The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

SEP's reputation guesswork is not exactly deterministic it seems. Their
webpage also explains why it is not really to be considered a reliable
detection.

Maybe SEP acted funny on the fact that this is a seldomly-encountered
file (which is because it's tailor-made to your institution) *and* that
it was downloaded in China?

Otherwise, I have no good explanation why the exact same file would be
flagged in China but not in Europe.

Did you ask the user in China to run an md5sum on the file to verify
that you indeed have the exact same file in front of you?

Greetings,

Stefan Winter

Am 22.08.2017 um 13:21 schrieb Jones, Simon:
> Hi,
> 
>  
> 
> We have been testing the eduroam CAT installers at Lancaster University
> from https://cat.eduroam.org/
> 
>  
> 
> A member of staff at our campus in China has had a problem with the
> download for the Windows 7 installer which Semantec Endpoint Protection
> detected as a potential virus(this may be a problem also for 8 and 10.
> However, we don’t have anyone in China at the moment who has this
> version of the OS).
> 
>  
> 
> We have tested at our campus in Lancaster University in the UK and this
> has not been a problem.
> 
>  
> 
> See attached screenshot of this issue.
> 
>  
> 
> 
>   I googled WS.Reputation.1 and found…
> 
> 
>   
> https://community.norton.com/en/forums/clarification-wsreputation1-detection
> 
> 
> 
>    
> 
> I’ve submitted the file here… https://submit.symantec.com/false_positive/
> 
>  
> 
> However, you may want to submit this also.
> 
> 
> Kind regards,
> 
>  
> 
> *Simon Jones*
> Project Manager, ISS
> Lancaster University
> O: +44 (0) 1524 593 655
> cid:image001.png AT 01D2248D.34099E80 Follow us on Twitter
> <http://www.twitter.com/LancasterUni>
> cid:image002.png AT 01D2248D.34099E80 Find us on Facebook
> <http://www.facebook.com/lancasteruniversity>
> 
> cid:image006.jpg AT 01D2248D.34099E80
> www.lancaster.ac.uk <http://www.lancaster.ac.uk/>
> 
>  
> 
>  
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature