Re: [FW1] CVP - Trend Viruswall - MS proxy timeout

[Patrick Vanbeggelaer <patrick.vanbeggelaer@cdc.com>]

Hi,

  we are using also FW1 and VirusWall.

  FW-1 on Solaris and VirusWall on NT,  checking in CVP : smtp, http and ftp.


  For the ftp and http transfert, we put a rate 892 / 1  (892 bytes sent to the
  client for every 1 kilobyte received) : ATTENTION the first digit is in bytes
  the second one in kilobytes.



  And....it's working fine, all http and ftp transfert are working fine and are
  checked (we have 1 virus per week for ftp and http).



  Patrick

> Marius Swart wrote:
> 
> I get timeouts from MS proxy server (on local network) when clients try to download files from certain sites. (e.g. http://download.macromedia.com/pub/flash/esd/flash4full.exe ). Aproximately after 2 minutes.
> 
> I use CVP protocol between Firewall-1 and Trend InterScan VirusWall. A trickle option exists in VirusWall to allow through 'n number of bytes (for every 512k received) to the client, with the purpose to prevent the client from timing out. Would CVP allow this through or does it expect the content server to hand the full file back with some sort of acknowledgement?
> 
> I use the Web Proxy service of MS proxy for caching purposes on the network. Any other ideas on how I can prevent the proxy server from timing out?
> 
> I played with various trickle ratios (even 1:1). If I disable VirusWall scanning, the file gets downloaded.
> 
> Marius Swart


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================