Endpoint Protection

 View Only

  • 1.  Symantec AV 10.x is sending wrong sysObjectID in its SNMP traps

    Posted May 18, 2009 08:04 AM
    Hello,

    has anybody already noticed that Symantec AV 10.x application is sending a wrong sysObjectID in its SNMP traps? Instead of 393 for Symantec 343 is used (Intel). I could notice this on a German version of Symantec AV 10.0 application. This is a potential problem for management applications which use the sysObjectID of SNMP traps to identify the source correctly.
    Any feedback on this is appreciated. Thank you.

    Kind regards


  • 2.  RE: Symantec AV 10.x is sending wrong sysObjectID in its SNMP traps

    Posted Jun 05, 2009 03:20 PM
    You might consider calling into Symantec support. Sounds like a possible defect.

    Thomas


  • 3.  RE: Symantec AV 10.x is sending wrong sysObjectID in its SNMP traps

    Posted Jun 05, 2009 03:30 PM
    This is actually by design, since SAV is a combination of several products we have purchased over the years.

    The actual products sending the alerts are based on old Intel code, hence the Intel ID.

    In addition, check the registry... HKLM\Software\INTEL\LanDesk\VirusProtect6 - no mention of Symantec, because technically it isn't ;-)