Kurt,

First, I recommend switching to the "new AV Checks" for INSTALLATION and
DEFINITION CHECKS instead of the pc_ and pr_. See documentation. 

Second, for the SERVICE running, if you confirm that AppSvc32.exe is the
one to running now, you would need to create a customer SERVICE check. 

   - we will need to verify and add that as a preconfigured SERVICE
check in the future as well.

Nick

 

-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Kurt Huenemann
Sent: Tuesday, January 09, 2007 12:24 PM
To: [log in to unmask]
Subject: CCA 4.0.4 missing condition for Norton 2007 app?

All,

We have our CCA server and manager and agent at release 4.0.4.  We're 
seeing Norton AntiVirus 2007 (14.x) being detected, but only sort of.

An XP machine with Norton 2007 will:

PASS pc_Symantec_Norton_Installation-NAVNT  (it's installed, registry
check)

but

FAIL pc_Symantec_Norton_App-9x (rtvscn95.exe)
FAIL pc_Symantec_Norton_App-Professional (navapsvc.exe)
FAIL pc_Symantec_Norton_App-Corporate (rtvscan.exe)

I believe it should be checking for AppSvc32.exe, but no pc_* 
condition appears to check for that name.  Do I need to write my own, 
or am I just missing it somewhere on the condition list?

Any clues appreciated!

Kurt