06-30-2003 09:41 PM - edited 02-20-2020 10:49 PM
Hi ,
Can we integrate Trend micro or any other antivirus software which is approved by cisco with PIX ......?
Thx in advance.
Regds
Anthony
Solved! Go to Solution.
07-01-2003 02:01 PM
Hi Anthony,
Sorry for the late reply. I hope I understood your question.
If you are thinking on the lines of the existing integration of PIX with Websence/N2H2 for url filtering, then,there is no such integration with an AV software.
Thanks,
yatin
07-01-2003 02:11 PM
Anthony,
You might want to take a look at this url for more info on the way the AV plays a role,
http://www.cisco.com/en/US/partner/partners/pr46/pr13/partners_pgm_white_paper09186a00800b0dec.shtml
Hope this helps,
yatin
06-30-2003 10:46 PM
Hi Anthony,
Could you please elaborate on what you mean by integrate the AV with the PIX?
Thanks,
yatin
07-01-2003 01:39 AM
Hi Yatin ,
Thanks for your reply.The data which goes out or comes inn to the network through the PIX , must be scanned through the anti-virus software. is it possible...?
Thx & Regds
Anthony
07-01-2003 02:13 AM
Anthony --
As far I'm aware, the PIX should have no problem handling AV scanned data. I've actually have 10 Mail servers on the inside and are being scanned for AV with McAFee EPO and also have PIX 515 protecting the inside network. So, for your question - AV and PIX Will it work, the answer is yes.
Hope this helps and let us if you need any more help.
07-01-2003 02:29 AM
Hi Yatin,
Mailservers loaded with antivirus and pix providing the security will work independantly. but there is requirement that the data going to internet and comming from internet has to be scanned. I will give an example ,,,In PIX we can configure URL filtering server....whenever users types some URL it will be validated by the URL server , redirected by the the PIX that we wil configure in the PIX. some thing in the same way is there any solution for antivirus software....? can u send some document releated..
regds
Anthony
07-01-2003 02:38 AM
Anthony --
You are talking about URL Filtering on PIX - Am I correct ? and you have AV software on your inside clients ?
What is your PIX Model and which PIX IOS are your running ?
Thanks --
07-01-2003 02:45 AM
Anthony --
Here is a more info. on URL Filtering for PIX :
URL FilteringPIX Firewall URL filtering is provided in partnership with NetPartners WebSENSE server software. The PIX Firewall will check outgoing URL requests with the policy defined on the WebSENSE server running either on Windows NT or UNIX. Based on responses from the NetPartners server, which matches requests against Web-site characteristics deemed inappropriate for business use, the PIX Firewall either permits or denies connections. Because URL filtering is handled on a separate platform, no additional performance burden is placed on the PIX Firewall
http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/pix_pa.htm
Hope this helps - Jay
07-01-2003 02:01 PM
Hi Anthony,
Sorry for the late reply. I hope I understood your question.
If you are thinking on the lines of the existing integration of PIX with Websence/N2H2 for url filtering, then,there is no such integration with an AV software.
Thanks,
yatin
07-01-2003 02:11 PM
Anthony,
You might want to take a look at this url for more info on the way the AV plays a role,
http://www.cisco.com/en/US/partner/partners/pr46/pr13/partners_pgm_white_paper09186a00800b0dec.shtml
Hope this helps,
yatin
07-02-2003 01:34 AM
Hi Yatin,
Thx for the info , this will give a workaround solution.
Regds
Anthony
07-03-2003 02:02 AM
Hey Yatin,
Is there a public version of that document? My CCO login won't work there.
07-03-2003 01:29 AM
Hey Anthony,
Netscreen, Symantec, and Checkpoint offer scanning traffic through the firewall for viruses. If you like the PIX, you may prefer the Netscreen over Symantec & Checkpoint.
Hey Cisco guys; how about some virus scanning for the PIX?
07-08-2003 09:29 AM
I know eh! You would think by now cisco would integrate that feature in their
product instead of losing business to other vendors.
They have the url scan feature why not a virus scan as well or even better
produce their own line of virus engine much like what they have for
the vpn concentrator or IDS. (Something to think about)
07-09-2003 01:28 PM
That would seem like no easy task. The PIX would have to had off the packets containg the data that needed to be scanned to some AV appliance...which would have to do the scan, alter if necessary and then relay it back to the PIX for delivery. I am certain it can be done...but may take some effort. BTW...weren't the AV manufacturers supposed to build AV appliances that did this sort of thing???
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide