What are the anti-virus requirements for CCH® ProSystem fx® Tax?

The following information covers the anti-virus and firewall settings required for the proper functionality of your software installation:


Virus scan and firewall settings

  • It is highly recommended that before any CCH ProSystem fx installation is performed, you disable your anti-virus software to avoid potential installation issues.
  • Real-time virus scanning must be excluded on all CCH ProSystem fx Office directories on both file servers and workstations. 
    • For ProSystem fx Tax, this is the Wfx32 folder.  Need to excluded the drive path and UNC path. 
      • ?:\wfx32 and \\Server\share\wfx32
    • Some anti-virus software require that that the individual .exe files in Wfx32 are added to trusted files versus excluding the folder.
    • Some anti-virus software also require that we exclude specific file extensions for files that reside in the "?:\Wfx32\Tmp" folder such as *.POB and *.CEL.
      • If you receive a lot of errors within the ?:\wfx32\tmp folder you may need to exclude the extension causing the error in your anti-virus program.
    • Some anti-virus software will need to have the file "tb1040.dat" excluded.  This file is located in "C:\Windows\System".
    • Some anti-virus software may have Heuristic functions.
      • Heuristic antivirus features use Heuristic Analysis, this is an active scanning feature that commonly ignores folder exclusions.
      • Some common names of the function: Advanced Threat Detection, Behavioral Analysis or Advanced Threat Defense
      • Consult the anti-virus software vendor for configuration options, the feature may need to be disabled if no options exist for configuration.
  • Firewall ports 80 and 443 must be open for outbound request and inbound replies.
    • Allowed domains:
      • cch.com
      • cchgroup.com
      • prosystemfx.com
      • prosystemfx.net
      • taxnotebook.com
  • If you license Global fx Tax, then port 1494 must also be open for outbound requests and inbound replies.  Port 1494 is only necessary for Global fx and is not necessary for a local or network install of ProSystem fx Tax.
  • Click here for information on firewall settings to use Software Delivery Manager.


Notes

  • There have been cases where various anti-virus programs have quarantined files in the Wfx32 folder.  When this happens, the program or parts of the program cease to work.  If your anti-virus program does quarantine files from Wfx32 you will need to unquarantine them. 
  • It is also recommended that you set exclusions for the specific file that it quarantined. 
  • Depending on what anti-virus program you have, when unquarantining the file, the anti-virus program may ask you if the file is from a trusted source.  If you receive this type of prompt, select the option that marks the file as a trusted file.
    • Warning! For data integrity and firm security purposes, you should scan all files on your system on a regular basis. However, these full scans should not be performed when the data is in use, i.e., when users are logged in or during a backup.
  • Using file exclusions allows your scanning software to continue to protect your system while ignoring the excluded directories.
  • You may want to run a full scan with no exclusions at the start of the day before anyone logs into the CCH ProSystem fx products, or perhaps run an automated scan after hours. The key is to close all open CCH ProSystem fx files when the scan initiates to run without exclusions.
  Solution Tools
  Attachments
 Solution Id 000038244/sw688
 Direct Link
To provide feedback on this solution, please login.

Your feedback about this article will help us make it better. Thank you!