Endpoint Protection

 View Only
  • 1.  Symantec Antivirus for Linux

    Posted Feb 16, 2013 03:39 PM

    I have a linux system that cannot connect to the internet for security reasons.  I have SAV 1.0.12.8 and need to obtain updated virus definitions on a regular basis.  I cannot find the virus defs on the Symantec website for this product.  Does anyone know how to obtain them and then how to install them on a linux system once I get them?

    Thanks

     



  • 2.  RE: Symantec Antivirus for Linux

    Posted Feb 16, 2013 03:48 PM

    All details are here

    How to update a Linux-based computer with Intelligent Updater definitions

     

    Article:TECH96754 | Created: 2009-01-14 | Updated: 2013-01-23 | Article URL http://www.symantec.com/docs/TECH96754

     



  • 3.  RE: Symantec Antivirus for Linux

    Posted Feb 16, 2013 03:53 PM

    How to update a Linux-based computer with Intelligent Updater definitions

     

    Article:TECH96754  |  Created: 2009-01-14  |  Updated: 2013-01-23  |  Article URL http://www.symantec.com/docs/TECH96754

     



  • 4.  RE: Symantec Antivirus for Linux

    Posted Feb 16, 2013 04:44 PM

    Thank you for identifying the virus def location.  I have downloaded the file but am not able to run the script to load the defs.  I have copied the update shell file to the root directory.  When I run the script, I get the following:  no uncompress in (/usr/sbin:/usr/sbin:/bin)  ERROR:  Required utility missing:  uncompress.  Please install this utility before using this Intelligent Updater package.

    Need help.  Thanks

     



  • 5.  RE: Symantec Antivirus for Linux

    Posted Feb 16, 2013 04:46 PM

    I do have gzip at /bin/gzip.

     



  • 6.  RE: Symantec Antivirus for Linux

    Posted Feb 16, 2013 10:59 PM

    Look this

    How to remediate virus definitions in Symantec Antivirus for Linux (SAVFL) 1.0.x

     

     

    Article:TECH93435 | Created: 2009-01-15 | Updated: 2012-09-12 | Article URL http://www.symantec.com/docs/TECH9343

    Symantec AntiVirus for Linux (SAVFL) client fails to update definition through LiveUpdate

     

     

    Article:TECH93974 | Created: 2009-01-12 | Updated: 2013-01-30 | Article URL http://www.symantec.com/docs/TECH93974

    Check this thread also

    https://www-secure.symantec.com/connect/forums/sav-linux-virus-definitions-not-reported-being-updated



  • 7.  RE: Symantec Antivirus for Linux

    Trusted Advisor
    Posted Feb 18, 2013 04:31 AM

    Hello,

    Here are the steps:

    1. Obtain the Intelligent Updater from one of the following locations:

    a. http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce
    Look for a filename ending in unix.sh (for example, 20091014-003-unix.sh).

    b. ftp://ftp.symantec.com/AVDEFS/symantec_antivirus_corp/
    Look for a filename ending in unix.sh (for example, 20091014-003-unix.sh).

    c. ftp://ftp.symantec.com/AVDEFS/symantec_antivirus_corp/static/symcdefs-unix.sh
    This is a statically named file that is updated with each daily release of definitions.

    Note: The file download via HTTP is typically faster than FTP. The current size of the file is just over 300MB.

    NOTE: The .SH file needs to have Executable permissions. To accomplish this, execute the following command:
    chmod +x *unix.sh
     

    2. The script must be executed as root or by using sudo; if it is not, the following error will occur.

    • $ ./symcdefs-unix.sh
      Validating available tools...

      ERROR: Require write access to /opt/Symantec/virusdefs/incoming.
      There are several methods to meet this requirement.
      1. Run this script from the root user account.
      2. Add the current user as a member of the "avdefs" user
      group.
      3. chmod 777 for /opt/Symantec/virusdefs/incoming.
      We recommend either of the first two options for security reasons.

    3. Uudecode and uncompress must be installed. These can usually be installed by installing the Sharutils package. In some instances, you may need to install the ncompress package as well.

    Note: If you get an error referencing either utility, please run one of these commands as root or by using sudo to install them. The command to install sharutils may be different than those listed below, depending on the distribution and version of Linux being used.

    • up2date sharutils
      yum install sharutils
      apt-get install sharutils
    • up2date ncompress
      yum install ncompress
      apt-get install ncompress

    Reference:

    How to update a Linux-based computer with Intelligent Updater definitions

    http://www.symantec.com/docs/TECH96754

    Other Related Articles

    How to remediate virus definitions in Symantec Antivirus for Linux (SAVFL) 1.0.x

    TECH123107   A terminal line walkthrough of applying Intelligent Updater Definitions to a SAV for Linux client.

    Hope that helps!!



  • 8.  RE: Symantec Antivirus for Linux

    Posted Feb 18, 2013 05:33 AM

    Hi,

    Thumbs up to the advice, above!

    Sharutils is a prerequisite for runnign Intelligent Updater on Linux:

     Uudecode and uncompress must be installed. These can usually be installed by installing the Sharutils package. In some instances, you may need to install the ncompress package as well.

    This article has some additional info you may find useful:

    SAV for Linux: A (Somewhat) Illustrated Guide Part 3
    https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-3  
     


     



  • 9.  RE: Symantec Antivirus for Linux

    Posted Mar 08, 2013 02:19 AM

    This new article may be of interest to followers of this thread...

    SAV for Linux: A (Somewhat) Illustrated Guide Part 4: SAVFL Reporter
    https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-4-savfl-reporter



  • 10.  RE: Symantec Antivirus for Linux

    Posted May 06, 2013 10:42 PM

    Thank you guys for sharing this information !



  • 11.  RE: Symantec Antivirus for Linux

    Posted May 06, 2013 11:30 PM

    Hi

    You can configure the LUA for the same

    Regards