Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Corporate Ed. 10 conflicting with web application

Updated: 21 May 2010 | 5 comments
bilal.ahmad-123's picture
0 0 Votes
Login to vote

Hello All,

 

My client is running IIS 5 on Win 2000 machine with Symantec corp. edition 10 clients installed on it. My web application uses SQL server as database and TCP sockets to interface with some other system and logs the connection establishment and exceptions in text files.

 

The issue is that socket connection drops when antivirus scan is executed without any formal termination message in log files. Connection should not have been dropped in the first place.

 

Moreover I create another debug log file and observed that when connection is dropped because of scanning and message is sent through socket in this state, the exception raised is that connection log file is currently being used by some other process.

 

On development machine I have antivirus corp. edition 9.0 installed. I produced this error internally by manually scanning IIS but I noticed that socket connection did establish on next request as it has been programmed to keep on attempting retries on disconnection. But the point is that connection should not have been dropped. Why antivirus is interfering with a running application?

 

Another strange thing:

By using the exclusion option on web application files I managed to overcome the error on development machine. The connection did drop but restored on next request. On live machine the solution worked for manual scan but failed for server initiated scan.

The only difference seems is Symantec 10 installed on live whereas Symantec 9 on development machine.

 

Is this a Symantec issue or IIS issue? How to resolve it? The application is a product and installed on a number of clients having other antivirus software or Symantec editions other than 10.0. I have been using 9 myself and no problems have been ever faced.

 

Any help will be appreciated.

 

Regards,

Bilal

discussion Filed Under:

Comments

Anthony Flaviani's picture
09
Jul
2007
0 Votes 0
Login to vote

Bilal,
 
The connection being dropped definitely sounds like an IIS issue. It's possible that the application running on IIS is throwing some strange exception handling when there is file contention, because AV is scanning the file when it wants access. Is this happening with Auto Protect or a scheduled scan?

bilal.ahmad-123's picture
09
Jul
2007
0 Votes 0
Login to vote

Dear Anthony,
 
Good to get a prompt response.
It is not an IIS issue as after uninstalling AV from the machine, we didn't experience the problem. I personally think that the problem is with automatic scans on 10.0 edition.
 
If I do not exclude the web application folders, application disconnects the socket in all cases whether it is server or client initiated, automatic, manual or sceduled. But application is capable enough to restore the socket connection in all above cases except automatic scan which is strange.
 
And If I exclude the web application folders, application runs well on all types of scans except automatic scan and application is unable to reestablish socket connections and throws the exception as I wrote in my previous post. By saying that it runs well for all types of scan in this case I mean that application does not disconnnect the socket and AV scans normally.
 
Please note that the client I am working for is one of largest bank in pakistan. They might contact you directly for support as they have hundreds of licenses of symantec AV corporate editions. This is not an IIS issue as I explained earlier that uninstalling antivirus resolves all the issue. Further more scan history reveals that execution time of automatic scan matches the time at which application terminates the socket connections.
 
regards
Bilal.
bilal.ahmad-123's picture
09
Jul
2007
0 Votes 0
Login to vote

Dear Anthony,
 
Good to get a prompt response.
It is not an IIS issue as after uninstalling AV from the machine, we didn't experience the problem. I personally think that the problem is with automatic scans on 10.0 edition.
 
If I do not exclude the web application folders, application disconnects the socket in all cases whether it is server or client initiated, automatic, manual or sceduled. But application is capable enough to restore the socket connection in all above cases except automatic scan which is strange.
 
And If I exclude the web application folders, application runs well on all types of scans except automatic scan and application is unable to reestablish socket connections and throws the exception as I wrote in my previous post. By saying that it runs well for all types of scan in this case I mean that application does not disconnnect the socket and AV scans normally.
 
Please note that the client I am working for is one of largest bank in pakistan. They might contact you directly for support as they have hundreds of licenses of symantec AV corporate editions. This is not an IIS issue as I explained earlier that uninstalling antivirus resolves all the issue. Further more scan history reveals that execution time of automatic scan matches the time at which application terminates the socket connections.
 
regards
Bilal.
Anthony Flaviani's picture
09
Jul
2007
0 Votes 0
Login to vote

Bilal,
 
Removing AV and the problem going away does not mean that the problem is in AV. Like I said earlier, I believe that the problem is in the application code that is running on IIS and not IIS itself. Someone there is a conflict. I suggest that the customer open a support ticket so we can capture more data to resolve the problem. I believe that their is some file contention happening somewhere between the application and AV.

bilal.ahmad-123's picture
11
Jul
2007
0 Votes 0
Login to vote

We have solved the problem by uninstalling SAV from web server.
 
the number iof issues repotred with SAV 10 is alarming not only with on this forums but also on few other forums I have posted this query.