Using McAfee VirusScan Enterprise 7.0 and 7.1 with Cisco CallManager
Application NoteTable of Contents
Introduction
Cisco Systems does not formally certify antivirus products with CallManager software. However, Cisco recognizes that in today's environment any Windows 2000 Server needs to have virus protection and the Cisco CallManager is no exception. Cisco has verified McAfee Enterprise VirusScan 7.0 and 7.1 with CallManager under heavy traffic loads. CallManager installation with McAfee VirusScan Enterprise Version 7.1 is supported by Cisco TAC.
While the installation and configuration of McAfee Enterprise VirusScan http://www.networkassociates.com/us/products/mcafee/antivirus/email/vs.htm is very easy, there are a few important steps that need to be taken. This document provides information on the installation and configuration of McAfee Enterprise VirusScan 7.0 and 7.1 on CallManager platforms based on Cisco's experience in our lab environments and from customers who have successfully implemented antivirus software.
Installation
- Double-click the setup.exe executable. Click Next.
- Read the License Agreement. Choose the proper License expiry type and Country. Choose the radio button to accept the terms and click OK.
- Select Typical for the Setup type and click Next.
- Click Install to start installation
- Uncheck the "Update Now" and "Run On-Demand Scan" boxes. These should be completed after the configuration. Click Finish.
Configuration
For normal operation on Cisco CallManager, most of the default settings for McAfee Enterprise VirusScan 7.0 or 7.1 are fine. However, the default setting for the maximum CPU usage must be changed. The next section describes this process.
Unlocking User Interface
Before changes can be made to the CPU settings the User interface may need to be unlocked.
Configuring Maximum CPU Usage
If all options are grayed out on this page, the User Interface is still Locked. Follow the instructions on Unlocking the User Interface and repeat.
Third Party Caveat
If the server is running any third party applications, these programs may need to be excluded from scanning to avoid any performance issues. Customization of file scanning should be looked at on a per server basis to determine what configuration meets the customer's needs.
Scheduled File Scanning Can Have a Negative Impact on the Server
There is a difference between the protection McAfee Enterprise VirusScan 7.0 or 7.1 offers by running in the background and scheduled file scanning of the entire directory structure. Scheduled file scanning is very processor intensive. This could potentially impact call processing if this occurred during high volume traffic. As such, it is critical to only schedule a complete file scan during the middle of the night or other non-peak time schedules.
Disable anti-virus software during CallManager Installations and Upgrades
During the installation of CallManager or an upgrade of CallManager you will be prompted to disable anti-virus software prior to continuing. This must be done by right clicking the McAfee icon in the task bar and disabling the virus scan software.
Uninstall
McAfee Enterprise VirusScan 7.0 or 7.1 can be uninstalled using the normal Windows 2000 software uninstall procedure
