How to manage X509 certificates with XCA for their correct implementation in Panda GateDefender Integra

Bei der Zertifikatserstellung hilft das Tool XCA. Eine Anleitung und den Downloadlink fuer das Tool finden Sie hier.

Anleitung: http://pandatechnik.de/133

Tool: http://sourceforge.net/projects/xca/

Panda Gatedefender Integra 100/300 How-to’s

Nachfolgend eine Liste von How-to’s zur Konfiguration von Gatedefender Integra 100/300 Funktionen. Wenn nicht anders angegeben, beziehen sich die verlinkten Anleitungen auf die Version 1.01.00.xxxx .

Weiterlesen »

Performa Anti-Spam Update nicht moeglich mit ISA Server und NTLM + Basic authentication

The anti-spam module doesn’t update if there is an ISA server with NTLM + Basic authentication

Symptoms

• The Anti-spam module cannot be updated if there is an ISA server 2000 with NTLM authentication on the network. When Cloudmark authenticates with a Proxy of these characteristics, it first attempts to update without using authentication. Then it retries it using Basic authentication.The ISA Server 2000 proxy servers close the connection after the first attempt, and then it unsuccessfully retries using the same method over and over again.

Version

• Panda GateDefender Performa 8200 series (Portwell); Panda GateDefender Performa 8100 series (Supermicro)

Sollten Sie dieses Problem innerhalb Ihrer Topology reproduzieren koennen so kontaktieren Sie uns bitte. Wir werden Ihnen kurzfristig einen Hotfix zu verfuegung stellen.

Gatedefender Performa 3.00.00 Hotfix Pack 200

Fuer den Gatedefender Performa 3.00.00 (8050/8100/8200) steht das Hotfix Pack 200 zum Download bereit.

Das Hotfixpack beinhaltet folgenden Korrekturen:

• Due to a problem on the management of the watchdog integrated to the badge base of the models 8200 of Portwell, blockades take place and unexpected rebeginnings of the system without some message appears in the system (in machines 8200 of Portwell).
  
• To the reset of the services or the system loses the configuration of the networks VLANS.
  
• Problems with the autodepartment to 1 Gb of the cards of network in the models 8100 Supermicro and 8200 Portwell.
  
• It have been detected that, under certain circumstances, can produce to themselves problems in the swinging of load.
  
• Problems to gain access to the console. A blockade takes place in the user’s window and password.
  
• Progress of yield for machines 8050.

Das Hotfix Pack ist kommulativ und beinhaltet alle Korrekturen, die mit dem Hotfix Pack 100 von Panda Security bereitgestellt wurden.

Download Hotfix Pack 200

http://pandatechnik.de/105

GateDefender 3.00.00: New FAQs

The following web FAQs have been added to the GateDefender Performa/series 8000 Knowledge Base at the official Supportsite:

1. System profile ‘how-to’ guides: Defining an LDAP group exempt from the Web filter.
2. System profile ‘how-to’ guides: Defining a local group exempt from the Web filter.
3. System profile ‘how-to’ guides: Defining a company user exempt from the outbound SMTP anti-malware scan.
4. System profile ‘how-to’ guide: Defining a user exempt from the SMTP Anti-malware scan.
5. System profile ‘how-to’ guide: Applying a specific configuration to connections with a specific source and target subnet.
6. System profile ‘how-to’ guides: Resolving ambiguities between profiles and trusted sites.
7. System profile ‘how-to’ guides: Resolving ambiguities between profiles and blacklists.
8. System profile ‘how-to’ guide: Resolving ambiguities between profiles and white lists. 
9. System profile ‘how-to’ guide: Define a group of websites using specific content-filter settings

[tags]gatedefender,performa,gd3.0,faq[/tags]

Gatedefender Cloudmark Updateverhalten

Gatedefender ab der Version 3 enthalten die bekannte Cloudmark Engine zur Spamerkennung. Die Spamerkennungssignatur wird Gatedefenderintern zusaetzlich ueber die von Cloudmark bereitgestellten Micro-Update Fingerprints aktuell gehalten. Hierzu wird eine TCP Verbindung zum Host microupdates.cloudmark.com hergestellt. Der Gatedefender versucht diese Kontaktaufnahme HTTP basierend zuerst auf dem Standartport fuer HTTP (80). Schlaegt dieser Versuch fehl so wird eine Kontaktaufnahme HTTP basierend auf dem SMTP Port (25) initiert.

!!! Es handelt sich NICHT um einen Versuch eine eMail zu versenden !!!

Cloudmark Micro-Updates

Micro-updates is the mechanism that allows the Cloudmark Cartridge to regularly download the latest fingerprint data used to identify abusive messages. The fingerprint data is provided by highly trusted reporters and analysis by the Trust Evaluation System in the Cloudmark Collaborative Security Network in near real-time. Therefore, proper use of the micro-update mechanism is critical in maintaining cartridge accuracy as new types of spam, phishing, and virus messages are reported.

Network interaction

Micro-updates are downloaded using standard HTTP requests. If an HTTP proxy is not enabled, then at the specified interval, a download will be attempted over port 80. If the filtering server is unable to connect to the Cloudmark micro- updates service on port 80, it will attempt to download on port 25. If this also fails, the most recent offline version of the data file in the micro_updates directory will be used until the next micro-updates interval before attempting to download again.

[tags]gatedefender,gd3.0,cloudmark[/tags]