Forum Discussion
scooterb_87043
Nimbostratus
NimbostratusPre-login AV scan takes 5 minutes - doesn't affect all users
The issue seems to be very random and so far we are unable to find the combination, settings or fix for this issue.
I seen it in a few instances when we were running opswat 2.5.10. The of affected users has grown since we updated to opswat 2.5.12 but can not specifically say that is the cause.
The frustrating thing is it seems to randomly affect users and has been difficult to recreate.
The issue when it happens is in our pre-login checks we require a supported AV and a scan to get network connection. Since 2.5.12 majority of the users this takes less then 1 minute [very fast]. The affected users this scan takes exactly 5 minutes never more never less in our tests.
We have tried uninstalling the F5 components manually, with F5 troubleshooting utility and Add/remove programs with no change in the scan time if a user has this issue. Have had F5 support webex into an affected laptop and they so far can not offer a resolution either.
We have reports of it affecting the following so there doesn't seem to be any patterns yet:
1. Windows XP SP2 and SP3 with IE 6 or 7 and Symantec Antivirus 10.1.6000 and 10.1.7000
2. Windows XP SP2 and SP3 with IE 6 or 7 and Symantec Endpoint Protection 11 MR2 and MR3 both only running AV and antispyware.
3. Vista with either SAV or SEP.
If anyone has the same issue or has found a fix please share.
It is so frustrating because a machine that has the issue multiple times and we have tried to no avail to remove F5 components and reinstall AV. Then the next users with identical setup [cloned laptop] will not have the issue.
15 Replies
scooterb_87043Yes it looks like the third revision of 2.5.15 is working. It does autoupdate the clients now and on machines with the slow scan the issue has stopped.
Now time will tell if the issue is resolved.
If you have not applied 2.5.15-3 you will still have issues. I had issues with -1 and -2
Ethan_26556thanks srbrandt
I will post results once opswat 2.5.15 R3 has been applied to one of my prod units and tested. I hope to have the opswat applied by EOD Tuesday- Ethan_26556srbrandt - Where did you get the 3rd revision of opswat 2.5.15 for 6.0.2 ?
When I look out on https://downloads.f5.com/ they are advertising the 2nd revision only (hotfix-114391-2)
I have a case open w/ F5 as well and will hit them up for the 3rd revision of opswat 2.5.15 for 6.0.2 - Ethan_26556FYI - F5 let me know that R2 of opswat 2.5.15 for 6.0.2 is the same as opswat 2.5.15 for 6.0.3. They claim that R3 of opswat 2.5.15 for 6.0.3 had one additional change.
Edouard_PAVIS_2Hi There,
I got the same issue. My FP is in versino :
FirePass 6.0.3
FirePass Build URM-6.03-20080905
FirePass Hot-Fixes
HF-603-1
HF-103052-1
HF-112445-1
HF-113720-1
HF-114391-3
HF-116735-1
HF-603-2.1-1
HF-89820-1
HF-119205-1
HF-603-3
---
With some winXP SP3, each time I try to connect the FP, Opswat libraries are downloaded from FP to the client. On other PC, I do not have any problem. I troubleshoot a little bit and I noticed :
PC with the issue got Opswat 2.5.10.
PC ok got Opswat 2.5.18.
If I replace \program Files\F5 from the faulty PC by the ok-PC, the faulty PC has no more problem. I mean, it doesn't re-dowload Opswat DLL each time.
BUT, if I clear the faulty PC component with F5wininfo.exe and I reconnect it to the FP, it dowloads 2.5.10 Opswat DLL....
Any idea guys ? I open a case this morning and waiting for a response.
Regards,
Edouard
