Is Trend Micro antivirus supported on CallManager 3.2(2c) and above?

[Ginger Dillon]

Hello -

Our company is switching from McAfee Netshield/Virus Scan to Trend Micro. We currently do not run McAfee on the CallManager servers. We are also in the process of implementing IDS on our CallManager and Unity servers. Is Trend Micro supported to run on CallManager? If so, what is the approved version and recommended scanning methodology (or any exclusions)? I know the Cisco IDS directory needs to be excluded for other antivirus software (like McAfee and Symantec).

Thanks in advance. Ginger

[mowour]

Hi Ginger,

As far as I know, the only supported antivirus software are McAfee NetShield and Symantec's Norton.

See also:

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_bulletins_list.html

http://www.cisco.com/warp/public/788/AVVID/netshield_cm_12445.html

Mike.

[Ginger Dillon]

Thanks very much for the update. Then would running IDS on the CallManager servers be sufficient protection?

Sincerely, Ginger

[mowour]

Ginger,

I would not say so. The vulnerabilities that intrusion detection software are designed to mitigate differ from those which the 'normal' antivirus software such as Netshield and Norton are designed to mitigate. They work hand in hand, though.

Take a look at the following white paper. Its the SAFE IP Telephony Security in depth writeout.

http://www.cisco.com/en/US/netsol/ns110/ns170/ns171/ns128/networking_solutions_white_paper09186a00800ad368.shtml

Mike.

[kthorngr]

Just to add to this, I just had a case where a customer install Trend Micro. CPU utilization stayed at close to 100%, partially consumed by Trend Micros software and the remainder by two CallManager services. This caused many issues with this server and nothing was able to use/register to it. We disabled the Trend Micro service and all the process are now at a normal level and the server is working properly.

If this is important for you, I would recommend working with your Cisco Account team to enter an enhancement request to have this tested and approved for use. This will be evaluated/prioritized along with all the other CM enhancement requests.