• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Need info re: Juniper HostChecker and Norton

After updating Norton Security to 22.7.0.76 my client's VPN (Juniper) has a Host Checker that says the virus definitions are not up to date.  Is it possible that 22.7.0.76 changed how/where the definitions are stored? Does Norton (the company) coordinate with other companies when this kind of thing happens.

Replies

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Hello

Norton Antivirus Definitions are now called SDS Definitions.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Need info re: Juniper HostChecker and Norton

I followed the other chain, ran Intelligent Updater - still no luck.    I suspect that Juniper's client HostChecker needs updating, but since this is supplied from the client's site I am powerless to update it. 

Thanks for the information though.

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Hello

The Intelligent Updater will now give it in SDS  Definitions also. We have notified Norton of this issue.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
Kudos1 Stats

Re: Need info re: Juniper HostChecker and Norton

For everyone's information - the client is opening a ticket with Juniper regarding this;  it seems to them (and me) that the HostChecker needs to look for SDS definitions and be aware of what is current.  Hopefully their update won't take too long; I will try to update here when it happens.

Kudos0

Re: Need info re: Juniper HostChecker and Norton

As a "workaround" - would Norton 22.7.0.76 have a problem if the VirusDefs directory contents were copied from another, older version?

Kudos0

Re: Need info re: Juniper HostChecker and Norton

I am an administrator of a Pulse Secure (Juniper) SA VPN system at my company and it is configured to use hostchecker to verify client endpoints are running approved AV and FW software.  I have a few trouble tickets now because the new 22.7 version is causing the hostchecker to fail stating: Norton Security 22.7.0.76 does not comply with policy. Compliance requires latest virus definitions.

Some troubleshooting steps I have done so far is that I was running 22.6 with no issues.  I upgraded to 22.7 and it worked as well so I thought it was something on the user's PC (patch or update or something) causing problems.  I finally did a fresh install to 22.7 on the same PC that was working earlier and then is when the problems started happening to me and I see the same error listed above that others have been reporting.  

The host checker approved content is managed by a 3rd party company (opswat) so I am not getting any traction with the vendor. I have a case opened with Pulse Secure as well and they are looking through every log and TCP dump to figure this one out.  So far nothing received on my end but I will share once I get something.    If anyone can tell me what is operationally different between 22.6 and 22.7 would be greatly beneficial in helping me.

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Kudos0

Re: Need info re: Juniper HostChecker and Norton

According to others, it's the switch from "virus definitions" to "SDS definitions". 

If you look, you can see they removed the virus definitions from the C:\Program Files (x86)\Norton Security\NortonData\22.7.0.76\Definitions\VirusDefs  directory and added the SDS definitions to C:\Program Files (x86)\Norton Security\NortonData\22.7.0.76\Definitions\SDSDefs 

The Host Checker and/or opswat need to look for definitions in the new directory (and if they look into the files, there may be new file information to look at)
 

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Hello

The Host Checker needs to look for SDS Definitions instead of Antivirus Definitions. They should be able to change the Host Checker so that it looks for Antivirus Definition or SDS Definitions in the clients.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Need info re: Juniper HostChecker and Norton

Sure they should - but that's why I'm asking for someone from Norton to contact them. Seems like they should have tested with the latest Norton version and found this issue (although I don't know when 22.7.0.76 came out exactly), but maybe there's some 'OPSWAT' coordination that's needed between the two companies.

Kudos0

Re: Need info re: Juniper HostChecker and Norton

Well, Pulse Secure (Juniper) figured something out and said it will be fixed soon, but they don't know exactly when.  This is the service request update I just received a few minutes ago from them:

As per the reported issue, I would like to keep you updated that the issue will be fixed on upcoming ESAP version 2.9.6.However, we are not sure about the ETA as when this ESAP version is released.We will keep you updated as soon as the above ESAP version is available.

It doesn't help us now though.... :(

Kudos0

Re: Need info re: Juniper HostChecker and Norton

I also heard this news from my client's support person who opened a ticket with Juniper - hopefully the ESAP will be ASAP !

This thread is closed from further comment. Please visit the forum to start a new thread.