Lumension® KnowledgeBase

Article Number:
757

Date Created:
04/28/2011

Last Updated:
03/23/2017

Article Type:
Troubleshooting

This request is blocked by SonicWall Gateway Antivirus Service

Description

Product:

L.E.M.S.S.

Versions:

Lumension Endpoint Management and Security Suite Agent 7.x
SonicWall NSA 2400
SonicWall NSA 3500

Summary:

This article describes a known issue with Lumension Endpoint Management and Security Suite (L.E.M.S.S) Server downloading the Lumension Patch Agent (PatchAgent.MSI) from the Global Subscription Servers (GSS) thru a SonicWall security appliance.

Details

SYMPTOM

• Users see the following error from their SonicWall Gateway “Gateway Anti-Virus Alert, This request is blocked by the SonicWall Gateway Anti-virus Service. Name: Hide.A (Trojan)”. 
• On the LEMSS Server, the following folder <installpath>\Lumension\EMSS\Content\00000000-0000-0000-0000-000000000000\EndpointComponents\7.0.0.5\PatchAgent\ is empty.  CAUSE

CAUSE

SonicWall NSA appliance is incorrectly triggering the file PatchAgentforVista.MSI as a Trojan Malware type when this file is being downloaded from http://cache.lumension.com.

WORKAROUND

• Create an exception rule policy on your SonicWall NSA appliance and exclude the following URL address from being web filtered:
http://cache.lumension.com

• Lumension also strongly recommends contacting SonicWall Technical Support and report a False Positive Submission Form.  Please make sure you have your SonicWall serial number available when contacting SonicWall technical support. 
 

12345678910
Current rating: 1.4