The FTP connection from SMG to internet is blocked by firewall.

Products

• Messaging Gateway

Issue/Introduction

It has been found that the firewall blocked the FTP connection from SMG to internet.

The destination host is as bellow:

　　124.40.41.*

　　202.47.28.*

You would like to know why SMG establish this FTP connection to access these hosts.

None

Cause

When LiveUpdate updates virus definitions, If the HTTP connection failed to connect,
The FTP connection will be used to connect FTP site "update.symantec.com". You can find
this behavior in liveupdate.log.

2010/07/12 10:50:51 Downloading minitri.flg to C:\ProgramData\Symantec\Java LiveUpdate\Downloads\1278899449908\minitri.flg ...
2010/07/12 10:50:51 Connecting to liveupdate.symantecliveupdate.com:80 via HTTP ...
2010/07/12 10:51:12 Downloading livetri.zip to C:\ProgramData\Symantec\Java LiveUpdate\Downloads\1278899449908\livetri.zip ...
2010/07/12 10:51:12 Connecting to liveupdate.symantecliveupdate.com:80 via HTTP ...
2010/07/12 10:51:33 Downloading minitri.flg to C:\ProgramData\Symantec\Java LiveUpdate\Downloads\1278899449908\minitri.flg ...
2010/07/12 10:51:33 Connecting to liveupdate.symantec.com:80 via HTTP ...
2010/07/12 10:51:55 Downloading livetri.zip to C:\ProgramData\Symantec\Java LiveUpdate\Downloads\1278899449908\livetri.zip ...
2010/07/12 10:51:55 Connecting to liveupdate.symantec.com:80 via HTTP ...
2010/07/12 10:52:16 Downloading minitri.flg to C:\ProgramData\Symantec\Java LiveUpdate\Downloads\1278899449908\minitri.flg ...
2010/07/12 10:52:16 Connecting to update.symantec.com via FTP ...
2010/07/12 10:52:16 Connected to 202.47.28.*

Resolution

Configure the firewall to let the FTP access the Symantec LiveUpdate Server.
 
ftp://update.symantec.com:21

Applies To

SMG