Start a Conversation

Unsolved

This post is more than 5 years old

HS

2544

June 16th, 2014 23:00

cava configuration for symantec sav av

HI

I have been trying to configure CAVA for  Symantec SAV AV  (Symantec protection engine) .

i have following the cava document and have covered all the document , i am still having few errors not sure what i have missed out .

following is the out from the  datamover.

I can see the AV engine ,  can detect  the  root Share  on the Physical data mover.

[nasadmin@mtaecs01 log]$ server_viruschk server_2
server_2 :
10 threads started.
1 Checker IP Address(es):
10.61.11.38                                    ERROR_AVINTERFACE at Tue Jun 17 15:52:56 2014 (GMT+10:00)
                                               ONC-RPC version 3, CAVA version: 6.3.1, ntStatus: SUCCESS
                                               AV Engine: Symantec SAV SE
                                               Server Name: mtacava01v-tst.metrotrains.local
                                               Last time signature updated: Tue Jun 17 13:21:33 2014 (GMT+10:00)

11 File Mask(s):
*.EXE *.COM *.DO? *.DOT *.XL? *.MD? *.VXD *.386 *.SYS *.BIN *.PP?
3 Excluded File(s):
PAGEFILE.SYS *.TMP *.ISO
Share \\mtadms01.metrotrains.local\CHECK$.
RPC request timeout=20000 milliseconds.
RPC retry timeout=4000 milliseconds.
High water mark=200.
Low water mark=50.
Scan all virus checkers every 10 seconds.
When all virus checkers are offline:
Continue to work with Virus Checking and CIFS.
Scan on read disable.
Panic handler registered for 65 chunks.
MS-RPC User: metrotrains.local.svc_cee_vc
MS-RPC ClientName: mtadms01.METROTRAINS.LOCAL

Also on the Antivirus Engine site    when i check the event viewer  , i see following  error event for cava in  application logs

CAVA has detected that the CAVASAV Agent has not been loaded or started. CAVA cannot process  AV requests until the CAVASAV Agent is started.

can  some one help me on this.

June 19th, 2014 07:00

Hi,

I think these two KB articles 48707 and 53048 may help you.

Thanks

Jyothi

1 Rookie

 • 

10 Posts

June 23rd, 2014 22:00

KB article 48707 did the trick for me , thanks for your help .

1 Rookie

 • 

10 Posts

June 23rd, 2014 23:00

mean while i am also looking in to McAfee ,  i have no luck with this product  .  following is the out put

2 Checker IP Address(es):

10.61.11.39                                    OFFLINE at Tue Jun 24 16:13:26 20                                                                                                                                                              14 (GMT+10:00)

                                               MS-RPC over SMB, CAVA version: ,                                                                                                                                                               ntStatus: INVALID_PARAMETER

                                               AV Engine:

                                               Server Name: mtacava03v-tst.metro                                                                                                                                                              trains.local

                                               No signature date

i have same configuration Symantec  and  McAfee .  symantec works fine now .  but McAfee doesnt  detect AV Engine.

any idea on this please

November 1st, 2016 12:00

Hi ,

I have the same issue, looks like the KB article links are broken

Can I search these KB articles?

4 Operator

 • 

8.6K Posts

November 2nd, 2016 03:00

yes you can search the knowledgebase on support.emc.com

Since you are referring to posts that are over 2 years old it is quite possible that the kb's have changed

4 Operator

 • 

8.6K Posts

November 3rd, 2016 03:00

Did you find how to search the kb?

No Events found!

Top