Norton Antivirus Server (NAV Server) is for updating the virus definitions and setting the virus checking policy of clients. Keeping the virus definitions fresh would help NAV server to protect all of clients to avoid attacking of virus.
Sometime, the Internet FTP accesses were forbidden by security Policy. By default live update process of NAV server, it would be depend on the network performance. It could not be implemented smoothly because the Tier1 site could not get enough bandwidth for live update.
We checked the Symantec Site and found out some special method to update the NAV server.
The Symantec also supply the ftp://ftp.symantec.compublic/english_us_canada/antivirus_definitions/norton_antivirus/static to download the virus definition data file. The update file is named as navup8.exe. It would be update if new virus definition would be announced. And Extract the navup8.exe to get the virus definition as xxxxx.xdb. Then move the xxxxx.xdb file to the folder that NAV Server would keep the virus definition data files. The default folder is C:\Program Files\SAV.
Downloading the virus data file would be by Internet Explorer because the firewall just let the passive mode to pass through to get the files as accessing Symantec Site. To avoid security issues confusing, we just wrote script to execute these processes automatically. It would not change any system security setting and get any risk of security.
The NAV Server update script would be running as following:
1. Clear the old virus data file – navup8.exe and calling Internet Explorer to download the new one.
2. Script would input the destination folder and file name automatically
3. Implement the process of downloading file
4. Run the DOS command to apply the new virus data definition
For automatic run the script, it would be established a time schedule task on windows 2000
5. Check the Scheduled Tasks
6. Check the NAV Server Update Task Properties
7. At end, please adjust the time when the task would be running. For the better network performance would make the update smoother, it would be set on less users on working time.
A. Script Parameters Introduction
Const Download_Site = ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/navup8.exe define the download file URL. If the URL was changed, you can change this parameter.
Const Destination = "C:\Program Files\SAV" define the virus data folder of NAV Server. If you didn’t use default setting, you can change this parameter to indicate the folder of NAV server.
Const tmpDir = "D:\navtest\navup8.exe" define the temp folder for download file and script file. If you want to keep these files in other folder, you can change this parameter.
Source File nav8xup.vbs
B. Symantec Detail the updating process without live update