Table Of Contents
Using Symantec/Norton AntiVirus
with Cisco CallManager 3.3
Any Windows 2000 Server is recommended to have virus protection and the Cisco CallManager is no exception. While the installation and configuration of Symantec/Norton antivirus is very easy, there are a few important steps that need to be taken. This document will provide information on the installation and configuration of Symantec/Norton Antivirus on the Cisco CallManager platform (this includes the newest Norton Antivirus Corporate Edition Version 7.61 and Symantec Antivirus Corporate Edition Version 8.0 releases).
This paper provides a detailed description of the Norton Antivirus Product available from Symantec for use on the Cisco Call Manager versions 3.3(x)x. The paper describes the need for the product, a description of the product and product features/functionality.
3 Norton Product Overview
Norton AntiVirus is an application that provides comprehensive virus prevention, detection, and elimination software for your computer. It automatically finds and repairs infected files to keep your data secure.
4 Cisco Systems Support Policy
Cisco makes no warranty or claims as to the accuracy or completeness of this document. Furthermore, Cisco Systems Technical Assistance Center is not responsible for supporting this integrated solution.
(Note: This statement is included in documentation until product passes IVT and coordinated support is in place.)
During the testing we noticed the following:
1. Norton active virus scans does not add any CPU memory overhead.
2. Drive scanning takes up lot of CPU and is not recommended during call processing.
3. Virus updates use little CPU so can be scheduled to run during low traffic.
6 Required Cisco AVVID hardware and software levels
Cisco Hardware levels are not a concern of the Norton, please refer the hardware requirements section of the Norton documentation. Below are the tested CallManager Software levels, please refer to the list below for all supported CCM Versions.
•Cisco CallManager Version 3.3(x)x or greater within the CCM 3.3 version.
•Cisco CallManager Version 3.2(2c) or higher
•Cisco CallManager Version 3.3(2) or higher
•Norton Antivirus Corporate Edition Ver 7.61
•Symantec Antivirus Corporate Edition Ver 8.0
Installing the Symantec AntiVirus Corporate Edition client
To install the Symantec AntiVirus Corporate Edition client installation, you complete the following:
•Start the installation
•Run the client setup program
To start the installation
1. Insert the CD into your CD-ROM drive.
2. Double-click My Computer.
3. Double-click your Compact Disc drive.
4. Double-click the Savclnt folder.
5. Double-click Savceclt (or Savceclt.exe if your computer is configured to show file extensions).
To run the client setup program
1. In the Symantec AntiVirus Client Setup Welcome window, click Next.
2. In the License Agreement window, click I accept the terms in the license agreement, then click Next.
3. If Lotus Notes or Microsoft Outlook is running on your computer, in the Mail Snap-in Selection window, select the support for your email client, and then click Next.
The installation program automatically selects a snap-in if it detects that a supported email client is installed on the computer. You can uncheck it if you don't want the client to scan your email attachments.
4. In the Destination Folder window, do one of the following:
–Click Next to accept the default Symantec AntiVirus Corporate Edition installation path.
–Click Change, locate and select a destination folder, click OK, then click Next to change the destination path.
5. In the Network Setup Type window, click Unmanaged, then click Next.
6. In the Initial Settings dialog box, check File System Realtime Protection if you want to enable File System Realtime Protection, then click Next.
7. In the Run Options dialog box, check LiveUpdate, and then click Next to have LiveUpdate run after the client is installed.
8. Click Install to begin installing the client.
Status dialog boxes display where you are in the installation process.
After installation, you should update virus definitions files.
9. If you chose to run LiveUpdate after installation, follow the instructions in the LiveUpdate Wizard.
10. When the LiveUpdate Wizard is done, click Finish.
11. Click Finish.
For normal operation on Cisco CallManager 3.X, the default settings for Norton antivirus are fine. There are two important considerations, however.
8.1.1 Scheduled File Scanning Can Have a Negative Impact on the Server
There is a difference between the protection Norton offers by running in the background and scheduled file scanning of the entire directory structure. Scheduled file scanning is very processor intensive. This could potentially impact call processing if it occurred during high volume traffic. As such, it is critical to only schedule a complete file scan during the middle of the night or other non-peak time schedules.
8.1.2 Using Cisco IDS Host Sensor and Norton
Note: In order for Norton and the Cisco Host IDS Sensor to co-exist on the same server, Norton should be configured to not scan the directory C:\Program Files\Cisco IDS where the Cisco Host IDS Sensor or Console is configured.
If you need to uninstall Norton AntiVirus
If you need to remove Norton AntiVirus from your computer, you can use the Add/Remove Programs option from the Windows Control Panel or the Uninstall Norton AntiVirus option from the Programs menu.
During uninstall, Windows may indicate that it is installing software. This is a standard Microsoft installation message and can be disregarded.
To uninstall Norton AntiVirus from the Windows Control Panel
1. Do the following:
On the Windows taskbar, click Start > Settings > Control Panel.
2. In the Control Panel, double-click Add/Remove Programs.
3. In the list of currently installed programs, click Norton AntiVirus.
4. Do the following:
In Windows 2000/Me, click Change/Remove.
5. Click Yes to confirm that you want to uninstall the product.
6. If you have files in Quarantine, you are asked if you want to delete them.
Your options are: Yes
Deletes the quarantined files from your computer.
Leaves the quarantined files on your computer, but makes them inaccessible.
7. Click Finish.
8. Click Yes to restart your computer.