Feature Request

Forum for support for the Kaspersky AntiVirus for WinGate plugin

Moderator: Qbik Staff

Feature Request

Postby Nev » Jan 12 04 11:56 pm

Hi all,

One site an all too observant staff member has found Wingate, so extra security had to be added to stop experimentation!

That is now ok!

1\ However...

The same staff member weekly uses the server for one task and want's to know why the message indicator in the system tray flashes and how to access it [again]!

This is the KAV update, for this one instance an 'update silently' or 'report only if update fails' type option would be nice!

2\ System tray icon [opposite click context] menu "Start GK, Stop Engine, Start Engine, SCAN FILES, Exit" type option would be very handy.

Cheers,
Nev.
Nev
WinGate Guru
 
Posts: 861
Joined: Sep 22 03 11:35 pm
Location: Mudgee ~ NSW ~ Australia

Another feature request

Postby Nev » Jan 27 04 11:18 pm

Hi all,

One customer today succumbed to the .Novarg.A mass mailing worm.

It slipped through prior to a KAV update and has caused quite a stir, fortunately all of it's SMTP engine attempts were blocked by Wingate NAT & KAV [over a 1,000 SMTP attempts in a day]!

Wish list:

Is it possible to have KAV perform an update [if not done in the last xx hours for example] the instant the server goes online, might help close out the gap in scheduled updates.

Mind you this 'thing' caught out even corporate protected mail Daemons with multinational ISP's having the first few slip through [received on myself via isp > ventana.veridas.net] BUT was snagged by Wingate!

Great!

Cheers,
Nev.
Nev
WinGate Guru
 
Posts: 861
Joined: Sep 22 03 11:35 pm
Location: Mudgee ~ NSW ~ Australia

Re: Another feature request

Postby Pascal » Jan 29 04 11:32 am

Nev wrote:Is it possible to have KAV perform an update [if not done in the last xx hours for example] the instant the server goes online, might help close out the gap in scheduled updates.


The closest you can get to that currently would be to add a scheduler action for it that runs an update every X hours.

Good idea though - "On Startup" might be another useful one.
Pascal

Qbik New Zealand
pascalv@qbik.com
http://www.qbik.com
Pascal
Qbik Staff
 
Posts: 2623
Joined: Sep 08 03 8:19 pm
Location: Auckland, New Zealand

Re: Another feature request

Postby Nev » Jan 29 04 2:39 pm

Pascal wrote:
Nev wrote:Is it possible to have KAV perform an update [if not done in the last xx hours for example] the instant the server goes online, might help close out the gap in scheduled updates.


The closest you can get to that currently would be to add a scheduler action for it that runs an update every X hours.

Good idea though - "On Startup" might be another useful one.


Great Pascal it would be nice if it could be incorporated.

Fixing the 'problem' yesterday was very simple and I could clearly show that as the second scheduled update fell at 11AM by 11:01 only the standard "Wingate Datascanning blocked..." went out prior to that [from the start up some 216 infected messages leaked out using the addresses harvested from the victim machine.

However...

In the balance of the time some 12,849 messages were created, of which nearly 3,000 was sent "Wingate Datascanning blocked..." ones that is.

Having a staff member halt the dialer and of course they continued to queue in Wingate and had to be removed from the holding directories.

As fate would have it eMail was checked around 2 minutes prior to KAV's routine daily update at 09:05! Bad luck huh!

My approach was to add a KAV plugin update for 09:00, might help?

Any way all's well that ends well and it was strong leveraging of a serious problem that keeps computers working and earning a living! Good job!

Cheers,
Nev.
Nev
WinGate Guru
 
Posts: 861
Joined: Sep 22 03 11:35 pm
Location: Mudgee ~ NSW ~ Australia


Return to Kaspersky AntiVirus for WinGate

Who is online

Users browsing this forum: No registered users and 27 guests

cron