AVIRA ANTIVIR VIRUS SCAN ADAPTER, Configuration

Page 1: ...HowTo Configuration of the VSA with SAP NetWeaver 2004 s ABAP Avira Support August 2009 ...

Page 2: ...an Adapter or Server 9 Definition for profiles which control the activation of the VSA 12 Definition of the Steps in the Virus Scan Profile 14 Testing the installation of the Virus Scan Server Profile Z_AVIRA 16 Trace possibilities in the SAP system 18 Activation of the Active Content Scanning 21 Testing the Installation of the Virus Scan Server profile ZACTIVECONTENT 25 Integration of the VSA wit...

Page 3: ...erver Edition 8 Sun Solaris SPARC 9 Sun Solaris SPARC 10 Operating systems Windows for 32 bit only Windows 2000 Server SP4 recommended Windows 2000 Advanced Server SP4 recommended Windows 2003 Server Windows Server 2008 not for Core Setup Important Transactions Transactions sm59 Æ Configuration of the RFC connection spro Æ System administration of the SAP Netweaver vscan Æ Virus Scan Provider Defi...

Page 4: ...me of the RFC destination begins with VSCAN_ The virus scanner can only work with this beginning of the name In the menu Technical settings program ID the RFC destination has to be entered again The option Registered server program has to be chosen as kind of activation for the RFC destination The procedure is valid for the virus scan server via RFC destination ...

Page 5: ...5 How is the VSA connected to the SAP system ABAP How to define a new RFC destination with TCP IP Transaction SM59 ...

Page 6: ...n for the configuration of the scan server VSCAN_ Hostname in case you want to start only one virus scan server on the host VSCAN_ Hostname Number in case you want to start several virus scan servers on the host The figure is serially numbered and separated by a hyphen from the host name Possible names are VSCAN_HOST123 VSCAN_HOST345 1 VSCAN_HOST345 2 etc ...

Page 7: ...tem gateway as gateway host and gateway service In case you start the virus scan server via the computing center management system on an application server choose the gateway of this application server This transaction spro is the way to the system administration of the Netweaver Virus scanner group Virus scan server Virus scan profile ...

Page 8: ... group Business add in If this indicator is set the program transfers the request for a virus scan instance for this scanner group to the Business Add In VSCAN_INSTANCE with which customers can include their own virus scanners If this option is not set the program searches for a suitable virus scan server among the set of virus scan servers maintained in Customizing that have this scanner group Gr...

Page 9: ... be chosen in case Avira GmbH supports the SAP operation system directly The virus scanner runs directly in the SAP web application server and no files have to be sent to an outsourced server via the network With this configuration there is no need to set a VCSAN_RFC as the SAP system communicates directly with the virus scanner ...

Page 10: ...e example underneath shows the configuration with the outsourced server Choose in the IMG SAP Web Application Server System administration virus scan interface Choose the Execute option next to Define Virus Scan Servers The screen View Change Virus Scan Servers Overview appears Choose New Entries The screen New Entries Details of Added Entries appears Enter the name of the virus scan server into t...

Page 11: ...11 The following parameters are supported by Avira AntiVir for SAP ...

Page 12: ...rs are activated by default except for the parameter SCANHEURISTICLEVEL You can activate it in the menu vscanprofile afterwards Definition for profiles which control the activation of the VSA Transaction vscanprofile ...

Page 13: ...tivate the virus scan for each application by setting this indicator Default Profile Indicator that this virus scan profile is the default profile You can set this indicator for only one virus scan profile This virus scan profile is used in the following cases If an application requests a virus scanner without specifying a virus scan profile If a virus scan profile is requested for which the Use R...

Page 14: ...can Profile Transaction vscanprofile Position Specifies the position of the scanner group in the virus scan profile You can activate the parameters SCANHEURISTICLEVEL in the menu Configuration parameters Value1 low Value 2 medium Value 3 high ...

Page 15: ...iation BADI means business add in BADIs are the object related successors of user exits In comparison to the common CMOD SMOD extension they are more difficult to use But they offer amplified development and modification possibilities A BADI interface transaction SE18 can contain different BADI implementations transaction SE19 but only one can be active at the same time You can realize interesting...

Page 16: ...es the name of a virus scan profile that you can include as a step in the profile that you are currently processing Testing the installation of the Virus Scan Server Profile Z_AVIRA This procedure gives you the possibility to check your configured virus scan server Start the transaction VSCANTEST Enter the object you want to scan the given test file or you own local file Choose the virus scan prof...

Page 17: ...17 ...

Page 18: ...18 Trace possibilities in the SAP system f Transaction vscantrace f Definition of a trace log for certain events ...

Page 19: ...19 Trace possibilities in the SAP System f Transaction vscantrace f Trace runs and recollects data ...

Page 20: ...20 Trace possibilities in the SAP System f Transaction vscantrace f Trace runs and collects data f A file with an eicar test virus has been uploaded ...

Page 21: ...nning Transaction vscanprofile How to enter a new virus scan profile ZACTIVCONTENT Beneath Steps the virus scan profile ZACTIVCONTENT has to be assigned to a group Therefore a new group can be defined or an already existing group can be used ...

Page 22: ...22 Then you can define the parameter and the value beneath the menu item Configuration parameters ...

Page 23: ...23 ...

Page 24: ...er CUST_ACTIVE_CONTENT and activate it with the value 1 Beneath the menu item Steps the virus scan profile ZACTIVCONTENT has to be assigned to a group You can define a new group or you can assign it to an already existing group ...

Page 25: ... server you have configured Start the transaction VSCANTEST Enter the object you want to check You can use the given test files or you own local file Choose the scan profile you want to use for the scan beneath virus scan profile This example uses the profile ZACTIVCONTENT In the General Settings you choose the action Scan for active content ...

Page 26: ...It is possible to load the virus scanner directly into the SAP Netweaver f Choose virus scan adapter in the transaction vscan provider type f Important The basic system has to be supported by Avira if you want to use the provider type virus scan adapter ...

Page 27: ...ation server or a self starter f ex externally as service with Micorsoft Windows NT or daemon beneath UNIX for the configuration of a virus scan server for ABAP systems In case the application server starter is used all components are located on the same host In case of the self starter the virus scan server and the SAP WebAS can be located on different hosts So you can use a virus scan server whi...

Page 28: ...lart and starts the virus scan server again as an auto reaction Self starter However there is a separate MTE class in CCMS for these self starters You can assign an auto reaction method to this MTE class yourself to react to alerts You can for example use the MTE class CCMS_OnAlert_Email to send an e mail or an SMS see Defining Automatic Alert Notification and Forwarding Alerts to Alert Management...

Page 29: ...onfiguration file savapi ini which you find in the installation directory Hints This adjustment of the Avira Virus Scan Adapter is possible with both a windows ABAP system and a windows Java system In Unix you find the configuration file avsapvsa conf in the directory etc In this file a link to the SAPCAR program via the parameter SapCarProgram is possible ...