EMEA IP Office Technical Tip
029: Virus Protection
Release Date: 11 November 2003
There may be customer requirements to protect PCs’ supporting Avaya applications through the use of third party virus protection software and/or by installing Microsoft operating system patches.
Avaya reviews Microsoft service packs and security patches as they become available. Normally these are only verified against Avaya’s applications as part of the New Product Introduction process. If there is an urgent need outside of this process, Avaya will review the
requirements and if necessary carry out additional testing.
This Technical Tip lists the Avaya applications that have been functionally verified with McAfee anti-virus software. It details the McAfee products used and provides guidance on which anti-virus settings to use.
The effect of other anti-virus applications has not been tested.
Microsoft patch KB823980 Blaster worm fix was applied before running these tests.
The following McAfee products for Server and Workstation versions were used while verifying Avaya’s applications:
• McAfee NetShield 4.5.0 Service Pack 1.
o Engine 4.2.60.
o Dat 4292.
• McAfee VirusScan 4.5.1 Service Pack 1.
o Engine 4.2.60.
o Dat 4292.
The following McAfee settings were used while verifying Avaya’s applications.
• System Scan Enabled
• Inbound Files
• Outbound Files
• Floppies on Access
• Floppies on Shutdown
• Scan Default files
• Scan Compressed files
A full virus scan and clean should be completed when the anti-virus software is first loaded. The function of the anti-virus software is to block the virus infection, so thereafter applications should not be affected.
However, when new viruses are released there is no guarantee that the anti-virus software will stop them. To minimize this possibility, it is recommended that regular updates of the anti-virus .dat files be implemented.
Any viruses blocked or removed by McAfee anti-virus software will be recorded in a log file at
C:\Program Files\Network Associates\VirusScan\VSHLog.txt.
Alternatively, the Alert Manager function available in a Microsoft Network can be used to send a message when a virus is detected or cleaned by the anti-virus software.
Notes on application speed (start-up and operation)
The application speed may be affected by using anti-virus software. This should not be noticeable if sufficient resource is available to run the anti-virus software.
Avaya is unable to provide specific information about the expected performance of end users PCs, due to the variances in specification and configuration provided by different PC manufacturers.
Should a noticeable change in application performance be observed, where possible the memory and/or the processor speed should be increased.
During the verification of all applications no impact on the performance or operation was observed.