KB Article:

Optimising Outpost work concurrently with third-party security software.
KB ID: 1000030, Added: 14-04-2004, Last updated: 26-12-2008

If Outpost Firewall and Outpost Security Suite run on a computer with third-party security software installed, system slowdowns may be observed.

A possible reason for the earlier versions of Outpost Firewall is that Outpost frequently accesses its log files and the antivirus monitor checks each accessed file for viruses. This collision can lead to system slowdowns. To resolve this issue, add the Outpost Firewall installation folder to antivirus exclusions.

If you use the latest version of Outpost Firewall or Outpost Security Suite, they do contain proactive protection components and Outpost Security Suite contains antivirus monitor as well, therefore installing any other alike software might hang up the system performance.

For different third-party security software, complete the steps outlined below.

Please use the following links for quick navigation:

Note:

It is not possible for two or more antiviruses to work together. Only one antivirus monitor might be installed along the Outpost Firewall.

• For Avast! antivirus:
• For AVG antivirus:
• For Avira AntiVir PersonalEdition Classic \ Avira Antivir Personal Premium:
• For BitDefender:
• For DrWeb SpiderGuard:
• For F-PROT Antivirus:
• For G Data AntiVirusKit:
• For Kaspersky Antivirus 4.0:
• For Kaspersky Antivirus 5.0:
• For Kaspersky Antivirus 6.0 \ Kaspersky Internet Security 6.0:
• For Kaspersky Antivirus 7.0 \ Kaspersky Internet Security 7.0:
• For Active Virus Shield:
• For McAfee VirusScan Home Edition
  and McAfee VirusScan Professional Edition:
• For NOD32:
• For NOD32 (version 3.0):
• For Norton Antivirus (earlier than 2005):
• For Norton Antivirus 2005:
• For Norton Antivirus 2006:
• For Norton Antivirus 2007:

1. Right-click the Avast! icon in the system tray.
2. On the shortcut menu select Program Settings.
3. On the Exclusions tab click Browse.
4. Browse to the Outpost installation folder (C:\Program Files\Agnitum\Outpost Firewall by default) and click OK.

1. Right-click the AVG icon in the system tray.
2. On the shortcut menu select Launch Control Center.
3. Click AV Resident Shield > Properties and select Excludes tab.
4. Click Edit Excludes and select Use excludes in AVG Resident Shield.
5. Click Add Path and locate the Outpost installation folder (C:\Program Files\Agnitum\Outpost Firewall by default).
6. Click OK 3 times.
7. Reboot your PC.

1. Right-click the Avira icon in the system tray.
2. On the shortcut menu select Configure AntiVir.
3. Checkmark "Expert mode".
4. Extend Guard - Scan (click on the "+" sign) and select Exceptions.
5. Browse to the Outpost folder (by default C:\Program Files\Agnitum\Outpost Firewall) and click Add.
6. Click OK to save your settings.

1. Open BitDefender. Select Antivirus > Shield.
2. Click Custom Level.
3. Extend Exclude Path From Scan (applied to ALL LEVELS) and click New Item.
4. Browse to the Outpost installation folder (C:\Program Files\Agnitum\Outpost Firewall by default) and click OK.
5. Click OK to save your settings.

1. Right-click the Spider Guard system tray icon.
2. On the shortcut menu select Settings.
3. On the Paths tab click Browse under Excluded folder and files.
4. Add the Outpost installation folder both in Windows and DOS formats (C:\Program Files\Agnitum\Outpost Firewall and C:\PROGRA~1\Agnitum\OUTPOS~1 by default correspondently) and click Add.
5. Restart your computer for the changes to take effect.

1. Right-click F-PROT Antivirus icon in the system tray and select Open F-PROT Antivirus.
2. Click Virus Scanners.
3. Under Advanced click Exclusions - Folder...
4. Browse to Outpost folder (C:\Program Files\Agnitum\Outpost Firewall by default) and click OK.
5. Make sure the option Exclude subfolders is ticked and click OK.
6. Close F-Prot antivirus.

1. Right-click the G DATA AntiVirusKit icon in the system tray and select Launch AntiVirusKit.
2. Click Options.
3. On the Monitor tab, click Exceptions > New.
4. Select Directory and browse to Outpost installation folder (C:\Program Files\Agnitum\Outpost Firewall by default).
5. Save the changes by clicking OK 3 times.
6. Close the AntiVirusKit window.

If pages are displayed incorrectly, we recommend to switch off HTTP filtering in G Data AntiVirenKit:

1. Right-click the G DATA AntiVirusKit icon in the system tray and select Launch AntiVirusKit.
2. Click Options.
3. On the Web tab, clear the Scan Web content (HTTP) check box.
4. Save the changes by clicking OK 3 times.
5. Close the AntiVirusKit window.

Kaspersky Antivirus 4.0 does not support an exclusions list feature, but you can try to exclude all *.mdb files from being checked:

1. Right-click the Kaspersky Antivirus Monitor icon in the system tray.
2. Click Kaspersky Antivirus Monitor settings.
3. Click Objects.
4. Under Scan files of the following types select Exclude by mask.
5. Click New value and type *.mdb.
6. Click OK.

1. Open the Kaspersky Antivirus window.
2. Select the Settings tab.
3. Click Threats and Exclusions.
4. Click Add > Browse (...).
5. Locate the Outpost Firewall installation folder C:\Program Files\Agnitum\Outpost Firewall by default), click Select and save your settings.
6. Reboot your PC.

In order to avoid different problems with Internet access blocking, we strongly recommend that you perform the following steps:

1. Follow the instruction to switch off protection against network attacks at this page.
2. If the problem persists and Internet connections are still blocked please try to uninstall protection against network attacks or move the file KL1.SYS from the folder \WINDOWS\system32\drivers and reboot.

   Note: Kaspersky Anti-Virus 5.0 (from version 5.0.227) contains system driver KL1.SYS which starts irrespective of the protection against network attacks status. The driver is responsible for network traffic filtering and in fact functions as a firewall. More than one firewall installed generally causes different problems and instability.

Kaspersky Antivirus 6.0 \ Kaspersky Internet Security 6.0:

Please follow the recommendations at Kaspersky Labs or here:

1. Right-click Kaspersky AV icon in the system tray. In the shortcut menu select Settings.
2. Click Protection - Trusted Zone.
3. Click the Exclusions Masks tab - Add. Make sure the Object check box is selected.
4. By the Object name click Specify.
5. Browse to the Outpost folder (by default C:\Program Files\Agnitum\Outpost Firewall) and select the "Include subfolders" check box.
6. By the Component click selected.
   The line should look like this:

   The object will not be scanned if the following conditions are met:
   Object name: C:\Program Files\Agnitum\Outpost Firewall
   Component: any task
   

7. Save your settings by clicking OK.
8. Select the Trusted applications tab.
9. Click Add and browse to the Outpost executable file.
10. Select all the check boxes and click OK three times to save the settings.

    Note: In order to avoid different problems with Internet access blocking, we strongly recommend that you perform the following steps:

1. Temporarily disable Kaspersky Antivirus 6.0 Self-Defence under Settings - Service - Protection.
2. Run the Registry editor (click Start - Run. In the Run field type regedit and click OK).
3. Find the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KL1
4. Add DWORD value "PatchOB" the key. Right-click KL1 and select New - DWORD Value. In the Value name field type PatchOB.
5. Make sure that the value data is equal to 0x000000 (zero).
6. Reboot your PC.

Instead of modifiying the Registry you can download and run PatchOB.zip and reboot your PC.

Kaspersky Antivirus 7.0 \ Kaspersky Internet Security 7.0:

1. Right-click Kaspersky AV icon in the system tray. In the shortcut menu select Settings > Threats and Exclusions > Trusted Zone.
2. Click the Exclusions Masks tab - Add. Make sure the Object check box is selected.
3. By the Object name click Specify.
4. Browse to the Outpost folder (by default C:\Program Files\Agnitum\Outpost Firewall) and select the "Include subfolders" check box.
5. By the Component click selected.
   The line should look like this:

   The object will not be scanned if the following conditions are met:
   Object name: C:\Program Files\Agnitum\Outpost Firewall
   Component: any task
   

6. Save your settings by clicking OK.
7. Select the Trusted applications tab.
8. Click Add and browse to the Outpost executable file.
9. Select all the check boxes and click OK three times to save the settings.

   Note: In order to avoid different problems with Internet access blocking, we strongly recommend that you perform the following steps:

1. Temporarily disable Kaspersky Antivirus Self-Defence under Settings - Service - Protection.
2. Run the Registry editor (click Start - Run. In the Run field type in regedit and click OK).
3. Find the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KL1
4. Add DWORD value "PatchOB" the key. Right-click KL1 and select New - DWORD Value. In the Value name field type PatchOB.
5. Make sure that the value data is equal to 0x000000 (zero).
6. Reboot your PC.

Instead of modifiying the Registry you can download and run PatchOB.zip and reboot your PC.

If you experience connections freezes with KAV 2009 and Outpost operating together (pages cannot be loaded or are loaded partially), and Outpost monitors multiple connection to port 19780 from process SYSTEM, these connections are created by KAV 2009 due to its peculiarities of processing traffic. To avoid creating connection to port 19780:

1. Disable Kaspersky Antivirus Self-Defence.
2. Exit the antivirus.
3. Open the Register, folder [HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\protected\AVP7\profiles\TrafficMonitor\settings] and find parameter UseKavsend, change its value to 1.
4. Start the antivirus.
5. Enable its self-defence.
6. Restart the system.
   

   Note: If parameter UseKavsend is absent, you need to create it (DWORD) with the antivirus self-defence disabled. After that you will need to enable the self-defence and restart the system.

After you fulfill the actions specified, connections SYSTEM:19780 should not appear any longer and browser connections should not freeze any more.

Active Virus Shield:

ASV is based on Kaspersky Antivirus 6.0 engine, therefore it might evoke the same problems. However, you can eliminate them only in the safe system mode.

To boot your computer in safe mode:

1. Restart your computer.
2. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
3. At this menu, select the option for Safe Mode using the arrow keys and then press the Enter key on your keyboard.

Perform the following registry modifications:

1. Run the Registry editor (click Start - Run. In the Run field type in regedit and click OK).
2. Find the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KL1
3. Add DWORD value "PatchOB" the key. Right-click KL1 and select New - DWORD Value. In the Value name field type PatchOB.
4. Make sure that the value data is equal to 0x000000 (zero).
5. Reboot your PC.

Instead of modifiying the Registry you can download and run PatchOB.zip and reboot your PC.

McAfee VirusScan:

McAfee VirusScan Home Edition and McAfee VirusScan Professional Edition do not support an exclusions list feature, but you can increase scanning performance by switching to "Program files and documents only" scan mode by following these steps:

1. Open VirusScan.
2. Click Options.
3. Select ActiveShield.
4. Click Advanced.
5. On the File Types to Scan select Program files and documents only.

1. Open NOD32 Control Center.
2. Click AMON.
3. Click Setup.
4. Select the Exclusion tab.
5. Add the Outpost folder (C:\Program Files\Agnitum\Outpost Firewall by default) and save the settings.
6. Click Add > Folder.
7. Browse to Outpost Firewall folder (C:\Program Files\Agnitum\Outpost Firewall by default).
8. Make sure that in Excluded objects field Folder is selected.
9. Click OK twice to save the settings.

1. Click the NOD32 system tray icon and select Open window.
2. Select Setup > Toggle advanced mode > Yes.
3. Click Enter entire advanced setup tree.
4. Under Antivirus and Antispyware click Exclusions > Add.
5. Browse to the folder of the installed Agnitum product (by default, C:\Program Files\Agnitum\Outpost [your product] and click OK.
6. Click OK to save the settings.

1. Right-click the Norton Antivirus system tray icon.
2. Select Configure Norton Antivirus from the shortcut menu.
3. Click Autoprotect and then Click Exclusions.
4. Click New, type \Program Files\Agnitum\Outpost Firewall\ and select Include Subfolders.
5. Save the changes.

1. Right-click the Norton Antivirus 2005 system tray icon and click Open Norton Antivirus.
2. Click Options.
3. On the Other tab click Threat Categories - Exclusions.
4. Click New and browse to the Outpost folder (C:Program Files\Agnitum\Outpost Firewall by default).
5. Make sure that the option "Include subfolders" is selected.
6. Save your settings by clicking OK twice.

1. Right-click the Norton Antivirus system tray icon and select Open Norton Antivirus.
2. Click Options - Norton Antivirus.
3. Under System extend Auto-protect menu.
4. Click Exclusions
5. Click New and browse to Outpost folder (by default C:\Program Files\Agnitum\Outpost Firewall). Make sure the option "Include subfolders" is check marked.
6. Click OK to save the changes.
7. Close Norton Antivirus window and reboot.

1. Right-click the Norton Antivirus system tray icon and select Open Norton Protection Center.
2. Click the Norton Antivirus tab.
3. Click Settings > Auto-protect > Configure.
4. Select Scan Exclusions under Advanced Options on the left pannel.
5. Under Which disks, folders, of files to exlude from Auto-Protect Scanning click New and browse to Outpost folder (by default C:\Program Files\Agnitum\Outpost Firewall or C:\Program Files\Agnitum\Outpost Security Suite). Make sure the option Include subfolders is selected.
6. Click OK to save the changes.
7. Close Norton Antivirus window and reboot.

Note: To enable Outpost modules disabled for compatibility with third-party security software, please, see How can I enable Outpost modules that were disabled automatically by the product for compatibility with third-party security software?