9 Replies Latest reply on Mar 10, 2008 12:19 PM by dbunch

    Ghost

      Hello

      Can someone please tell me which parts of Access Protection need to be 'open' on a Ghost server in order for clients to communicate with it?

      At present we have SMTP and IRC communication unblocked but Ghost has recently stopped working. There may have been an update to VirusScan 8.5 that is subsequently preventing communication.

      Thanks
        • 1. RE: Ghost
          You need to enable IRC communication in order to Ghost to work.
          • 2. RE: Ghost
            Thanks.
            • 3. RE: Ghost
              tonyb99
              I exclude ghostsrv.exe in my IRC access protection rule to allow ghost casting to work at one site, is this what you meant?
              • 4. RE: Ghost





                We are having the same problem and GhostSrv.exe is in the IRC access protection rule for exclusions.....


                We are running Client 8.5i Patch 5


                But in the log it blocks it everytime...

                8 8:32:04 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.100:6666
                3/4/2008 8:34:10 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.100:6666
                3/4/2008 8:39:34 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.100:6666
                3/4/2008 8:41:50 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.100:6666
                3/4/2008 8:47:27 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.100:6666
                3/4/2008 9:43:55 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.105:6666
                3/4/2008 9:44:22 AM Blocked by port blocking rule Anti-virus Standard Protection:Prevent IRC communication 10.0.0.105:6666
                • 5. RE: Ghost
                  tonyb99
                  do you have additional rules in there aswell? if so what are they
                  • 6. RE: Ghost



                    I this what you are referring too..


                    Here is what is set to be blocked under each category:


                    AV Std protection

                    Prevent remote creation of autorun files
                    Prevent IRC Communication
                    Process rules include *
                    Precesses to exclue: GhostSrv.exe


                    AV Max protection

                    NONE


                    AV Outbreak control

                    NONE

                    Common Std protection

                    Prevent mods of mcafee file and settings
                    prevent mods of mcafee scan engine files and settings
                    prevnet mods of mcafee common management agent




                    User defined rules

                    None
                    • 7. RE: Ghost
                      Anyone
                      • 8. RE: Ghost
                        The problem is listed in your above post....

                        AV Std protection

                        Prevent remote creation of autorun files
                        Prevent IRC Communication
                        Process rules include *
                        Precesses to exclue: GhostSrv.exe
                        .....


                        You need to NOT block "Prevent IRC Communication" or edit the Access Protection for AV Std protection - Prevent IRC Communication to exclude "GhostSrv.exe".
                        • 9. RE: Ghost
                          If you read through the flow of the posts..

                          You will see that I did do the exclusion...

                          And it still doesn't seem to be working

                          And responded to someone elses reply