Firewall-1

Re: [FW-1] Keeping virus/worm with CP

Subject: Re: [FW-1] Keeping virus/worm with CP
From: Alb <albllovet AT E-MILIO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 26 May 2004 10:52:12 +0200
Hi,

I use TrendMicro CVP in a ClusterXL, installed on both nodes...
I've just updated VirusWall with the new scan engine.. Hope this will
end with the need of restarting VirusWall sometimes, because it stop
working , I don't know why.

regards

Alb

Robert Plaenk wrote:

Check Point has historically had problems with CVP...or at least I did.
CVP would always break. Actually, it's not the CVP protocol that is
breaking, but rather Check Point Security Server that would "break". In
all cases, it just required a reboot of the firewall. But this can be a
huge problem in some environments.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of daniel
owen
Sent: Tuesday, May 25, 2004 1:01 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Keeping virus/worm with CP

I had approximately the same results with SMTP and Interscan Virus wall
under CVP. I would periodically just quite receiving mail and need to
restart the FW server. In retrospect I think this may have been an issue
with kernel memory depletion but I'm not really sure.

Unfortunately Trend's support is pretty much useless on the subject of
CVP. The answer every time was have you tried upgrading to a newer build
and if I had they would tell me it should work. No amount of additional
questioning would get another answer. Checkpoint's support was more
helpful but I gave up before I ever got a solution. I am planning on
rebuilding my Trend server in CVP mode again in about a month to see if
my move from NG to NG AI (R55) or moving to the newest version of
Interscan will improve this. I really liked CVP mode when it worked.

Overall I like the Trend software but the support leaves me with the
impression that they have only one goal and that is to get off of the
phone and on to the next customer.



-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]On
Behalf Of RoNNY
Nussbaum
Sent: Tuesday, May 25, 2004 7:06 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Keeping virus/worm with CP


Hello.
Working with Interscan Viruswall in CVP mode gave us a lot of problems,
mainly with mail stuck in a queue.
The HTTP and FTP scanning are very problematic when using CVP.

I really recommend not using CVP, and working with Viruswall (or
InterScan Messaging Security Suite) in stand-alone mode. It works
perfectly with no issues at all.

-RoNNY









=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>