Best practices for running Symantec Antivirus Corporate or Symantec Endpoint Protection and SMS for Domino on the same server.

Article:TECH80506  |  Created: 2002-01-18  |  Updated: 2013-12-17  |  Article URL http://www.symantec.com/docs/TECH80506
Article Type
Technical Solution


Issue



Best practices for running Symantec AntiVirus Corporate Edition (SAVCE) or Symantec Endpoint Protection (SEP) and Symantec Mail Security (SMS) for Domino product on the same Domino server.

 


Environment



 One of the following antivirus versions is installed:

  • Symantec AntiVirus (SAVCE) Corporate Edition 8.0 through 10.1 
  • Symantec Endpoint Protection (SEP) version 11 through 12.1

Note: Only SAVCE 10.1 is still supported.  Older versions are past End Of Life. (EOL)

One of the following versions of Symantec Domino (SMSDOM) product is also installed:

  • Symantec Mail Security 8.x for Domino
  • Symantec Mail Security 7.x for Domino

Solution



Do the following when an antivirus product is running on the same computer as a Symantec Domino product:

  • Make sure the SAVCE service loads before the Symantec Domino product task.
  • Make sure the File System Realtime Protection does not scan the TEMP folder used by the SMS for Domino product.
    For instructions to configure Realtime Protection, follow the link in the References section of this page.
  • Make sure there are no email scanning utilities enabled or installed in the local antivirus.

 


Notes:

  • Symantec recommends to install SAVCE or SEP to the Domino server as an unmanaged client or as a managed client in a group. This method of installation does not overwrite any existing exclusions.
  • Do not choose "Internet Email Scanning" (the optional Lotus Notes Auto-Protect component) or any tools that have to do with email for SAVCE or SEP when installing SAVCE or SEP to the server.
    These features monitor standard SMTP ports and can cause performance degradation or failure if installed it to a mail server. See the links in the Reference section of this page for more information.
  • If using SEP 12.1, SMS for Domino will require Java LiveUpdate (JLU) to be installed..  SEP 12.1 and SMS for Domino are unable to share antivirus definitions.


Updating Virus Definitions
Do not replicate virus definitions for the SMS for Domino with SAVCE installed on the Domino servers.

If SAVCE is installed on the Domino server, then update virus definitions for both products by using one or more of the following methods:

  • Run or schedule LiveUpdate from Symantec System Center or the Symantec AntiVirus Corporate Edition interface.
  • Download and run virus definitions from the Download Virus Definitions (Intelligent Updater Only) Web page.
  • Configure Symantec AntiVirus Corporate Edition to use the Virus Definition Transport Method.


Running LiveUpdate for Symantec Mail Security for Domino does not update definitions for Symantec AntiVirus Corporate Edition, because it does not download the .xdb file required.

Use the following guidelines to determine whether to run LiveUpdate for Symantec Mail Security for Domino.

To update definitions if running a Symantec AntiVirus Corporate Edition Server:

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. Configure LiveUpdate for the Corporate Edition server or ensure that it is receiving virus definitions from another Corporate Edition server.
  3. Symantec Mail Security will use the definitions provided by Corporate Edition.


To update definitions if running Symantec AntiVirus Corporate Edition as a managed client:

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. If using the Virus Definition Transport Method (VDTM) to update virus definitions from a parent server, the client will use the definitions the parent server is using. It is not required to configure LiveUpdate for the Corporate Edition client.
  3. Symantec Mail Security will use the definitions provided by Corporate Edition.


To update definitions if you are running Symantec AntiVirus Corporate Edition as an unmanaged client:
Do one of the following:

  • Run LiveUpdate for the Symantec Domino product to update both products.
  • Replicated virus definitions using Savdefs.nsf.
  • Update virus definitions using any of the supported methods for the Corporate Edition product.




References
For detailed instructions to configure File System Realtime Protection, read Symantec Knowledge Base article:
Preventing Symantec AntiVirus Corporate Edition from scanning the temporary folder for Symantec products for Domino on a Notes Server.


For information about the E-Mail Auto-Protect plug-ins, read the following Symantec Knowledge Base articles:


Installing Java LiveUpdate after SMS for Domino has been installed:

 




Legacy ID



2002101810440754


Article URL http://www.symantec.com/docs/TECH80506


Terms of use for this information are found in Legal Notices