Re: URLScan and Trend Micro OfficeScan

From: John Tolmachoff (support@reliance.net)
Date: 08/22/02


From: "John Tolmachoff" <support@reliance.net>
Date: Thu, 22 Aug 2002 09:28:07 -0700


Thanks for the reply.

However, I do not want to remove the .exe protection on the entire server,
which editing the urlscan.ini file does.

Any other suggestions?

It is sad to see a Major AntiVirus company using technology (cgi .exe
scripts) which causes a security hole.

"Susan Bradley, CPA aka "Ebitz" SBS Rocks [MVP]" <sbradcpa@pacbell.net>
wrote in message news:3D646C7E.152759E9@pacbell.net...
> http://www.sbs2000.info
> Click on Antivirus - you have to uninstall and reinstall and tweak...
>
>
> IIS Lockdown and URLscan Tool causes trouble with Trend Micro Officescan
5.1
> for SBS 2000
> Assuming nothing else is installed in the default website everything
should go
> well. Here is the manual for installing the Lockdown tool if you use Trend
> Officescan for SBS 2000:
>
> When you install Lockdown tool and URLscan and you have Trend Micro
Officescan
> for SBS 2000 server installed you should these steps:
>
> Uninstall Trend Micro Officescan for SBS 2000 completely
> Run the Lockdown tool and if asked install the URLscan tool too. Be sure
to
> choose SBS 2000 as the server role
> Edit urlscan.ini so that it allows *.exe to be executed. More information
about
> how to edit the urlscan.ini can be found in IISFAQ.COM - Configuring
URLSCAN -
> an ISAPI filter to provide powerful filtering for HTTP Requests
> Install Trend Micro Officescan for SBS 2000. You do not need to reinstall
the
> client software on workstations, those will be recognized as soon as Trend
is
> online again.
> If you have other stuff running on the default website things get a lot
more
> difficult and are not easy explained in one sentence.
>
>
>
> >
>
>
>
> John Tolmachoff wrote:
>
> > We have recently installed URLScan on a web server for a client.
> >
> > This web server also has installed Trend Micro OfficeScan web interface
for
> > configuring and monitoring the Internal Virus protection.
> >
> > Now, the OfficeScan will not work because URLScan is blocking all .exe,
but
> > OfficeScan is calling server .exe in it's login process.
> >
> > How can I configure this to work?
> >
> > BTW, OfficeScan is setup as a subset of the default website.
>



Relevant Pages

  • Re: How to Deploy MFC only based application?
    ... EXE distribution. ... MFC Extension DLLs if you do static linking. ... Why is running an install package is more complex than a simple copy? ... it to some server configuration. ...
    (microsoft.public.vc.mfc)
  • Re: preparing to install and TS
    ... Each time when my exe is run under Terminal Server ... when opening there is a messagebox saying "preparing to install" ... At least I think it has something to do with that control. ...
    (microsoft.public.fox.programmer.exchange)
  • Re: Data Enviroment - Error 713 application-defined or object-defi
    ... The exe doesn't use Data Reports so would it need the dll? ... that our old development SQL Server has been retired. ... You always* need to create an install package for a COM-based distributed ...
    (microsoft.public.vb.general.discussion)
  • Re: Windows 2008 RemoteApp - publish exe from another server
    ... I installed the client .exe in terminal ... server 2008 and published that in RemoteApp. ... I wanted to publish the .exe on the SQL Database server in the ... You probably don't want to install the database on the TS - it would slow down SQL. ...
    (microsoft.public.windows.terminal_services)
  • Re: New Event Log Errors!
    ... Somehow along those lines I'd also installed the Certificate Authority ... Did you apply the last Server Pack for SBS Server? ... Please install Windows Support Tools on the win2k3 sp1 problematic ... Microsoft is providing this information only as a convenience to you: ...
    (microsoft.public.windows.server.sbs)