Sonicwall AV Definition breaking AppAware Processing

Availability for the Always-On Enterprise

Sonicwall AV Definition breaking AppAware Processing

Veeam Logoby SBarrett847 » Fri Jul 21, 2017 4:31 pm

EDIT:- Can a MOD move this to the main B&R forum? I placed it here by mistake.

Just a heads up for other Sonicwall users that might have issues with application aware processing failing.

Sonicwall AV definition - Cloud Id: 56333863 will stop Veeam copying the Guest agent across to the VM during backup and the Job will fail. The Offending file is "VeeamVssHook_X64.dll" and it will show in the Sonicwall logs as "Gateway Anti-Virus Alert: (Cloud Id: 56333863) Agent.FL (Trojan) blocked."

Adding Cloud Id: 56333863 to the "Cloud AV DB Exclusion Settings" under the Gateway Anti-Virus Page, will have you up and running again.

I have a call open with Sonicwall, not sure how likely they are to white-list the affected file.
SBarrett847
Service Provider
 
Posts: 174
Liked: 28 times
Joined: Tue Feb 02, 2016 5:02 pm
Full Name: Stephen Barrett

Re: Sonicwall AV Definition breaking AppAware Processing

Veeam Logoby kubimike » Fri Jul 21, 2017 10:25 pm

Can't you just put that traffic across a different interface and uncheck the AV rule in trusted interfaces ? That's what I'd do. I have a lot of sonicwall a that I manage.
kubimike
Expert
 
Posts: 243
Liked: 23 times
Joined: Fri Feb 03, 2017 2:34 pm
Full Name: MikeO

Re: Sonicwall AV Definition breaking AppAware Processing

Veeam Logoby SBarrett847 » Sat Jul 22, 2017 2:44 am

kubimike wrote:Can't you just put that traffic across a different interface and uncheck the AV rule in trusted interfaces ? That's what I'd do. I have a lot of sonicwall a that I manage.


Yep I could do that , even disable the AV completely, but it doesn't seem prudent , now I know that the particular AV signature is bad
SBarrett847
Service Provider
 
Posts: 174
Liked: 28 times
Joined: Tue Feb 02, 2016 5:02 pm
Full Name: Stephen Barrett

Re: Sonicwall AV Definition breaking AppAware Processing

Veeam Logoby kubimike » Sat Jul 22, 2017 1:16 pm

It may not be prudent, but necessary to scan data going to a Veeam cloud seems like a waste of resources
kubimike
Expert
 
Posts: 243
Liked: 23 times
Joined: Fri Feb 03, 2017 2:34 pm
Full Name: MikeO

Re: Sonicwall AV Definition breaking AppAware Processing

Veeam Logoby NightBird » Sat Jul 22, 2017 1:19 pm

Or you have a lot of UTM horse power to waste ;)
NightBird
Service Provider
 
Posts: 148
Liked: 20 times
Joined: Tue Apr 28, 2009 8:33 am
Location: Strasbourg, FRANCE


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: No registered users and 57 guests