Endpoint Protection

product: Sym Corp AV v10.1 XP-SP2 32bit
these questions are related to the email auto-protect features for pop3 and smtp.

i found some notes on Sym support search that said if you change the default scan ports of 110 and 25 to match those of the email client then Sym AV doesnt scan such email. is this still the case for v10.1?

also, is there a syntax for adding multiple ports in the Av settings? my outlokk express has many email accounts setup on it and not all of them use 110 and 25 for sending and receiving.

thanks
C

I don't think so. These ports are the default one so it should Scan. Rest u can consult knowledgebase

 Confirming: SAV Corp and SEP only support a single set of email scanning in/out ports.

Do you have the specific links on the "default scan ports of 110 and 25 to match those of the email client then Sym AV doesnt scan such email" comment handy? The only time, I would think, we couldn't scan it would be if the traffic is encrypted.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/c4633806b36fa7cf88256fe800643c07?OpenDocument

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/568a1f5d1af6a03b88257235007175c6?OpenDocument

"Internet E-mail Auto-Protect port changes are ignored"

this verbiage is found in may docs. i cannot find the one that i said in 1st post, but it did say if you change the port settings from default to match those being used by email client then scan wont happen because the av client ignores the port changes and continues to look at 110 and 25.

 I'll confirm if that is still a problem with the current MRs for 10.1 and 10.2.

 MR4 was a mistaken reference to SEP 11.0 MR4. You were clear this is SAV Corp 10.1. Do you know which MR?

yes, i was doing searches for SAV Corporate AV and came across a v10.1 article that had the same verbiage.

Hi, yes, I have confirmed that even the latest MRs for SAV Corp still have this problem. We are researching if SEP has this fixed. If SEP has this fixed and it is easy to backport, CRT might (no commitment) consider including it in a SAV Corp MR.

Hi Chuck your post is not clear to me. but as with what I understand, you don't want to your emails to be scanned? I think you should use 110 for the incoming emails to be scanned, then change the smtp to a different port so that it will not be scanned. You wil have to change this on the server and client side.

In working with the team, we determined that the ability to configure SMTP/POP scanning on different ports is definiitely fixed in the SEP 11.0 product. Unfortunately, the fix is not easily backported to SAV Corp.