Hi,

 

I'm troubleshooting an AV Update problem with AVG and I'm being advised that I should be able to browse to a particular file ... http://servername:4156/update/avginfo.ctf

 

I'm getting Error Code: 403 Forbidden. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)

I understand it's using it's own internal webserver to distrabute updates to clients, more specific than that I'm not sure, I can browe to http://servername:4156/ but not any files within http://servername:4156/update/* (eg i created a default.htm and a test.txt file)

 

It's all internal, so can't see why it's being forbidden - I've not made any changed to the default SBS rules and havn't created any rules that would specifically prohibit this

 

I've tried creating a rule to specifically allow (based on reversing the philospohy in this art - http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&ArticleID=217&PageID=302)

 

Also tried to allow an application based on this (http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&articleId=50 ) - OK, granted, that was a stab in the dark!

 

The AV Admin app (and update files) are installed on a domain member server. I've not noticed any other similar issues of this nature internally (Externally I get the same error when trying to access RWW - but I am aware of this as the SBS RWW Inbound Access Rule is down because I did not enable it in CEICW.

 

The problem began with an update to the AVGADMIN software.

 

Any help would be apreciated ... many thanks

 

JH

Hi Robert,

 

Hold on with that, there is no need for this, as I don't think the workstations aren't updating from the internet. I have yet to see the first AV program that is needing something special to get the server the AV updates.

Jay, have you checked with AVG?

Hi Rob,

 

Yep, my thoughts exactly - That's just what I did - I've done it on the IP Address for now but I've asked AVG to confirm it's a perm address (I only recognised it while monitoring because they'd asked me to change it in doing diags)

 

Hi Marina,

 

Yes, the clients arn't updating from the internet directly, they are updating from the a local admin server which updates from the internet. My problem was that the update from the local server was failing. From what I can tell, when the client updates, it makes a call to the local webserver to check the Virus Def version. This forces the local server to check the remote server (to ensure it's the latest update I presume). This is what was being blocked by ISA and it was preventing the client from updating. Does that make sense? I recently updated the ADMIN server software which initiated the issue so I'm guessing it's a new feature - I've asked for clarification from AVG on this - wonder if I'll get an answer! If I do, I'll pass the info on. On the other hand, I do have a nagging feeling that screwed up and I took an option to clear some settings during the update process - that could have been the cause, but I've checked & re-checked all the settings with the manual before I escalated it to AVG and couldn't see anything amis

 

Ha! as I type, a reply back from them ... nothing on the cause of the problem, but they have confirmed the IP address I've allowed anon connections to is perm - reply attatched for info if interested.

 

Thanks for the prompt Rob, i've been tearing my hair out with this one.

Hi,

 

Just had a response from AVG as follows:

 

***********

Dear Sir/Madam,

Thank you for your email.

The AVG TCP Server, which is the component of AVG Remote Administration, responsible for downloading and distributing AVG updates, has been changed significantly in the latest versions of AVG Remote Administration. AVG TCP Server now acts as a proxy server, which means that the particular update files are not downloaded periodically based on a schedule, but immediately after a station requests an update file. After the file has been downloaded for one of the stations, it is served to another station which is requesting this file, from a local directory, saving Internet traffic.

This new method has also another advantage - AVG TCP Server has always the latest available updates, not only those downloaded by the most recent scheduled download.

We hope that the new version of AVG TCP Server will work well for you. If you have any further questions or problems, please don't hesitate to contact us.

Thank you for your cooperation.

     Best regards,

     Daniel Rott
     AVG Second Level Support
***********

 

regards

 

JH