RE: Help with Mcafee Problem

  • From: "Mark Hippenstiel" <mark@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 19 Sep 2002 13:02:09 +0200

I don't know about passive ftp, but be assured that I didn't have to do
anything special to make this running. Just for curiousity: is your
machine a secure nat client? If not so, then disabling the firewall
client won't produce any result (as you might know)..

Btw, I have a small test network that I use at home, where I have
Vshield getting updates via ftp. Here the settings are a bit different.
The firewall client is running and I enabled the "passive ftp" checkbox
in Automatic Update. Runs nice, too... No special settings for this ISA
installation either :-)

> -----Original Message-----
> From: Greg Foulks [mailto:greg.foulks@xxxxxxxx]
> Sent: Wednesday, September 18, 2002 11:20 PM
> To: '[ISAserver.org Discussion List]'
> Subject: [isalist] RE: Help with Mcafee Problem
>
>
> http://www.ISAserver.org
>
>
> But I'm being told that you have to enable passive ftp in
> ISA. How is this suppose to be done?
>
> Greg Foulks, MCP
> NewFound Technologies, Inc.
> http://www.nfti.com
> Email: greg.foulks@xxxxxxxx
> Voice: 614.318.5036
> Fax: 614.318.5005
>
>
> -----Original Message-----
> From: Mark Hippenstiel [mailto:mark@xxxxxxxxxxxx]
> Sent: Wednesday, September 18, 2002 4:38 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Help with Mcafee Problem
>
>
> http://www.ISAserver.org
>
>
> Greg,
>
> We have a win 2k server doing the download job, and all of
> the workstations collect their updates from that server via UNC paths.
>
> The server is not running the firewall client software, but
> instead is a secure NAT client. ISA has no special packet
> filters, only a protocol rule that allows "internet" access
> for the range of server ips via a client address set, the
> access rule including "ftp" and "ftp download only" protocols.
>
> In NetShield, the automatic update is configured to use a
> proxy, in the settings box I entered
> "http://myproxy.name.net"; port 8080.
>
> Runs all very nice and smoothly.
>
> Hope this helps
> Mark
>
> > -----Original Message-----
> > From: Greg Foulks [mailto:greg.foulks@xxxxxxxx]
> > Sent: Wednesday, September 18, 2002 10:15 PM
> > To: '[ISAserver.org Discussion List]'
> > Subject: [isalist] RE: Help with Mcafee Problem
> >
> >
> > http://www.ISAserver.org
> >
> >
> > No it's running on a Win2K server and yes I do have the firewall
> > client installed. No matter if I enable or disable the
> firewall client
> > it still will not download the files.
> >
> > I'll either get the error
> > "An unknown error occurred while reading from the remote system and
> > the connection was dropped."
> >
> > or
> >
> > "Their is no update file in the remote directory"
> >
> > I've been working with Mcafee now for two weeks and they
> continue to
> > tell me that the problem is in my ISA configuration. How ever I can
> > FTP via command line and by using FTP voyager without any problems.
> >
> > Greg Foulks, MCP
> > NewFound Technologies, Inc.
> > http://www.nfti.com
> > Email: greg.foulks@xxxxxxxx
> > Voice: 614.318.5036
> > Fax: 614.318.5005
> >
> >
> > -----Original Message-----
> > From: Paul Nuernberger [mailto:pen@xxxxxxxxx]
> > Sent: Wednesday, September 18, 2002 3:29 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Help with Mcafee Problem
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Questions:
> > 1.) Is the McAfee program running on a server or a desktop ?
> > 2.) If a desktop, can the firewall software be installed ?
> >
> > I have a customer running McAfee on a desktop behind ISA (with
> > firewall client installed) and it worked right out of the
> box with no
> > special settings.  It gets updates flawlessly.
> >
> > Paul Nuernberger
> > Manager
> > Baron Computers
> > 618-656-5597
> >
> > -----Original Message-----
> > From: Greg Foulks [mailto:greg.foulks@xxxxxxxx]
> > Sent: Wednesday, September 18, 2002 2:13 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Help with Mcafee Problem
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Can anyone help with this problem I'm having with Mcafee.
> They've told
> > me I need to configure my ISA server to do the following. I
> think I've
> > done everything but I want to hear from someone to hear what or how
> > they would set this up.
> >
> > ============================
> > Firewall/Proxy requirements:
> > ============================
> >
> > Active FTP: Ports 20, 21, and 80 open for inbound and outbound
> > traffic. Passive FTP: Ports 20, 21, 80, and all ports 1024
> + open for
> > inbound and outbound traffic. Anonymous or Windows logon
> > authentication only. No packet filtering enabled.
> >
> >
> > Thanks,
> >
> >
> > Greg Foulks, MCP
> > NewFound Technologies, Inc.
> > http://www.nfti.com
> > Email: greg.foulks@xxxxxxxx
> > Voice: 614.318.5036
> > Fax: 614.318.5005
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT
> > > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: pen@xxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT
> > > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: greg.foulks@xxxxxxxx To unsubscribe send a blank
> > email to $subst('Email.Unsub')
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT
> > > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: mark@xxxxxxxxxxxx To unsubscribe send a blank email
> > to $subst('Email.Unsub')
> >
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: greg.foulks@xxxxxxxx To unsubscribe send a blank
> email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: mark@xxxxxxxxxxxx To unsubscribe send a blank email
> to $subst('Email.Unsub')
>




Other related posts: