Client Management Suite

 View Only
Back to discussions
Expand all | Collapse all

PCAnywhere security patch - will it be avail in SIM?

Migration User

Migration UserApr 10, 2012 12:59 PM

When can we expect this release?

  • 1.  PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 26, 2012 07:58 AM

    It seems like this vulnerability would affect CMS users

    http://www.symantec.com/business/support/index?page=content&id=TECH179526

    Will there be an update posted to SIM?  I have a ticket in as well on this.



  • 2.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 26, 2012 03:11 PM

    And, how do you tell if this patch applies? My SIM tell me I have v12.6.65 installed. My PCs report v12.5.0.675, and my install/upgrade filters show no PCs require an upgrade, but the filter doesn't show what version it is looking for.

    The article says it applies to v12.5 SP3, but how do I know if I have version?



  • 3.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 26, 2012 03:17 PM

    That's strange dsmith - my PCs report they are running 12.6.7580 - which the article mentions for ITMS.

    Prior to yesterday, we were running all latest versions with hot fixes for PCA.  I know there were upgrades to PCA when SP2 came out a few weeks back.



  • 4.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 26, 2012 03:32 PM

    What version of the platform are you on? 
     

    https://www-secure.symantec.com/connect/forums/managed-software-managed-software-discovers-pcanywhere-version-1250618-not-version-1250675

    Does that apply?



  • 5.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 26, 2012 03:33 PM

    Ran my SIM this week and it prompted to update. It doesn't report any updates available, and my SMP is at 7.1 SP1. SIM reports pcAnywhere v12.6.65...



  • 6.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 26, 2012 03:48 PM

    Apparently I don't have any hotfixes because my ActivityCenter is still at .317.

    I do have SMP v7.1 SP1, version 7.1.6851. Wish pcAnywhere's listing was similar in the SIM.



  • 7.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 26, 2012 04:19 PM

    You can apply the hotfixes or bump up to SP2.  If you do the hotfixes, though, uninstall them before applying SP2.



  • 8.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 27, 2012 08:47 AM

    How do I get SP2 if my SIM doesn't offer any upgrades?



  • 9.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 27, 2012 09:06 AM

    While in Symantec Installation Manager click on "Install new products".



  • 10.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 27, 2012 10:49 AM

    As Buckyo says, it's been recommended to go to Install New Products (at the top of SIM) and then install the whole CMS/SMS/whatever suite that you want to upgrade to SP2.  Don't trust the "Available Updates" section for the Service Pack.



  • 11.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 27, 2012 02:21 PM

    C'mon Symantec - customers need info

    http://krebsonsecurity.com/2012/01/warnings-about-windows-exploit-pcanywhere/



  • 12.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 30, 2012 08:47 AM

    This is ridiculous! Why is an SP2 under "Install New Products" and not under "View and Install Updates"? A Service Pack has always been an update and not a new product.



  • 13.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Jan 30, 2012 02:59 PM

    There is updated information here http://www.symantec.com/theme.jsp?themeid=anonymous-code-claims

    Most recent update: Jan 27

    Cheryl



  • 14.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 30, 2012 03:06 PM

    Still nothing about pushing out the fix via SIM.  No action on my ticket either.

    It seems risky to me to manually push the fix and then next week it's available via SIM, will the agent be smart enough to know it's updated, etc.



  • 15.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 30, 2012 06:38 PM

    I heard back following from support

    "I noted when we spoke last week that you were interested in whether updates would be available through Symantec Installation Manager (SIM). These hotfixes will not be available through SIM. I expect that the next Service Pack will be, but not these hotfixes.

    As a pcAnywhere Solution customer, you can download the latest hotfix to your Notification Server from the KB article, and then you have the options of using a Managed Software Delivery policy, or perhaps a Task, to deliver the MSI file to managed computers and run it."
     
    seems a bit ridiculous to me since I just installed another hotfix for PCAnywhere through SIM around when SP2 came out.  How does this one not rank important enough to push to customers ??


  • 16.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Jan 31, 2012 11:23 AM

    I've contacted my SE and am making a ton of noise about this.  In my opinion ALL product updates should be published through SIM.

    I suggest everybody does the same.



  • 17.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Feb 03, 2012 01:35 PM

    I also notice when deploy PCA HF1 for SP2 on SIM, to upgrade from 12.6.7580, to 12.6.7581,

    I do not see any change in the filter, for any update on client:

     

    Windows Computers Requiring pcAnywhere plug-in Upgrade

    Because still searching for 7580, not 7581... ? So does the HF1 do anything for existing install ? Not sure about... I will try for new ! So do no think the HF1 is related the last exposure.

    Regarding the latest http://www.symantec.com/docs/TECH179960

    I am agree all about the need to integrate into SIM, as Altiris integration not using "LIveUpdate", it is the minimum, to update it from Symantec Installation Manager !



  • 18.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Feb 08, 2012 04:42 PM

    good to know too that if you download it now it has version 1.0.1013 where as last Friday and also according to the document under this link

    http://www.symantec.com/business/support/index?page=content&id=HOWTO67458  the same MSI had version 1.0.1010.

    I manage to stumble over this today by accident as I have rolled out some fixes last Friday and today tried again the newest file...and if you try to install version 1.0.1013 over 1.0.1010 you get the nice 1603 fatal error....



  • 19.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Feb 13, 2012 09:59 AM

    TECH179960 is now deprecated - latest fix linked below

    http://www.symantec.com/business/support/index?page=content&id=TECH180472



  • 20.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Feb 14, 2012 10:53 AM

    Support released the following article to help with creating a policy to address the PC Anywhere issues

    http://www.symantec.com/business/support/index?page=content&id=HOWTO67458

    This appears to be the latest hotfix (at least for those running CMS SP2 previously)

    http://www.symantec.com/business/support/index?page=content&id=TECH179960 (now  deprecated, new link below)

    Also, probably more hot fixes coming it sounds like.



  • 21.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Mar 01, 2012 09:44 AM

    TECH180472 is now deprecated - latest fix linked below

    http://www.symantec.com/business/support/index?page=content&id=TECH182142

    For those of you trying to keep up, I'd subscribe to the bulletin, not sure how else you're supposed to keep up with this stuff 



  • 22.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 01, 2012 12:09 PM

    From Symantec Tech Support:

    , the hotfix to install a patch addressing the security issues we found is a stand alone MSI installer and can be installed through any deployment mechanism you currently use.  Additionally, Symantec Tech Support has put together a HOW TO document for using Software Management Solution, part of the ITMS 7.1 Suite, to create a software package that can be used to deploy the security hotfix.  If you would like to use this procedure, please see the tech article, www.symantec.com/docs/HOWTO67458for steps to do this.

     

     

    My understanding is currently no plans for SIM update which to me is just crazy.  I can't believe they would allow new installs to be installed with a serious security issue!

    Does anyone know the difference between: TECH180472 and TECH182142? I can't find any listing of changes.



  • 23.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 02, 2012 03:21 AM

    March 1, 2012 13:20 PST

    On February 17, exploit details were posted that would allow attackers to crash fully patched versions of pcAnywhere on any Windows PC. Symantec has developed and tested a fix for a bug affecting the stability and reliability of pcAnywhere. On February 29, Symantec released this new hotfix for pcAnywhere that includes all previous updates. Customers can learn more at TECH182142.

    Symantec will continue to release hotfixes as they become available and recommends that all customers continue to apply new updates when they are available, even if they applied previous hotfixes.
     
    From http://www.symantec.com/theme.jsp?themeid=anonymous-code-claims


  • 24.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 02, 2012 03:23 AM

    This installer creates a software resource, a corresponding hotfix MSD install and uninstall policy plus a filter as well.  This seems to work ok though there are some known issues mentioned in the article.

    http://www.symantec.com/docs/TECH181440

    2nd March EDIT - Now DEPRECATED, see later posts for newer versions.



  • 25.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 02, 2012 12:12 PM

    All,

    I suggest one of you create an Idea here on Connect and publicize it as you like.  Just click on Create Content > Idea at the top of the page, underneath the navigation bar.



  • 26.  RE: PCAnywhere security patch - will it be avail in SIM?



  • 27.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 07, 2012 02:26 PM

    jlawson and it did not work as stated in my enviroment (7.1 Sp2). The previous Tech (180472) for this product did install that way. But had to follow the link I posted for this release. Not sure why, would have preferred it to be more automated, but was glad to see the details.



  • 28.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 07, 2012 03:09 PM

    ttiller I already posted this information above but to note if you look in the TECH182142 article you will find these details:

    Note: If you are installing this hotfix in an environment with CMS 7.1 or ITMS 7.1, see the “pcAnywhere TECH182142 hotfix installation package for ITMS” article at the following location:
    www.symantec.com/docs/TECH182676

     

    Which provides a exe to the install on NS creating all the task and filters.



  • 29.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Mar 07, 2012 03:15 PM

    I didn't see that anyone else published an Idea so I went ahead:

    https://www-secure.symantec.com/connect/ideas/publish-pcanywhere-security-updates-sim

     

    Everybody should go and vote this up.  Allegedly Symantec pays attention to Ideas...



  • 30.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 08, 2012 11:26 AM

    Since this is not available in the SIM and requires us to use the console and train techs in a way we had not budgeted implementation time for we are discontinuing use of the product until Symantec can streamline the updates.  Considering the ongoing confusion in implementation and lack of consistent communication it just isn't a risk we are willing to take.  If they work on fixing it we will move forward at a later time.



  • 31.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 08, 2012 11:42 AM

    I have to agree. Their handling of this has been very poor. (allthough support guy has been in constant contact after I logged a ticket.) I decided to wait till its put into SIM before I do anything.



  • 32.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Mar 08, 2012 01:02 PM

     

    If you follow HOWTO67458 the total process to download the patch, put it on the server, and create a policy to roll it out takes no more than 10 minutes.  
     
    I think SIM would be ideal, but I'm happy Symantec at least provided the step by step HOWTO on creating the policy.  Since I was new to creating managed policies, it actually was a good run through for me.
     
    My biggest complaint at this point is if it's not going to be in SIM, they should at least be more proactive reaching out to customers to let them know the patch was released and/or deprecated later for another one.  Seems like that info should be coming to us instead of us having to search for it.


  • 33.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Mar 14, 2012 05:17 PM

    You might be waiting for awhile.  Not sure I would recommend leaving a hole this big wide open that long.



  • 34.  RE: PCAnywhere security patch - will it be avail in SIM?

    Broadcom Employee
    Posted Apr 10, 2012 05:47 AM

    Hello,

    Please wait for upcoming pcAnywhere release. It'll solve all your queries.

    Thanks,

    Ankit

     

     



  • 35.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 10, 2012 12:59 PM

    When can we expect this release?



  • 36.  RE: PCAnywhere security patch - will it be avail in SIM?
    Best Answer

    Posted Apr 10, 2012 02:33 PM

    It is now available in the SIM when you install the updated SIM.  Was not avail earlier this morning but became available in the last few hours.



  • 37.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Apr 10, 2012 02:53 PM

    How does this handle the various patches that were applied since the last major release?



  • 38.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Apr 10, 2012 02:57 PM

    The release notes are available:

    http://www.symantec.com/business/support/index?page=content&id=DOC5350

     



  • 39.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor


  • 40.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 10, 2012 03:12 PM

    What support told me was this is a major rewrite and the previous version are not compatible with this version.  Once you upgrade you must upgrade everything.



  • 41.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 10, 2012 03:19 PM

    We just did a fresh install of ITMS 7.1 SP2 today and were able to obtain this software via the SIM.  I'm glad it came out when it did as the documentation states you will have to upgrade all clients and there is no backwards compatibility.



  • 42.  RE: PCAnywhere security patch - will it be avail in SIM?

    Broadcom Employee
    Posted Apr 11, 2012 02:44 AM

    Hello,

    This might also help you -

    http://www.symantec.com/docs/TECH180597

    http://www.symantec.com/docs/TECH182142

    Thanks,

    Ankit



  • 43.  RE: PCAnywhere security patch - will it be avail in SIM?

    Broadcom Employee
    Posted Apr 11, 2012 05:06 AM

    You can also go through the best practices document after you install/upgrade to pcAnyhere 12.5 SP4:

    http://www.symantec.com/business/support/index?page=content&id=DOC5475



  • 44.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 11, 2012 07:54 AM
      |   view attached

    On my Notification server after an update today of the symantec installation manager, Symantec pcanywhere Solution 12.6.7 has appeared today (version 12.6.8096)



  • 45.  RE: PCAnywhere security patch - will it be avail in SIM?

    Trusted Advisor
    Posted Apr 11, 2012 10:10 AM

    Thanks for this link, otherwise I'm sure I never would've known about it.

    The image creation point caused me to create a new discussion, feel free to reply if you know the answer

    https://www-secure.symantec.com/connect/forums/pcanywhere-new-update-available-sim-image-creation-question



  • 46.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 18, 2012 01:47 PM

    see

    https://www-secure.symantec.com/connect/forums/service-desk-71-sp2-out

    But I am agree with you...



  • 47.  RE: PCAnywhere security patch - will it be avail in SIM?

    Posted Apr 18, 2012 01:50 PM

    the patch coming a new update of the SIM, and provide a proposal to "update" existing solutions. Not into the base suite CMS install package, must update after that.