[27661] in resnet
Re: Symantec Endpoint Protection 12
daemon@ATHENA.MIT.EDU (Jeremy Mlazovsky)
Fri May 11 09:02:04 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=20cf307d073e92e5b404bfc20d33
Message-ID: <CAPfpEMn0LQ9gNDtz8_yqWUfGqPJoVyHLAFMaZ8M-Sgz+fvuO=A@mail.gmail.com>
Date: Fri, 11 May 2012 08:40:58 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Jeremy Mlazovsky <jmlazovsky1@UDAYTON.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <B3C0241889401F4AB97A55E980BABBA001345A19D9A1@EXV01.wcu.edu>
--20cf307d073e92e5b404bfc20d33
Content-Type: text/plain; charset=ISO-8859-1
Try using the AutoIt scripting language.
You can embed files directly into the compiled .exe file and then have the
script extract them to a location of your choosing. I use this method a
lot.
The AutoIt scripting language also has a lot more functionality than batch
files. You can also port Windows Script Host scripts into AutoIt or
directly call existing scripts.
http://www.autoitscript.com/site/autoit/
Thanks.
Jeremy Mlazovsky '02
Director of Information Technology
College of Arts and Sciences
University of Dayton
300 College Park
Dayton, Ohio 45469-2201
937-229-2166
Leadership UD 2009
Please contact CAS Help (937-229-2166, cashelp@udayton.edu) for service
requests.
On Fri, May 11, 2012 at 8:28 AM, Andy Voelker <avoelker@email.wcu.edu>wrote:
> New discovery. Download Insight doesn't have a problem with Blue Coat
> itself, just the way we package it. I typically use PowerArchiver to make
> a self-extracting zip that will run a batch file. The Proxy Client is an
> MSI that requires parameters to be fed into it at an admin level, hence the
> batch files for elevation and parameter feed. It also has a problem with a
> network reset script I wrote to repair wireless connections.
>
> Does anyone have a recommendation for a free package tool that will
> self-extract and run a file afterwards? It looks like if I repackage
> everything I will be somewhat safe.
>
> I still can't keep Download Insight from installing, which is ridiculous.
>
> -- Andy Voelker
> Manager of Student Computing in the Technology Commons
> WCU Staff Senator
> Western Carolina University
> Check the status of your IT requests at any time at http://help.wcu.edu/ !
>
>
> -----Original Message-----
> From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Brock,
> Adam
> Sent: Wednesday, May 09, 2012 5:46 PM
> To: RESNET-L@LISTSERV.ND.EDU
> Subject: Re: Symantec Endpoint Protection 12
>
> I had luck in the past getting false positive issues resolved by
> submitting them to SSC. Have you tried that?
> Sent from my Brockberry.
> ________________________________
> From: Andy Voelker <avoelker@email.wcu.edu>
> Sender: Resnet Forum <RESNET-L@LISTSERV.ND.EDU>
> Date: Wed, 9 May 2012 15:29:06 -0500
> To: RESNET-L@LISTSERV.ND.EDU<RESNET-L@LISTSERV.ND.EDU>
> ReplyTo: Resnet Forum <RESNET-L@LISTSERV.ND.EDU>
> Subject: [RESNET-L] Symantec Endpoint Protection 12
>
> Has anyone migrated to SEP 12? If so, are you having problems with the
> "Download Insight" feature? Here is our issue:
>
> We have two Blue Coat Proxy SG appliances that are basically a malware
> filter. We also install a Proxy client on all computers to enforce the
> same protection rules when the computer leaves our network (it is extremely
> effective, recent studies show that a student that lives off campus is over
> 3 times more likely to get a virus than students that live on campus). The
> problem we are having with SEP 12 download insight is that it blocks the
> installation of the proxy client every time. I can set it on the lowest
> level possible and it still blocks it. The heuristics agent in it isn't
> intelligent enough to crack open the self-extracting ZIP and take a close
> look at the actual proxyclient.msi. I can build an SEP package that
> doesn't include the download insight feature and disable it on the
> management server, but upon deployment it will show an error saying that
> download insight is not enabled. Then it gives a handy little button
> called "Fix", which will download and install !
> the agent. We obviously don't want to advise clients to ignore the
> error, and we love our proxy client, but it just seems like the two cannot
> co-exist.
>
> We're going to try to contact Symantec, but hasn't proved useful in the
> past. We may contact Blue Coat to see what they can do, but it isn't
> really their error in the first place.
>
> Thoughts? Solutions? Thanks!
>
> -- Andy Voelker
> Manager of Student Computing in the Technology Commons WCU Staff Senator
> Western Carolina University Check the status of your IT requests at any
> time at http://help.wcu.edu/ !
>
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html___________________________________________________
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--20cf307d073e92e5b404bfc20d33
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Try using the AutoIt scripting language.<div><br></div><div>You can embed f=
iles directly into the compiled .exe file and then have the script extract =
them to a location of your choosing. =A0I use this method a lot.</div><div>
<br></div><div>The AutoIt scripting language also has a lot more functional=
ity than batch files. =A0You can also port Windows Script Host scripts into=
AutoIt or directly call existing scripts.</div><div><br></div><div><a href=
=3D"http://www.autoitscript.com/site/autoit/">http://www.autoitscript.com/s=
ite/autoit/</a>=A0<br clear=3D"all">
<div><br></div><div>Thanks.</div><div><br></div><div>Jeremy Mlazovsky '=
02</div><div>Director of Information Technology</div><div>College of Arts a=
nd Sciences</div><div>University of Dayton</div><div>300 College Park</div>
<div>Dayton, Ohio 45469-2201</div><div>937-229-2166</div><div><br></div><di=
v>Leadership UD 2009</div><div><br></div><div>Please contact CAS Help (937-=
229-2166, <a href=3D"mailto:cashelp@udayton.edu" target=3D"_blank">cashelp@=
udayton.edu</a>) for service requests.</div>
<br>
<br><br><div class=3D"gmail_quote">On Fri, May 11, 2012 at 8:28 AM, Andy Vo=
elker <span dir=3D"ltr"><<a href=3D"mailto:avoelker@email.wcu.edu" targe=
t=3D"_blank">avoelker@email.wcu.edu</a>></span> wrote:<br><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;p=
adding-left:1ex">
New discovery. =A0Download Insight doesn't have a problem with Blue Coa=
t itself, just the way we package it. =A0I typically use PowerArchiver to m=
ake a self-extracting zip that will run a batch file. =A0The Proxy Client i=
s an MSI that requires parameters to be fed into it at an admin level, henc=
e the batch files for elevation and parameter feed. =A0It also has a proble=
m with a network reset script I wrote to repair wireless connections.<br>
<br>
Does anyone have a recommendation for a free package tool that will self-ex=
tract and run a file afterwards? =A0It looks like if I repackage everything=
I will be somewhat safe.<br>
<br>
I still can't keep Download Insight from installing, which is ridiculou=
s.<br>
<br>
-- Andy Voelker<br>
Manager of Student Computing in the Technology Commons<br>
WCU Staff Senator<br>
Western Carolina University<br>
Check the status of your IT requests at any time at <a href=3D"http://help.=
wcu.edu/" target=3D"_blank">http://help.wcu.edu/</a> !<br>
<br>
<br>
-----Original Message-----<br>
From: Resnet Forum [mailto:<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESN=
ET-L@LISTSERV.ND.EDU</a>] On Behalf Of Brock, Adam<br>
Sent: Wednesday, May 09, 2012 5:46 PM<br>
To: <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</a=
><br>
Subject: Re: Symantec Endpoint Protection 12<br>
<br>
I had luck in the past getting false positive issues resolved by submitting=
them to SSC. Have you tried that?<br>
Sent from my Brockberry.<br>
________________________________<br>
From: Andy Voelker <<a href=3D"mailto:avoelker@email.wcu.edu">avoelker@e=
mail.wcu.edu</a>><br>
Sender: Resnet Forum <<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET=
-L@LISTSERV.ND.EDU</a>><br>
Date: Wed, 9 May 2012 15:29:06 -0500<br>
To: <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</a=
><<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</=
a>><br>
ReplyTo: Resnet Forum <<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNE=
T-L@LISTSERV.ND.EDU</a>><br>
Subject: [RESNET-L] Symantec Endpoint Protection 12<br>
<br>
Has anyone migrated to SEP 12? =A0If so, are you having problems with the &=
quot;Download Insight" feature? =A0Here is our issue:<br>
<br>
We have two Blue Coat Proxy SG appliances that are basically a malware filt=
er. =A0We also install a Proxy client on all computers to enforce the same =
protection rules when the computer leaves our network (it is extremely effe=
ctive, recent studies show that a student that lives off campus is over 3 t=
imes more likely to get a virus than students that live on campus). =A0The =
problem we are having with SEP 12 download insight is that it blocks the in=
stallation of the proxy client every time. =A0I can set it on the lowest le=
vel possible and it still blocks it. =A0The heuristics agent in it isn'=
t intelligent enough to crack open the self-extracting ZIP and take a close=
look at the actual proxyclient.msi. =A0I can build an SEP package that doe=
sn't include the download insight feature and disable it on the managem=
ent server, but upon deployment it will show an error saying that download =
insight is not enabled. =A0Then it gives a handy little button called "=
;Fix", which will download and install !<br>
=A0the agent. =A0We obviously don't want to advise clients to ignore th=
e error, and we love our proxy client, but it just seems like the two canno=
t co-exist.<br>
<br>
We're going to try to contact Symantec, but hasn't proved useful in=
the past. =A0We may contact Blue Coat to see what they can do, but it isn&=
#39;t really their error in the first place.<br>
<br>
Thoughts? =A0Solutions? =A0Thanks!<br>
<br>
-- Andy Voelker<br>
Manager of Student Computing in the Technology Commons WCU Staff Senator We=
stern Carolina University Check the status of your IT requests at any time =
at <a href=3D"http://help.wcu.edu/" target=3D"_blank">http://help.wcu.edu/<=
/a> !<br>
<br>
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives, go to <a href=3D"http://L=
ISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND=
.EDU/archives/resnet-l.html</a> ___________________________________________=
________<br>
<br>
___________________________________________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives, go to <a href=3D"http://L=
ISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND=
.EDU/archives/resnet-l.html</a><br>
___________________________________________________<br>
<br>
___________________________________________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives,<br>
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a><br>
___________________________________________________<br>
</blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--20cf307d073e92e5b404bfc20d33--
