AVG ANTI-VIRUS BUSINESS EDITION 9.0 - REV 90.6, User Manual

Page 1: ...ks are the property of their respective owners This product uses RSA Data Security Inc MD5 Message Digest Algorithm Copyright C 1991 2 RSA Data Security Inc Created 1991 This product uses code from C SaCzech library Copyright c 1996 2001 Jaromir Dolecek dolecek ics muni cz This product uses compression library zlib Copyright c 1995 2002 Jean loup Gailly and Mark Adler AVG 9 0 Anti Virus Business E...

Page 2: ...sion 16 2 AVG 9 0 Anti Virus Business Edition Installation 16 2 1 Components Overview 16 2 1 1 AVG Admin Server Deployment Wizard 16 2 1 2 AVG Network Installer 16 2 1 3 AVG Admin Console 16 2 1 4 AVG Admin Lite 16 2 1 5 AVG Admin Server 16 2 1 6 Server roles 17 2 2 Where to Install and Deploy 18 2 3 Language Selection 18 2 4 License Agreement 19 2 5 Installation Type 20 2 6 Personalize 20 2 7 Des...

Page 3: ...6 4 5 2 Enter an IP Range 46 4 5 3 Import Stations from File 46 4 5 4 Select a Single Station 46 4 5 5 Select from Active Directory 58 4 6 Remote network installation final steps 60 4 7 Creation of AVG Installation Script 67 5 AVG Network Installer Wizard Advanced Mode 68 5 1 Welcome 69 5 2 Installation Method 70 5 3 Remote Network Installation 70 5 3 1 All Stations from the Domain 70 5 3 2 Enter ...

Page 4: ...n 114 6 4 Stations 114 6 4 1 Non Compliant Stations 114 6 4 2 Stations with AVG Firewall 114 6 4 3 New Stations 114 6 4 4 Filtering 118 6 5 Servers 118 6 5 1 AVG Admin servers 118 6 5 2 Application Servers 118 6 5 3 Filtering 121 6 6 Scan results 121 6 6 1 Filtering 125 6 7 Events 125 6 7 1 Filtering 126 6 8 Notifications 126 6 8 1 Condition Tab 126 6 8 2 Message Tab 129 6 9 Graphic Reports 129 6 ...

Page 5: ...ote Administration 152 10 1 4 Allowed Actions 152 10 1 5 License 152 10 1 6 Configuration copying 152 10 1 7 Scheduled Scans 152 10 1 8 Moving values to groups servers 152 10 1 9 Anti Spam 168 10 2 Shared Firewall Settings 168 10 2 1 Setting Items as Mandatory 168 10 2 2 Profiles 172 10 3 Shared Settings for Application Servers 172 10 3 1 Overview 172 10 3 2 Anti Spam Server for MS Exchange 172 10...

Page 6: ...chronize Stations 203 11 4 How to solve Update related issues 204 11 5 How to install AVG remotely on Windows XP Home 205 11 6 How to Change User Interface Language 206 11 7 How to Control station users actions 207 11 8 Requests handling and status messages 208 11 9 How to manage access rights 212 11 10 How to maintain the DataCenter database 213 11 11 List of AVG Setup Parameters 221 12 AVG DataC...

Page 7: ... 3 AVG Admin Server 9 0 for Linux Installation 233 15 1 4 Manual Database Upgrade 233 15 1 5 License 233 15 1 6 AVG Admin Server 9 0 for Linux Configuration 233 15 1 7 Installation Verification 233 15 1 8 Installation Troubleshooting 238 15 2 Start up Parameters 240 15 3 Configuration 245 16 FAQ and Technical Support ...

Page 8: ...the AVG User Interface and AVG advanced Firewall settings we strongly recommend that you download all relevant guides in advance from the http www avg com website Support Center Download Documentation section You can also use context help which is available through the application to get the requested information 1 1 AVG 9 0 Anti Virus Business Edition scheme Please review the simplified scheme of...

Page 9: ... database and to centrally define settings for stations and system parameters AVG stations approach the AVG Admin Server to read the setup parameters and to save their currently defined setting and scan results into the AVG DataCenter AVG Admin Server also works as a local update source If you deploy the UpdateProxy role to multiple servers you can then use them for updating stations and keeping t...

Page 10: ...p installation program on all remote network stations Centrally controlled updates All AVG stations in the network can be updated centrally using the AVG Admin Console Server roles AVG 9 0 Anti Virus Business Edition can now act in multiple roles where each role can be deployed separately DataCenter role used for remote stations management UpdateProxy role for managing updates which allows the use...

Page 11: ...le o Anti Spam protection o Anti Spyware protection o Firewall protection o Online Shield protection o LinkScanner protection o Anti Rootkit protection Note Depending on your edition the support of components may vary Backward compatibility including an easy migration from the previous version 1 3 Operating Systems Supported AVG 9 0 Anti Virus Business Edition is intended to manage protect station...

Page 12: ...XP Professional SP2 MS Windows XP Home SP2 MS Windows XP Professional x64 SP1 MS Windows Server 2003 SP1 MS Windows Server 2003 x64 MS Windows 2008 Server MS Windows 2008 Server x64 MS Windows Vista all editions MS Windows Vista x64 all editions MS Windows 7 all editions MS Windows 7 x64 all editions The AVG Admin Server for Linux is supported in the Redhat Suse Mandriva Ubuntu Debian and possibly...

Page 13: ...orrectly use AVG remote installation Depending on the firewall type and settings on each station some of the requirements listed below may be already predefined or allowed or its settings may not be available under the same name and description We strongly recommend that all changes should only be done by well experienced users Always consult the User manual or Help guide for your firewall before ...

Page 14: ... step by step both and then click the Turn on file and printer sharing radio button If the File and Printer Sharing for Microsoft Networks is successfully installed you need to allow the ports mentioned above in the firewall installed on the remote station If for example the built in Windows XP firewall is used you can easily allow this feature by clicking the File and Printer Sharing item located...

Page 15: ...ings Remote Administration TCP Port 6051 This port is used for direct messages from AVG Admin Server to the AVG Station This port can be changed within the AVG User Interface on the station via upper menu Tools Advanced Settings Remote Administration group TCP Port 6054 This port is used for direct messages from the AVG Admin Server to the AVG Admin Console This port is not configurable AVG Admin ...

Page 16: ...can always be downloaded from the AVG website at http www avg com download Before installing AVG Remote Administration visit the AVG website and check for the latest installation file 2 1 Components Overview Below you will find a brief overview of all components 2 1 1 AVG Admin Server Deployment Wizard This wizard will help you to deploy AVG 9 0 Anti Virus Business Edition onto your server or divi...

Page 17: ...VG Admin Servers The selection of roles is a key part of the deployment process that will take place right after product installation The roles are as follows DataCenter role Allows central management of AVG stations configuration via the AVG Admin Console collects scan results from AVG stations shows components states and much more UpdateProxy role Serves as a proxy server for downloading and dis...

Page 18: ...oice by pressing the Next button 2 4 License Agreement This dialog window offers the full wording of the AVG 9 0 Anti Virus Business Edition license agreement You can either scroll down to read the text or click the Printable version button to open it in a new resizable window with an option to print the whole agreement Once you finish reading check the I have read license agreement checkbox and p...

Page 19: ...echnologies C Z s r o A ll rights reserved 19 2 5 Installation Type In this dialog select which type of Remote Administration you wish to install You have the following options Full Installation This is the recommended option It will install all possible components ...

Page 20: ...dministration will be installed and no AVG DataCenter will be deployed You can find more information on the Lite Installation in the AVG Admin Lite Chapter 2 6 Personalize In this dialog enter your User name Company name if applicable and your License Click the Next button to continue 2 7 Destination Folder You have to specify the destination folder where AVG 9 0 Anti Virus Business Edition and it...

Page 21: ... you want to create the directory To confirm creating the directory press the Yes button 2 8 Component Selection The new dialog window asks you to select those AVG 9 0 Anti Virus Business Edition components you want to install this does not apply to the Lite installation option By default all key components are selected If you decide on another arrangement check or uncheck the respective checkbox ...

Page 22: ...ll the component on the computer where you install AVG Admin Server and on each computer where you install AVG Admin Console Graphic reports are generated by the AVG Admin Server and can be viewed from the AVG Admin Console 2 9 Installation Summary This dialog presents a list of all selected parameters To continue the installation press the Finish button ...

Page 23: ...e Installation type dialog For more information see the AVG Admin Deployment Wizard chapter Note You must go through this wizard in order to make AVG 9 0 Anti Virus Business Edition function properly AVG Admin Deployment Wizard Lite This Wizard will start if you chose Lite Installation in the Installation type dialog For more information see the AVG Admin Deployment Wizard Lite chapter Note You mu...

Page 24: ... the AVG DataCenter database on a selected database engine Using the wizard you can also configure the AVG Admin Server in order to mirror the AVG updates in a local network The wizard leads you through the configuration process in a few steps listed in the following summary Note Navigation in the wizard is as usual The Back button takes you one step back in the wizard The Next button takes you on...

Page 25: ...r server you may need to consider the following You can deploy the UpdateProxy role to more than one server and distribute updates from different sources to avoid your server overloading or having bandwidth issues The allocation of servers depends on your network size and your server and network specifications Generally speaking if your network consists of more than 150 stations or your network is...

Page 26: ...hange something If there is a configuration problem you will be briefly informed about the reasons and the information will be highlighted in red color In such cases you need to go through the whole wizard to correct the problem In the Server roles section you must choose which server role s you want to run on this server You need to select at least one option but you can also select both The opti...

Page 27: ...e Current state of AVG Admin Server step see chapter Role Selection the DataCenter Role one of the following dialogs will be displayed If there is an existing database with stations detected the Wizard will offer you to backup its contents first Note The backup is not available if the database is in an error state To do so simply check the Perform DataCenter database backup to folder checkbox and ...

Page 28: ...nd to backup the DataCenter database before proceeding On the other hand if the DataCenter database will be outdated you will be asked if you wish to update the existing one or create a new one Update existing DataCenter database This option will update the database to the current version Select this option if you need to preserve the database contents In the next step you can optionally check the...

Page 29: ... Z s r o A ll rights reserved 29 the same values on all existing stations in order to allow them correctly connect to your Datacenter If you are deploying the DataCenter role for the first time or you decided to create a new database you will need to choose a database engine now ...

Page 30: ...uage needs Microsoft SQL Server Express The Microsoft SQL Server Express Edition is a reduced version of the Microsoft SQL Server it can serve up to 1000 stations The product is not a standard part of AVG 9 0 Anti Virus Business Edition Its usage is not limited by any commercial license Microsoft SQL Server The Microsoft SQL Server engine can serve over 1000 stations in large networks It is not a ...

Page 31: ... currently using the Wizard can import the contents of the previously exported AVG DataCenter into the newly chosen database type 3 4 1 Firebird If you have selected the Firebird option there are no further settings needed and you can proceed to the next step Data Import 3 4 2 MS SQL Server Express Edition If you wish to use Microsoft SQL Server Express for storing Datacenter data fill in the foll...

Page 32: ...database to be used for AVG Admin Server connection User password type in a preferred new password for the database to be used for AVG Admin Server connection Continue to the next step Data Import by pressing the Next button 3 4 3 MS SQL Server Fill in the following information Computer name defines the name of the server on which the SQL Server is installed Instance name refers to a particular SQ...

Page 33: ...VG Admin Server connection Press the Next button and continue to the next step Data Import 3 4 4 Oracle Please note If your database is running on another computer you must first install the client part of the Oracle database on that computer For installation on Windows Vista we recommend to use client part for Oracle 11g Instant Client for different operating systems http www oracle com technolog...

Page 34: ...gin name for the database to be used for AVG Admin Server connection User password type in a preferred new password for the database to be used for AVG Admin Server connection Press the Next button and continue to the next step Data Import 3 4 5 MySQL 5 Fill in the following information Computer name defines the name of the server on which the MySQL 5 is installed Change the value only if the inst...

Page 35: ...e used for AVG Admin Server connection Press the Next button and continue to the next step Data Import 3 4 6 Data Import Once you confirm your database selection you can also choose to import some existing data into the newly created database To do so tick the Import data into the database from folder checkbox The folder selection field becomes available Choose your backup folder by clicking this ...

Page 36: ...mer database backup you can find the backup files there unless you switched the backup feature off The folders are named in the format YEAR MM DD TIME for easier differentiation 3 4 7 Server Access In this step you can optionally check the Username and Password checkboxes and fill in your preferred user name and password that will be required each time you launch the AVG Admin Console AVG Admin Se...

Page 37: ...s dialog will appear if you chose to deploy the UpdateProxy role in the Role Selection dialog You must choose a folder into which the update files will be downloaded and stored If the folder does not exist you will be asked if you want to create it Click this button to select the folder Once finished click the Next button to continue ...

Page 38: ...ng the default configuration If you for some reason do not wish to download Anti Spam updates uncheck the Allow downloading of Anti Spam updates item Note This checkbox indicates that Anti Spam updates will be downloaded directly from the Mailshell servers Additional information about the Anti Spam updates can be found in the Configuration Shared Settings for Stations Groups Anti Spam chapter If y...

Page 39: ...he address of the selected server Delete for deleting the selected server address Default for resetting values of the current dialog to default ones The servers are listed by priority The first one always has the highest priority i e updates are first downloaded from this server If you need to change the order simply use the following buttons to do so Move Up to move a selected server up Move Down...

Page 40: ...ation Servers group settings Shared Settings the currently deployed AVG Admin Server URL will be saved into the Shared Settings for Stations New group the currently deployed AVG Admin Server URL will be saved to a new group If you choose this option you will need to select a group name and optionally its description too New stations the currently deployed AVG Admin Server URL will be saved to the ...

Page 41: ...ration Shared Settings for Stations Groups Anti Spam chapter 3 6 Configuration overview This dialog contains a brief overview of the previously selected settings Confirm your choice by pressing the Deploy button The deployment process will start It may take some time so please be patient Once the process is completed click the Finish button to close the Wizard The AVG Admin Server will then be sta...

Page 42: ...gies C Z s r o A ll rights reserved 42 users Connecting Stations to AVG DataCenter Migrating stations from to different AVG DataCenter Also you may consider going through the general How to chapter which describes different tasks related to the remote administration of AVG ...

Page 43: ...r and comprehensive functionality 4 1 Remote Installation on Windows XP Home The installation process on stations with this operating system is the same as installation on stations running the Windows 2000 2003 XP Professional OS However due to the restrictions of this older operating system it is not possible to run the automatic installation of the AVG Agent service Therefore before you start AV...

Page 44: ... operating system AVG Link Scanner This component uses a special driver that may require the computer restart in order to successfully update itself Therefore installing this component to a server environment is not recommended Note These exceptions do not apply if you only use a computer with some server operating system installed e g Windows Server 2000 2003 etc as a standard workstation without...

Page 45: ...ile name To continue click the Next button 4 4 Installation Method To continue in the Basic Mode leave the option Advanced mode unselected otherwise proceed to Advanced Mode chapter The dialog window offers the selection between two options for creating and using the installation script Remote network installation This option allows you to install AVG on stations available in the local network com...

Page 46: ...nstallation the wizard will first install and start the AVG Agent service on the target station then transfer the AVG installation files and process the installation accordingly Before you proceed please review the network requirements and exceptions regarding remote AVG installation You can find more detailed information on the ports settings in the Network Requirements chapter The remote install...

Page 47: ...be used Folder with the AVG installation package type in the full path to AVG installation package or use this button to select the proper folder If you have not downloaded the package yet click the Download button and use the wizard to download the installation file for you into the selected folder You can view the download progress above the Download button Proxy settings button If you need to u...

Page 48: ...ection string into the AVG DataCenter connection string field If applicable also enter the Username and Password If you do not want to manage the stations via the AVG Admin Console simply uncheck this option Add new station into group If you prefer to automatically add new station s into a custom group you can choose the group name here Custom update server if you already have an existing update s...

Page 49: ... will allow you to choose a specific range of IP addresses Import stations from file a new dialog will appear and you will be able to choose a file with a list of stations to be scanned Such a list can be generated for example from an older version of AVG Remote Administration 7 5 but since the source text file contains one station name or an IP address per line you can also create the file yourse...

Page 50: ...option will prevent the password from being displayed on your computer s monitor Note The installation process on the station is hidden i e a logged user will not be able to interfere with the installation progress Warning AVG remote installation can be performed only on stations with the supported operating system installed See the full list of supported operating systems in the Operating Systems...

Page 51: ...tallation is successful the AVG Agent will be removed and therefore the installation log will not be possible to retrieve Export stations without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in the list and the Install button will become active Select stations without AVG will select...

Page 52: ...r You need to specify the scanning range by entering the IP addresses here In the From field enter a starting IP address and in the To field enter an ending address Click the Add button to add the address range into the list To delete a range from the right list simply select the items you wish to remove and click the Remove button Once you finish selecting the IP ranges click the Next button to c...

Page 53: ...ble to retrieve Export stations without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in the list and the Install button will become active Select stations without AVG will select only stations that do not have AVG already installed or where AVG could not be detected The Refresh butto...

Page 54: ...ur choice The source file format contains one station name per line in simple text format Once done the Station selection window will appear Right click to view additional options Retrieve the installation log this option will try to obtain the installation log from the station if available Note If AVG installation is successful the AVG Agent will be removed and therefore the installation log will...

Page 55: ...ing them again Continue to the Remote network installation final steps chapter and complete the remote installation process 4 5 4 Select a Single Station If you choose to install AVG remotely only on a single station the following dialog will appear Click either the Computer name or IP address field and fill in the proper name or IP address Confirm your choice by clicking the OK button The process...

Page 56: ...without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in the list and the Install button will become active Select stations without AVG will select only stations that do not have AVG already installed or where AVG could not be detected The Refresh button will reload the state of all s...

Page 57: ...Once done the Station selection window will appear Right click to view additional options Retrieve the installation log this option will try to obtain the installation log from the station if available Note If AVG installation is successful the AVG Agent will be removed and therefore the installation log will not be possible to retrieve Export stations without AVG to a file this option will create...

Page 58: ...ip when pointing to a station in the list for a few seconds The tool tip contains an overview of the station state and other details Once you are ready to proceed select the desired stations and click on the Install button to begin remote installation If you selected only some stations from the list AVG installation will be performed on these stations only Otherwise installation will be performed ...

Page 59: ...n was successful however it may take some time to process Once all your stations receive the installation files and finish the installation process you will be able to leave this dialog by clicking the Next button Note You can later review recently installed stations from the AVG Admin Console either in the Stations New stations or in the group chosen during the Remote administration settings dial...

Page 60: ...g the settings at the very beginning Click Finish button to close the wizard 4 7 Creation of AVG Installation Script Selecting the Creation of AVG installation script option the wizard will create an installation script in a selected directory The content of the directory can then be used for installation from CD network folder or copied directly to a station This option does not offer the possibi...

Page 61: ...ption Click Next to continue During this step it is necessary to define the following installation parameters License information type in the license data such as Name Company and License number mandatory value If you wish to use the Windows username for the Name field do not select the respective check box and leave the default system settings to be used ...

Page 62: ...e Proxy settings button License number change Use this button to input a new license number to be used for remote installations of AVG The following options are available in this step Note If you are unsure about these settings we recommend keeping the default ones Remote administration Enter the AVG DataCenter connection string to the AVG DataCenter connection string field If applicable also ente...

Page 63: ...ation define these options Select folder where the installation script file will be stored Tick this checkbox and choose a custom directory for storing the installation script Create a subfolder for AVG 9 0 installation files Tick this checkbox if you prefer AVG setup files to be stored in a subfolder Create the AUTORUN INF file If you plan to put your script on a CD DVD or USB Flash disk from whi...

Page 64: ...where you will execute it and therefore script would not work This step contains a preview of both setup and configuration files The first tab contains information about the setup file and the second contains information about the presets If you have not done so already fill in the output path in the Select folder where the script will be stored section Click the Create script button to compile an...

Page 65: ...xamples To use the script saved to a folder 1 Copy the whole contents of the previously chosen folder to your station Note If you used a network folder for storing the script you can navigate to that folder directly over the network 2 On the station navigate to this folder and run the AvgSetup bat file 3 The command line window will appear and the installation will begin 4 Once the installation is...

Page 66: ... s operating system and you chose to create the autorun inf file during script preparation the installation will start automatically 3 If not open the removable device disk letter and run the AvgSetup bat file manually 4 The command line window will appear and the installation will begin 5 Once the installation is completed the window will close automatically ...

Page 67: ...avior according to their own needs The wizard can be launched in two ways From the Windows Start menu All Programs AVG 9 0 Remote Administration AVG Network Installer Wizard From the AVG Admin Console environment upper menu Tools Install AVG on stations The wizard can be run either in the Basic or Advanced mode You can select the Advanced mode by selecting the option Advanced mode in the second st...

Page 68: ...ation file available in the final step you can load the settings now by choosing the Load settings button To revert to the original settings preset by default press the Default settings button During the whole installation process you can decide to save the configuration progress at any time by pressing F2 key or CTRL S combination A new dialog will appear allowing you to choose a configuration fi...

Page 69: ... installation script Remote network installation This option allows you to install AVG on stations available in the local network computers selected from the domain Active Directory according to IP ranges imported from a list etc You can also use this option for removing stations from a former AVG Datacenter and transferring them to a new one Creation of AVG installation script This option allows ...

Page 70: ...ion then transfer the AVG installation files and process the installation accordingly Before you proceed please review the network requirements and exceptions regarding remote AVG installation You can find more detailed information on the port settings in the Network Requirements chapter The remote installation is not automatically possible on stations with Windows XP Home Please see the Windows X...

Page 71: ...used Folder with the AVG installation package type in the full path to the AVG installation package or use this button to select the proper folder If you have not downloaded the package yet click the Download button and use the wizard to download the installation file for you into the selected folder You can view the download progress above the Download button Proxy settings button If you need to ...

Page 72: ... components that can be either installed or uninstalled From the list of components select o Components that should be installed and mark them like this o Components that should be uninstalled or not installed and mark them like this o The default settings will be used for components that you leave blank Remote AVG uninstallation allows AVG removal Install AVG Security Toolbar choose to install AV...

Page 73: ...ld be a running e mail client or an internet browser Disable the default scan the default settings for weekly scanning will be disabled Run the First scan as a part of next scheduled scan the first optimization scan will be run with the first scheduled scan Reboot the computer after finishing AVG 9 0 setup if needed in certain cases Firewall component installation for example a computer restart ma...

Page 74: ...lay before the restart will take place The default value is ten minutes Note This option is not supported in MS Windows 2000 In the Setup properties section you can choose from the following options Where to install if you prefer a customized target location for installation you can choose it by entering the path here We recommend keeping the default settings Setup language choose a default custom...

Page 75: ...u prefer to automatically add new station s into a custom group you can choose the group name here Custom update server if you already have an existing update server that you would like to use for your stations check this checkbox and fill in its address now The AVG Agent settings section contains the following options The Log Level option allows you to specify the logging detail level Errors only...

Page 76: ...tation once AVG is successfully installed Delete service AVG Agent also on stations where the AVG Agent service have to be installed manually this option will automatically remove the AVG Agent once AVG is successfully installed also from stations where the AVG Agent cannot be installed automatically not recommended The right part of the section offers the following options Ping number of ping ope...

Page 77: ...range this option will allow you to choose a specific range of IP addresses Import stations from file a new dialog will appear and you will be able to choose a file with a list of stations to be scanned Such a list can be generated from an older version of AVG Remote Administration 7 5 The source text file contains one station name or an IP address per line More information about this topic can be...

Page 78: ...puter s monitor Check AVG version from AVG DataCenter check this option if you want the wizard to try obtaining information about AVG version on each station from the AVG DataCenter if available Fill into the Maximum time since the last station was contacted field a value in hours that will indicate the maximum time since the last contact with such station Warning AVG remote installation can be pe...

Page 79: ...is successful and the option Delete AVG Agent after AVG is installed is enabled Detailed installation options step the AVG Agent will be removed and therefore the installation log will not be possible to retrieve Export stations without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in...

Page 80: ...an IP range the following dialog will appear You need to specify the scanning range by entering the IP addresses here In the From field enter a starting IP address and in the To field an ending address Click the Add button to add the address into the list To delete a range from the right list simply select the items you wish to remove and click the Remove button Once you have finished selecting th...

Page 81: ...nd therefore the installation log will not be possible to retrieve Export stations without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in the list and the Install button will become active Select stations without AVG will select only stations that do not have AVG already installed o...

Page 82: ...ontains one station name per line in simple text format Once done the Station selection window will appear Right click to view additional options Retrieve the installation log this option will try to obtain the installation log from the station if available Note If AVG installation is successful and the option Delete AVG Agent after AVG is installed is enabled Detailed installation options step th...

Page 83: ...list by scanning them again Continue to the Remote network installation final steps chapter and complete the remote installation process 5 3 4 Select a Single Station If you choose to install AVG remotely only on a single station the following dialog will appear Click either the Computer name or IP address field and fill in the proper name or IP address Confirm your choice by clicking the OK butto...

Page 84: ...ll not be possible to retrieve Export stations without AVG to a file this option will create a file with list of stations that do not contain AVG installation Select all stations will select or unselect all stations in the list and the Install button will become active Select stations without AVG will select only stations that do not have AVG already installed or where AVG could not be detected Th...

Page 85: ...for searching Once done the Station selection window will appear Right click to view additional options Retrieve the installation log this option will try to obtain the installation log from the station if available Note If AVG installation is successful and the option Delete AVG Agent after AVG is installed is enabled Detailed installation options step the AVG Agent will be removed and therefore ...

Page 86: ...ation final steps Additionally you may display a so called tool tip when pointing to a station in the list for a few seconds The tool tip contains an overview of the station state and other details Once you are ready to proceed select the desired stations and click on the Install button to begin remote installation If you select only some stations from the list AVG installation will be performed o...

Page 87: ...n was successful however it may take some time to process Once all your stations receive the installation files and finish the installation process you will be able to leave this dialog by clicking the Next button Note You can later review recently installed stations from the AVG Admin Console either in the Stations New stations or in the group chosen during the Remote administration settings dial...

Page 88: ...e settings at the very beginning Click Finish button to close the wizard 5 5 Creation of AVG Installation Script Selecting the Creation of AVG installation script option the wizard will create an installation script in the selected directory The contents of the directory can then be used for installation from CD network folder or copied directly to a station This option does not offer the possibil...

Page 89: ... Edition 2010 C opyright A V G T echnologies C Z s r o A ll rights reserved 89 The first step contains an overview of this option Click Next to continue During this step it is necessary to define the following installation parameters ...

Page 90: ...izard to download the installation file for you into the selected folder You can observe the download progress above the Download button Proxy settings button If you need to use a proxy server to connect to the Internet you can fill in the proxy server details by clicking the Proxy settings button License number change Use this button to input a new license number to be used for remote installatio...

Page 91: ...uninstalled or not installed and mark them like this o The default settings will be used for components that you leave blank Remote AVG uninstallation allows AVG removal In the Setup parameters section you can choose from the following options Quit setup if AVG 9 0 is already installed the remote administration will not proceed when AVG 9 0 is already present on the target station Kill all running...

Page 92: ...isible on the station o show installation wizard the installation will be visible on the station and the currently logged user will need to manually confirm all steps Display a notification message regarding scheduled system restart on the remote computer If the previous checkbox is checked you can also define a delay before the restart will take place The default value is ten minutes Note This op...

Page 93: ...tion string into the AVG DataCenter connection string field If applicable also enter the Username and Password If you do not want to manage the stations via the AVG Admin Console simply uncheck this option Add new station into group If you prefer to automatically add new station s into a custom group you can choose the group name here Custom update server if you already have an existing update ser...

Page 94: ...must be ini In the Setup files location define these options Select folder where the installation script file will be stored Tick this checkbox and choose a custom directory for storing installation script Create a subfolder for AVG 9 0 installation files Tick this checkbox if you prefer AVG setup files to be copied to and stored in a subfolder Create the AUTORUN INF file If you plan to put your s...

Page 95: ...h will be most likely different on the target station where you will execute it and the script would not work This step contains a preview of both setup and configuration files The first tab contains information about the setup file and the second contains the presets If you have not done so already fill in the output path in the Select folder where the script will be stored section Click the Crea...

Page 96: ...e the two most common examples To use the script saved to a folder 1 Copy the whole content of the previously chosen folder to your station Note If you used a network folder for storing the script you can navigate to that folder directly over the network 2 On the station navigate to this folder and run the AvgSetup bat file 3 The command line window will appear and the installation will begin 4 On...

Page 97: ... enabled in the station s operating system and you chose to create the autorun inf file during script preparation the installation will start automatically 3 If not open the removable device disk letter and run the AvgSetup bat file manually 4 The command line window will appear and the installation will begin 5 Once the installation is completed the window will close automatically ...

Page 98: ...VG Admin Console navigate to the Windows start menu and select Start All Programs AVG 9 0 Remote Administration AVG Admin Console Alternatively you can go to your Program files folder usually c Program Files select folder AVG AVG9 Admin Console and double click AVG9AdminConsole exe During startup the AVG Admin Console automatically tries to connect to the last used AVG DataCenter If the connection...

Page 99: ...r where the AVG Admin Server runs port is the AVG Admin Server port number The default port value is 4158 If the AVG Admin Server uses this default number it is not necessary to include the number into the communication string If the DataCenter is password protected you must fill in the Login name and Password into the appropriate fields Without correct password and or login name you will not be a...

Page 100: ...lowing users to move or enable disable individual panels according to their needs Within the default view all six panels are visible in addition to a navigation toolbar and upper menu 6 2 1 Upper Main Menu The upper menu contains the following menu items DataCenter menu The DataCenter menu offers the following options Connect to AVG DataCenter Allows user to select a different DataCenter AVG DataC...

Page 101: ...g the scan results from stations The default value is 30 days In the next section choose how you wish to secure your AVG DataCenter access Free access default settings that will allow anyone to access the AVG DataCenter no password is needed Simple password protection will open a new dialog where you can choose a custom password the same password must be entered into both fields for verification T...

Page 102: ...e original position of all panels use the Default position of panels item The panels will be restored after you restart the application Non compliance conditions Here you can choose which conditions on a station are to be considered as non compliant According to your selection the non compliant stations will then be highlighted in red within all available views Use the Exceptions button to define ...

Page 103: ... choose a required font size for the views the default value is 11 In the Advanced view options section choose the following o Display all columns in one tab check this checkbox to group all columns into one tab for easier access to all information o Display number of rows in the navigation tree if enabled every item in the navigation tree will contain a number in brackets reflecting the number of...

Page 104: ...versions Refresh refreshes all records displayed in the current view section you can use F5 keyboard button to do so as well Refresh row count in the navigation tree updates the number of rows reflected in brackets within the navigation tree Export the current view contents Allows you to save the current view for example list of stations into a csv comma separated values file which can be easily i...

Page 105: ...a dialog for editing the shared configuration for Firewall For detailed information on Firewall shared settings please refer to chapter Configuration Shared Firewall Settings Shared settings for application servers opens a dialog for editing the shared configuration for stations with an application server installed For detailed information on these shared settings please refer to chapter Configura...

Page 106: ...heck the Check for updates during startup checkbox Download latest documentation opens your default Internet browser with the AVG website documentation download page Download AVG Rescue CD opens your default Internet browser with the AVG website Rescue CD download page In order to download the product you will need to insert your license number for AVG Rescue CD About AVG Admin Console displays th...

Page 107: ...ologies C Z s r o A ll rights reserved 107 Within the navigation tree you will find the following sets Stations Servers Scan results Events Notifications Graphic reports Licenses Pending requests You can find descriptions of individual items in their respective chapters ...

Page 108: ...cord You can select more records at the same time press the CTRL key adding a new record to the current selection or the SHIFT key selecting all records between the first and the last highlighted record Click the mouse right button over the selected record to open the Context menu It is possible to call various actions related to the current selection from the Context menu To select only specific ...

Page 109: ...hen type in the station name or part of its name You will experience the highlighted results just as you type Use F3 keyboard button to jump to the next search result 6 2 4 Status Panel In this part of the AVG Admin Console main window you can find various system notices and information on the application functionality communication with AVG stations detected problems positive scan results warning...

Page 110: ...s From the drop down menu select what type of messages you wish to display In the Recipient Sender section there two checkboxes Checking the upper one only from sender gives you access to the context menu that allows you to select a unique sender whose messages will be displayed in the Status window panel After checking the lower one only for recipient containing you can choose to show only messag...

Page 111: ...ed by default in the right part of the screen If the panel is not visible you can activate it by clicking on the Quick Help item in the View Panels menu 6 2 6 Filter Panel The Filter panel contains a list of filtering options available for the current view The list will become active only if there are any filters available for the selected view Description of individual filters can be found in the...

Page 112: ...n requirements needed for successful synchronization 6 3 1 Station Settings Synchronization During the synchronization of station settings mandatory settings are transferred from the DataCenter to the station non mandatory settings are transferred from the Station to the DataCenter The synchronization is performed periodically By default the settings synchronization process is done every 60 minute...

Page 113: ...gs from the context menu 6 3 2 Scan Results Synchronization This synchronization process sends data from the station to the AVG DataCenter It takes place every time the station powers on goes online at the latest within 20 minutes immediately after scan completion or after an infection is detected by the Resident Shield immediately or latest within 20 minutes when there is a scan result modificati...

Page 114: ...tions contains stations that are in an non standard state i e don t comply to predefined conditions Stations with AVG Firewall contains a list of stations that have the Firewall component installed New Stations contains only stations that have not been assigned to any administrator defined group yet More detailed information on each group can be found in the following chapters In the current view ...

Page 115: ...tions are as follows The AVG version is outdated a station will be considered as non compliant if the AVG version on the station is not up to date Virus database version is outdated a station will be considered as non compliant if the virus database is not up to date on the station The virus database release date is older than if used stations with the virus database older than the entered interva...

Page 116: ...cheduled scan for a long time Can be specified in either hours or days The following button is available Exceptions allows you to define groups excluded from the selected rules Confirm your choice by clicking the OK button or close it by pressing Cancel 6 4 2 Stations with AVG Firewall The Stations with AVG Firewall group contains a list of all network stations with firewall enabled Double click y...

Page 117: ... that you want to filter out Station domain Insert a custom station domain name that you want to filter out IP address of station Insert a custom station IP address that you want to filter out Station operating system Insert a custom operating system name or its part that you want to filter out For example to display only all stations with Windows XP installed input the following string XP Infecte...

Page 118: ...application server installed In the current view section you can then find information related to specific stations Using the tabs the information is divided into several categories Servers tab Contains general information about each station name domain group last contact etc Details tab Displays additional information regarding the stations including IP address MAC address operating system restar...

Page 119: ...e group o No access the chosen user account will have no access to the group at all Synchronize settings will ask all stations in the group for immediate synchronization of settings Ask to perform program update will ask all stations in the group to start the program update process Ask to perform virus database update will ask all stations in the group to start the virus database update process As...

Page 120: ... the Configuration Shared Settings for Application Servers chapter 6 5 3 Filtering You can apply various listing filters to the current view The filters are available by default from the bottom left Filter panel The Filter panel is located by default in the bottom left part of the screen If the panel is not visible you can activate it by clicking on the Filter window item in the View Panels menu W...

Page 121: ...box next to its name or right click in the filters window and from the context menu select Switch off all filters Note All filters are case insensitive 6 6 Scan results This item offers an overview of all scan results including results from the Resident shield or Online Shield on stations together with detailed information related to specific scans The scan results are by default regularly retriev...

Page 122: ...ditionally to view specific scan results simply double click the requested line or from the right click context menu select Scan result details option A new window will appear Depending on the viruses found more tabs may be displayed Each tab contains a list of findings i e Infections Spyware etc On each tab the following options are available Confirm this button will mark the test result as confi...

Page 123: ...ion for the selected finding s AVG will then ignore the file and will not report it anymore If the station is active the requested operation s will be done immediately after the request If the station is not currently active i e is not connected to the AVG Datacenter all pending operations will be processed next time the station connects Once you request an action then if the AVG station is active...

Page 124: ...isplay also Station01 Station02 etc The filtering options for Scan results are as follows Note To use a filter simply tick the checkbox next to its name and double click the line to insert a value The results will be displayed immediately Station name Insert a custom station name that you want to filter out Station description Insert a custom station description that you want to filter out Scan na...

Page 125: ...e available by default from the bottom left Filter panel The Filter panel is located by default in the bottom left part of the screen If the panel is not visible you can activate it by clicking on the Filter window item in the View Panels menu Within the text filters you can use simple wildcard asterisk character The wildcard character substitutes for any character or a string For example Stat str...

Page 126: ... case insensitive 6 8 Notifications The Notifications item allows you to select from predefined notification actions These notifications once set can inform an administrator via e mail about different events within the AVG Admin Console Note Proper dispatch of e mail notifications requires correct SMTP server definition on the Configuration AVG Admin Server Settings E Mail tab To activate a notifi...

Page 127: ...receive an e mail once the above mentioned parameters or the condition generally is met You can also select a period in which the condition should be checked Check the Group multiple findings into a single message checkbox if you want to customize number of event occurrences that must occur before the notification message will be sent Certain notifications have also some Condition parameters avail...

Page 128: ...f The available fields are as follows To insert a message recipient address in the form example somedomain com Subject Notification header Notification body Notification footer Into these fields you can insert either custom text to be displayed within the message or use a macro to insert a variable To use a variable macro simply click Insert macro button located next to each message part ...

Page 129: ...G_LastCall last time the station contacted the AVG DataCenter AVG_WinVersion the version of MS Windows AVG_AvgVersion the AVG version on the station Antivirus_Version the version of the antivirus database AVG_StationDesc the description of the station AVG_Installtime installation time AVG_Infected number of unremoved infections AVG_ScanStarted start of a scan 6 9 Graphic Reports Note As Graphic re...

Page 130: ...mplates will not be exported or imported Once you import your former exported data Graphic reports will not be available until you restart the AVG Admin Server 6 9 1 Report Templates There are some predefined templates that can be quickly used for report generation Some templates allow you to set additional parameters for more precise reports To create a report directly from this menu right click ...

Page 131: ...Most viruses This report shows the top viruses of all stations Available parameters Viruses count in report limit the number of viruses in the report 0 unlimited Time interval specify the time interval for selecting data last day last week last month last year unlimited Type of Chart choose the requested chart type default selection is pie chart Virus scan report This report shows the status of vi...

Page 132: ...ick context menu Edit opens an edit dialog for the selected schedule Define a new schedule will start the wizard for creating a new report schedule The Report Schedule is active use this function to activate or disable selected report s Remove removes selected reports from AVG DataCenter By default there are no schedules available To prepare a new scheduled report right click in the Report schedul...

Page 133: ...10 C opyright A V G T echnologies C Z s r o A ll rights reserved 133 Fill in the Name and Description Proceed to the next dialog by pressing the Next button From the rollover menu select which template you want to use for your scheduled report ...

Page 134: ...arameters available for the selected report fill in the requested values or leave the default values For more information on templates see the Report templates section above Once ready press the Next button In this dialog choose whether you want to generate the report only once in the selected time or to generate the report periodically ...

Page 135: ...Admin Server E mail tab Click on the AVG Admin Server settings to configure the SMTP E mail settings now Note To learn more about configuring the AVG Admin Server settings for sending E mail see the E mail tab topic in the Configuration AVG Admin Server Settings chapter If you have already previously configured the E mail tab in the AVG Admin Server configuration you should see predefined values a...

Page 136: ...ight buttons at the top of the screen By clicking the printer icon located in the top left corner you will open the standard Windows print dialog where you can choose to print the report on a printer s or produce a PDF file if available If you prefer to export the report to a file use the Report Save menu item The confirmation dialog will appear where you can choose which output format you prefer ...

Page 137: ...ext menu select Switch off all filters Note All filters are case insensitive 6 10 Licenses This item offers an overview of all license numbers used It allows you to easily monitor all existing license numbers and add or update license number for individual or multiple stations 6 10 1 Shared Settings In the view you will see the list of all groups including the custom ones You have the following op...

Page 138: ...nding requests sent from the AVG Admin Console You can also delete them by right clicking on them and selecting Delete selected requests from the context menu 6 11 1 Filtering You can apply various listing filters to the Pending requests view The filters are available by default from the bottom left Filter panel The Filter panel is located by default in the bottom left part of the screen If the pa...

Page 139: ...ion name to be filtered out From Insert a custom date and time value that you want to filter out To Insert a custom date and time value that you want to filter out To disable a filter simply uncheck the checkbox next to its name or right click in the filters window and from the context menu select Switch off all filters Note All filters are case insensitive ...

Page 140: ...VG Admin Server can serve as a proxy server for downloading and distributing updates to your stations within the local network by deploying the UpdateProxy role It basically works as a simple web server offering the update files to AVG stations The update files are downloaded from the AVG central update servers just once which significantly decreases the internet connection link load especially in...

Page 141: ...oyment Wizard Lite only allows deployment of the UpdateProxy role AVG Network Installer Wizard Lite only allows AVG Installation Script creation In order to install and use only the AVG Admin Lite features you must have chosen the Lite Installation option during the AVG 9 0 Anti Virus Business Edition installation process For more information see chapter Installation type 8 1 AVG Admin Deployment ...

Page 142: ...an overview of the configuration that is going to be deployed on your server Basically only the UpdateProxy role will be deployed to your server The UpdateProxy role serves as a proxy server for downloading and distributing updates to your stations The wizard will also create the update folder on the C drive by default or drive that is indicated in your overview ...

Page 143: ... C opyright A V G T echnologies C Z s r o A ll rights reserved 143 8 1 2 Completion If everything went smoothly you will see a dialog similar to the one above Click Finish to close the Wizard and continue to the AVG Network Installer Wizard Lite ...

Page 144: ...t A V G T echnologies C Z s r o A ll rights reserved 144 8 2 AVG Network Installer Wizard Lite The AVG Network Installer Wizard Lite will quickly guide you through the AVG script creation process The script can then be used to install AVG on your stations ...

Page 145: ... 145 8 2 1 Installation Settings Fill in the requested values License number is a mandatory field that must be filled in Alternatively you may check the Name and or Company checkboxes and fill in the appropriate values Use the License number change button to input a new license number for AVG installations ...

Page 146: ...ernet once you click the Next button In such a case please make sure your Internet connection is available You can choose one of the following Portable data storage medium USB drive If you have not done so already insert a removable USB device Flash drive portable hard drive etc and hit the Refresh button to see the device in the drop down list Make sure the drive is not write protected Folder Sel...

Page 147: ...a network folder for storing the script you can navigate to that folder directly over the network 2 On the station navigate to this folder and run the AvgSetup bat file 3 The command line window will appear and the installation will begin 4 Once the installation is completed the window will close automatically To use the script from a removable device 1 Insert the removable device to your station ...

Page 148: ...148 manually 4 The command line window will appear and the installation will begin 5 Once the installation is completed the window will close automatically Note You may also consider creating and distributing an AVG installation clone For more information please consult the AVG Settings Manager chapter below ...

Page 149: ... installation of AVG and available via Windows Start menu All Programs AVG 9 0 AVG Settings Manager Edit AVG configuration of this computer Use this button to open dialog with advanced settings of your local AVG All changes made here will be reflected also to the local AVG installation Load and edit AVG configuration file If you already have an AVG configuration file pck use this button to open it...

Page 150: ...ion and confirm your choice Answer No to skip the password creation and continue to save the local AVG configuration to a file Clone AVG installation This option allows you to make a copy of the local AVG installation by creating an installation package with custom options The clone includes most of the AVG settings with the exception of the following o Language settings o Sounds settings o Firewa...

Page 151: ... the selected folder or manually put the AVG installation package into that folder You can use the Proxy button to define a proxy server settings if your network requires this for a successful connection By clicking OK the cloning process begins and should shortly finish You may also experience a dialog asking about setting password to Allowed items see above Once finished there should be AvgSetup...

Page 152: ...more detailed information on other items configuration we recommend you to consult the AVG Internet Security User Guide available to download from http www avg com or the context help available via the nice question mark button Note You can use Default button to restore the original settings of the current dialog 10 1 1 General control and priority levels All setting values applicable for stations...

Page 153: ...rity which means that all items set as mandatory in higher levels mentioned above cannot be changed there Individual settings for stations can be accessed from the Stations item and then double clicking the requested station name By default mandatory items are displayed as bold and can be easily changed by right clicking on the certain item s lock icon and choosing from the context menu Mandatory ...

Page 154: ...ou can set the events parameters using the sub tree items You can also select from the roll down menu the language you prefer to display the default texts of rules The sub tree items are as follows Sending to e mail This sub tree item enables you to specify which types of events should be sent to the specified e mail address Available events are shown in the dialog mark the respective checkbox to ...

Page 155: ...g This sub tree item enables you to specify which types of events should be written to the NT event log of the specific station Available events are shown in the dialog mark the respective checkbox to include the event Double clicking an event will open a new dialog where you can customize ID severity and message text Clicking the Insert macro button will open list of macros that you can apply dir...

Page 156: ...vault object removed Virus vault object restored Threat found Scan started Scan finished Update started Update checked Update finished AVG Startup AVG shutdown AVG component was unexpectedly terminated License number changed Identity Protection a malware was detected Identity Protection the allowed list was changed Identity Protection an object was restored from the quarantine ...

Page 157: ...synchronize every selected period i e will try to find out if anything new is available and transfer changes only Retrieve messages from server every choose how often you wish the requests invoked from AVG Admin Console to be retrieved from the server Synchronize firewall settings If you do not require Firewall settings synchronization we recommend to switch it off to reduce the data flow and ease...

Page 158: ...sible from the Remote Administration item in the main tree as Allowed actions By unchecking the following checkbox es you can forbid use of the feature for user on the station Change of the license number if unchecked it will disallow users on the station to change the license number Advanced settings dialog access if unchecked it will disallow users on the station to open and edit advanced settin...

Page 159: ...r entering password click on the Activate password for access to unallowed actions and in the new dialog fill in a new password twice for verification The password will be required every time the user tries to access the disallowed action Similarly you can enable the user on a station to change mandatory settings To do so check the Activate password for modification of mandatory settings checkbox ...

Page 160: ...Admin Console You can set the following options Owner name enter a required name of the owner Company enter a required company name License number enter a required license number 10 1 6 Configuration copying You can copy predefined Schedules configuration from the Shared settings for stations Groups or from settings for a single station to a group multiple groups or shared settings ...

Page 161: ...Business Edition 2010 C opyright A V G T echnologies C Z s r o A ll rights reserved 161 In the left tree right click on the chosen subitem under Schedules item and from the context menu choose Copy to A new dialog will appear ...

Page 162: ...red settings for application servers or Application servers If you select Stations option the from group drop down menu will become available where you can choose a group from which the stations will be listed Then select individual stations into which you wish to copy the configuration The checkbox Set mandatory flag for the target object serves for marking the setting as mandatory If left unchec...

Page 163: ... computer or choose to Scan specific files or folders The second option allows you to select custom sections that you wish to scan Local hard drives Loc All local fixed drives will be scanned My Documents folder Doc The following location will be scanned C Documents and Settings current user Where current user represents a user logged during the scanning process Shared Documents DocAll The followi...

Page 164: ... name Temporary Internet Files Web The MS Internet Explorer cache directory will be scanned C Documents and Settings user Local Settings Temporary Internet Files Where user represents an user profile name Warning Since all scheduled scans run under SYSTEM user account it is currently not possible to scan some locations properly namely Web Temp or Doc due to Windows security policy 10 1 8 Moving va...

Page 165: ... item To transfer the chosen setting to other group settings click OK or Apply button Please note If you change the value of the setting or amend its status before you click OK or Apply button the changes will be lost and the configuration will not be copied Analogically you can process the Shared settings for application servers and move selected configuration to all servers The context menu item...

Page 166: ...y In any other group it will be set as monitored This can be used to easily remove the mandatory flag from all the groups at once You can similarly process the individual server settings within the application servers and move the selected configuration to the Shared settings for application servers The context menu item is named Move value to the Shared settings 10 1 9 Anti Spam If you deploy Upd...

Page 167: ...ared settings To do so navigate to the AVG Admin Console upper menu Tools Shared settings for stations item Then select Anti Spam Advanced Settings Internet connection In the Proxy server dialog insert your AVG Admin Server address including port number default value is 4158 If your AVG Admin Server uses username and password open also the Proxy authentication dialog and input the correct username...

Page 168: ... Shared Firewall Settings This dialog allows you to define shared settings for stations Most of the options are exactly the same as on the station therefore if you require more detailed information on individual item configuration we recommend consulting either the context help or the AVG Internet Security User Guide available to download from http www avg com The following subchapters describe Fi...

Page 169: ...outside network traffic is available Emergency mode will block all traffic including local network You can set the whole configuration as mandatory by checking the Set whole configuration as mandatory checkbox available in the General information dialog Additionally you can set certain individual or all settings within profiles as mandatory to do so simply select the required profile and in the ma...

Page 170: ...individual stations and groups Note The bold highlighted profile name does indicate that the profile is set as mandatory The profile settings mandatory monitored status can be verified or changed in the Areas and Adapters profiles section above Warning If you delete all predefined profiles except for Allow all and Block all and keep no profile active mandatory the station will once synchronized us...

Page 171: ...A V G 9 0 A nti V irus Business Edition 2010 C opyright A V G T echnologies C Z s r o A ll rights reserved 171 ...

Page 172: ...uration of other items we recommend you to consult the AVG E mail Server Edition User Guide available to download from http www avg com or the context help available via the nice question mark button Note You can use Default button to restore the original settings of the current dialog 10 3 1 Overview Basic overview of the individual server components Anti Spam Server for MS Exchange Checks all in...

Page 173: ...h EDGE and HUB roles E mail Scanner for MS Exchange VSAPI Checks all e mail messages stored in user mailboxes If any viruses are detected they are moved to the Virus Vault or completely removed Document Scanner for MS SharePoint download to from the Sharepoint server If any viruses are detected they are moved to the Virus Vault or completely removed 10 3 2 Anti Spam Server for MS Exchange Options ...

Page 174: ...ins the following options Enable component uncheck to disable the whole component Language select preferred component language Certify messages check this if you wish to add a certification note to all scanned messages You can customize the message in the next field The Logging settings section Log file size choose a preferred size of the log file Default value 100 MB The Scanning properties secti...

Page 175: ... the default configuration which can be easily amended in the Detection actions section part Information see below The following options are available Report password protected archives Report password protected documents Report files containing macro Report hidden extensions There are also these sub items available in the following tree structure Detection actions Mail filtering 10 3 4 E mail Sca...

Page 176: ...settings section Log file size choose a preferred size of the log file Default value 100 MB The Scan settings section Background Scan you can enable or disable the background scanning process here Background scanning is one of the features of the VSAPI 2 0 2 5 application interface It provides threaded scanning of the Exchange Messaging Databases Whenever an item that has not been scanned with the...

Page 177: ...will try to download a message with the MS Outlook client Scan RTF you can specify here whether the RTF file type should be scanned or not Number of Scanning Threads the scanning process is threaded by default to increase the overall scanning performance by a certain level of parallelism You can change the threads count here The default number of threads is computed as 2 times the number_of_proces...

Page 178: ...s should be reported during scanning The default configuration can be easily amended in the Detection actions section part Information see below The following options are available Report password protected archives Report password protected documents Report files containing macro Report hidden extensions There are also these sub items available in the following tree structure Detection actions Ma...

Page 179: ...on Use Heuristics check this box to enable heuristic analysis method during scanning Report Potentially Unwanted Programs and Spyware threats check this option to report the presence of potentially unwanted programs and spyware Scan inside archives check this option to let the scanner look also inside archived files zip rar etc The Reporting section allows you to choose which items should be repor...

Page 180: ... Report password protected documents Report files containing macro Report hidden extensions There is also the following sub item available in the tree structure Detection actions 10 3 7 Detection Actions In the Detection actions sub item you can choose automatic actions that should take place during the scanning process The actions are available for the following items Infections ...

Page 181: ...lt the given threat will be moved to Virus Vault Remove the given threat will be removed To select a custom subject text for messages that contain the given item threat check the Mark subject with box and fill in a preferred value Note The last mentioned feature is not available for E mail Scanner for MS Exchange VSAPI and Document Scanner for MS Sharepoint settings 10 3 8 Mail Filtering In the Ma...

Page 182: ...Settings The AVG Admin Server Monitor is a part of the AVG Admin Server installation The AVG Admin Server Monitor displays an icon on the system tray and the icon s color indicates the AVG Admin Server status Double click on the icon to open the AVG Admin Server Monitor dialog with basic information on the server activities If there is no icon available you can start the AVG Admin Server Monitor f...

Page 183: ... Admin Server Monitor at startup not recommended 10 4 1 General tab This tab offers the following options License section Click the Change button to insert a new license number and or your personal company details This license number must correspond to the network license i e the remote administration support must be active Connection section Here you can change the port number and local address o...

Page 184: ...ould fill in a chosen username and password for access to the AVG DataCenter The values are optional but we recommend setting them up to increase security Note This username and password apply for connecting stations to the AVG DataCenter In other words these values must be correctly filled when connecting stations to the AVG DataCenter either via the AVG Network Installer Wizard or manually 10 4 ...

Page 185: ...d its usage is bound to the Microsoft SQL Server license To change the database name insert a custom value into the Database name field Oracle This engine can serve over 1000 stations in large networks It is not a standard part of AVG 9 0 Anti Virus Business Edition and its usage is bound to a commercial license MySQL This engine can serve over 1000 stations in large networks It is not a standard ...

Page 186: ...tings All users Application Data AVG9 Admin Server Data AutoDatabaseBackup The folders are named in the format YEAR MM DD TIME for easier differentiation 10 4 3 UpdateProxy tab This tab offers the following options Update files folder fill in a complete pathname e g c AVGUpdate to the directory where the downloaded update files will be stored Download source Contains list of available update serve...

Page 187: ...r only checked entries Download Anti Spam updates If you do not wish to download Anti Spam updates uncheck this option Note Anti Spam updates are downloaded directly from the Mailshell servers Additional information about the Anti Spam updates can be found in the Configuration Shared Settings for Stations Groups Anti Spam chapter Internet connection If you require a proxy server in your network yo...

Page 188: ...he Report Schedule Definition Wizard but all values you will enter here will be considered as default The Message header section contains these fields To specify one or more e mail addresses that the report s will be sent to Separate individual items by a comma This field can also be filled during Report Schedule definition Copy An optional value Specify one or more e mail addresses that the repor...

Page 189: ...rver configuration by the OK button However the changes are applied after the server launches again with the new configuration If the AVG Admin Server is running a dialog will prompt you to restart the server note that the server will be inaccessible for some time during the restart 10 5 Connection String Stations are connected to the AVG DataCenter via a so called connection string This string co...

Page 190: ...the right part of the dialog select Use proxy and define Manual or Auto configuration depending on your network settings Click OK to confirm the changes Wait until all stations have been synchronized Default synchronization period is 60 minutes Alternatively you can force immediate synchronization of all stations Right click on the Stations node and from the context menu select Synchronize setting...

Page 191: ...onize settings will ask for immediate synchronization of settings with stations Ask to perform program update will ask all stations to start the program update process Ask to perform virus database update will ask all stations to start the virus database update process Ask to rollback last anti virus database update will ask all stations to use the previous virus database version and disregard the...

Page 192: ...access to the group at all Shared settings for group opens shared settings for group Shared firewall settings for group opens shared Firewall settings for group Synchronize settings will ask for immediate synchronization of settings with stations Ask to perform program update will ask all stations to start the program update process Ask to perform virus database update will ask all stations to sta...

Page 193: ...station to start the virus database update process Ask to rollback last anti virus database update will ask the selected station to use previous virus database version and disregard the last one Delete temporary update files sends request to selected station s to remove temporary update files Ask for scan results will ask the selected station for scan results Show the infected test results will sh...

Page 194: ...ations are available online and which are not offline You will see each station s state in the column to the right of its name To check availability again press the Check again button or double click the station s name Station restart This dialog lets you restart the selected station Choose the preferred delay from the roll down menu Station description ...

Page 195: ... its description If available the description will be displayed in the Description column Show Virus vault will show the Virus vault content of the selected station Use the Refresh button to obtain the most current Virus Vault findings To work with individual threats use one of the following buttons o Restore select a threat or threats you wish to restore on the station and click this button o Del...

Page 196: ...vailable field To confirm and send the sample s click the Send button You can also save the chosen sample to a folder in an encrypted form with the Save button for later processing e g manual sending via e mail etc Note This function is available only for AVG 9 0 stations Show Firewall log will show the Firewall communication log from the selected station Show events of the selected station will s...

Page 197: ... use proxy server in your network fill in also your proxy server details by opening the Proxy settings dialog To complete the process click the Send button 10 7 2 Station Groups The administrator can define station groups as the need arises All objects included in the group then take the configuration set up for this group This way the administrator can define the group configuration and change th...

Page 198: ... over the name of the group that you want to delete o From the newly opened context menu select the Delete group item Using the same context menu you can also rename groups through the Edit group item Moving stations between groups You can quickly move one or multiple stations between individual groups To do so select one or more stations click left mouse button and while holding it drag the curso...

Page 199: ...ems with the remote administration installation connection even after reviewing the chapters below please try to find the correct answer in the FAQ Frequently Asked Questions located at http www avg com 11 1 How to Connect Stations to AVG Datacenter You have basically two options for connecting stations to your AVG DataCenter AVG Network Installer Wizard Manual connection 11 1 1 Connecting Station...

Page 200: ...site http www avg com Note You can also insert the AVG DataCenter connection string directly during AVG installation on the station To insert the string on the station open the AVG User Interface and navigate to the Advanced settings via upper menu Tools Advanced Settings Select Remote Administration group In the right part of the dialog fill in the following entries Server enter your AVG DataCent...

Page 201: ... Importing Stations and Settings from AVG DataCenter 8 5 Although the new version of AVG 9 0 Anti Virus Business Edition is backward compatible with the previous version you can also import AVG DataCenter 8 5 stations via the AVG Admin Deployment Wizard during creation of a new database Importing procedure 1 Prepare an export of your AVG DataCenter 8 5 To do so open AVG Admin Console 8 5 and from ...

Page 202: ...w AVG DataCenter 1 In the AVG Admin Console click on the upper menu DataCenter and select the Connect To AVG DataCenter item 2 Enter the new server address and port number alternatively also a username and password if required 3 Confirm your choice by clicking the OK button You can also export the whole existing content of your AVG DataCenter and then import it to the newly created one To do so fo...

Page 203: ...hronize the settings right click on the Stations node or a particular station in a stations view and from the context menu select All tasks Refresh component states and then open the Versions tab in the stations view Here you can see if all databases have been updated If the update went correctly but after some time the stations become out of date again check the following settings 1 From the uppe...

Page 204: ... number default is 4158 in your web browser For example http localhost 4158 In the UpdateProxy server role section you will find the UpdateProxy status as well as download upload statistics If this seems to be incorrect or you still think that there is an error try to deploy the UpdateProxy role of the AVG Admin Server again To do so run the AVG Admin Server Deployment Wizard again follow the step...

Page 205: ...to proceed with remote installation of AVG More information on remote installation can be found in the AVG Network Installer Wizard Basic Mode chapter 11 6 How to Change User Interface Language During installation of AVG you have the option to choose the user interface language you prefer If for some reason you need to use the application also in a different language you can change it by following...

Page 206: ...art AVG Admin Console in German language C Program Files AVG AVG9 Admin Console AVG9AdminConsole exe lng deu To start AVG Network Installation Wizard in German language C Program Files AVG AVG9 Admin Console AVG9NetworkInstaller exe lng deu To start AVG Admin Deployment Wizard in German language C Program Files AVG AVG9 Admin Console AVG9AdminServerWizard exe lng deu To start AVG Admin Server Moni...

Page 207: ...Scheduled scan item and in the right part of the dialog tick the User can stop a running task checkbox 11 8 Requests handling and status messages This chapter describes requests their handling and processing within AVG DataCenter Requests sent to a single station If a request is invoked from AVG Admin Console e g request for settings synchronization update performing etc a message appears in the S...

Page 208: ...er to individual stations of the chosen group Also the result is later displayed individually for each station Duplicated requests If a same request is sent multiple times to a station it is not stored in AVG DataCenter and the station will only process the first one This applies also to offline stations In other words there is no need to send more than one request since the duplicated requests ar...

Page 209: ...A V G 9 0 A nti V irus Business Edition 2010 C opyright A V G T echnologies C Z s r o A ll rights reserved 209 At the bottom of the dialog choose Full access control option A new dialog will appear ...

Page 210: ...tor with a blank password If you intend keeping this account for further use we strongly recommend to choose a proper password first see below how to do this The right mouse button context menu has the following options Active If you right click on an existing account name you will be able to activate or deactivate it by this function Please note that you need to have at least one account active N...

Page 211: ... Windows system login name Optionally you can add some account description Edit Account This option will allow you to edit an existing account Clone Account Right click on an existing account and choose this option to clone its settings into a new one You will be required to enter new account name password etc Delete Account This option will allow you to delete an existing account To each account ...

Page 212: ...r defined groups of stations Double click on one of these groups to trigger a drop down menu or right click on it to trigger the context menu with same contents Now choose the permission type You can give the user of the account the Full access to the group allow him her just to view the group by selecting Read only or completely forbid him her to access the group by choosing No access option 11 1...

Page 213: ...municated for more than 7 days from the AVG DataCenter Remove old Alert Manager events from the AVG DataCenter Choosing this script removes all Alert Manager events older than 7 days from the AVG DataCenter Check the scripts you are willing to apply and click Run scripts button to use them Please note that the database maintenance process may take a while You can also use the Load custom script bu...

Page 214: ...TALL Starts setup in reinstall mode HIDE Starts setup in silent mode PROGRESSONLY Starts unattended setup only dialogs with progress bars are displayed LOG log file path Specifies a path to the installation log file the path must exist Default value TEMP avg9inst log SCRIPT_FILE A complete path to a file with additional setup parameters NAME name An user name applicable during the registration dia...

Page 215: ...1B Slovak 0x41F Turkish 0x804 Chinese Simplified 0x404 Chinese Traditional 0x043E Malay 0x0421 Bahasa Indonesian 0x081A Serbian 0x040A Spanish Eventually all other Windows supported locale codes in the hexadecimal format can be used if the setup contains the proper language files ADD_FEATURE feature_name Adds a component feature to the installation The list of all available feature values is avail...

Page 216: ...application NORESTART Suppresses restart after installation Note AVG may not work properly until the restart takes place RESTART_DELAY time in seconds Displays countdown system dialog before restart if the restart is required applicable to silent installation as well UPDATE_SERVER servers_string An URL with update servers used by AVG Network Installer only DCPATH connection_string An connection st...

Page 217: ...rst Run Wizard CFGFILE_PATH path The path to the configuration settings file used by AVG Network Installer only MANDATORYONLY If used with CFGFILE_PATH parameter only mandatory items from the specified configuration file are stored to configuration used by AVG Network Installer only SKIP_ROLLBACK If an error occurs during installation AVG stays as is i e partially installed to allow better diagnos...

Page 218: ...VG Surf Shield fea_AVG_SafeSearch AVG Active Search Shield fea_AVG_IdentityShield AVG Identity Protection fea_AVG_AntiRootkit AVG Anti rootkit fea_AVG_AlertManager AVG Alert manager fea_AVG_SystemTools AVG System tools fea_AVG_Cl AVG Remote Administration library fea_AVG_SettingsManager AVG Settings Manager fea_AVG_Languages All languages fea_AVG_Language_CZ Czech fea_AVG_Language_FR French fea_AV...

Page 219: ...fea_AVG_Language_DA Danish fea_AVG_Language_US English US fea_AVG_Language_RU Russian fea_AVG_Language_KO Korean fea_AVG_Language_ID Bahasa Indonesian fea_AVG_Language_IN English Indian fea_AVG_Language_MS Malay fea_AVG_Language_TR Turkish fea_AVG_Language_ZT Chinese Simplified fea_AVG_Language_ZH Chinese Traditional fea_AVG_EmailPlugins AVG e mail plug ins fea_AVG_Bat_plugin AVG E mail plug in fo...

Page 220: ...sktop shortcut icon fea_AVG_StartMenu Start menu items fea_AVG_ExchangeServer_AS AVG Anti spam for MS Exchange Server fea_AVG_ExchangeSmtpTransportAgent_E MC Email scanner for MS Exchange Server SMTP TA fea_AVG_ExchangeRoutingTransportAgent _EMC Email scanner for MS Exchange Server Routing TA fea_AVG_ExchangeVSAPI_EMC Email scanner for MS Exchange Server VSAPI fea_AVG_SharepointServer_AV Email sca...

Page 221: ... engines can serve only a limited number of connected computers More information on this topic can be found in the DataCenter role chapter 12 1 Maintenance After a considerable period of AVG 9 0 Anti Virus Business Edition use i e AVG Admin Console use some inconsistencies or duplication in the AVG DataCenter may appear Such a situation puts increasing demands on the network load and the maintenan...

Page 222: ... rights chapter 12 3 Converting the AVG DataCenter to a Different Database The AVG Admin Server Deployment Wizard is able to automatically convert any existing AVG DataCenter to a different database format It is also possible to convert the AVG DataCenter from one AVG DataCenter to another using the Export Import functions From within the AVG Admin Console it is possible to export the AVG DataCent...

Page 223: ... A ll rights reserved 223 List of non compliant stations lists all stations that are currently in an error state List of served stations this option will be available only if there is UpdateProxy role installed Use this button to list stations that are receiving updates from this server ...

Page 224: ...you can obtain and distribute the update immediately after its release This is another security enhancement which helps keeping your system even more up to date than regular scheduled update checking But note that the scheduled update does not lose its sense on the other hand we recommend you do not neglect the proper setup of scheduled updates for they can serve as a reserve when the AVG Managed ...

Page 225: ...s r o A ll rights reserved 225 Note For complete description of the AVG Admin Server Monitor interface and functionality please refer to the Configuration AVG Admin Server Settings section of this document Click on the Managed Update tab to open the AVG Managed Update configuration ...

Page 226: ...tab Server ID Identification of your server obligatory parameter It must be the same as your AVG Managed Update service ID registered by AVG Technologies corporation Port TCP The field defines the TCP port where the AVG Admin Server listens for the incoming commands Local address TCP The address where the AVG Admin Server listens for the TCP encoded incoming commands Port UDP The field defines the...

Page 227: ...irus Business Edition port number set on the stations In the Number of stations to notify per minute section choose how many stations should be notified per minute to avoid overloading the default value is 15 Note You can set the default port values for any above field by pressing the respective Set default port button The Client info button will open the following dialog This dialog is designed t...

Page 228: ...ent rules for particular clients This mode can be used even if there is no AVG DataCenter support In the Time until next attempt to connect minutes specify the time in minutes after which the server should try to contact stations that have not been responding during the previous attempts It will try to connect to all clients until all of them are informed about the update or the allowed number of ...

Page 229: ...dialog Inform other AVG Admin Servers about update By ticking this checkbox you will allow the application to also inform other AVG Admin Servers about newly downloaded updates Enter the appropriate server IP value s to the IP addresses of subordinated servers field The AVG Managed Update updating command will then be sent to these addresses As a part of this command is information about the URL t...

Page 230: ... this field only on servers which are subordinated to AVG Admin Servers accepting AVG Managed Update commands from the AVG Technologies company All server addresses on this tab can be inserted in the same way as addresses in the Client Info dialog i e as a full IP address station name IP address range IP address and mask or combination of all mentioned methods ...

Page 231: ... either directly from the Internet or from the network directory When no newer updates are available nothing happens Note If a time coincidence of a scheduled program update and scheduled scan occurs the update process is of higher priority and the scan will get interrupted 14 2 Update within the Local Network AVG stations can perform an update directly from the AVG Technologies web servers Also i...

Page 232: ...ble to use any other web server for this kind of update The server only has to share one isolated folder accessible by AVG stations When you are using Microsoft Information Server for example the root of all the accessible folders is usually C InetPub wwwroot Supposing C InetPub wwwroot avgupdate folder which is accessible by web interface is present on the web server called localweb Web HTTP clie...

Page 233: ... server feature is included in the AVG Admin Server 9 0 for Linux There are several options available in the configuration file that can be used to customize settings For more information see the manual page of avgadmsrv conf check each option s description in the configuration file or visit the Configuration chapter below The AVG Admin Server 9 0 for Linux contains also AVG Managed Update service...

Page 234: ...e file can be found at the URL below http www firebirdsql org index php op files 15 1 2 Database Setup If you have an existing DataCenter database please copy it to the following default location opt avg avgadmsrv var db and rename as avgdb fdb Note You may want to check the access rights of the avgdb fdb file prior to AVG Admin Server 9 0 for Linux startup The Firebird server must have the read w...

Page 235: ... file tar xvzf avgadmsrv 9 x xxx i386 tar gz 2 Switch to the avgadmsrv directory cd avgadmsrv 9 x xxx i386 3 Launch the interactive installation script as the root user install sh Note If you are upgrading your installation you need to stop the avgadmsrvd service first etc init d avgadmsrvd stop 4 Confirm License Agreement Please read the License Agreement If you agree to the terms displayed use q...

Page 236: ...AVG Admin Server etc init d avgadmsrvd start 15 1 4 Manual Database Upgrade We recommend using the interactive installation script for upgrading your AVG Datacenter database If you decide to upgrade it manually follow these steps 1 Database Copy Copy your old database to the opt avg avgadmsrv var db directory as avgdb fdb 2 Stop the AVG Admin Server etc init d d avgadmsrvd stop 3 Upgrade database ...

Page 237: ...tailed configuration description in the Configuration chapter below 15 1 7 Installation Verification To test the installation try connecting to your AVG Admin Server 9 0 for Linux from AVG stations or from the AVG Admin Console Use the connection string in the following format http host port 15 1 8 Installation Troubleshooting If you experience any troubles running AVG Admin Server 9 0 for Linux r...

Page 238: ...figuration for the server is stored in opt avg avgadmsrv etc avgadmsrv conf If this file is missing the server will use default values or values entered via command line The syntax for AVG Admin Server 9 0 for Linux avgadmsrv is as follows avgadmsrv c file p number d file r license avgadmsrv v h l The startup parameters are c config file Use other then default configuration file Default configurat...

Page 239: ...into the specified file AVG Admin Server 9 0 for Linux database related parameters versionDB Display the current database version sqlScriptsPath DIR A path to the directory with SQL scripts to be used with the parameters below The default path is opt avg avgadmsrv var db scripts exportDB DIR Export database to the specified directory importDB DIR Import database from the specified directory create...

Page 240: ...r providing updates The default value is 4158 LocalAddr Specifies a local address that the server will use for incoming connections The default value is empty meaning any local address can be used If the specified name resolves to more than one address then first available address is used the server tries all of them EnableDataCenter Specifies whether the Datacenter role is enabled or not Set this...

Page 241: ...e the UpdateProxy role Set this parameter to 0 to disable it default LocalHttpServerRoot Directory where AVG Admin Server stores downloaded update files for stations For example opt avg avgadmsrv var update By default this function is disabled HttpServerRoot The URI address part used in the update URL to access updates from AVG Admin Server The default value is avgupdate update URL is then http se...

Page 242: ...l not be visible in the message header EmailReplyTo the e mail address that should be used for replying EmailSubject custom e mail subject EmailSmtpServer SMTP server address server for sending e mail messages EmailSmtpPort port of the SMTP server The default value is 25 SmtpUsername if the SMTP server is protected specify the username here otherwise leave empty SmtpPassword if the SMTP server is ...

Page 243: ... MaxConcurrentDownloads Maximum number of concurrent downloads of update files from the update server default is 5 MaxUpdateFilesAge How many days should the downloaded update files for stations stay on the drive before their removal default is 30 DatabaseBackupPeriod How often in hours should the server backup the database Set to 0 zero to disable regular backing up default is 48 MaxDatabaseBacku...

Page 244: ...spamMaxConcurrentRequests The maximum number of concurrent Anti Spam updates Set to 0 for unlimited count AntispamProxy A proxy server used for Anti Spam updates Use the following format http user password server port Only valid if normal proxy server is not defined EnableAntispamUpdates If set to 1 default AVG Admin Server will also provide updates for AVG Anti Spam ...

Page 245: ...ou have gone through this documentation and you are still not sure about what level or type of AVG 9 0 Anti Virus Business Edition functions are best for you we recommend that you consult the AVG Technologies technical support department http www avg com support existing To help us find the best solution for AVG implementation on your network please prepare the following information the size of yo...