AVIRA SECURITY MANAGEMENT CENTER 2.5, Manual

Page 1: ...Avira Security Management Center HowTo Status March 2010 1 Avira Security Management Center 2 5 Support März 2010 www avira com Errors in design and contents cannot be excluded Avira GmbH ...

Page 2: ...ing of Updates and Scans 24 11 5 Installation of the Avira AntiVir Server 25 11 6 Configuration of Avira AntiVir Server 25 11 7 Planning and Executing of Updates and Scans 28 11 8 To reset or to transfer the Configuration 29 11 9 Migration of the SMC 2 4 to 2 5 and AV8 to AV10 30 12 Automatic Product Installation 32 13 Automatic Synchronization with ADS LDAP 33 14 Administration of several IUMs vi...

Page 3: ...er_Server_en exe During the installation routine the following window will appear Here you can change the network configuration of the AntiVir Security Management Center Server if necessary Illustration 1 SMC Installation Network settings Make sure that the network ports 7000 7001 7010 7030 7050 7051 7080 and 7100 are not yet used by any other application installed on the server You can check this...

Page 4: ...Avira Security Management Center HowTo Status March 2010 4 Illustration 2 SMC Installation After you have clicked on Next the following window appears Illustration 3 SMC Installation user account ...

Page 5: ...ogin data as the formerly entered windows administrator By deactivating the option you can also enter a special SMC user who will be used for the login to the SMC After that a window will appear which allows you to configure the scheduler of the Internet Update Manager According to the settings it will load the product updates the virus definition file and engine updates Illustration 4 Configurati...

Page 6: ...tion After that click on ok in order to logon to the SMC Please take care to change the mark from local computer to computer in the network in case the SMC Frontend should not be installed on the SMC Server In such a case enter the IP address hostname of the server on which the SMC Server is installed Alternatively you can choose it via Browse 4 Licensing of the SMC In case you should already have...

Page 7: ...nto the corresponding software this is possible in the right half of the window the icon for the software will appear in solid colours Illustration 5 Software Packages Confusing the license or saving an invalid license for the software package is not possible with the new SMC version Before saving the license will be checked for validity The license which is integrated into the software package is...

Page 8: ...anager and choose Plan Update The planer has to be activated first The activation can be done via a right mouse click on Internet Update Manager choose planer Activate planer Please make sure that the Internet Update Manager has already proceeded the first update before you update the clients You can do that by a click with the right mouse button on Internet Update Manager Update now If the functi...

Page 9: ...e button and choosing New Group This example shows how the group Server and Clients are created You can drag the computers which are located in your network from the network environment which is shown underneath the security environment into the security environment or to created groups Illustration 6 Security Environment Computers which are not shown in the network f ex linux clients can be manua...

Page 10: ...nstallation of the SMC Agents via the SMC Frontend The SMC agent is responsible for the communication between the SMC Server and the clients that have to be managed The agent has to be installed on the client in addition to the necessary virus protection This can be done directly via the SMC manually or by means of a script In order to enable the SMC Agent to communicate with the SMC Server the fo...

Page 11: ...ollowing authentication window appears Illustration 8 SMC Agent Installation Enter an existing user with administrative rights on the client into the field user name and a corresponding password For linux clients f ex the user root In case the account of the SMC server service also exists on the clients standardised local administrator login domain administrator you can also choose the option Use ...

Page 12: ... 12 Illustration 9 Security Environment installed agent In order to uninstall click with the right mouse button on the designated client group and the choice of Installation AntiVir SMC Agent Uninstall The appearing pop up window has to be confirmed with Yes ...

Page 13: ...them As never all clients are started at the same time the planned update intervals will not take place at the same time Using the pull mode the same amount of data is copied for an update but the system load is dispersed over a longer period A further advantage of the pull mode in comparison to the push mode is that the SMC Agent checks for changes according to the configured interval If it shoul...

Page 14: ...e SMC Agent is sent to the clients via the button Send now The following functions can be proceeded via the pull mode Product installation Product configuration Product commands Task management Progress bar of the clients For technical reasons further functions like recalling the log files of the clients are based on the push mode ...

Page 15: ...erview of all clients which correspond to the chosen filter criteria Tha means the shown computers are not switched into the virtual group but remain in their previous group All actions which are proceeded on the clients in the virtual group will be proceeded directly on the real computers Example In order to create a filtering group which filters clients that have not install an AntiVir Professio...

Page 16: ...options Illustration 13 Creation of filtering groups step 3 Now you can choose one of the Software packages In this example Avira AntiVir Professional is chosen After you have clicked on Finish a filtering group named missing virus protection is created in the Security environment In this group every computer is shown which has not installed the product AntiVir Professional ...

Page 17: ...wTo Status March 2010 17 Illustration 14 Security Environment Display Filtering Groups Now you can install AntiVir Professional on the filtered clients For further details about the Filtering groups reading the SMC manual is recommended ...

Page 18: ...agent iss can be used Clients which were not integrated into the security environment before the unattended SMC Agent installation will be listed in the new group new computers and can be moved afterwards via drag drop You have also the possibility to add new computers to existing groups by means of the IP address Therefore you can define an IP address or IP address sectors as a property of a grou...

Page 19: ...ogs on to the SMC Server Outstanding actions are shown with a red triangle on the left side of the client If clients are shown with a red exclamation mark something is wrong with the status of the installed product If clients are related to groups which are not shown with the possibility to enlarge them the respectively shown red will not be recognized In such a case the red group icon will give a...

Page 20: ... error message can be seen via a click with the right mouse button on the client and then via Views Error Messages Just consider with which colour the stop icon is shown Error Message Warning Hint Stop messages are not automatically reset They remain even if the cause of the stop message has already been removed They have to be reset by a mouse click with the right mouse button Reset Error Status ...

Page 21: ...of AntiVir Professional 8 XML templates are used for the configuration Illustration 17 XML template of the AntiVir Professional 8 In the Avira AntiVir Professional Version 10 gui plugins were installed by which the layout of the configuration gui is nearly identical to the gui of the clients That is why you see in the Avira Professional 10 the same menu as you would find them on the local client ...

Page 22: ...cated in a local network not in the internet The SMC 2 0 offers you an already included Internet Update Manager which also works as a webserver on port 7080 Please note the detailed information given in the SMC manual The advantages of using http for the updates are Several update servers can be entered in case the first one cannot be reached the following registered one will be used In case of th...

Page 23: ... via webserver can look as follows using the Avira AntiVir Professional 10 Illustration 19 Configuration of the AntiVir Professional 10 The configuration of the updates via filesharing in the AV10 can look as follows Illustration 20 Configuration AntiVir Professional 10 Update via file server ...

Page 24: ...s are transmitted an outstanding action will be generated The outstanding action will be carried out as soon as the client will be activated and the SMC Agent will have registered to the SMC Server 11 4 Planning and Executing of Updates and Scans An update or scan order can be executed by clicking with the right mouse button on the designated group in the SMC and after that click on Command AVIRA ...

Page 25: ...ailable which can be adjusted locally at the Avira AntiVir Server You get to the configuration of the Avira AntiVir Server via the SMC with a right mouse click on the group you want to configure Choose Configuration AntiVir Server Configure The configuration of Avira AntiVir Server opens Here you can make changes similar to the local configuration at the Avira AntiVir Server The update configurati...

Page 26: ...ghts are enough The configuration of the update can be seen in the screenshot above The Server Login Name and the Server Login Password are important to be configured so that the Updater can load updates even if the user login to the Windows Server has not yet taken place or if the user who is signed in has no access rights to the update registry Illustration 22 Configuration AntiVir Server 10 Upd...

Page 27: ...anager is also possible The internet update will be changed so that dl antivir de update isn t used as the update source but the webserver of the internet updater is called The example for the configuration via webserver intranet is shown in the following screenshot Illustration 23 Configuration AntiVir Server 10 download server ...

Page 28: ...ia the SMC you have to click with the right mouse button on the designated group and then on Commands AntiVir Server Start Update Scan Illustration 24 Start update scan task As the planning of the updates or scans is similar to the procedure regarding the Avira AntiVir Professional it will not be described here Further information can be found in the manual ...

Page 29: ... Transfer configuration has been deactivated for the subgroup clients and it has been configured in a way that the expert mode is not shown Via the superior group security environment a configuration has been chosen which shows the expert mode The group clients will not accept this configuration as a special configuration has been made here If the configuration of the security environment shall be...

Page 30: ...e Please check afterwards if the update of all SMC components server frontend and agent has worked properly The SMC server and frontend versions can be found in the menu bar beneath Info about Avira Security Management Center Frontend the version of the agent can be found in each client in the menu product versions via the report Administered computers Installation Download the latest version of t...

Page 31: ...ore the installation of the AV10 Attention After the uninstallation of the version 8 a restart of the client is necessary before the installation of the AV10 Without a restart of the client the installation is broken off with an error message If the setup file of the AntiVir Professional 10 shall be executed locally on the client after the update of the SMC agent the setup file uninstalls automati...

Page 32: ...ossibility to define an automatic product installation This function installs the defined product automatically on all computers which are moved into a certain groups Click with the right mouse button on a group Installation Products After that you can select the software packages Illustration 26 Automatic product installation ...

Page 33: ... task which automatically proceeds the synchronization in the future 14 Administration of several IUMs via the SMC Frontend In case of several standalone IUMS e g for several subsidiaries you had to administer them via separate IUM frontends The SMC 2 5 allows you to administer several IUM servers via the SMC frontend You can add a new IUM as follows Right mouse button on Avira Internet Update Man...

Page 34: ... Check product status The Client is deactivated cannot be reached Agent is not installed The Client is deactivated cannot be reached Agent is installed The Client is deactivated cannot be reached Agent is installed outstanding action Client is activated Agent is not installed PC is activated Agent is installed but cannot be reached Sandglass the client is connecting to the SMC Server or is occupie...

Page 35: ...ish 202 AntiVir Professional 8 Russian 203 AntiVir Professional 8 Spanish 204 AntiVir Professional 8 Italian 205 AntiVir Professional 8 French 250 AntiVir Server 8 German 251 AntiVir Server 8 English 252 AntiVir Server 8 Russian 253 AntiVir Server 8 Spanish 254 AntiVir Server 8 Italian 255 AntiVir Server 8 French 500 AntiVir Professional 10 German 501 AntiVir Professional 10 English 502 AntiVir Pr...

Page 36: ...f the SMC Server does not use the default ports for the communication with the SMC Agent 17 2 Installation and configuration of the Avira AntiVir UNIX Professional Server The AV Guard can only be used via the SMC if the dazuko module can be loaded automatically by means of the command modprobe or has already been loaded Details about the translation and installation of dazuko can be found in the H...

Page 37: ...e 2 Avira AntiVir WebGate 1 and Professional 2 Server 2 17 3 Installation and Configuration of the Avira AntiVir UNIX Updater for SMC The Avira AntiVir UNIX Updater for SMC allows to proceed all configurations about the update and to start and to stop the automatic Internet Updater It can be used with all Avira AntiVir products for UNIX Avira AntiVir MailGate 3 WebGate 2 use a new updater The nece...

Page 38: ...bGate is started automatically after the booting but it will not be started after the installation This is shown here Views Product Status In order to start WebGate click with the right mouse button on the group the computer and choose commands Avira AntiVir WebGate UNIX Start In order to make changes about the configuration click with the right mouse button on the group the computer and choose Co...

Page 39: ...installation passes dependent on the MTA In order to make the described changes in the configuration click with the right mouse button on the group the computer and choose Configuration Avira AntiVir Mailate UNIX configure Further Details about the configuration can be found in the manual for Avira AntiVir UNIX MailGate chapter 6 configuration MailGate is started automatically after the booting bu...