Tips for Troubleshooting Gateway Anti-Spyware
Desktop Antivirus signature downloads not working from LAN Clients:
Problem: Gateway Anti-Spyware blocks HTTP or FTP downloads of Antivirus or Spyware signature files.
Solution: Go to Gateway Anti-Spyware > Custom Destination Rules > Add. Enter domain used to download the file. Action is "Trust". Any Trusted destination entries will not be scanned by Gateway Anti-Spyware.
Examples
Symantec - Enter "liveupdate.symantecliveupdate.com" as the trusted domain.
TrendMicro - Enter "www.trendmicro.com" as the trusted domain.
FTP downloads fail from LAN:
Problem: Some FTP downloads fail due to the Gateway Anti-Spyware proxy scanning for spyware or virus content.
Solution: Go to Gateway Anti-Spyware > Custom Destination Rules > Add. Add the domain name or the IP address of the FTP server. Action is "Trust". Any Trusted destination entries will not be scanned by Gateway Anti-Spyware.
Solution 2: Go to Gateway Anti-Spyware > Custom Source Rules > Add. Add the IP address of the client. Any clients in the Custom Source Rules will not be scanned by Gateway Anti-Spyware. Please note that this client will no longer be scanned for Spyware or Virus activity for all protocols.
Solution 3: If these solutions fail, temporarily turn off FTP scanning. Navigate to Gateway Anti-Spyware > Settings > Advanced and disable FTP Scanning.
DNS not resolving from LAN:
Problem: DNS server behind InstaGate or ThreatWall no longer resolves DNS. With Gateway Anti-Spyware turned on, internal DNS servers that send queries to the Internet are blocked by Gateway Anti-Spyware. LAN clients cannot resolve DNS if they are directed to the internal server, or an external DNS server
Solution: Go to Gateway Anti-Spyware > Custom Source Rules. Enter the IP Address of DNS Server. This will exempt the DNS Server from Gateway Anti-Spyware for all protocols.
Download of files fail with Gateway AntiSpyware enabled:
Problem: File is being marked as containing a Spyware signature. Some files with macros or password protection may cause this false positive. Also, the file may contain spyware signatures.
Solution: Find the download server domain or IP address and add a Custom Destination Rule. Go to Gateway Anti-Spyware > Custom Destination Rules > Add. Add the domain name or the IP address of the download server. Action is "Trust". Any Trusted destination entries will not be scanned by Gateway Anti-Spyware.
Solution 2: Go to Gateway Anti-Spyware > Custom Source Rules > Add. Add the IP address of the client. Any clients in the Custom Source Rules will not be scanned by Gateway Anti-Spyware. Please note that this client will no longer be scanned for Spyware or Virus activity for all protocols.
Gateway Anti-Spyware Report takes long time to process or error is displayed:
Problem 1: Gateway Anti-Spyware may cause an already extended InstaGate or ThreatWall running multiple softpaks to experience higher than average loads. Running the Gateway Anti-Spyware reports may take a very long time if load average on unit is too high.
Solution 1: Off-load services to a Threatwall and run the InstaGate in conjunction with a ThreatWall. Contact our sales team at 303-444-1600 (Toll-Free 888-903-7638) for more information.
Problem 2: Popup Blockers in browser may cause the Gateway Anti-Spyware report to display improperly.
Solution 2: Disable the pop blocker in your browser and run the Gateway Anti-Spyware report again.
File Downloads seem to take longer with Gateway AntiSpyware enabled:
Problem: Window's download monitor shows downloads take a long time to complete or a slow transfer rate when Gateway Anti-Spyware is enabled.
Solution: Gateway Anti-Spyware must scan the entire file for spyware and virus signatures before it is passed to the client. The download session is kept alive by Gateway Anti-Spyware while this takes place, resulting in the 1kb/s download rate. Therefore, estimated file download time will appear to take longer at the beginning of a download. After Gateway Anti-Spyware has completed the scanning of the file, the download will be transferred to the client at LAN speeds and will complete quickly. The total download time should be only slightly higher with Gateway Anti-Spyware enabled.
Gateway Anti-Spyware Manual link:
For complete instructions on using the Gateway Anti-Spyware Softpak, please see the Gateway Anti-Spyware Manual at the URL below.
http://www.esoft.com/content/pdf/instagate-gateway-anti-spyware.pdf
