Author Topic: Juniper SA2500 doesnt recognize newest Avast software  (Read 33271 times)

0 Members and 1 Guest are viewing this topic.

Uxorious

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #30 on: April 11, 2012, 12:26:10 AM »
i hopefully receive some communication about this soon from VLK or Lucas

I noticed that the last 2 release notes from Juniper (http://www.juniper.net/support/products/esap/) lists this a known issue/limitation.
From my dealings with Juniper support, I did not get the impression that it is going to change any time soon.

Offline lukas.hasik

  • Moderator
  • Advanced Poster
  • *
  • Posts: 905
  • Product manager for Secure Internet in Avast One
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #31 on: April 11, 2012, 08:45:58 AM »
Hi,
some update. We are working with opswat on solution for this case. It seems that they need to check state of the real time protection but they require to do it without admin rights (weird...). It's really complicating things however we are looking for some way how to fix it.
And yes, avast is not the only AV with the same "issue" :(

regards
Lukas.
Quality is also a feature.

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #32 on: April 11, 2012, 11:35:50 PM »
Thanks for the update

What has changed between the detecting the real time state from Avast 6/7 and the old 4.8 net client?
With the netclient there was no problem, but then again the netclient was aimed to be for XP not vista/7, but maybe there is a clue there

spirro

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #33 on: April 22, 2012, 03:22:26 AM »
I've logged a fault call with Juniper on this.  Currently I've only been given a workaround which is:

"The Current implementation of OPSWAT needs UAC elevation and administrator's privilege.
 The workaround is to turn set 'run as administrator' on for dsHostChecker.exe, which is
present in the HC installed folder (C:\User\<username>\AppData\Roaming\Juniper
Networks\HostChcker)." This can be done by going to the properties of the .exe file and going to the Compatability tab.

This is not an acceptable solution for our work environment but it's a workaround if anyone wants to use it.

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #34 on: May 31, 2012, 04:07:25 PM »
@spirro thank you for this

i have been extensively busy with Juniper and opswat and Avast about this. Indeed the solution that you propose is not acceptable in my environment either.


right now im posting again to see if there is an update to this issue since its been since 21-10-2011 that i have this problem and 11-04-2012 the last update from avast side :)

so hereby the question:   What is the status of this issue?

Offline lukas.hasik

  • Moderator
  • Advanced Poster
  • *
  • Posts: 905
  • Product manager for Secure Internet in Avast One
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #35 on: May 31, 2012, 04:21:40 PM »
status is - we provided a way to OPSWAT to "workaround" the admin right elevation issue with avast!. However it seems that our solution solves only one particular issue - "av real time status". Now we are working on other requirement from their side.
And in the meanwhile we are proceeding with the OPSWAT bronze certification for v7 business products.

regards
Lukas.
Quality is also a feature.

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #36 on: June 01, 2012, 10:09:41 PM »
sweet to hear that, thank you for the quick reply

keep me updated please :)

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #37 on: July 13, 2012, 11:35:03 AM »
Hello

Is there any new update on this issue ?
Has OPSWAT released that workaround sollution yet for Juniper to incorporate it in their updates?

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #38 on: July 30, 2012, 02:00:46 PM »
*BUMP*

Offline lukas.hasik

  • Moderator
  • Advanced Poster
  • *
  • Posts: 905
  • Product manager for Secure Internet in Avast One
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #39 on: July 30, 2012, 03:58:44 PM »
Hoi WPN,
we worked on the issue with OPSWAT and provided them a solution - or let's call it rather a workaround - for the Threat History.

hth
Lukas.
Quality is also a feature.

mtaylor

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #40 on: August 22, 2012, 06:29:57 PM »
Lukas,

Thank you for updating...what is the workaround that you mention in your post?
I attempted to log in today and I keep receiving the error "...compliance requires full system scan..." from our Juniper.
Of course, complete scan (no exclusions), AV up to date, Windows patch up to date etc, etc.

One of our firewall admins sent me the "approved vendor list" and Avast! 7.x appeared therein but none of us using the product can get past Juniper.

Any recommendations?

Juniper Host Checker version 7, 1, 0, 20169
Avast! version 7.0.1456
WindowsXP Pro SP3
« Last Edit: August 22, 2012, 06:31:32 PM by mtaylor »

Offline lukas.hasik

  • Moderator
  • Advanced Poster
  • *
  • Posts: 905
  • Product manager for Secure Internet in Avast One
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #41 on: August 29, 2012, 12:59:57 PM »
@mtaylor - the thread history of avast is stored in several files in the ProgramData directory. We provided a way how to get this info to Opswat guys who are certifying the product(s). Juniper only takes the list of certified programs and the OESIS framework from Opswat. Therefore there might be some time between the certification and the update which contains the changes. OTOH, I don't have any replies from them from the time when we provided it to them...
Quality is also a feature.

Uxorious

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #42 on: September 27, 2012, 12:42:55 AM »
Looks like ESAP 2.2.3 might have improved some things.
Haven't tried it yet, but at least this note is encouraging:
    FSRTP status for avast! Free Antivirus 7.x will not be detected until user
    manually configures FSRTP status at least once. That is, user should turn off
    “File System Shield" and turn it on. (785223)

wpn

  • Guest
Re: Juniper SA2500 doesnt recognize newest Avast software
« Reply #43 on: January 08, 2013, 10:47:21 AM »
This notification is still an issue in 2.3.0
From the releasenotes for ESAP 2.3.0
Quote
FSRTP status for avast! Free Antivirus 7.x will not be detected until user
manually configures FSRTP status at least once. That is, user should turn off
“File System Shield" and turn it on. (785223)

Any status update possible from Avast since this issue is over a year now?