". http://pastebin.com/BXHFC1ii <---This is the snippet that I currently have implemented that returns the "LICENSE_NA" error code.
I just installed the trial version of Symantec Protection Engine 7.5 on Windows 2012 R2 Server and trying to use the sample C# code provided with the SDK.
When I tried to scan Eicar.com file i am getting following output :
----------------------------------------------------------------------
Scanning file ........................................................
----------------------------------------------------------------------
Results ..............................................................
----------------------------------------------------------------------
File Scanned : C:\Users\Administrator\Desktop\eica
r.com
Scan Policy : DEFAULT
File Status : LICENSE_NA
Total Infection : 0
Definition Date : 10/21/2013 12:00:00 AM
Definition Rev Number : 001
--------------------------------------------------------------------------
Connection Details ......................................................
--------------------------------------------------------------------------
127.0.0.1
1344
ERR_SUCCESSFUL_CONN
FYI, service is running
Do i need a license to run trial? If so how i can get it or any other clue?
I saw another post with similar error but without any resolution.
Thanks,
Jubayer
Hi,
I am evaluating Protection Engine for Cloud Services 7.5 features using trail version.
When I am trying to scan password procted document using this trial version Protection Engine returns with CLEAN file status.
As the document is password protected, Scan Engine can not have access to this document's content.
In this case, how come it returns with CLEAN status??
Hello,
I am evaluating Protection Engine for Cloud Services 7.5 features using trail version. I am using java API (SymJavaAPI.jar) to scan files.
I am randomly getting 'Unable to open a stream to recieve the data from the server' while scanning files specially with large Files.
Any help would be appreciated !!
Hi,
I have gone through SPE 7.5 implementation guide which says
"The maximum top-level container file size that you can specify in SPE for tar, rar,
and zip containers is 30GB. For other containers, you
can specify a maximum top-level container file size of 2 GB".
Does SPE consider pdf file format in container other than tar, rar and zip containers??
I am not able to scan PDF file of size 3GB.
Any help would be appreciated..
Thanks.
Jignesh
I have installed a trial version of SCE 7.5 using the system requirements and cannot start the symcscan.exe service.
Faulting application name: symcscan.exe, version: 7.5.0.34, time stamp: 0x52ea3cb7
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0x4f4
Faulting application start time: 0x01cffd236b7396e0
Faulting application path: C:\Program Files (x86)\Symantec\Scan Engine\symcscan.exe
Faulting module path: unknown
Report Id: a929a7ae-6916-11e4-80c0-0050568540d5
Faulting package full name:
Faulting package-relative application ID:
Any ideas?
Hi,
I am evaluating SPE 7.5 using its trialware.
If SPE and client application are on different machines and files to be scanned are in a shared folder of client application then
will SPE use its own CPU or will it use client application's CPU ??
Thanks
Jignesh
Hi,
I am scanning zip file of size 3 GB. There are two pdf files inside this zip file. Both pdf files are less than 2 GB.
While scanning this file I am getting "INTERNAL_SERVER_ERROR" as file status.
I am not getting any container policy violation error for this.
As per documentation SPE should scan this zip file.
Any help would be appreciated.
Thanks..
Jignesh
Hi,
I am evaluating SPE 7.5 features using its trialware.
I am using Java API for this.
I am getting "Unable to open a stream to recieve the data from the server" while sending multiple CONCURRENT requests to SPE.
I configured Max Thread Number to 100 from Admin UI console. Created 100 threads (each thread will scan 28KB.dot file) from java application. But out of these 100 threads only 70 threads scanned file successfully. Rest of the threads gave above error.
readWriteTime=1000000000
SocketTimeOut - 5 min
Any Help would be appreciated.
Thanks.
Jignesh
Hi,
I am evaluating SPE 7.5 features using its trialware .
What should be the readwritetime value if files to be scanned varies from small to large (upto 2GB)?
Thanks.
Jignesh