Copyright AVG Technologies C Z, s.r.o. All rights reserved.
All other trademarks are the property of their respective owners.
This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, C opyright (C ) 1991-2, RSA Data
Security, Inc. C reated 1991.
This product uses code from C -SaCzech library, C opyright (c) 1996-2001 Jaromir Dolecek
<dolecek@ics.muni.cz>
This product uses compression library zlib, C opyright (c) 1995-2002 Jean-loup Gailly and Mark Adler.
This user manual provides comprehensive documentation for AVG Internet Security
Business Edition.
Important notice:
The document may contain references to other user guides, especially the
Internet Security guide. If you are not familiar with the AVG User Interface and
AVG advanced/Firewall settings we strongly recommend that you download all
relevant guides in advance from the http://www.avg.com website, Support
Center/Download/Documentation section.
You can also use context help, which is available through the application, to get
the requested information.
1.1. AVG Internet Security Business Edition scheme
Please review the simplified scheme of AVG Internet Security Business Edition
showing the basic connection and interaction of remote administration components in
the default and most common configuration:
consists of a database, and AVG Admin Server. The AVG Admin Server
performs the role of a mediator between the AVG DataCenter and AVG stations.
The AVG Admin Console uses the AVG Admin Server to approach the AVG
DataCenter database, and to c entrally define settings for stations and system
parameters. AVG stations approach the AVG Admin Server to read the setup
parameters; and to save their currently defined setting and scan results into the
AVG DataCenter.
AVG Admin Server also works as a local update source. If you deploy the
UpdateProxy role to multiple servers, you can then use them for updating
stations and keeping the bandwidth/load in balance.
2)AVG Admin Console
is a program for administration of AVG stations. It communicates directly with
the AVG Admin Server.
communicate with the AVG Admin Server that accepts the default settings,
requests spec ific settings, sends the scan results etc.
4)AVG Technologies Server
provides AVG Admin Server/Servers with update files.
1.2. Key features and functions
AVG Internet Security Business Edition offers the following functions:
·Remote installation
Using this function you can easily install AVG on all stations in the local network.
This remote installation is secured by the AVG Network Installer Wizard – a
program for direct remote installation and/or creation of an installation script
that makes it possible to run the Setup installation program on all remote
network stations.
·Centrally controlled updates
All AVG stations in the network can be updated centrally using the AVG Admin
Console.
·Server roles
AVG Internet Security Business Edition can now act in multiple roles, where
each role can be deployed separately (DataCenter role used for remote stations
management, UpdateProxy role for managing updates), which allows the user to
divide the load among multiple physical servers.
·Secured communication
Network communication between AVG Admin (AVG Admin Server) and stations is
completely encrypted.
·Full remote administration in the network
The full functionality of the AVG Internet Security Business Edition
guarantees:
o
Automated remote AVG installation on all network stations thanks to new
AVG Network installer Wizard
o
Continuous overview of all network AVG stations’ current status
o
Central control and administration of AVG stations’ configuration
AVG Internet Security Business Edition full functionality is provided by the
AVG Admin Console, and the AVG DataCenter.
If you do not need the full functionality, it is possible to install and deploy only
the AVG Admin Lite (for installation sc ripts generation and local update source).
·In addition to all standard features, AVG Internet Security Business Edition may
contain the following components support (configuration available directly from
the AVG Admin Console):
o
Anti-Spam protection
o
Anti-Spyware protection
o
Firewall protection
o
Online Shield protection
o
LinkScanner protection
o
Anti-Rootkit protection
Note: Depending on your edition, the support of components may vary!
·Backward compatibility including an easy migration from the previous version!
1.3. Operating Systems Supported
AVG Internet Security Business Edition is intended to manage/protect stations with
the following operating systems (with the exceptions mentioned below the list):
Recommended hardware requirements for AVG Internet Security Business Edition are as
follows:
·Intel Pentium CPU 1.8 GHz
·600 MB of free hard drive space
·512 MB of RAM memory
1.6. Network Requirements
To be able to successfully install AVG on stations remotely, it is necessary to take
some steps in advance.
Note: If you experience any problems with the remote administration/installation/
connection even after reviewing the chapters below, please try to find the proper
answer in the FAQ (Frequently Asked Questions) located at http://www.avg.com/faq.
1.6.1. Ports to be allowed on stations
For individual stations in your network, that use a personal firewall, you will probably
need to allow certain ports and set specific system features in order to be able to
correctly use AVG remote installation.
Depending on the firewall type and settings on each station, some of the requirements
listed below may be already predefined or allowed, or its settings may not be available
under the same name and description. We strongly recommend that all changes should
only be done by well experienced users! Always consult the User manual or Help guide
for your firewall before proceeding to change any settings.
·Ping (ICMP type 0 - Incoming echo request)
Change this setting only if the AVG Network Installer is not able to detect
network station(s), which you are sure are switched on and fully operational.
In the firewall settings used on the remote station allow the incoming ping
requests within the local network. Often this function can be found under ICMPtype 0 or Incoming echo request or similar description. If set correctly, AVG
Network Installer will be able to find the station in the network.
·File and Printer Sharing for Microsoft Networks
To allow AVG Network Installer access to a remote station over the Admin$
share, you first need to allow File and Printer Sharing for Microsoft Network
on the remote station. Specifically you must allow TCP ports 139 and 445 and
UDP ports 137, 138 and 445. This way the AVG Network Installer can copy
the AVG Agent to the remote station.
As a first step you should check, that the File and Printer Sharing forMicrosoft Networks is installed on the remote station.
If you use Windows 2000 or XP, you can find the settings under Start/Settings/
Network connections. In the properties window of the Network connections, tick
the File and Printer Sharing for Microsoft Networks. If you cannot see such
an item, then it is probably not installed yet. In this case, please contact your
station administrator or install the component yourself from the installation CD.
For Windows Vista navigate to Control Panel/Network and Sharing Center
and enable the Network sharing.
If you use Windows 7 - navigate to Control Panel/All Control Panel Items/Network and Sharing Center/Advanced sharing settings. Select a profile
applic able for your network (or choose step by step both) and then click the
Turn on file and printer sharing radio button.
If the File and Printer Sharing for Microsoft Networks is successfully installed,
you need to allow the ports mentioned above in the firewall installed on the
remote station. If for example the built-in Windows XP firewall is used, you can
easily allow this feature by clicking the File and Printer Sharing item located in
the Exceptions tab.
·RPC: Remote Procedure Call
To be able to launch the AVG Agent on the remote station, you need to allow
the following ports in the firewall on the station – TCP and UDP port 135.
·Communication on TCP port number 6150
For correct communication between the AVG Network Installer and the AVG
Agent component you need to first allow communication on TCP port 6150.
Using this port the AVG Network Installer controls the AVG Agent tool and passes
it the AVG installation files.
1.6.2. Ports to be Allowed for Remote Administration
Ports that need to be allowed for remote administration are listed below:
·Communication on TCP port number 80
For downloading AVG updates from the internet to the AVG Admin Server
UpdateProxy, it is necessary to permit outgoing communication for these
components on TCP port 80.
For succ essful connection between AVG Admin Server and stations, you also
need to allow other ports on your router/firewall/hub/VPN or other type of
relevant connection type, hardware or software:
·TCP Port 4158
For basic communication between the AVG Admin Server and the AVG stations
and the AVG Admin console, you need to allow TCP port 4158 (predefined by
default).
This port can be changed in the AVG Admin Server configuration and in the AVG
User Interface on the station (via upper menu Tools/Advanced Settings Remote Administration).
·TCP Port 6051
This port is used for direct messages from AVG Admin Server to the AVG Station.
This port can be changed within the AVG User Interface on the station (via
upper menu Tools/Advanced Settings – Remote Administration group).
·TCP Port 6054
This port is used for direct messages from the AVG Admin Server to the AVG
Admin Console. This port is not configurable. AVG Admin Console tries to open
this port automatically for listening, if the port is not available, it tries to open
subsequent ports (6055, 6056, …) until it successfully finds an available one.
1.7. Migrating Stations From Previous Version
The migration of one AVG DataCenter to another is described in the How to/Migrate
2. AVG Internet Security Business Edition Installation
In order to be able to remotely install AVG on stations, you must first install AVG 9.0
Remote Administration and its components.
The whole process consists basically of two steps:
·Components Installation
·Deployment process
Note: It is strongly recommended that you go through the following chapters first to
get a general overview of the AVG Internet Security Business Edition installation
possibilities so that you can set the configuration that best suits your needs.
Especially check the Where to Install and Deploy and Components Overview chapters.
AVG Internet Security Business Edition can be launched using the exe file within
the AVG Admin directory on the installation CD. Also, the latest installation package
can always be downloaded from the AVG website at http://www.avg.com/download.
Before installing AVG Remote Administration visit the AVG website and check for
the latest installation file!
2.1. Components Overview
Below you will find a brief overview of all components.
2.1.1. AVG Admin Server Deployment Wizard
This wizard will help you to deploy AVG Internet Security Business Edition onto your
server or divide it across multiple servers.
2.1.2. AVG Network Installer
The AVG Network Installer Wizard helps you to automatically install AVG on remote
stations with only a few clicks.
2.1.3. AVG Admin Console
The AVG Admin Console is a central place for administration of your remote AVG
station installations in the network. It communicates with the AVG Admin server and
controls, processes and displays all relevant events.
2.1.4. AVG Admin Lite
AVG Admin Lite is the name given to a simplified installation of AVG Internet Sec urity
Business Edition, providing only a local update source and script AVG installations on
stations, without the benefits of AVG DataCenter and AVG Admin Console.
The AVG Admin Server stores data in a database (AVG DataCenter) and performs the
role of a mediator between the AVG DataCenter and stations. AVG Admin Server may
also work as a local update source.
The AVG DataCenter is a database that contains the entire configuration for AVG
stations, including scan and tasks settings. All stations with AVG installed, as well as
the AVG Admin Console program, communicate with the AVG DataCenter. The
communication is possible only if the Remote Administration component is properly
installed on all stations connected to the AVG Admin Server.
AVG DataCenter supports one embedded and several standalone (commercial) SQL
database systems. You will be able to c hoose specific database system during
deployment process (AVG Admin Deployment Wizard starts after installation).
2.1.6. Server roles
There are two roles that c an be deployed after installation on AVG Admin Servers. The
selection of roles is a key part of the deployment process that will take place right
after product installation. The roles are as follows:
·DataCenter role
Allows central management of AVG stations configuration via the AVG Admin
Console, collects scan results from AVG stations, shows components states and
much more.
·UpdateProxy role
Serves as a proxy server for downloading and distributing updates to your
stations.
2.2. Where to Install and Deploy
You can install and deploy different components/roles of AVG Remote Administration to
different servers/stations. There is no need to install everything on one machine.
Once you finish product installation, you will proceed to the deployment process that
allows you to deploy different server roles.
For example, the AVG DataCenter role can be deployed to some central server in your
network. If your network or number of stations is large, you can deploy the
ProxyServer role to multiple servers across the network to achieve load balancing and
adequate bandwidth usage.
Also, the AVG Admin Console (central application for administration of your stations)
can be installed to a different station and the administrator can manage the stations
from any place.
The welcome dialog appears in the language of the operating system to which AVG
Internet Security Business Edition is being installed. You can switch to another
language and confirm your choice by pressing the Next button.
2.4. License Agreement
This dialog window offers the full wording of the AVG Internet Security Business Edition
lic ense agreement. You c an either scroll down to read the text or click the Printableversion button to open it in a new resizable window with an option to print the whole
agreement.
Once you finish reading, check the I have read license agreement checkbox and
press the Accept button to continue. Otherwise use the Don’t accept button, and
the installation process will be cancelled.
This option allows you to select, which components you wish to install.
·Lite Installation
This choice installs the product with simplified wizards that contain predefined
settings for UpdateProxy role only. The AVG Network Installer Wizard allows
only simple script generation. No console for administration will be installed and
no AVG DataCenter will be deployed.
You can find more information on the Lite Installation in the AVG Admin Lite
Chapter.
2.6. Personalize
In this dialog enter your User name, Company name (if applic able) and your License.
Clic k the Next button to continue.
2.7. Destination Folder
You have to specify the destination folder where AVG Internet Security Business
Edition (and its components) will be installed. If you want to select another directory,
specify the directory path or choose a directory from your local disk by pressing the
Browse button. To c ontinue the installation press the Next button.
If you specified a directory different from the default one, and the specified directory
does not exist, a new dialog will pop up asking you whether you want to create the
directory. To confirm creating the directory, press the Yes button.
2.8. Component Selection
The new dialog window asks you to select those AVG Internet Sec urity Business
Edition components you want to install (this does not apply to the Lite installation
option). By default, all key components are selected. If you decide on another
arrangement, check or uncheck the respective checkbox. To continue the installation
process, press the Next button:
Note: If you want to use Graphic reports, install the c omponent on the c omputer
where you install AVG Admin Server, and on each computer where you install AVG
Admin Console. Graphic reports are generated by the AVG Admin Server and can be
viewed from the AVG Admin Console.
2.9. Installation Summary
This dialog presents a list of all selected parameters. To continue the installation,
press the Finish button.
The Installation complete dialog appears to confirm that AVG Internet Security
Business Edition and all its c omponents were installed successfully. Press the OK
button to finalize the installation.
If the installation went through correctly, one of the following Wizards will launch
automatically depending on your previous choices during the installation process:
·AVG Admin Deployment Wizard
This Wizard will start automatically if you chose Full or Custom installation in the
Installation type dialog.
For more information see the AVG Admin Deployment Wizard chapter.
Note: You must go through this wizard in order to make AVG Internet Security
Business Edition function properly.
·AVG Admin Deployment Wizard Lite
This Wizard will start if you chose Lite Installation in the Installation type dialog.
For more information see the AVG Admin Deployment Wizard Lite chapter.
Note: You must go through this wizard in order to make AVG Internet Security
Business Edition function properly.
Note: If an error occurred during the installation process, or the installation failed, an
error dialog appears. In that case use the Save log button to store the installation
protocol. Then send the file to our technical support department for further analysis.
Use the c ontact page http://www.avg.com/support-existing.
The AVG Admin Server Deployment Wizard is launched immediately after the
installation of AVG Internet Security Business Edition. It can also be launched any time
later from the program folder, i.e. All programs/AVG 9.0 Remote Administration/AVG Admin Server Deployment Wizard.
The Wizard guides you through the configuration process for the AVG DataCenter
database on a selected database engine. Using the wizard, you can also c onfigure the
AVG Admin Server in order to mirror the AVG updates in a local network. The wizard
leads you through the c onfiguration process in a few steps listed in the following
summary.
Note:Navigation in the wizard is as usual:
·The Back button takes you one step back in the wizard.
·The Next button takes you one step forward and also performs all actions
selected in the current stage.
·Use the Help button to open a comprehensive information help related to the
current step.
·By pressing the Cancel button, you can quit the wizard at any stage, discarding
The first dialog explains the purpose of the Wizard and briefly describes two main
options. Click the Next button to proceed to the next step.
Note: We strongly recommend you complete this wizard in order to make the AVG
Admin Server run c orrectly.
3.2. Deploying multiple UpdateProxy roles
Before you deploy AVG Internet Security Business Edition roles to your server, you
may need to consider the following:
You can deploy the UpdateProxy role to more than one server and distribute updates
from different sources to avoid your server overloading or having bandwidth issues.
The allocation of servers depends on your network size and your server and network
specifications. Generally speaking, if your network consists of more than 150 stations
or your network is divided into multiple segments in different locations, you should
consider deploying multiple UpdateProxy roles to different servers and spread the load.
To deploy the UpdateProxy role to another server you need to repeat the installation
and deployment process on the other server.
This screen displays information on the AVG Admin Server current state. When
everything is correct, the respective information is displayed in green text.
If this is not your first run and everything seems to be correct (i.e. up-to-date with no
warnings or errors), there is no need to go through the configuration process again
(unless you wish to change something).
If there is a configuration problem, you will be briefly informed about the reasons, and
the information will be highlighted in red color. In such cases you need to go through
the whole wizard to correct the problem.
In the Server roles section you must choose which server role(s) you want to run on
this server. You need to select at least one option, but you can also select both. The
options are as follows:
·DataCenter role
Allows central management of AVG stations configuration via the AVG Admin
Console, collects scan results from AVG stations, shows components states and
much more.
If you choose to install this role only, proceed to the DataCenter Role chapter.
Serves as a proxy server for downloading and distributing updates to your
stations.
If you choose to install this role only, proceed to the UpdateProxy role chapter.
If you select both options, proceed to the DataCenter Role chapter.
3.4. DataCenter Role
If you have selected in the Current state of AVG Admin Server step (see chapter
Role Selection) the DataCenter Role, one of the following dialogs will be displayed:
If there is an existing database with stations detec ted, the Wizard will offer you to
backup its c ontents first.
Note:The backup is not available if the database is in an error state.
To do so, simply check the Perform DataCenter database backup to folder
checkbox and fill-in your desired storage location.
The next dialog will inform you about your DataCenter database status. There exist
two possible cases - either the DataCenter database will be up to date or outdated. In
the first case, you will experience these two options:
·Keep existing DataCenter database
This option will leave the database untouched. Select this option, if the
database version is up to date and you need to preserve its c ontents.
·Create new empty DataCenter database
Select this option to c reate c ompletely new database (the originally stored data
will be lost). We strongly recommend to bac kup the DataCenter database before
proceeding!
On the other hand, if the DataCenter database will be outdated, you will be asked, if
you wish to update the existing one or create a new one:
·Update existing DataCenter database
This option will update the database to the current version. Select this option, if
you need to preserve the database contents.
In the next step you can optionally check the Username and Password checkboxes
and fill-in your preferred user name and password that will be required each time you
launch the AVG Admin Console, AVG Admin Server Deployment Wizard or process
stations update.
Note:If you set an username and password here, you should also manually define
Select the database system corresponding to your needs. These options are available:
·Firebird
This solution is appropriate for smaller networks with up to 150 stations. The
database is a standard part of AVG Internet Security Business Edition
installation.
Additionally, you can choose a specific database character set from the roll
down menu corresponding to your language needs.
·Microsoft SQL Server Express
The Microsoft SQL Server Express Edition is a reduced version of theMicrosoft SQL Server, it can serve up to 1000 stations. The product is not a
standard part of AVG Internet Security Business Edition. Its usage is not limited
by any commercial lic ense.
·Microsoft SQL Server
The Microsoft SQL Server engine can serve over 1000 stations in large
networks. It is not a standard part of AVG Internet Security Business Edition and
its usage is bound to the Microsoft SQL Server license.
·Oracle 10g
This engine c an serve over 1000 stations in large networks. It is not a standard