For our Up-to-date requirement, we use the AV checks and look for Symantec, McAfee, Trend or AVG. I got a call today from a student who just purchased McAfee (10.0.25) and is running the most current DAT yet CCA doesn't detect it. I had him look in the registry for the keys there were used in the pc_ checks and noticed that the HKLM\SOFTWARE\McAfee.com\Virusscan Online\SourceDisk string contains DatVer=4579 instead of DatVer=4.0.4579 as defined in the pc_ check.

Has anyone else experienced problems with this version of McAfee?

Thanks,

Simon

>>> [log in to unmask] 9/13/2005 9:17 AM >>>
We did create the rules using the "New AV Rule" method.  

 

I received a few suggestions on and off list that I am going to try out.

 

Thanks to all who have responded so far.

 

---------------------------------------

 

Brian Beausoleil

Network Services

Southern CT State University

[log in to unmask] 

  _____  

From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Matt Moore
Sent: Monday, September 12, 2005 7:13 PM
To: [log in to unmask] 
Subject: Re: McAfee AV installation[Scanned]

 

I was told that you should not be using any of the pr_rules for antivirus.
You should create a "New AV Rule."  The pr_ rules are in the list of rules
for systems running older versions of Perfigo not Clean Access.  Once we
recreate rules for all the antivirus programs that we support, I have not
seen a problem since. *knock on wood*   

 

Hope this helps

 

Matt Moore

Dakota Wesleyan University

  _____  

From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Brian Beausoleil
Sent: Monday, September 12, 2005 2:13 PM
To: [log in to unmask] 
Subject: McAfee AV installation[Scanned]

 

We are finding a few machines failing the antivirus installed requirement,
even though they have successfully installed the application.  We use
Cisco's rules for the requirement and we are running 3.5.4 for the servers
and 3.5.7 for the Agent.  In 1 case the student had Windows 98, upgraded to
XP and failed the requirement.  In another case it was a fresh Windows XP
installation that failed.  In both cases, the antivirus app was uninstalled
and reinstalled by a tech just to make sure it was installed properly.  

 

Is there a way to see a more detailed log from the Agent scan than the scan
report on the CAM?

 

Any thoughts or suggestions would be appreciated.

 

---------------------------------------

 

Brian Beausoleil

Network Services

Southern CT State University

[log in to unmask] 

(203) 392-6109