As a comparison,

Ours looks like this atm (Access to windows updates, mcafee, symantec):

was.muohio.edu  	equals  		    	
windowsupdate.microsoft.com 	ends
download.windowsupdate.com 	ends
download.microsoft.com 	ends
www.microsoft.com 	equals
wustat.microsoft.com 	equals
crl.microsoft.com 	equals
c.microsoft.com 	equals
w2ksp4.microsoft.com 	equals
liveupdate.symantecliveupdate.com 	equals
liveupdate.symantec.com 	equals
update.symantec.com 	equals
update.nai.com 	equals
ftp.nai.com 	equals 

-Bob Black
Miami University

> -----Original Message-----
> From: Perfigo SecureSmart and CleanMachines Discussion List 
> [mailto:[log in to unmask]] On Behalf Of Simon Bell
> Sent: Thursday, July 07, 2005 11:38 AM
> To: [log in to unmask]
> Subject: Re: What version are you running?
> 
> We use the following:
> windowsupdate.microsoft.com  	ends  	Microsoft Windows Update
> download.windowsupdate.com 	ends 	Microsoft Windows Update
> download.microsoft.com 	ends 	Microsoft Windows Update
> www.microsoft.com 	equals 	Microsoft Windows Update
> wustat.microsoft.com 	equals 	Microsoft Windows Update
> crl.microsoft.com 	equals 	Microsoft Windows Update
> c.microsoft.com 	equals 	Microsoft Windows Update
> w2ksp4.microsoft.com 	equals 	Microsoft Windows 2000 SP4
> liveupdate.symantecliveupdate.com 	equals 	Symantec 
> AntiVirus HTTP Update
> liveupdate.symantec.com 	equals 	Symantec AntiVirus HTTP Update
> update.symantec.com 	equals 	Symantec AntiVirus FTP Update
> update.nai.com 	equals 	McAfee AntiVirus HTTP Update
> ftp.nai.com 	equals 	McAfee AntiVirus FTP Update
> grisoft.com 	ends 	AVG AntiVirus
> grisoft.cz 	ends 	AVG AntiVirus
> www.howtotell.com 	equals 	Legal Microsoft Software
> security.symantec.com 	equals 	Symantec Live Scan
> www.spreadfirefox.org 	equals 	Firefox Downloads
> mozilla.org 	ends 	Firefox Downloads
> mcafee.com 	ends 	McAfee AntiVirus HTTP Update
> pccreg.antivirus.com 	equals 	Trend Micro Update
> trendmicro.com 	ends 	Trend Micro Update
> update.microsoft.com 	ends 	Microsoft Windows Update
> activex.microsoft.com 	ends 	Microsoft Windows Update
> codecs.microsoft.com 	ends 	Microsoft Windows Update
> 
> 
> >>> [log in to unmask] 7/7/2005 10:12:59 AM >>>
> Don't forget to add the *New* Microsoft update
> 
> Update.microsoft.com
> 
> Would you mind posting the DNS rules you've figured out? 
> 
> > -----Original Message-----
> > From: Perfigo SecureSmart and CleanMachines Discussion List 
> > [mailto:[log in to unmask]] On Behalf Of Aaron Havens
> > Sent: Thursday, July 07, 2005 10:09 AM
> > To: [log in to unmask]
> > Subject: Re: What version are you running?
> > 
> > Simon Bell wrote:
> > > 3.5.2.1 works ok... still struggling with the new AV rules. 
> > They work "most"
> > > of time. For us the main problem is that we're trying to support 
> > > multiple AV clients.
> > 
> > We have the same problem. I am trying to allow our users to most 
> > flexibility on what AV client they run. I had to call Trend 
> Micro and 
> > ask them what their update servers were so I could allow 
> access from 
> > the quarantine role. At the moment we allow students to 
> have Symantec, 
> > Trend Micro and McAfee products. I wish cisco included the 
> correct dns 
> > entries for each of the AV products they have in the AV rules.
> > 
> > 
> > --
> > Aaron Havens
> > Network Technician
> > Computing and Telecommunications
> > Northeastern State University
> > 610 N. Grand
> > Suite 318
> > Tahlequah, OK 74464
> > http://netnotes.nsuok.edu/~havensa/ 
> > 918-456-5511 Ext. 5813
> >