How to configure Symantec Protection Engine (SPE) 7.8 or later to use a Web Proxy to download Virus Definitions.

Products

• Protection Engine for Cloud Services

Issue/Introduction

The environment requires HTTP traffic to route through a Web proxy.  By default te Symantec Protection Engine (SPE) server attempts to connect directly to liveupdate.symantecliveupate.com on port 80 to retreive virus definitions.

Cause

 

Symantec Protection Engine (SPE) has not been configured to utilize an existing Web Proxy.

Resolution

To resolve this issue follow the instructions below to utilize the XMLModifier command line tool to configure proxy settings.

 

1.  Open a command prompt (as administrator) then navigate to the Symantec Protection Engine installation directory.

Windows default:  C:\Program Files\Symantec\Scan Engine 

Linux default:  /opt/SYMCScan/bin

2.  Run the following XMLmodifier commands to modify the configuration.xml by setting the IP and Port number used by the proxy:

IP of the proxy:  

xmlmodifier -s //configuration/ProxyServerSettings/ServerName/@value <IP address of proxy server> configuration.xml 

Port of the proxy:  

xmlmodifier -s //configuration/ProxyServerSettings/ServerPort/@value <port number of proxy server> configuration.xml

(Note: If authentication is required please follow step #3.  Otherwise skip to step #4)

3.  Configure Web Proxy authentication.

Username:  

xmlmodifier -s //configuration/ProxyServerSettings/UserName/@value <user name> configuration.xml

Password:

 xmlmodifier -k //configuration/ProxyServerSettings/Password/@value <password> <SPE installation directory> configuration.xml 

4.  Restart the Symantec Protection Engine service  (symcscan).