Endpoint Protection

Hi,

I installed Central Quarantine server for my network in the office but I am constantly getting this error message



My LiveUpdate server is working perfectly on the same machine....

Any help will be greatly appreciated.


Kind Regards.

1. Verify that the local DNS server can resolve "gateways.dis.symantec.com" (If going through a proxy server, ensure that the QServer is authenticated by the proxy server.)

OR

2. Add the necessary entries to the file "C:\windows\system32\drivers\etc\hosts" (The entries will need to be added from the debug log, you will need an internet connection that is able to resolve the address first.) such as:

216.12.142.230 gateways.dis.symantec.com
206.204.52.98 gateways.dis.symantec.com
206.204.52.100 gw01def01.gw01.dis.symantec.com

Please bear in mind that there may be other entries that are needed for other Central Quarantine functionality to work

Try to reconfigure your quarantine server to do this follow this link hope it might be helpful

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/869a310fbb9cf10c4925749400699a76?OpenDocument

There is a known issue with Central quarantine not updating if IE7/IE8 is installed on the same machine.

To work around the problem, change the HTTPS settings in the Symantec Central Quarantine console.

To change the HTTPS settings:
1. Start the Symantec Central Quarantine Console.
2. Under Properties > Web Communication > Security, uncheck Secure submission and Secure download.
3. Click OK.

I installed Central Quarantine on Windows Server 2008. So definitely it is IE7. Let me try it and I will let you guys know.

I did try everything said here but it still doesn't work.

I did try putting the signature files manually and it stated working but now it doesn't update itself.

https://www-secure.symantec.com/connect/forums/quarantine-server-errors-it-wont-get-defs-or-submit


I tried this link to update it manually.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2004062313041348



This is the error I am getting. I have checked the firewall and it is allowing all the traffic from this server to Symantec and back.
I can also resolve http://gateways.dis.symantec.com:2847
I do not need to do the port 2848 as I have disabled Secure access as mentioned by Jeremy above.

Any help would be grately appreciated.

Cheers.

Does Symantec actually support the Central Quarantine Server  running on Windows 2008.
As in the Installation_guide_SEP11.0.5.pdf  I couldn't see win2008 listed in the systems requirements.

It does install just fine .. but doesn't seem work properly.
Jeremy from Symantec mentioned earlier in the thread that this is due to an open issue with IE7/IE8 
Can somebody at Symantec confirm this.
  - if it should be at all ran on Windows 2008
  - what the status is of this  IE7/IE8  issue.

I am running  SEP 11.05002.333   in test at the moment  on a windows 2008 box.  

Thx
Fil.