How to configure Symantec Protection Engine (SPE) 7.8 or later to use a Web Proxy to download Virus Definitions.

Products

• Protection Engine for Cloud Services

Issue/Introduction

The environment requires HTTP traffic to route through a Web proxy.  By default the Symantec Protection Engine (SPE) server attempts to connect directly to liveupdate.symantecliveupate.com on port 80 to retrieve virus definitions.

Cause

Symantec Protection Engine (SPE) has not been configured to utilize an existing Web Proxy.

Resolution

To resolve this issue follow the instructions below to utilize the XMLModifier command line tool to configure proxy settings.

 

1.  Open a command prompt (as administrator) then navigate to the Symantec Protection Engine installation directory.

Windows default:  C:\Program Files\Symantec\Scan Engine 

Linux default:  /opt/SYMCScan/bin

2.  Run the following XMLmodifier commands (is case sensitive) to modify the configuration.xml by setting the IP and Port number used by the proxy:

IP of the proxy:  

XMLModifier.exe -s //configuration/ProxyServerSettings/ServerName/@value <IP address of proxy server> configuration.xml 

Port of the proxy:  

XMLModifier.exe -s //configuration/ProxyServerSettings/ServerPort/@value <port number of proxy server> configuration.xml

(Note: If authentication is required please follow step #3.  Otherwise skip to step #4)

3.  Configure Web Proxy authentication.

Username:  

XMLModifier.exe -s //configuration/ProxyServerSettings/UserName/@value <user name> configuration.xml

Password:

XMLModifier.exe -k //configuration/ProxyServerSettings/Password/@value <password> <SPE installation directory> configuration.xml 

                   Note:  You need to put quotes around the SPE Installation directory if it contains spaces.    "C:\Program Files\Symantec\Scan Engine"

4.  Restart the Symantec Protection Engine service  (symcscan).