SP2 for Antigen 9.0 download ?
- We're currently using Antigen for Exchange version 9 with SP1 (9.1) on several clustered and standalone Exchange 2003 servers. We would like to upgrade to SP2 asap to address the issues with some of the engines being deprecated.
Where can we find the download for the SP2 update or the complete Antigen for Exchange version 9 with SP2 (9.2) package ?
We're not particularly interested in the "Microsoft Antigen for Exchange with Antigen Spam Manager with SP2 Trial Software" download which seems to be the only one available. ( http://www.microsoft.com/downloads/details.aspx?FamilyId=866b63bf-6207-4197-9c5d-511b7212e40c&DisplayLang=en )
Thanks
Sam
All Replies
- sime, since Antigen is not for free, you will find all the downloads in your reserved download page at microsoft (it depends from the type of contract you have, for example VLK)
as stated here
http://support.microsoft.com/kb/971063
in the download info section
you should look at the VLK site to download it with your license.
HTH.
Diego Castelli- Proposed As Answer byDiego Castelli Thursday, July 30, 2009 10:31 AM
- I'm guessing (ehm, i'm sure) if the suggestion was helpful. If so: mark it as answer / assign points., please.
Diego Castelli I'm guessing (ehm, i'm sure) if the suggestion was helpful. If so: mark it as answer / assign points., please.
Diego Castelli
Thanks for taking the time to respond but no its not helpful. We're looking for either an SP2 download which will bring an SP1 installation up to SP2 or the complete 9.0 package with SP2. None of the MS download sites we have access to including MSDN have an SP2 update or Antigen for Exchange 9.0 with SP2. Do you work for Microsoft ? If not I'd appreciate a response from a MS rep.We’ve had several inquiries from customers regarding the download of Antigen 9.0 with Service Pack 2 on the MVLS and VLSC sites – both on the download location and the format of the bits.
First, to find the Antigen 9.0 with SP2 release on the MVLS/VLSC site, you can look in two places:
1) Under “Messaging Security”
2) Under “Forefront Security for Exchange Server 10.0 with Service Pack 2”
On VLSC, you will have to select your language and download speed, then hit “continue”, which will bring up the below download screen where you can download the Antigen 9.0 with SP2 products:
We understand that this creates some confusion for customers looking under “Antigen”, so we will also be adding these downloads to the MVLS and VLSC sites as “Antigen for Exchange with Antigen Spam Manager 9.0 with SP2” and “Antigen for SMTP Gateways with Antigen Spam Manager 9.0 with SP2” by September 1, 2009.
Second, we’ve had customers ask about why we no longer post stand-alone builds for Antigen for Exchange and Antigen for SMTP Gateways, and whether this means that they are downloading new “Antigen Spam Manager” bits that were not previously installed. The answer to this is two-fold:
1) The Antigen 9.0 with SP2 release includes new antispam technology from Cloudmark that we want to make available to all customers. This antispam engine will provide a better overall antispam experience including higher detection rates, lower false positives, and improved submission and service experience.
2) The previous “stand-alone” builds of Antigen for Exchange and Antigen for SMTP Gateways were exactly the same bits as the “with Antigen Spam Manager” versions – the only difference was a built-in license key which deselected the spam engine by default.
For customers upgrading existing Antigen 9.0 installations to Antigen 9.0 with SP2, the antispam engine settings will carry over from the previously installed version. Therefore, if you do not want the antispam functionality, there is no action required.
For customers installing Antigen 9.0 with SP2 on new servers who do not want the antispam functionality, you can follow the below steps to easily disable it:
1. In Run Job, select the Internet scan job and de-select Spam Scanning.
2. In Scanner Updates select the SpamCure engine and press the Disable button on the right side of the screen.
3. In Scanner Updates select the Cloudmark Authority Engine and press the Disable button on the right side of the screen.
4. Open the Service Control Manager and Stop the Star Engine service.
5. Go to Start->Settings->Control Panel->Scheduled Tasks and delete any entry related to SpamCure or Cloudmark
For more information on the Antigen 9.0 with SP2 releases, please visit the Antimalware Engine Notifications and Developments page.
JohnDoes that mean that we are unable to apply the service pack until we see it on the MVLS site? Or is feasible to download the trial and apply our existing key?
JasJol -
I was unable to find a standalone SP2 package, nor was PSS when I called them on this very issue. I was told that while the link was published, MVLS was 'reviewing' the issue. However I was able to get the bits with a PSS ticket (for which I was not charged, due to the fact that the MVLS availability was published, and it was not actually available on the MVLS site.)
Once I got the bits, I was forced to perform a complete uninstall and fresh reinstall of the whole app. Upgrade wouldn't work for me. As for the license, yes, you should use your existing key. Steps (per PSS, BTW) are as follows:
1. DL the package via your MVLS site and then EXPAND it.
2. copy your existing 'license.cfg' key from your current server and overwrite the one contained in the SP2 package.
3. You should be able to install OK and not get the 'trial' issue. Depending on your config, you may have to perform an uninstall followed by a fresh install of the SP2 version. I have a 4-node A-A-A-P cluster, and that was the only way I could get it to work. If you just have a standalone, it may work as a straight upgrade.
A word of warning about the SP2 package. There are now 8 (!) A/V engines that Antigen uses, and all are enabled by default out of the box. Further, it is still configured to use 2 processes by default. Both of these issues can potentially cause HUGE resource problems <no available memory causing server crashes>, especially on multi-core CPU's <if you have a quad core CPU, it will allocate 1 process for EACH core, not just a single CPU, so if you're at 2-per, you're looking at 8 processes running for Antigen, each taking ~200MB of memory if it behaves>
After you install, I'd recommend turning down the default processes to just 1, and disabling a number of the engines to preserve processing resources. I've disabled the Norman, Authentium and the 'Microsoft Antimalware' engines on my systems, and haven't had a repeat of the memory resource crashes.
BTW - I have a solid cluster install procedure if anyone needs it. The documentation is contradictory and doesn't work, but my process <submitted to PSS as part of a ticket I had on this> does indeed work well.
Good luck...- Proposed As Answer byKayQ Monday, November 16, 2009 7:10 PM
- AS STATED, officially you have to download the Whole Antigen with SP2 AND upgrade using that installer....
Diego Castelli - Hi El-Kabong ,
Could you please provide me the step by step installation procedure that you have. We have two 4 nodes (A-A-A-P) exchange 2003 clusters. We also have some standalone exchange servers. All of them have Antigen SP1 with update rollup 5. We have an antigen resource created in the cluster for every virtual server. Please send me the procedure on rishi.vij@hotmail.com.
Thanks in advance. - Rishi vij,
I've sent the instructions in a Word doc to your addy above. One difference with your setting is that we were NOT getting the cluster resources created in our EVS groups. The instructions are a complete wipe and fresh install which worked great for us.
Good Luck!
El Kabong- Proposed As Answer byRishi vij Wednesday, November 11, 2009 9:18 AM
Hi El Kabong,
Thank you so much for that document.
But un-install and reinstall would be a great mess for me. Our antigen clients are managed by FSSMC server. So reinstallation will remove these nodes from the console and the nodes will be left without huge number of settings that we have set in FSSMC.
Is that the only way for this upgrade is to reinstall. Or we can just upgrade the nodes without uninstalling/reinstalling things. This way all the old settings would remain on the nodes.
It would be great is you or anyone else could tell me if i can just do a simple upgrade. I have antigen SP1 with RU5. We also have the antigen cluster resource created for each EVS.
We also have few standalone nodes and i know that a simple upgrade will work for them. I'm worried about is my two exchange clusters.
By the way your document is perfect if anyone comes across the situation to reinstall antigen. You have listed each and every step. Good work.- Rishi,
Sorry, but my situation was that we did NOT have the pre-existing cluster resources, nor did we use the central console to manage our settings. Given your situation, if you do not have a lab I'd strongly suggest one. You can certainly use VM's for your 'physical' nodes, as I have. Very helpful. I did my testing & perfected my process there before I ever did anything in prod. Given the issues I had with this, it went far toward easing my concerns by working everything out in a lab. Plus you get to go through another cluster-build process to keep your skills sharp! <g>
I can't say for sure because I don't know your exact config, but because you already have the cluster resources, you may well be able to do an in-place upgrade - just make sure to have a spare copy of your license.cfg (or replace it in your expanded source before you upgrade, as I did) in case it gets overwritten. My primary problem was that I could not get the cluster resource to be created in my cluster groups with SP1 RUx (with both fresh and upgrade installs). Once I got ahold of 9.0 SP2, even then an upgrade wouldn't work and thus I had to do a complete purge and reinstall, whereupon everything worked as it should.
I'll say again: If you've got 2 4-node clusters please test whatever procedure you use.
Thanks for your kudos on my doc! Much appreciated. I'm sorry I couldn't be more helpful.
Good luck - Hello,
Can you send me the instructions to kquan64@yahoo.com?
thank you very much,
KQ
KQ,
Per your request, I've forwarded the doc to the email listed above. FYI, this should also work for a fresh install - simply begin your work at the 'Phase II - Reinstallation' section.
Good Luck, and remember: TEST, TEST, TEST!
El Kabong
