Microsoft KB Archive/917548

= You may receive a security message from the Internet Worm Protection feature in Norton AntiVirus when you try to configure the Group feature or the Base EDI adapter in BizTalk Server 2006 =

Article ID: 917548

Article Last Modified on 4/12/2006

-

APPLIES TO


 * Microsoft BizTalk Server 2006 Standard Edition
 * Microsoft BizTalk Server 2006 Developer Edition
 * Microsoft BizTalk Server 2006 Enterprise Edition

-





SYMPTOMS
In Microsoft BizTalk Server 2006, you may receive a security message from the Internet Worm Protection feature in Norton AntiVirus. When you try to configure the Group feature in BizTalk Server 2006, you may receive the following security message:

Norton Internet Worm Protection has detected and blocked an intrusion attempt

Protocol: TCP

Attacked IP:

Attacked Port: ms-sql-s(1433)

Additionally, a message that is similar to the following may be logged in the BizTalk Configuration log:

[2:32:32 PM Info MSMQTConfig] Leaving function: CMSMQTConfig::ConfigureFeature

[2:32:32 PM Info Configuration Framework]Feature configured: MessageQueuing.

[2:32:32 PM Info Configuration Framework]Configuration Summaries:

[2:32:32 PM Error Configuration Framework]Feature: [Group] Failed to configure with error message [Failed to create Management database &quot;BizTalkMgmtDb1&quot; on server &quot; &quot;.

[DBNETLIB][ConnectionWrite (send).]General network error. Check your network documentation.

When you receive the security message, you may be unable to configure the Group feature in BizTalk Server 2006.

Additionally, you may receive the security message from the Internet Worm Protection feature in Norton AntiVirus when you try to configure the Microsoft BizTalk Server 2006 Base Electronic Data Interchange (EDI) adapter or when you try to start the EDI subsystem.



CAUSE
This issue occurs when the Internet Worm Protection feature in Norton AntiVirus blocks ports that BizTalk Server 2006 requires.

You may receive the security messages that are mentioned in the &quot;Symptoms&quot; section if the Internet Worm Protection feature in Norton AntiVirus blocks port 1433 or port 11000. By default, a computer that is running BizTalk Server uses port 1433 to communicate with a computer that is running Microsoft SQL Server. Additionally, a computer that is running BizTalk Server uses port 11000 to communicate with the EDI subsystem.

Notes  Port 11000 has been associated with the Senna Spy Trojan horse virus. Norton AntiVirus 2006 is designed for home use and for home office use. For more information, visit the following Symantec Web site:

http://www.symantec.com/home_homeoffice/products/internet_security/nav2006/index.html





RESOLUTION
To resolve this issue, configure the EDI subsystem to use a different port. For more information about how to configure the EDI subsystem to use a different port, see the &quot;Base EDI adapter administration&quot; section in the BizTalk Server 2006 documentation.

