We use the following:
windowsupdate.microsoft.com  	ends  	Microsoft Windows Update
download.windowsupdate.com 	ends 	Microsoft Windows Update
download.microsoft.com 	ends 	Microsoft Windows Update
www.microsoft.com 	equals 	Microsoft Windows Update
wustat.microsoft.com 	equals 	Microsoft Windows Update
crl.microsoft.com 	equals 	Microsoft Windows Update
c.microsoft.com 	equals 	Microsoft Windows Update
w2ksp4.microsoft.com 	equals 	Microsoft Windows 2000 SP4
liveupdate.symantecliveupdate.com 	equals 	Symantec AntiVirus HTTP Update
liveupdate.symantec.com 	equals 	Symantec AntiVirus HTTP Update
update.symantec.com 	equals 	Symantec AntiVirus FTP Update
update.nai.com 	equals 	McAfee AntiVirus HTTP Update
ftp.nai.com 	equals 	McAfee AntiVirus FTP Update
grisoft.com 	ends 	AVG AntiVirus
grisoft.cz 	ends 	AVG AntiVirus
www.howtotell.com 	equals 	Legal Microsoft Software
security.symantec.com 	equals 	Symantec Live Scan
www.spreadfirefox.org 	equals 	Firefox Downloads
mozilla.org 	ends 	Firefox Downloads
mcafee.com 	ends 	McAfee AntiVirus HTTP Update
pccreg.antivirus.com 	equals 	Trend Micro Update
trendmicro.com 	ends 	Trend Micro Update
update.microsoft.com 	ends 	Microsoft Windows Update
activex.microsoft.com 	ends 	Microsoft Windows Update
codecs.microsoft.com 	ends 	Microsoft Windows Update


>>> [log in to unmask] 7/7/2005 10:12:59 AM >>>
Don't forget to add the *New* Microsoft update

Update.microsoft.com

Would you mind posting the DNS rules you've figured out? 

> -----Original Message-----
> From: Perfigo SecureSmart and CleanMachines Discussion List 
> [mailto:[log in to unmask]] On Behalf Of Aaron Havens
> Sent: Thursday, July 07, 2005 10:09 AM
> To: [log in to unmask] 
> Subject: Re: What version are you running?
> 
> Simon Bell wrote:
> > 3.5.2.1 works ok... still struggling with the new AV rules. 
> They work "most"
> > of time. For us the main problem is that we're trying to support 
> > multiple AV clients.
> 
> We have the same problem. I am trying to allow our users to 
> most flexibility on what AV client they run. I had to call 
> Trend Micro and ask them what their update servers were so I 
> could allow access from the quarantine role. At the moment we 
> allow students to have Symantec, Trend Micro and McAfee 
> products. I wish cisco included the correct dns entries for 
> each of the AV products they have in the AV rules.
> 
> 
> --
> Aaron Havens
> Network Technician
> Computing and Telecommunications
> Northeastern State University
> 610 N. Grand
> Suite 318
> Tahlequah, OK 74464
> http://netnotes.nsuok.edu/~havensa/ 
> 918-456-5511 Ext. 5813
>