Can't update antivirus behind ISA 2004.

[starriol]

Good morning guys.

I can't update the NOD 32 AV definitions at my company.
The problem is that, even though the proxy is configured properly at the Nod32 propierties, NOD send the request without being authenticated.

You can see it here at this logs:

192.168.1.5 8080 http Denied Connection Limited access to external 192.168.1.24 anonymous Internal http://ts09.eset.com/query/chsquery.php External POST
0.0.0.0 No Proxy TS005 ts01.eset.com TCP - - - - - - 0 1 4505 3796 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. 0x0 0xa00 Web Proxy Filter 08/05/2008 12:56:27

192.168.1.5 8080 http Denied Connection Acceso Limitado a External 192.168.1.24 anonymous Internal http://ts01.eset.com/query/chsquery.php External POST
192.168.1.24 TS005 - TCP - - 1548 0 0 0 0x0 0x0 0x0 Firewall 08/05/2008 12:56:27


Limited access to external is a rule that has no users, that limits the access to only HTTP and HTTPS.
I don't know why it's being denied by that rule.

So the problem seems to be that Nod 32 is sending the access request with the user anonymous, instead of the one I configured.

Any ideas on how to solve this?

I installed the ISA Firewall Client, expecting it'll send the valid credentials and nothing.

 

[starriol]

I tried adding a rule that allowed connections from Internal to http://*.eset.com for all users, but still doesn't work.
It recognizes the connection as the rule above but the connection says that it failed. The username is always anonymous.

I added that rule on top of all the others that deal with outward access to Internet.

Am I doing something wrong?

 

[RebateMonger]

Have you tried this link?

Allowing Norton AV software LiveUpdate through ISA Server..

This is a strategy recommended for computer-based (not user-based) tasks. You set up a rule that allows COMPUTERS access, rather than specific Users.

Another possibility is to use one of your Servers or PCs as a local update source and only provide IT access to the Internet AV update site.