Sophos Anti-Virus for NetApp Storage Systems release notes ---------------------------------------------------------- Product version : 1.0.1 www.sophos.com Contents -------- New in this version Upgrading to this version Troubleshooting New in this version ------------------- * This version is compatible with Sophos Anti-Virus for Windows 2000/XP/2003/Vista, version 7, as well as earlier versions. If you upgrade Sophos Anti-Virus from version 4.x to 7, or from version 4.x to 6, any configuration changes you have made will be lost. You must reconfigure Sophos Anti-Virus for use with a Network Appliance filer when you have upgraded. Upgrading to this version ------------------------- To upgrade Sophos Anti-Virus for NetApp Storage Systems to this version, do ONE of the following. * Using Control Panel, uninstall version 1.0. Then install this version. * If you previously installed the Sophos Anti-Virus for NetApp service, stop the service using Control Panel/Administrative Tools/Computer Management/Services or the MMC snap-in. At a command prompt, type savnasetup.msi REINSTALL=ALL REINSTALLMODE=ov You must use the new version of savnasetup.msi that comes with these release notes. This will perform the upgrade and automatically restart the Sophos Anti-Virus for NetApp service. Troubleshooting --------------- * Validation of user credentials during installation was successful. However, when the installation wizard tries to start the Sophos Anti-Virus for NetApp service, an error message is displayed, and the event log shows "Error 1920" or "Error 1923". Check that the user has the "Log on as a service" right, and try re- installing the software. If the problem persists, use an account with Administrative rights instead. * An anti-virus server doesn't register with the filer. If the output from the filer states that an anti-virus server was registered and then immediately deregistered, check the following: * Check that on-access scanning is running on the anti-virus server, as follows. If the Sophos Anti-Virus system tray icon is blue, on-access scanning is running. Otherwise, start on-access scanning as follows. 1. Open the "Sophos Anti-Virus" window by right-clicking the Sophos Anti-Virus system tray icon to display a menu, and selecting "Open Sophos Anti-Virus". 2. In the "Sophos Anti-Virus" window, on the "Configure" menu, click "On-access scanning". 3. In the "On-access scan settings for this computer" dialog box, click the "Scanning" tab. Select "Enable on-access scanning for this computer". * Check that the Sophos Anti-Virus for NetApp service is running on the anti-virus server. If it is not running, this might be because of incorrect credentials, account lockout or insufficient rights. * Users can't open any files on the filer. The filer is configured to send files for virus scanning, but there is no anti-virus server registered with the filer. To see a list of the anti-virus servers registered with a filer, at the command prompt on the filer, type vscan scanners * The filer console displays a message "Error 5 ...Continuing". This is a warning that the anti-virus scanner has prevented access to an infected file. * Not all file types are scanned, even though Sophos Anti-Virus has been configured to scan all file types. There is a list of filename extensions on the filer as well as the anti- virus server(s). To see which file types are sent to the anti-virus server for scanning, at the command prompt on the filer, type vscan extensions To add an extension to this list, type vscan extensions add where is the extension you want to add. For example vscan extensions add hta instructs the filer to send .hta files for scanning as well. The wildcard ? can be used to match any single character. * When an infected file on the filer is accessed from an anti-virus server, the virus is detected and, if disinfection is selected, the file is disinfected, but statistics for the anti-virus server are not updated. In this case, the filer doesn't send a request to the anti-virus server to scan the file. Therefore, the statistics are not updated. However, the virus IS detected and, if disinfection is selected, the file is disinfected. * A firewall on an anti-virus server or computer running the MMC snap-in can block communication between the anti-virus server and the filer, or between the computer running the snap-in and the anti-virus server(s). Make sure that the Sophos Anti-Virus for NetApp Storage Systems executables savnaser.exe and savnammc.dll have access to any other anti-virus servers, the filer and the computer running the snap-in. * Files are not scanned when they're saved or renamed, even though Sophos Anti-Virus has been configured to scan "On write" or "On rename". The filer can send a request for a file to be scanned only when it is opened. Therefore, only the "On read" setting has any effect.