Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

You may receive a security message from the Internet Worm Protection feature in Norton AntiVirus when you try to configure the Group feature or the Base EDI adapter in BizTalk Server 2006


View products that this article applies to.

Symptoms

In Microsoft BizTalk Server 2006, you may receive a security message from the Internet Worm Protection feature in Norton AntiVirus. When you try to configure the Group feature in BizTalk Server 2006, you may receive the following security message:
Norton Internet Worm Protection has detected and blocked an intrusion attempt
Protocol: TCP
Attacked IP: IP Address
Attacked Port: ms-sql-s(1433)
Additionally, a message that is similar to the following may be logged in the BizTalk Configuration log:
[2:32:32 PM Info MSMQTConfig] Leaving function: CMSMQTConfig::ConfigureFeature
[2:32:32 PM Info Configuration Framework]Feature configured: MessageQueuing.
[2:32:32 PM Info Configuration Framework]Configuration Summaries:
[2:32:32 PM Error Configuration Framework]Feature: [Group] Failed to configure with error message [Failed to create Management database "BizTalkMgmtDb1" on server "ServerName".
[DBNETLIB][ConnectionWrite (send()).]General network error. Check your network documentation.
When you receive the security message, you may be unable to configure the Group feature in BizTalk Server 2006.

Additionally, you may receive the security message from the Internet Worm Protection feature in Norton AntiVirus when you try to configure the Microsoft BizTalk Server 2006 Base Electronic Data Interchange (EDI) adapter or when you try to start the EDI subsystem.

↑ Back to the top


Cause

This issue occurs when the Internet Worm Protection feature in Norton AntiVirus blocks ports that BizTalk Server 2006 requires.

You may receive the security messages that are mentioned in the "Symptoms" section if the Internet Worm Protection feature in Norton AntiVirus blocks port 1433 or port 11000. By default, a computer that is running BizTalk Server uses port 1433 to communicate with a computer that is running Microsoft SQL Server. Additionally, a computer that is running BizTalk Server uses port 11000 to communicate with the EDI subsystem.

Notes
  • Port 11000 has been associated with the Senna Spy Trojan horse virus.
  • Norton AntiVirus 2006 is designed for home use and for home office use.

↑ Back to the top


Resolution

To resolve this issue, configure the EDI subsystem to use a different port. For more information about how to configure the EDI subsystem to use a different port, see the "Base EDI adapter administration" section in the BizTalk Server 2006 documentation.

↑ Back to the top


References

For more information about how to configure Norton AntiVirus and the Internet Worm Protection feature, visit the following Symantec Web site:
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

↑ Back to the top


Keywords: KB917548, kbprb, kbbts, kbbtsadapters, kbtshoot

↑ Back to the top

Article Info
Article ID : 917548
Revision : 6
Created on : 4/12/2006
Published on : 4/12/2006
Exists online : False
Views : 421