Avira Security
Management
Center
User Manual
Contents
1. About this Manual .......................................................................4
1.1 Introduction............................................................................................................................... 4
1.2 Structure of the Manual ............................................................................................................ 4
1.3 Signs and Symbols ..................................................................................................................... 5
1.4 Abbreviations ............................................................................................................................. 6
2. Product Information ...................................................................8
2.1 Functions ............................................................................................................................... 9
2.2 Features ............................................................................................................................. 10
2.3 Licensing ............................................................................................................................. 11
2.4 System Requirements .............................................................................................................. 11
3. Installation ...............................................................................12
3.1 Important Information on Installation .................................................................................. 12
3.2 Performing Installation ........................................................................................................... 13
3.2.1 Installing SMC Server....................................................................................................13
3.2.2 Installing SMC Frontend...............................................................................................15
4. Avira SMC Frontend ..................................................................16
4.1 Starting SMC Frontend and Connecting to SMC Server ....................................................... 16
4.2 Licensing Avira SMC................................................................................................................ 19
4.3 SMC Frontend User Interface ................................................................................................. 21
5. Configuration ...........................................................................24
5.1 Overview ............................................................................................................................. 24
5.2 Configuring Network and SMC Server Connections ............................................................. 25
5.3 Setting the Security Environment .......................................................................................... 26
5.4 Adding update servers in Avira IUM....................................................................................... 33
5.5 Installing SMC Agents in the Security Environment............................................................. 34
5.5.1 Installing SMC Agent through SMC Frontend
(Windows 2000/ XP Professional/ Vista/ UNIX)35
5.5.2 Installing SMC Agent manually (Win XP Home Edition,
optional: Windows 2000/ XP Professional/ Vista)36
5.5.3 Silent Agent Setup on Windows ...................................................................................38
5.5.4 Installing SMC Agent Manually on UNIX Systems......................................................39
5.5.5 Uninstalling SMC Agent................................................................................................40
5.6 Configuring Avira SMC............................................................................................................ 41
5.6.1 Changing the SMC Agent Configuration......................................................................41
5.6.2 Changing the Configuration for SMC Server and Event Manager .............................43
5.6.3 Configuring the Avira Internet Update Manager ........................................................47
5.7 SSL Certificates Management ................................................................................................. 51
5.8 Updating Avira SMC ................................................................................................................ 53
5.8.1 Updating SMC Server and Frontend ............................................................................54
5.8.2 Displaying and Changing Update Tasks for SMC Server.............................................56
5.8.3 Updating SMC Agents ...................................................................................................56
5.9 User Management.................................................................................................................... 56
6. Operation .................................................................................62
6.1 Overview ............................................................................................................................. 62
6.2 Managing the software packages ............................................................................................ 63
6.2.1 Adding and Deleting a Software Package.....................................................................63
6.2.2 Installing and Uninstalling an Avira Product ..............................................................65
6.2.3 Changing the Configuration of an Avira Product........................................................68
Avira GmbH Avira Security Management Center 2
6.3 Creating Filtered Computer Groups ....................................................................................... 69
6.4 Displaying Information about a Computer or Group ............................................................ 72
6.4.1 Displaying Information about a Node/Computer .......................................................72
6.4.2 Displaying Information in the Details panel ...............................................................73
6.5 Viewing Events......................................................................................................................... 79
6.6 Performing Commands and Planning Tasks .......................................................................... 81
6.7 Creating and Listing Reports................................................................................................... 85
6.8 Deploying Files/ Licenses/ Programs in the Security Environment ..................................... 89
6.9 Handling Errors ....................................................................................................................... 92
7. Updating Avira Products ...........................................................94
7.1 Using the Internet Update Manager....................................................................................... 96
7.2 Updating Packages in the Software Repository...................................................................... 97
7.3 Updating Avira Products manually......................................................................................... 98
7.4 Update overview ...................................................................................................................... 99
7.4.1 Updating the SMC using the IUM automatic mode ....................................................99
7.4.2 Updating the SMC without using the IUM automatic mode ......................................99
7.4.3 Updating manually ........................................................................................................99
8. Troubleshooting ..................................................................... 101
8.1 Prerequisites for communication between
SMC Agents and SMC Server................................................................................................. 101
8.2 Prerequisites for ADS synchronization ................................................................................ 101
8.3 Backup SMC Server Files ....................................................................................................... 101
8.4 MMC Error when Installing SMC Agent............................................................................... 102
9. Products Supported by Avira SMC ............................................103
9.1 Supported Avira Products ..................................................................................................... 103
9.2 Product-specific Configuration Panels ................................................................................. 103
10. Service ..................................................................................104
10.1 Support ........................................................................................................................... 104
10.2 Online Shop.......................................................................................................................... 105
10.3 Contact ........................................................................................................................... 105
1About this Manual
In this Chapter you will find an overview of the structure and contents of this
manual:
• Structure of the Manual – Page 4
• Signs and Symbols – Page 5
1.1 Introduction
In this manual, we have included all the information you need on Avira Security
Management Center.
For further information and assistance, please refer to our website, to our
Technical Support hotline and to our regular Newsletter (see Service – Page 104).
Your Avira Team
About this Manual
1.2 Structure of the Manual
The manual for your Avira software provides the following information:
Chapter Contents
1 About this Manual The structure of the manual, signs and
2 Product Information Overview of the software features.
3 Installation Important information on installing SMC
4 Avira SMC Frontend Overview of Avira SMC Frontend.
5 Configuration - Configuration of the Network and Server
symbols.
Server and Frontend.
connections,
- Configuring the Security Environment,
- Configuring and updating SMC services,
- Installing SMC Agents.
6 Operation Working with Avira SMC:
- Managing software packages,
- Installing and configuring Avira products,
- Managing computer groups,
- Performing commands and planning tasks.
7 Updating Avira Products Methods of updating Avira products in SMC.
Avira GmbH Avira Security Management Center 4
About this Manual
Chapter Contents
8 Troubleshooting Workarounds and solutions for Avira SMC.
9 Products Supported by Avira
SMC
10 Service Avira GmbH Support and Service.
1.3 Signs and Symbols
The following signs and symbols appear in this manual:
Symbol Meaning
3
Avira products, supported by Avira SMC.
... shown before a condition that must be met prior to
performing an action
... shown before a step you have to perform
... shown before the result that directly follows your action
... shown before a warning if there is a danger of critical data
loss or hardware damage
... shown before a note containing particularly important
information, e.g. on the steps to be followed
... shown before a tip that makes it easier to understand and
use Avira Security Management Center
For improved legibility and clear marking, the following types of emphasis are also
used in the text:
Emphasis in text Explanation
C:\Avira\
Choose component
Select all
Path and filename
Elements of the software interface such
as menu items, window titles and
buttons in dialog windows
http://www.avira.com URLs
5 Avira Security Management Center Avira GmbH
About this Manual
Emphasis in text Explanation
Signs and Symbols – Page 4 Cross references within the document
setup.exe /remove
1.4 Abbreviations
This manual uses the following abbreviations:
Abbreviation Meaning
DHCP Dynamic Host Configuration Protocol
GUI Graphical User Interface
IUM Avira Internet Update Manager
MMC Microsoft Management Console
NTLM NT LAN Manager (a Microsoft authentication protocol for
Commands and editable text within
files
(a protocol for dynamic allocation of the host IP address)
remote access).
SMC Avira Security Management Center
SSL Secure Socket Layer
TCP/IP Transmission Control Protocol/Internet Protocol
Avira GmbH Avira Security Management Center 6
About this Manual
7 Avira Security Management Center Avira GmbH
2Product Information
Avira Security Management Center (Avira SMC) is used for remote installation and
management of Avira products via the network.
Product Information
Components
and Services
Avira SMC consists of three components:
z SMC Server, which runs on a central network server with three services:
–Server
–Event Manager
–Avira Internet Update Manager
– two integrated databases for storing Avira products and for events
management.
z The SMC Agent client service, which runs on the network computers and makes
the connection between the main application (SMC Server) and the Avira
products on the computers.
z The SMC Frontend graphical user interface, which can run on the
administrator's computer and manages the services and components of Avira
SMC.
Avira GmbH Avira Security Management Center 8
Product Information
2.1 Functions
The main application, SMC Server, comprises three services with different tasks
that communicate with each other through an SSL encrypted TCP/IP connection.
The Server service manages information on:
• the computers integrated into the Security Environment of Avira SMC,
• the Avira products installed on the computers and
• the repository of software packages supported by Avira SMC.
The installation of Avira products on the network computers through Avira SMC
accesses an internal database containing the Avira products as stored software
packages. An Avira product on a computer in the Security Environment inherits
the configuration settings of its group, when installed from Avira SMC.
The Event Manager service records the events (for example virus alerts), saves
them to a database and forwards them for display or reports in the SMC Frontend.
The Avira Internet Update Manager service performs updates for the installed
Avira products, for software packages in the Repository and for the Avira SMC
components.
The SMC Agent, installed on the Security Environment computers, forwards the
commands, tasks and configurations from the main application SMC Server to
Avira products on the computers. The SMC Agent can send events and
notifications about the Avira products to the SMC Server, to be displayed on the
SMC Frontend.
The SMC Frontend is a snap-in for Microsoft Management Console (MMC) and it
integrates the components, services and functions in a graphical user interface and
displays the entire information.
In addition, the SMC Agents can distribute files between individual computers or
groups of computers within the Security Environment (providing start parameters
and commands if necessary), such as special virus definitions, special virus
removers, license files etc. These files have to be signed by Avira.
9 Avira Security Management Center Avira GmbH
2.2 Features
Avira SMC can manage and monitor all computers in the Security Environment of
your company's network (Windows and Linux desktops and servers).
Consequently, the computers are integrated into the Security Environment under
a customized tree structure, arranged in hierarchical groups. The most important
features of Avira SMC are:
Configuring a secure network environment:
• Graphical user interface for configuration and operation of Avira SMC (snap-
in for Microsoft Management Console);
• Silent setup of SMC Agents over the network;
• Automatic synchronization with ADS/ LDAP repository;
• Remote installation, configuration, update and uninstallation of SMC Agents
(Windows) and Avira security software on all network computers;
• Automatic installation of SMC Agent (Windows) and Avira products on newly
added computers
• Central storage of Avira products for network installation;
• User management for adding and monitoring users and access rights, on
computers or groups;
• Backup for server files;
• SSL encrypted communication protocol and certificate management;
• Support for computers with dynamically allocated IP addresses (DHCP).
;
Product Information
Operating Avira security products over the network:
• Central management for product-specific actions (scan, update…) through
configurable commands and tasks;
• Deploying files/ licenses and running programs remotely from the SMC
Server’s share directory;
• Pull mechanism, for very large networks in order to decrease network traffic;
• Saving of pending operations and tasks (installation, configuration,
commands) for offline computers and for pull Agents.
Updating Avira software over the network:
• Central, automatic updates of Avira SMC components, using the Avira
Internet Update Manager;
• Automatic updates via multiple update servers, due to Avira IUM integration;
• Product status monitoring;
• Central automatic updates of installed Avira products and Software
Repository
• Update test mode, before committing the updates to the release repository.
, via Avira Internet Update Manager;
Monitoring the activity of Avira products over the network:
• Network warnings and email messages in case of certain events;
• Configurable reports for Avira network products;
• Central view for all events and reports issued by Avira products via the
network.
Avira GmbH Avira Security Management Center 10
Product Information
2.3 Licensing
Usually you receive an SMC license file by email when you buy Avira products and
purchase Avira SMC.
When installing SMC Agents on network computers, the license is checked: for
example, if you have a license for 500 Clients, you can add up to 500 computers in
the Security Environment.
You will insert your license after installing Avira SMC (see Licensing Avira SMC –
Page 19).
Evaluation
Mode
If your Avira SMC is not licensed, a warning appears every time you start SMC
Frontend, reminding you that Avira SMC runs for 30 days in evaluation mode. You
need licenses for Avira software packages, to use them with Avira SMC.
2.4 System Requirements
SMC Server:
• Operating system: Windows 2000 Server (SP4 update rollup 1), Windows
Server 2003 SP1 (x32 or x64), Windows Server 2008 (x32 or x64)
• RAM: 1GB
• Disk space: 512MB (including all products and update files)
SMC Frontend:
• Operating system: Windows 2000 (SP4 update rollup 1) (Workstation or
Server), Windows XP (x32 or x64), Windows Vista (x32 or x64), Windows 7,
Windows Server 2003 (x32 or x64), Windows Server 2008 (x32 or x64)
• RAM: 512MB
• Disk space: 16MB
SMC Agent:
• Operating system: Windows 2000 (SP4 update rollup 1) (Workstation or
Server), Windows XP (x32 or x64), Windows Vista (x32 or x64), Windows
Server 2003 (x32 or x64), Windows Server 2008 (x32 or x64), Windows 7,
Linux (glibc22 and libstdc++.so.5), Solaris Sparc 9 and 10
• RAM: 256MB
• Disk space: 16MB
It is advised to have an SSH client installed in order to connect to other client computers
(for example Linux).
When using 64 bit Linux: Please use the required 32 bit libraries.
11 Avira Security Management Center Avira GmbH
3 Installation
3.1 Important Information on Installation
Before installation
Usually you will install Avira SMC Server on a central Windows network server and
the SMC Frontend user interface on a computer in the network on which you can
manage the Avira SMC as administrator. You can also install both components on
the same computer.
The services and program components of Avira SMC require the IP addresses of the
computers and certain open ports for communication. So you must specify this
data during installation in a dialog window.
Moreover, if you intend to allow access to Agent installation files over the network,
you have to activate the option Create SMC Agent Network Share. See 5.5.3 Silent
Agent Setup on Windows.
Installation
If you want the Avira Internet Update Manager to mirror SMC update files in all
available language versions (EN and DE), activate the Multilanguage option. Else,
it will only mirror the update files for the language your SMC uses.
If you install the SMC Frontend on a computer outside the network, you must ensure that
the Frontend ports (default: 7000 and 7001) are open in the firewall for communication
with the SMC Server and Agents.
HTTP Server Port 7080 must be open and not used by other application.
Avira GmbH Avira Security Management Center 12
Installation
Installation Steps
You will perform the following installation steps:
1. SMC Server installation;
2. SMC Frontend installation.
After carrying out these steps, you will configure the SMC, add computers into the
Security Environment, install and manage SMC Agents and Avira products over
the network, as described in the following Chapters.
3.2 Performing Installation
3.2.1 Installing SMC Server
3 You need administrator access to the server.
3 The ports required by SMC Server must be opened (in the firewall if necessary)
and they must not be used by other applications.
Download the current version of Avira SMC as a .zip archive from the Avira
website (http://www.avira.com) and extract it to a local directory.
Double-click the self-extracting archive:
AntiVir_Security_Management_Center_Server_en.exe.
A dialog window with a security warning appears.
Click Accept, to start the setup.
The installation files are unzipped. The
Click Next.
InstallShield Wizard begins.
The License Agreement window appears.
Activate the "I accept..." option after reading the license agreement and click
Next.
The next window appears: Choose Destination Location.
Change the path for installation, if necessary, and click Next.
You will see the Configuration window for IP address and server ports.
(see 3.1 Important Information on Installation above)
Set the Network Interface, if necessary, and confirm with Next.
After the wizard checks the network configuration, a window for entering the
user data appears.
Enter the Administrative account and Account password for operating on this
computer and click Next.
13 Avira Security Management Center Avira GmbH
Installation
In the next window, you have to set the user and password for SMC login.
If you want to use a different account for SMC login through SMC Frontend,
disable the option Reuse account of SMC-Server service as SMC user account
and enter the SMC-User and SMC/ IUM - Password,
else, just leave the option activated and click Next.
Then you can configure the scheduler of the integrated updater.
Make the settings and click Next.
Avira GmbH Avira Security Management Center 14
Installation
The program is ready to be installed.
Click Install.
The main application SMC Server, the other services and database will be
installed. The dialog window for completing installation appears.
Click Finish.
SMC Server is installed. The SMC Server, Event Manager and Avira Internet
Update Manager services start on your server.
3.2.2 Installing SMC Frontend
3 You need administrator access to the computer.
3 The ports required by SMC Server and SMC Frontend must be opened (in the
firewall if necessary) and they must not be used by other applications (see
Before installation – Page 12).
Double-click the self-extracting file:
AntiVir_Security_Management_Center_Frontend_en.exe.
Depending on your Windows configuration, a dialog window with a security
warning may appear.
Click Accept, to start the setup.
The installation files are unzipped. The InstallShield Wizard begins.
Click Next.
The License Agreement window appears.
Activate the "
I accept..." option and click Next.
The destination location window appears.
Change the path for installation, if necessary, and click Next.
The dialog window for completing installation appears.
Click Install.
SMC Frontend is installed.
Click Finish.
In the Windows Start menu, the program group Avira/ Avira Security
Management Center
will appear with the Management Center Frontend
entry.
15 Avira Security Management Center Avira GmbH
4 Avira SMC Frontend
You can manage the services and components of Avira SMC using the SMC
Frontend (graphical user interface), which has been developed as an MMC snap-in.
The MMC appearance, structure and menu options may vary according to your operating
system. Avira SMC runs on MMC1.2 or newer. The following screenshots were made
with MMC3.0 for MS Windows operating systems.
This section will only describe proprietary elements of SMC Frontend.
For further information on MMC and manual integration of a snap-in, please refer to
the instruction manual or online help provided with your operating system.
A mouseover hint appears, when you point your mouse to an input field in the SMC
windows.
Avira SMC Frontend
4.1 Starting SMC Frontend and Connecting to SMC Server
Starting SMC Frontend
In the Windows Start menu, go to Start/All Programs/Avira/Avira Security
Management Center/Avira Security Management Center Frontend
The MMC with the Avira SMC snap-in appears. In the navigation window you
will see the
Management Center Frontend
Console Root and the integrated SMC Frontend (Avira Security
).
.
Avira GmbH Avira Security Management Center 16
Avira SMC Frontend
Connecting to SMC Server
Click on Avira Security Management Center Frontend.
The SMC Frontend initiates connection to the SMC Server. The Login
window appears:
Type in the Login username and Password you provided at SMC setup.
Select Local Computer, if SMC Frontend is installed on the same computer as
the SMC Server,
or
If you installed the Frontend on a different computer, select Remote computer
and type the server’s name or use the Browse button to select the server.
17 Avira Security Management Center Avira GmbH
Avira SMC Frontend
If you use a proxy for network Internet connection or if you have changed the
ports when installing Avira SMC:
Click Settings in the Login dialog.
Select Use proxy and specify address and ports.
Optional: After you have created an individual certificate for your SMC Server
and want the clients to authenticate the Server (see “SSL Certificates
Management” on page 51), click the
Server authentication options:
Click OK.
SSL Configuration tab and activate the
If you have configured the Internet Update Manager in the SMC to be updated via
SMC Frontend activate the option Receive updates from the Internet Update
Manager to download available binaries.
Otherwise a default list will be used for the updates.
Avira GmbH Avira Security Management Center 18
Avira SMC Frontend
The SMC Frontend connects to the SMC Server. The nodes will appear in the
navigation window.
4.2 Licensing Avira SMC
3 The main application SMC Server and the SMC Frontend (graphical user
interface) are installed (see Installation – Page 12)
3 License file is available (saved locally)
Start the SMC Frontend and connect to the SMC Server (see Starting SMC
Frontend and Connecting to SMC Server – Page 16).
The MMC with the Avira SMC snap-in will appear and you will see the panel
named Avira Security Management Center in the console root.
Right-click on Avira Security Management Center Frontend and select License.
19 Avira Security Management Center Avira GmbH
Avira SMC Frontend
The license window appears, displaying the Invalid entry marked in red in the
Status field.
Click New License and enter the path to the license file.
Select the license file (default: hbedv.key) and confirm with OK.
The license file is read and the license window appears:
Licensing is complete.
Avira GmbH Avira Security Management Center 20
Avira SMC Frontend
4.3 SMC Frontend User Interface
Using SMC Frontend, you can configure and operate:
- SMC Server and its modules
- SMC Agents in the Security Environment
- Avira software in the Software Repository
- Avira software installed on computers in the Security Environment.
After you login to Avira SMC, you will see the main window.
Avira SMC manages users with various access rights. Consequently, the SMC Frontend
may display limited features.
The SMC Frontend is composed of two sections: the
the
Details panel (right window). The entries of the expandable navigation
structure are shown as
"win_group" etc.
You can change the appearance of the Details panel (contents, columns and their
order) using the
View menu. The changes will also apply to the other groups.
nodes; for example: the Events node, the computers group
Console tree (left window) and
Console Tree
The Console root with the Avira Security Management Center Frontend contains
the following nodes in the console tree:
Software
Repository
Security
Environment
21 Avira Security Management Center Avira GmbH
Central database of SMC Server for storing Avira products.
Customizable, hierarchical structure, so-called virtual groups with the dedicated
computers. The groups may reflect, for example, the company structure or the
Avira SMC Frontend
network user groups.
Under the Security Environment node, the following nodes appear:
• The Group nodes, with all computers included in the group;
• The computer nodes and the group New computers, with sub-nodes corresponding to all Avira products and SMC Agents.
• Filtered security environment, when you set certain filter types to create
filtered groups.
Network
neighborhood
Events
Reports
Configurations
User
Management
Avira Internet
Update
Manager
Details panel
Workgroups and computers in the MS Windows network. You can choose to
display the network computers by name or by IP address (right-click, Display IP
Addresses
).
List of events that have occurred on the computers within the Security
Environment, in a sorted or filtered list.
View of report templates and reports created for the computers.
General configuration dialogs for Avira SMC and for its services: Server Settings
and Event Settings.
List of all managed users. Here you can create, delete or modify SMC users.
Integrated update servers and settings for mirroring Avira updates, for scheduling
SMC and product updates.
Software
Repository
Security
Environment
Group nodes
The Details panel contains further information for the selected nodes.
Select View> Large/Small Icons from the right-click menu, to display small or
large icons for the computers, products, tasks or events in the Details panel.
Select View> List or View> Details from the right-click menu, to display the
items or item details in table form.
Using the option Add/Remove Columns from the View menu, you can
customize the view in the Details panel. You can also sort the table by clicking
the column headers.
Information on the stored software packages: name, setup file, version and license
file.
Detailed information, for example on the status of groups or computers.
On a group level (e.g. departments), it displays information either on sub-groups
or on integrated computers: products’ names and status icons, computer status,
operating system, Agent available, etc.
Avira GmbH Avira Security Management Center 22
Avira SMC Frontend
Computer
nodes
Using the Views menu settings (Action/ Views in the menu bar or Views in the
context menu) or using the toolbar, the following information is displayed for
every computer:
z Product status:
Displays products’ names and status icons, state and details.
z Product version:
Displays products’ names and version numbers.
z Error messages:
Displays errors issued by Avira products on a computer (with details of product
name, error status and message).
z Events:
Displays the events reported by Avira products on the computer.
z Tasks:
Displays the scheduled tasks that Avira products are set to perform on
computers.
z Pending operations:
Displays the scheduled tasks for offline computers and for pull Agents, which
will be performed when the clients are back online (available) or when the
Agents synchronize.
Events
Reports
Configurations
User
Management
Avira Internet
Update
Manager
Further details of the reported events. The events list can be filtered, so that
specific lists of events can be viewed (for example by Level or by Product).
Information on report templates and the issued reports.
This node will not show information in the Details panel. A click on the
Configurations node will open the
Configuration window with settings for SMC
components (General, Server, Event). See Configuring Avira SMC – Page 41.
More information on users: Name, Real Name, Description, Email Address and
Last login date to the SMC Frontend.
Under each update server, you can see the update status of all software packages
(
Released products node), including SMC components, as well as the update
Scheduler and settings. When running in test mode (see Configuring the Avira
Internet Update Manager – Page 47), the Internet Update Manager also shows the
Test products node.
23 Avira Security Management Center Avira GmbH
5 Configuration
5.1 Overview
You will configure the main application SMC Server and its services using the SMC
Frontend graphical user interface. The following steps are recommended after the
initial installation:
z Configuring Network and SMC Server Connections – Page 25
z Setting the Security Environment – Page 26
z Adding update servers in Avira IUM – Page 33
z Installing SMC Agents in the Security Environment – Page 34
You can make settings for SMC Server services if required:
z Configuring Avira SMC – Page 41
Configuration
z SSL Certificates Management – Page 51
In addition you can easily update Avira SMC via the Internet when updates are
available.
z Updating Avira SMC – Page 53
z Creating an SMC Server Update Task – Page 55
z Displaying and Changing Update Tasks for SMC Server – Page 56
You can set the defined access rights for the SMC users in the User Management
according to your IT administration requirements:
z User Management – Page 56
Starting SMC Frontend
See the procedure described in Starting SMC Frontend and Connecting to SMC
Server – Page 16.
Avira GmbH Avira Security Management Center 24
Configuration
5.2 Configuring Network and SMC Server Connections
You can configure the connection so that these processes are simplified when the
computer reboots and SMC Frontend starts.
You can also add and manage users, set or remove access rights and thus control
the connection of all users to SMC Server (see 5.9 User Management)
Configuring the Network Connection
Right-click the Avira Security Management Center Frontend node and select
Settings.
The Settings window appears:
Enter the required information in the fields of the Administrator Account tab
and save them. You may choose to "
Use the server’s current account", if there is
a common administrator account for more computers over the network.
In case you connect to other client computers (for example Linux) over SSH,
you can activate the option "Use SSH public/ private key authentication" and
then specify the Key file in putty format using the browse [...] button.
Type the password for SMC client computer connection in the Login tab and
click OK.
The entries are saved.
25 Avira Security Management Center Avira GmbH
5.3 Setting the Security Environment
In the Security Environment, Avira SMC uses so-called virtual groups of computers
in order to perform installation, configuration and monitoring tasks. Only
computers integrated into the Security Environment can be managed with Avira
SMC.
Configuration
Security Environment Nodes
You must configure the hierarchical structure of your network in the Security
Environment in such a way, that the structure complies with the specifications for
general installation and configuration of the Avira products on your computers.
For this purpose, you should organize the so-called virtual groups under the
Security Environment nodes, to reflect your company’s structure. You can create
various network groups, such as computers in specific departments, or you can
group computers with similar installation or configuration (products in English,
for example).
You can also create nested groups. Single or multiple groups can always be nested
into other groups. You can rename computers and groups in the Security
Environment.
Status in Security
Environment
The status for computers and groups is displayed as an icon when SMC Frontend
starts, depending on the login account.
Green monitor, green arrow: computer started, SMC Agent installed and running,
full access possible.
Light blue monitor, red arrow: computer started, SMC Agent not installed.
Avira GmbH Avira Security Management Center 26
Configuration
Light blue monitor, orange arrow: computer started, SMC Agent installed, but no
access rights granted.
Dark monitor, orange arrow: computer off or not connected to network, SMC
Agent installed, but disconnected from SMC Server.
Dark monitor, red arrow: computer off or not connected to network, SMC Agent
not installed.
Dark/light blue monitor, orange arrow, red marker on the left side: pending
operation saved, because the computer is off or not connected to the network, or
no access is possible to the SMC Agent. The task is executed as soon as the
computer is available in the Security Environment and connects to SMC Server.
Green monitor, green arrow, red marker on the left side: pending operations and
commands are saved, because the Agent on the computer is set to use the pull
mechanism. The tasks are executed as soon as the Agent performs
synchronization, as configured in the synchronization interval.
Virtual computer group/ sub-group.
Filtered security environment and filter sub-groups.
Avira SMC tries to establish a connection or is running a command.
Computer or group error.
Computer/ group warning or hint.
Agent installed on the computer.
Software pack in Software Repository.
Software pack installed on the computer.
Update files in test mode, waiting to be approved.
Status Not OK. You should check the computer, product or group.
Creating Virtual Groups
Right-click Security Environment in the console tree and select New/Group.
You will see the Create new group window.
27 Avira Security Management Center Avira GmbH
Type the group name and click OK.
The new group will appear in the console tree under the Security
Environment node.
Displaying Computer Names or IP Addresses
Right-click Network Neighborhood in the console tree and select Display IP
Addresses
The option is checked in the context menu: the computers list shows the IP
addresses.
Or, if your action deactivates the option in the context-menu: the list only
shows the names of the computers.
You can use the Search function in the context menu for Security Environment, to locate
a computer or group, by hostname or IP.
.
Configuration
Adding Computers to Virtual Groups
From the Network
neighborhood
From the New
computers node
The computers list contains computer names or IP addresses, depending on the
display settings you make in Network neighborhood.
Go to the Console tree and expand the Network neighborhood node and then
go to the node corresponding to your network (for example Microsoft Windows
network).
You will see the connected computers in the Details panel.
Drag and drop the computer/group from Network Neighborhood to Security
Environment
– OR –
Right-click on a group or sub-group in the Security Environment and select
New/Computer.
You will see the Add new computer window.
Type the Display name for the computer to be displayed in the Security
Environment, as well as the Hostname/IP and click OK.
Now the added computer will appear in the console tree in its group under
Security Environment.
There may be computers with installed SMC Agents that have not yet been added
to the Security Environment (such as laptops or computers on which the SMC
Agent has been manually installed). These will automatically signal to the SMC
Server when connected to the network.
In the Security Environment, click on New computers.
You will see the new computers available with installed SMC Agents.
Add the required computers to other groups in Security Environment as
Avira GmbH Avira Security Management Center 28
Configuration
described above.
Importing Computers in the Security Environment
You can also import a list of computers into the Security Environment using the
Synchronize option from the context menu of the Security Environment. It offers
the following three options:
• Network neighbourhood
•Comma separated file
• Active directory
Network
neighborhood
To import the computers from your Network neighborhood:
Right-click on Security Environment and select Synchronize - Synchronize.
Select Network neighbourhood and press Next.
The computers list from the neighborhood is displayed.
29 Avira Security Management Center Avira GmbH
Configuration
Set the lists of Computers to be added and Computers to be removed.
You can apply the whole list, or first select certain computers and press the
Remove... button, to adjust the desired list.
Comma separated
file
Press Next to import the computers in the Security Environment.
To import a computers list:
Create the list in a text editor and save it on your system. You can give any
name to the file (*.txt). The list has the following structure:
Group,Name,IP or Hostname
1stfloor\Marketing,Computer 01,192.168.146.1
Groundfloor,Reception,PC-Reception
•Group: Name of the group, with relative path to the Security Environment
node, if necessary.
Example: 1stfloor\Marketing
•Name: Display name of the computer in the Security Environment
•IP: IP address or network name of the computer.
Right-click on Security Environment and select Synchronize - Synchronize.
Select Comma separated file.
Type the path to the file [ComputersList.txt] or press the browse button [...] to
select it from your system, then click Next.
The Computers List is displayed. You can adjust the list as described above.
Press Next to import the computers in the Security Environment.
Active directory
To import the computers from active directory:
Right-click on Security Environment and select Synchronize - Synchronize.
Select Active directory.
Avira GmbH Avira Security Management Center 30
Configuration
Under How do you want to represent your Active Directory in the SMC? select
one of the options.
The computers list from the ADS is imported according to your choice. You
can adjust the list as described above.
Press Next to import the computers in the Security Environment.
In order for the import to work, the ADS communication ports must be open
(default setting). See Prerequisites for ADS synchronization – Page 101.
Automatic synchronization with ADS / LDAP
In environments with multiple administrative users, the SMC can help keeping the
Security Environment synchronized with the ADS/LDAP repository, using a
configurable scheduling option:
Right-click on Security Environment and select Synchronize.
Select Schedule synchronization.
Select an option under Active directory.
Press Finish.
The scheduler window appears:
Enter a task name and select the interval for the synchronization then press
Next.
31 Avira Security Management Center Avira GmbH
Configuration
Depending on the interval you selected, you can choose the time and day of
the week in the following window:
Press Finish.
The SMC uses a poll mechanism, at a static synchronization interval.
When synchronization errors occur, this may lead to node database corruption.
To view and edit the scheduled import tasks:
Right-click on Security Environment and select Views.
Select Synchronization tasks.
IP Address filter
Another useful function for grouping computers automatically in the Security
Avira GmbH Avira Security Management Center 32
Configuration
Environment is the IP Address filter, in the context menu of a group.
You can provide an IP range and, when connecting to SMC, the new computers
with corresponding IPs, are automatically imported into that group, instead of
being shown under the New computers group.
Renaming Virtual Groups
Right-click a group and select Rename.
The name field appears.
Edit the name and then click somewhere outside the field.
The new name is saved and displayed.
Deleting Virtual Groups/Computers
If you are sure there are no Avira products installed on those computers, rightclick the group or the computer and select Delete.
The group/computer will be deleted from the Security Environment.
You can use the Search function in the context menu for Security Environment, to locate
a computer or group, by hostname or IP.
5.4 Adding update servers in Avira IUM
If you use more than one update servers over your network, you can integrate them
to Avira SMC Frontend, adding them under Avira Internet Update Manager node.
3 Avira Internet Update Manager has to be installed on the server you want to
add. For more details, please refer to the Avira Internet Update Manager
manual.
Right-click the Avira IUM node and select New/Add IUM server.
Insert the name of the server, the communication ports and password.
33 Avira Security Management Center Avira GmbH
The new update server is added in SMC Frontend, under Avira Internet
Update Manager.
For more details on the configuration of Avira IUM servers, see Configuring the
Avira Internet Update Manager – Page 47.
Then you can choose which server to use for automatic updates of Avira SMC
components and virtual groups or computers. See Updating Avira Products –
Page 94
5.5 Installing SMC Agents in the Security Environment
To install SMC Agents in the Security Environment, you need administrator rights
on all computers.
Please make sure you keep all SMC components and Avira products up to date, in order
to ensure effective communication between them over the Security Environment.
Avira SMC can only monitor computers on which the SMC Agent has been installed. You
have to install the SMC Agent for the entire Security Environment immediately after
adding the computers to the environment. If you will later add new groups or computers
to the system, you can install SMC Agents automatically.
Configuration
If necessary, you can configure the SMC Agent for the whole system or just for
certain groups or computers after installation, and assign the new configuration to
the required groups or computers (see Changing the SMC Agent Configuration –
Page 41).
Prerequisites for communication between SMC Agents and SMC Server
3 If there is a firewall installed on a client computer, the following outgoing ports
(TCP) have to be open (Windows Firewall is automatically configured): 7000,
7001, 7010, 7080, 7100. Furthermore, ICMP requests must be allowed.
3 The Simple file sharing should be deactivated: in Windows Explorer, Tools/
Folder Options/ View/ Use simple file sharing (recommended)
3 The SMC Server must have access to the client’s administrative share: hidden
drive C$ (\\<client’s IP address>\c$\).
3 To ease the installation of SMC Agents over the network, you should use an
administrative user account, common to all computers.
.
Installation Procedures
According to the operating system, the SMC Agent has different installation
procedures:
z Remote installation through SMC Frontend - Installing SMC Agent through
SMC Frontend (Windows 2000/ XP Professional/ Vista/ UNIX) – Page 35
Avira GmbH Avira Security Management Center 34
Configuration
z (optional) Manual installation with setup file - Installing SMC Agent manually
(Win XP Home Edition, optional: Windows 2000/ XP Professional/ Vista) –
Page 36
z (optional) Silent Agent setup on Windows, using a logon script - Silent Agent
Setup on Windows – Page 38
z (optional) UNIX: manual installation with setup file - Installing SMC Agent
Manually on UNIX Systems – Page 39
After you have set the structure of your Security Environment, you can use the automatic
installation feature, to install the SMC Agent and Avira products on newly added
computers automatically. See Automatic product installation – Page 67
5.5.1 Installing SMC Agent through SMC Frontend (Windows 2000/ XP Professional/ Vista/ UNIX)
3 Computers/groups must be integrated into the Security Environment and the
status must be: light-blue monitor, red arrow.
In the console tree, right-click on Security Environment or on the groups/
computers on which you want to install the SMC Agent.
The computers or groups with the status icons will appear in the Details
panel.
Right-click the group and select Installation/Avira SMC Agent/Install.
You will see the Administrator Account window:
Fill in the Username and Password for the administrator account, if you use
another administrator account on the client computer, than the one for the
SMC Server,
or activate the option Use the server’s current account.
35 Avira Security Management Center Avira GmbH
Configuration
In case you connect to the client computers (for example Linux) over SSH, you
can activate the option "Use SSH public/ private key authentication" and then
specify the Key file in putty format using the browse [...] button.
Click OK.
SMC Agent will be installed on the required computers and groups.
Start the SMC Frontend (see Starting SMC Frontend and Connecting to SMC
Server – Page 16).
In the Frontend, the client computer, for example win2, has the green icon,
while in the Details panel the Agent status is Ok:
5.5.2 Installing SMC Agent manually (Win XP Home Edition, optional: Windows 2000/ XP Professional/ Vista)
To install SMC Agent on Windows XP Home Edition, you need the file
AntiVir_Security_Management_Center_Agent_en.exe. You can find it in the local
directory, where you unpacked the SMC Server installation .zip archive (see Performing
Installation – Page 13).
3Computers/groups must be integrated in Security Environment and the status
must be: light-blue monitor, red arrow.
Copy the file AntiVir_Security_Management_Center_Agent_en.exe to the local
computer on which you want to install SMC Agent.
Double-click on the file.
A window for unzipping and installation is displayed.
Click Setup.
The installation file is unzipped. InstallShield Wizard appears.
Click Next.
You will see the License Agreement.
Avira GmbH Avira Security Management Center 36
Configuration
Select I accept... and click Next.
The next window asks for SMC-Server Configuration data.
Enter the server’s IP or Hostname and click Next.
The following window contains SMC-Agent Configuration data.
Enter the data for the local computer (Computer name, as it appears in the
Security Environment, and Port for communication with the Server).
Here you can also activate the Pull Mode, if the computer is located in a large
network (for more details on the pull mode, see “Push and Pull Mechanisms” on
page 81).
Click Next.
The window Choose Destination Location appears.
If necessary, select another destination for the installation and click Next.
37 Avira Security Management Center Avira GmbH
Configuration
You will see the Ready to install window.
Click Install.
The SMC Agent will be installed and then the final window appears.
Click Finish.
SMC Agent is locally installed.
Start the SMC Frontend on the SMC Server (see Starting SMC Frontend and
Connecting to SMC Server – Page 16).
Computers/groups appear in the Security Environment with the status icon:
green monitor, green arrow. Agent status is Ok.
If they have not been integrated in the Security Environment yet, they will
appear under New computers. You can move them into other subcategories in
the Security Environment.
5.5.3 Silent Agent Setup on Windows
If you prefer using a Windows logon script to install SMC Agents, instead of the
interactive remote installation feature in SMC Frontend, you can execute an install
script via file share. Create a group node or use the New computers node or apply
the automatic sorting feature IP Address filter. Agents will be installed without any
further user interaction.
3 Make sure the client computers have access to the shared directory, where SMC
Server keeps the SMC Agent setup file (default: C:\Documents and Settings\All
Users\Application Data\Avira\Avira Security Management Center
Server\Agent\installagent.bat
Integrate the batch file in a logon script on Client computers, to call the Agent
installation in silent mode. The parameters for the installation are saved in the
installsmcagent.iss
file
). See Before installation – Page 12.
Avira GmbH Avira Security Management Center 38
Configuration
5.5.4 Installing SMC Agent Manually on UNIX Systems
If required, you can install SMC Agent manually.
You can find the SMC Agent installation kit for UNIX systems (AntiVir_Security_
Management_Center_UNIX_Agent.tgz)
http://www.avira.com .
3 Computers/groups must be integrated into the Security Environment and the
status must be: light-blue monitor, red arrow.
If you installed the Agent on computers outside the Security Environment,
they will be added in the New computers group.
3 You must know the IP address of the server.
Save the kit for UNIX SMC Agent (AntiVir_Security_
Management_Center_UNIX_Agent.tgz)
in the SMC archive on our website
on the computer.
Unpack the archive:
linux:/tmp# tar -xzvf AntiVir_Security_
Management_Center_UNIX_Agent.tgz
The files are extracted.
Change to the installation directory:
linux:/tmp# cd AntiVir_Security_
Management_Center_UNIX_Agent/
Install the SMC Agent: you must enter the server IP address.
linux:/tmp/AntiVir_Security_
Management_Center_UNIX_Agent# ./install
--server_uri=HOST[:PORT] --update_uri=HOST[:PORT]
--display_name=<SMC display name>
You must specify the server’s IP address and the computer name to be displayed
in SMC Security Environment. The port is optional, and it has to be specified if
you changed the default ports for Agent’s communication with the SMC Server.
The following message appears:
Starting Security Management Center UNIX Agent installation.
Before installing, you will see the License agreement.
Press y or Enter, after you read the text.
After installing the components, the script asks:
Would you like SMC UNIX Agent to start automatically? [y]
Press y or Enter, to set up a startup script.
39 Avira Security Management Center Avira GmbH
Then you are asked if you want the Agent to start:
Would you like to start the SMC UNIX Agent now? [y]
Press y or Enter.
The Agent installation is complete.
To check the status of SMC Agent:
Change to the installation directory:
cd /usr/lib/AntiVir/agent
Type the command:
./smc-agent status
If SMC Agent is not running, type:
Configuration
./smc-agent start
Check that all computers have the SMC Agent status Activated in the Details
panel.
5.5.5 Uninstalling SMC Agent
If you uninstall SMC Agent from a computer, the Avira products installed on that
computer can no longer be managed by Avira SMC.
We recommend that you uninstall SMC Agent from a computer only after it has been
removed from the Security Environment and all Avira products have been uninstalled.
Right-click on the group/computer in the Security Environment and select
Installation/Avira SMC Agent/Uninstall.
A question appears:
Answer Yes.
SMC Agent is uninstalled. The status icon of the group/computer(s) is
changed.
Avira GmbH Avira Security Management Center 40
Configuration
5.6 Configuring Avira SMC
Avira SMC includes the following services: Server, Event Manager, Avira Internet
Update Manager as well as the SMC Agent client service. All services are
automatically configured when Avira SMC is installed.
The default configuration of the services and the configuration made during Avira SMC
installation on the server are optimized for the current network.
We recommend that you change them only if absolutely necessary and with extreme
caution.
Avira SMC errors!
Changes in settings may cause functional errors in Avira SMC!
Please contact our support before changing any settings.
You can configure the services in the Configuration windows of every service, as
described below.
5.6.1 Changing the SMC Agent Configuration
The SMC Agent configuration is specific to the tree structure of the Security
Environment. The settings are inherited from the parent node on each level. You
can change the settings for every node, if you deactivate the option Inherit
configuration
It is recommended to configure the SMC Agents starting from the root node,
Security Environment (right-click on the node and choose Configuration/Avira
SMC Agent/Configure
Then you can make changes for certain computers or sub-groups (if you deactivate
the option Inherit configuration): the computer will overwrite the settings
inherited from the root.
Right-click the computer/group and select Configuration/Avira SMC Agent/
Configure
The
Disable the option Inherit configuration and make the changes you need in the
configuration menus: General configuration and Communication. The options
are explained below.
.
). All the computers in the group will inherit the settings.
.
Configuration window appears.
If you want to immediately apply the new settings to the computer/group:
Click Send now.
The new configuration is applied to the computer/group.
If you need to apply this configuration to the respective computer/group later:
Click Send later.
The new configuration will be saved locally. You will be able to apply it to the
chosen computer/group at the required time.
41 Avira Security Management Center Avira GmbH
General
configuration
Configuration
Registration
attempts
Registration delay
Drop events
Events commit
interval
Server
communication
Pull interval
Signal Error on
critical event
The number of attempts for the SMC Agent to connect to the SMC Server. You
should keep the default value "-1" for continuous attempt.
The time interval for the Agent to start, after the OS on client computers starts, to
avoid traffic overload.
The type of events (Info or Info & Warning) the Agent would not forward, to reduce
the traffic and the size of the Events Manager’s database.
The time interval for the services to send the events to the Event Manager. The
events are not sent immediately, but are collected in order to ease network traffic.
The mechanism used for Agents to retrieve data from the Server: Push, for clients
in a local area network;
Pull, for clients with firewall.
Server connect interval, in minutes, when the Pull mechanism is active. Default is
60.
When activated, the Agent signals every critical event to the Server, which will
display an error state for the affected computer.
Avira GmbH Avira Security Management Center 42
Configuration
Communication
Enterprise Event
manager
Enterprise Server
URL
Update URL
Request Server
authentication
validate Common
Name (Host)
HTTP address and communication port on which the Event Manager service is
installed.
HTTP address and communication port on which the Server is installed.
HTTP address and communication port on which the Update service is installed.
Activation of SSL Server authentication.
Validate the Common Name of the Host in the Server certificate.
5.6.2 Changing the Configuration for SMC Server and Event Manager
Click on Configurations in the SMC console tree.
The Configuration window appears.
Click the required settings group in the left panel.
You will see the settings in the right panel.
Make the changes. The options are explained below.
Click OK.
You will be prompted to restart the services, in order to apply the changes.
Click Yes.
43 Avira Security Management Center Avira GmbH
General Settings
To configure the Server to send email notifications about error status and events,
use the General Settings options:
Configuration
This only takes a few seconds. If SMC Server or Frontend are disconnected,
you have to login to SMC again.
SMTP Server
Sender email
address
User login data
Name of the mail server.
The email address, which the SMC uses to send notification emails.
If mail server authentication is necessary, activate this option and then fill in the
Login and Password.
SMTP Login,
Password
Username and password for connecting to the mail server.
Server Settings
General
Avira GmbH Avira Security Management Center 44
Configuration
Display agent
synchronization
command
Minimize
GUI refresh
Communication
When this option is activated, the context menu of Security Environment or
computer groups will have an additional command: Force agent synchronization.
See Push and Pull Mechanisms – Page 81.
You can use this option, if you have numerous clients in your Security
Environment, to limit the refresh instances of the Frontend and thus to increase
SMC performance. The Frontend will refresh only when errors or pending
operations appear in computer status.
Synchronize client
node hostname or
IP address with
client values
Synchronize client
node display
name
Event Settings
If you have activated the option Synchronize client node hostname or IP address
with client values you can choose whether you would like to specify a hostname
or an IP address in order to update the client node. If this option is activated SMC
retrieves the hostname or IP address from the Agent whenever it connects to SMC.
Active this option if you want to synchronize the display name of the client node.
every time the Agent connects to SMC.
The events sent by Avira products to the Event Manager (such as a virus alert) can
be transmitted directly to a specified email address. Therefore, in addition to the
events being displayed in SMC Frontend, the administrator can be directly
informed, for example, of critical events.
45 Avira Security Management Center Avira GmbH
Configuration
Email Address
Show warnings
Show critical
events
Email address of the recipient, for example the administrator or the collective
address for system administration, so that more team members receive the
message. The SMTP server settings from the General Settings tab are used.
If you want to receive notifications about warnings via email activate this option.
Select Email to specify a minimum number of events to occur, for a message to be
sent.
If you want to receive notifications about critical events via email activate this
option. Select Email to specify a minimum number of events to occur, for a
message to be sent..
Avira GmbH Avira Security Management Center 46
Configuration
5.6.3 Configuring the Avira Internet Update Manager
Avira Internet Update Manager (Avira IUM) is integrated in the SMC Frontend and
it manages the updates for Avira software packages and installed products. In the
automatic update mode (activated by default, see Updating Avira Products –
Page 94) it is no longer necessary to create update tasks in the scheduler, nor to
configure any update servers, because the updates are automatically triggered by
and downloaded from the integrated Internet Update Manager (IUM). The
automatic update mode also provides the fastest possible deployment of available
updates to all client computers.
The client computers in your network will no longer need to download the updates
from the Internet themselves, but instead they can update the products via your
Intranet, reducing your Internet traffic.
The Internet Update Manager service runs on one or more servers in your network
and manages the download of the product updates on these servers. With the SMC
Frontend you can configure and operate the Internet Update Manager service
remotely.
When you install Avira SMC Server, one Avira IUM service is installed by default
on the same server. You can later add new servers to the IUM node (as described
under Adding update servers in Avira IUM – Page 33).
To set the configuration of each IUM server in your Security Environment, expand
the node Avira Internet Update Manager, then expand the server node and use the
configuration options under Server Settings and Frontend Settings.
47 Avira Security Management Center Avira GmbH
IUM Server - General Settings
Configuration
Directories
UNC
Authentication
Updates
To set the target directory in which updated files and program packages are to be
stored: under Root directory for update files, enter the target directory on the
server. The target directory may also be in the network. Shares are not possible.
NOTE: If the target directory is on a computer in the Intranet, you must enter the path
manually in the form of a UNC path. Ensure that you have sufficient rights on the target
computer. The Avira IUM Service must not be logged in as a local system account, because
a login on the target computer would not possible. Example:
\\Target computer\Activation\Updates\AntiVir\
If authentication is necessary on the selected server, activate the option Use
authentication for root directory,
then fill in the User and Password.
In the Updates area, you can use the option Activate test mode.
In test mode, new files are downloaded to a test directory (hosted by a second
HTTP server) for approval. When validated, they can be committed to the default
HTTP server and deployed over the Security Environment. See Test mode –
Page 97.
If you want the IUM servers to notify you about which products were updated in
automatic mode, activate the option Automatically inform attached SMC about
new updates
.
Configure Avira
IUM updates
Under Configure Avira Internet Update Manager updates, activate the option Install
IUM service updates automatically
, if you want the update of the Avira IUM to be
installed on the update servers immediately after a successful download (Does not
apply for the Updater integrated in SMC).
Avira GmbH Avira Security Management Center 48
Configuration
If you are in test mode and want to update via IUM, please commit the files before
update. Otherwise you will not be able to update the SMC Server and Frontend
afterwards.
Log level
To set the level of events to be logged in the IUM logfile, use the Log level drop-
down and select: Info, Warning, Error, Trace or Debug.
IUM Server - Network Settings
Web server
To change the default download server, activate the option Use own server list, and
enter the address (IP address or computer name) of the required download server
in the Update server list field. You can also provide multiple download servers,
separated by commas. In this case, one is chosen randomly.
HTTP server
In the HTTP server area, change the values for Address of server, Port of server
, and Port of test server 7100, if they are already used by another application
7080
on the computer.
Proxy server
If you access the Internet via a proxy server, activate the option Use server in the
Proxy server area, then enter the data for the proxy server (Use authentication is
optional, if required by the proxy server).
49 Avira Security Management Center Avira GmbH
IUM Server - Email Settings
How to set the notifications sent by Avira Internet Update Manager:
Configuration
Email messages
Authentication
In the Email messages area, activate the option Activate email notification and fill
in the following fields:
• SMTP Server: Name of the mail server. The host name must not be more than
127 characters long.
Example: 192.168.1.100 or mail.testcompany.com
• Return address: Email address of the sender (optional).
Example:
sendername@testcompany.com
• Recipient(s): Email-address of the recipient. Separate the individual addresses
with a comma.
Example:
recipientname@testcompany.com
If an authentication on the mail server is necessary, activate the option Use
authentication
in the Authentication area and enter the login data for the mail
server.
In the area Email notification for the following events, select when the Avira IUM
should send emails: Error, Warning or Information. Also observe the information
in the logfile. You can use the Send test email button, to test the notification
settings.
The Simple Message Transfer Protocol (SMTP) is used for sending emails. An ESMTP
(Extended SMTP) is not currently supported. Encrypted transmission of TLS (Transport
Layer Security) or SSL (Secure Socket Layer) is not currently possible.
Avira GmbH Avira Security Management Center 50
Configuration
IUM Frontend Settings
Activation of SSL server authentication:
Avira SMC supports signed SSL certificates for all its server applications, including
Avira IUM Server. Avira IUM Frontend, as client application, supports SSL server
authentication (more details on the SSL feature below).
5.7 SSL Certificates Management
SSL provides secure communication using data encryption and server/ client
authentication. This means that before any information is exchanged, the client
has to verify the true identity of the server and the server has to verify the true
identity of the client. Then the communication peers can start exchanging
encrypted information.
Avira SMC supports signed SSL certificates for all its server applications (Event
Manager, IUM Server, SMC Server). SMC Server comes with a new tool that
supports SSL certificate creation and deployment. The new SSL private keys and
signed certificates are then stored in the SSL directory in SMC Server.
All SMC clients (SMC Agent, IUM Frontend, SMC Frontend) support SSL server
authentication.
When you decide to create an individual certificate for your SMC Server and want
the clients to authenticate the Server:
1. Create a certificate sign request (CSR) using the Certificate Creation Tool:
51 Avira Security Management Center Avira GmbH
Configuration
Double-click the file SSLCertRequester.exe (located in C:\Program
Files\Avira\Avira Security Management Center Server\
Select the first option - Create a SSL Certificate Request and Private Key.
), and press Next.
Fill in the data fields and press Create Certificate.
Along with the CSR (YourNa meR eq.pem) the tool also creates a private key
(YourNameKey.pem) for the SMC Server.
2. Keep the private key in a safe place and send the CSR to a trusted Certificate
Authority for signing.
3. When you receive the signed certificate by email, use the
Tool
to update the certificate and the private key in SMC:
Double-click the file SSLCertRequester.exe (located in C:\Program
Files\Avira\Avira Security Management Center Server\
), and press Next.
Certificate Creation
Avira GmbH Avira Security Management Center 52
Configuration
Select the second option Import a signed Certificate and Private Key pair.
Press Browse and navigate to choose the Private Key and the Certificate from
where you saved them on your system, fill in the Password, then press Import.
The tool stores the certificate and the private key in the SSL directory of SMC
Server.
4. Turn on the SSL server authentication feature, in the configuration of SMC
Agent (see “Communication” on page 43), IUM Frontend (see “IUM Frontend
Settings” on page 51) and SMC Frontend (see “Connecting to SMC Server” on
page 17).
5.8 Updating Avira SMC
It is very important to keep your software up to date and to make sure the
components’ versions are compatible. You can easily update Avira SMC’s
components: SMC Frontend, SMC Server with all its services and the SMC Agents.
Avira SMC has an Internet connection to the Avira GmbH public servers and is able
to download and install available SMC updates.
In order to perform Avira SMC updates, you need an Internet connection and you have
to open the necessary ports in your network firewall.
During installation of SMC Server updates, the connection to SMC Server will be
interrupted and the SMC Frontend must be closed.
53 Avira Security Management Center Avira GmbH
Apart from executing direct updates (see below), the Security Management Center
supports automatic updates:
• via Avira Internet Update Manager (see Connecting to SMC Server –
Page 17)or
• through scheduled update tasks (see Creating an SMC Server Update Task –
Page 55), if the automatic mode is inactive.
5.8.1 Updating SMC Server and Frontend
Performing Direct Updates
Right-click Avira Security Management Center Frontend and select Update.
Select Server/Start update for immediate Server update
– OR –
Select Frontend for immediate Frontend update.
The following message appears:
– for Server update:
Configuration
– for Frontend update:
Confirm with Yes and close SMC Frontend if necessary.
The connection to the SMC Server will be interrupted.
The Avira SMC connects to the Internet, downloads the update files from the
Avira GmbH server and installs them.
Restart SMC Frontend and connect to SMC Server (see Starting SMC Frontend
and Connecting to SMC Server – Page 16).
Updating via the Internet Update Manager
When using the automatic update mode (activated by default, see General Settings
– Page 44), you can select one of the IUM servers, to update SMC Server and
Frontend: right-click the root node Avira Security Management Center Frontend,
select Update and click one of the options Use <server> for updating the SMC in
the submenu.
Avira GmbH Avira Security Management Center 54
Configuration
If the test mode is active for the IUM server assigned to SMC, the server will always be
updated from the Released products folder. Please commit the test files first (see Test
mode – Page 97).
Go to the Avira Internet Update Manager node and select an IUM server.
Right-click the Released Products node and select Update mirrored products, if
you want to update the entire Avira software in your Security environment.
Click on the server’s node, then on the Update Status tab in the Details Panel,
to see the update progress.
Creating an SMC Server Update Task
You can use update tasks for regular SMC Server updates.
Only administrators can schedule update tasks.
Right-click Avira Security Management Center Frontend and select Update/
Server/Schedule update check
The window Create a Task appears.
Type a name for the task, select the task frequency and click Next.
Select the start date and time for the task and click Finish.
The task is scheduled.
You can modify the task settings at any time from the context menu (see below).
55 Avira Security Management Center Avira GmbH
.
5.8.2 Displaying and Changing Update Tasks for SMC Server
Right-click Avira Security Management Center Frontend and select Update/
Show tasks.
The details for the update server task are displayed in the Details panel (see
Displaying Tasks for software packages or for SMC Server updates – Page 84).
In order to modify a task:
Double-click the task.
The window Create a task appears.
Make the changes and save the task again.
5.8.3 Updating SMC Agents
To update SMC Agents over the entire network or on a certain group manually:
Right-click Security Environment or the group node and select Commands/
Avira SMC Agent/Start Update
.
Configuration
To update SMC Agents on a certain computer:
Right-click the Avira SMC Agent under the computer node in the Security
Environment and select Commands/Start Update.
The SMC Agent update can also be scheduled, by pressing the button Schedule this
command
in the Commands window.
You can also update SMC Agents automatically via Avira Internet Update
Manager
, along with all mirrored products, as described above for SMC Server and
Frontend.
5.9 User Management
With the User Management you can create a hierarchy with certain access rights.
There are global and group specific settings for each user. This helps the
administrators to effectively organize the monitoring of the Security Environment
in the case of divided IT tasks, for example, or for vacation replacements. Certain
SMC users will be able to connect to the server to view events or reports, but they
will not be allowed to change relevant security settings.
Adding New Users
Right-click on the User Management node and select Create new user.
Avira GmbH Avira Security Management Center 56
Configuration
The New user window appears:
Type the user name, complete name and optionally a description and email
address.
If you do not want the account to be active yet, check the option Account is
deactivated
Configure the user rights in the Permissions tab.
Click OK and enter the password, to add the user.
.
The new user appears in the Details panel.
Configure User Account
The following settings are available for every user account:
• password: type the login password of the user to Avira SMC
• properties: enter user name, complete name, description and email address
• permissions: establish the access rights to Avira SMC
All users can see the Security Environment.
57 Avira Security Management Center Avira GmbH
You can set the following rights for every user:
• Display network neighborhood
• Display reports
• Modify/delete reports
• Manage users
• Display events
• Delete events
• Manage Software Repository
• Change own login password
•Configure SMC
•Configure IUM
• Create filtering groups
• Display filtering groups
Configuration
Set password
Configure
properties and
rights
Right-click a user icon in User Management and select Set password.
The
Type the password, confirm it and click OK.
Password window appears.
The access to the user account is now password-protected.
Right-click a user icon in User Management and select Properties.
The window Properties of [Name] appears.
Make the changes to the user properties.
Click on the Permissions tab.
Avira GmbH Avira Security Management Center 58
Configuration
The tab opens.
Select or deactivate the rights of the user and confirm with OK.
Delete user
Right-click a user icon in User Management and select Delete.
Click Yes.
The user is deleted.
Configuring User Rights in Virtual Groups
You can set access and rights to virtual groups or to computers in the Security
Environment for all users. These rights are assigned in cascading form and
inherited downwards in the hierarchy of the virtual groups.
Consequently, you can set the authorized users for every node and establish their
access rights or just let them inherit the rights from the nodes above.
The following rights are available for every group or user:
•browse
• create/delete groups
• add/delete computers
• deploy/uninstall/configure agents
• install/uninstall/configure products
• send commands
• manage server tasks
• generate reports
• manage group permissions
• receive product status emails
59 Avira Security Management Center Avira GmbH
The rights for the Administrator user cannot be modified.
Right-click the node of a computer or virtual group in the Security
Environment and select User permissions.
The User permissions window appears.
Configuration
Manage users
Select a user and configure the rights in the Permissions area.
You can configure the users and their rights for every node. When settings are
inherited from superior nodes, parts of the window are gray (inactive).
To enter node-specific settings, deactivate the option Use parent settings.
Click on Manage users.
The Users window appears.
Avira GmbH Avira Security Management Center 60
Configuration
Use Parent
Settings
In the Available users area, select the users that should have access to the node
and confirm with Add
– OR –
Select the users that should not have access to the node and confirm with
Remove.
The users are added in/removed from the Selected users area.
In order to inherit the settings from its superior node: select the option Use
parent settings
.
The settings for users and rights are inherited.
The settings for Everyone match all users, which are not explicitly configured.
61 Avira Security Management Center Avira GmbH
6Operation
6.1 Overview
This chapter describes the integral functions of Avira SMC. They may vary slightly
according to the operating system and MMC version on your computers.
You can manage Avira products using the following functions of Avira SMC:
z Store, install, uninstall and configure software packages:
Managing the software packages – Page 63
z
Create filtered groups in Security Environment, using certain criteria:
Creating Filtered Computer Groups – Page 69
z Display various information about the computers in the Security Environment
after installing the software packages:
Displaying Information about a Computer or Group – Page 72
Operation
z Display and filter Avira SMC messages after installing and configuring the
software packages:
Viewing Events – Page 79
z Perform product-specific actions (e.g. scan or update) or schedule regular tasks:
Performing Commands and Planning Tasks – Page 81.
z Access reports and periodically inquire the status of installed software and
overview past events and messages that occurred on computers in the Security
Environment:
Creating and Listing Reports – Page 85
z Share and run files and special Avira tools via the network within the Security
Environment:
Deploying Files/ Licenses/ Programs in the Security Environment – Page 89
z Register all Avira SMC actions in logfiles (optional). In this way it is easier, for
example, to identify software installation errors in the network:
Handling Errors – Page 92
Starting SMC Frontend
See procedure in section Starting SMC Frontend and Connecting to SMC Server
– Page 16).
Avira GmbH Avira Security Management Center 62
Operation
6.2 Managing the software packages
Using Avira SMC Frontend, you can easily and conveniently install, configure and
uninstall Avira products in virtual groups of the Security Environment. Avira SMC
treats Avira products as so-called software packages in its own database.
Software Repository Node
The software packages are displayed in the SMC Frontend under the Software
Repository
node.
The Details panel shows general information on the software: Avira product name,
name of the setup file, version, as well as license file.
6.2.1 Adding and Deleting a Software Package
For example, an Avira product is stored in the Software Repository directory: Avira
AntiVir Professional 10 (Windows), EN
files of the Avira product and an info file, all archived in a self-extracting file and
saved to Avira SMC database.
You cannot install a software package in the network until you purchase a license from
Avira GmbH. You can find details about licensing in the Avira product documentation.
. A software package consists of all program
63 Avira Security Management Center Avira GmbH
Adding a Software Package
3 The Avira product must be saved on a computer in the local network.
Right-click Software Repository and select New/Software.
The window for Selecting the Software Package opens.
Select the path to the software package and click Open.
The software package will be integrated into SMC. The Details panel will
display the data contained in the package’s info file.
Click on the browse […] button, enter the path to the software license file and
click Open.
The Details panel will show the path to the license file.
Click Accept.
After SMC verifies the license, the software appears under Software
Repository
information on the software.
Operation
and under Avira IUM servers. The Details panel displays
Please note that this license file is used only for software (re)installation. In order to
extend the license for a certain product, you have to load a license file using the Copy files
function, as described in Sharing License Files – Page 91.
Avira GmbH Avira Security Management Center 64
Operation
Deleting a Software Package
We recommend that you do not delete the existing software packages because you may
accidentally delete related files from the hard disk of the server and you cannot manage
the products in Security Environment anymore.
Expand the Software Repository node.
The stored software packages are displayed.
Right-click the software package and select Delete.
The software will be deleted from the Avira SMC database.
6.2.2 Installing and Uninstalling an Avira Product
Please read the file README.TXT in the main directory of Avira SMC.
The installation and uninstallation of Avira products on computers in Security
Environment using Avira SMC runs protected, meaning it cannot be interrupted or
cancelled.
The installation and uninstallation of products will be executed if the concerning
computers in the Security Environment are online and SMC Agents are on.
In the case of offline computers or Agents set with pull mechanism, the actions and
commands (for example installing a product) are saved and automatically triggered
by the program immediately after the computers/groups go online, or the Agent
performs the synchronization. The computers will have the status for pending
operations
The installation also implies the configuration of Avira products. The configuration of
installed Avira products requires knowledge of configuration parameters.
Please read and follow the configuration instructions from the Avira product’s User
Manuals before performing remote installation/configuration with Avira SMC.
Installing a product
Using Avira SMC you can simultaneously install Avira products on multiple
computers, which have the same operating system family (workstation, server,
Unix, ...). Therefore, the Security Environment virtual groups must be structured
according to configuration requirements (see Setting the Security Environment –
Page 26).
: red marker on the left side and/or orange arrow.
If the SMC Agent is not available on a computer on which you want to install a product,
the SMC Agent will be automatically installed first.
During installation, a product-specific Install window appears, where parameters
can be set (see Product-specific Configuration Panels – Page 103).
65 Avira Security Management Center Avira GmbH
Example of Install window for Avira AntiVir Professional (Windows):
Operation
Right-click the computer/group on which you want to install the software.
You can also use the Search function in the context menu for Security Environment, to
locate a computer or group, by hostname or IP.
Select Installation/[product name]/Install.
An Install window is displayed, with program-specific dialogs and messages.
The options are similar to those in the installation dialogs of every Avira
product.
To modify the install settings of the Avira product, disable the option Inherit
configuration
, make the changes and click OK.
The SMC Agent installs the product.
In the console tree, click on the computer or group on which the installation
has been made.
The Details panel will display further information on the installed Avira
products on the computer.
Uninstalling a Product
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click on the computer or group which contains the software you want to
remove.
In the context menu select Installation/[product name]/Uninstall.
Avira GmbH Avira Security Management Center 66
Operation
Click Yes.
The product is uninstalled. The entries of this product will be deleted from
the computer details in the Details panel.
Automatic product installation
You can set automatic installation routines for computers or groups, to have the
SMC Agent and certain Avira products installed, immediately after new computers
are added to the group.
To install products automatically, the SMC user account must have administrative
access rights on the new computers.
The SMC Agent has to be installed manually on Unix systems.
Right-click the group under the Security Environment and select Installation/
Products
.
Deactivate the option Inherit from parent.
If you activate the Enable option, you can choose the products you want to
install automatically, when computers are added to the group.
Two more options are available for this feature:
• Install agent automatically when not available on the target system (Windows
only).
• Automatically uninstall products which are not selected in the list.
67 Avira Security Management Center Avira GmbH
6.2.3 Changing the Configuration of an Avira Product
The configuration of the products is specific to the tree structure of the Security
Environment. The settings are inherited from the parent node on each level. You
can change the settings for every node, if you deactivate the option Inherit
configuration.
It is recommended to configure the Avira products starting from the root node
Security Environment. All the computers in the group will inherit the settings.
Then you can make changes for certain computers or sub-groups (if you deactivate
the option Inherit configuration): the computer will overwrite the settings
inherited from the root.
During configuration of each Avira product, a product-specific Configuration
dialog window is displayed, where parameters can be set (see Product-specific
Configuration Panels – Page 103).
Example of Configuration window for Avira AntiVir Professional (Windows):
Operation
When installing and configuring a software package on a computer in the Security
Environment, a product-specific configuration panel appears. The settings available in
this window are similar to the configuration options available for that Avira product.
For further details on configuration parameters, please refer to the Avira product
documentation.
Avira GmbH Avira Security Management Center 68
Operation
In the case of offline computers or Agents set with pull mechanism, actions and
commands (such as configuring an installed Avira product) are saved in SMC as
pending operations and automatically triggered by the program immediately after
the computers are online, or when the Agent makes the synchronization. The
computers will have the status for pending operations: red marker on the left side
and/or orange arrow.
Configuring an Avira Product
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click the computer/group.
Select Configuration/[product name]/Configure.
You will see the product-specific Configuration window.
Deactivate the option Inherit configuration and adjust the product settings.
If you want to immediately apply the new settings to the computer/group:
Click Send now.
The new configuration is applied to the computer/group.
If you want to apply these settings to the computer/group later:
Click Send later.
Avira SMC will save the new configuration locally for the current node. You
can apply it to the computer/group later.
6.3 Creating Filtered Computer Groups
Using the command New/Filtering group from the context menu of the Security
Environment or of a computer group, you can create sub-groups of computers,
according to certain criteria:
• error states
• product reporting an error
• specific product not installed
In this way, you can execute commands directly on the filtered groups, without
having to search for the computers in a very large group.
Right-click the Security Environment or group and select New/Filtering group.
69 Avira Security Management Center Avira GmbH
Operation
The filter wizard starts.
Type the name of the filtered group you want to create (for example errors)
and press Next.
The Filter type window appears.
Error states
Select the first filter type, if you want to create a sub-group with all computers
reporting an error, and press
Finish.
Avira GmbH Avira Security Management Center 70
Operation
The errors sub-group appears under Filtered security environment node.
Product which
reports an
error
Select the second filter type, if you want to create a sub-group with all
computers on which a product reports an error, and press Next.
The Module error window appears.
Select the module errors you want to group and press Finish.
The sub-group appears under Filtered security environment node.
Product not
installed
Select the third filter type, if you want to create a sub-group with all computers
on which a specific product is not installed, and press Next.
71 Avira Security Management Center Avira GmbH
Operation
The Product filter window appears.
Select the product, to group computers on which it is not installed, and press
Finish.
The sub-group appears under Filtered security environment node.
6.4 Displaying Information about a Computer or Group
6.4.1 Displaying Information about a Node/Computer
You can use the right-click menu to view some basic information on a node or
computer.
The information on a virtual group:
• Computer amount in group: number of computers in the group.
Available: the number of computers currently connected to the Avira SMC.
•
• Product and count: name and number of the products installed in the group.
The information on a computer:
•
Display name: the name of the computer in the Security Environment.
Hostname/IP: host name or network IP address.
•
You may also use the Search function in the context menu for Security Environment, to
locate a computer or group, by hostname or IP.
Virtual Group
Properties
Right-click on a virtual group in the Security Environment and select Properties.
Avira GmbH Avira Security Management Center 72
Operation
The Properties window appears:
Computer
Properties
Right-click on a computer in the Security Environment and select Properties.
The
Computer properties window appears:
6.4.2 Displaying Information in the Details panel
Avira SMC stores various information on every computer or group in the Security
Environment, which you can display and also sort in the Details panel.
When selecting a computer, the right-click menu as well as the toolbar offer various
view modes:
z for a group: Status, Error messages, Tasks and Pending operations.
z for a computer: Products status, Product version, Error messages, Events,
Tasks and Pending operations.
Setting and Sorting the Displayed Information
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click the computer/group for which you require information (or use the
toolbar buttons).
Select the required view: Product status, Product version, Error messages,
Events,
The required information is displayed in the Details panel.
Select View> Large/Small Icons from the right-click menu, to display small or
large icons for the computers, products, tasks or events in the Details panel.
73 Avira Security Management Center Avira GmbH
Tasks or Pending operations.
Status View
Operation
Select View> List or View> Details from the right-click menu, to display the
items or item details in table form.
Using the option Add/Remove Columns from the View menu, you can
customize the view in the Details panel. You can also sort the table by clicking
the column headers.
This displays the following information on every group:
Name
Operating
system
Computer
status
Hostname/ IP
Configuration
Last
notification
Computer name.
Information on the operating system.
Information on the computer: "Online", "Online, agent installed", "Offline"...
Hostname or network IP address.
The Agent or product configuration settings are inherited or specific.
The date and time of the last Agent registration.
If you select a computer in the Security Environment, the Product Status view
displays details about: product name, product state, status details.
Avira GmbH Avira Security Management Center 74
Operation
The Status View for the Filtered security environment shows the group name,
source group and filter type:
Product Version View
This will display information on all modules of Avira programs installed on the
computer:
Module name
Module version
Module details
75 Avira Security Management Center Avira GmbH
List of installed Avira products on the computer.
File version information.
File description.
Events View
Operation
Every Avira product on a computer will issue product-specific events, which the
SMC Agent retrieves and saves:
Computer
name
Level
Product
Actor
Message
Time
Tasks View
The name of the computer on which the event has been reported by the Avira
product.
Avira products assign a level to every event (degree of importance), such as Critical,
Warning or Info.
The name of the Avira product reporting the event.
The name of the program component reporting the event.
Product-specific text for the event.
Date/time of the event.
There are product-specific commands for every Avira product on a computer (e.g.
scanning or update). Using Avira SMC, these commands can be scheduled to run as
frequent, regular tasks.
You can see the tasks for every computer or group. The group tasks are also listed
in the schedule of every computer.
Scheduled tasks are displayed as pending operations until their start time (see Pending
Operations View – Page 77).
Avira GmbH Avira Security Management Center 76
Operation
Node
Name
Task type
Period
Start
Actor
Status
Command
Weekdays
Created
Computer or group name.
Custom name of the task.
Server task
: the task is server-managed.
The selected frequency: Daily, Weekly, etc.
The date and time for the first task performance.
The Avira product performing the task.
Information on the status of the task.
Product-specific command for the task (exp: update). The parameters are not
shown here.
The days of the week, for a daily command (Mon, Tue, Wed...).
The date and time, when the task was created.
Pending Operations View
There are product-specific commands for every Avira product (for example,
scanning or updating), which can be scheduled as regular tasks using Avira SMC. If
the task cannot be performed because the computers are offline, or because the
Agent uses the pull mechanism, SMC saves the command or task as a pending
operation
or the Agents perform synchronization.
You can see the pending operations for every group or computer.
. These operations are executed as soon as the computers are accessible,
Computer
name
77 Avira Security Management Center Avira GmbH
The name of the computer on which the task is to be executed.
Operation
Operation
Product
Remarks
Created
Errors View
The type of task (for example, installation or command).
The product related to the task.
Information on the pending task, such as the command type and creation date.
The date and time, when the task was created.
If errors occur during installation, configuration or uninstallation of software
packages, or during Avira product actions on computers in the Security
Environment, or when executing tasks and commands, Avira SMC can display the
logfiles of Avira products and those of the SMC services in the SMC Frontend.
Errors always occur at computer level, therefore the group nodes cannot produce
errors, because they do not represent physical networks. When a group has an
error icon, it means an error occured on one or more computers in that group.
You can view the errors for every group or computer.
Computer
name
Product name
Error state
Error message
Created
The name of the computer on which the error occurred.
The name of the product that signaled the error.
The status of the error.
The contents of the error message.
The date and time of the event.
Avira GmbH Avira Security Management Center 78
Operation
6.5 Viewing Events
Every Avira product triggers specific events, which are collected by Avira SMC and
displayed in SMC Frontend. First, the SMC Agent collects the events issued by
Avira products and saves them to the local database.
Then you can see these events in the SMC Frontend:
z You can view and sort the events that have occurred on every computer in the
Security Environment node (see Displaying Information about a Computer or
Group – Page 72).
z You can view and sort the events that have occurred on all computers in the
Security Environment in the Events node. You can use filter criteria only on the
Events node.
Displaying all events for all computers may take a large amount of time.
Events Node
The Details panel of the Events node displays all events that have occurred in the
Security Environment with detailed information.
The Events view structure for the entire Security Environment is similar to the
Computer node view structure (see also Displaying Information about a
Computer or Group – Page 72). You can double-click an event, to view the details
in a separate window.
Viewing and Filtering Events
You can filter the events and display only the targeted results. The following
options are available:
z No Filter: displays all events in the database;
z Level: only displays events with a certain level (Critical, Warning, Information,
Security, Error
79 Avira Security Management Center Avira GmbH
);
Operation
z Product: shows the events produced by a certain Avira product. The products
available for filtering are listed in the Filter/Product menu;
z String: only displays the events containing a given string.
The Events node shows the events received by SMC Agent and from the Avira
products in the Security Environment, for example events produced by virus
scanning.
Click on Events.
The Details panel will show all events in the Security Environment,
unfiltered.
If you click on a column header, the data is sorted by that criterion, e.g. Level or
Time.
Right-click Events.
Select Filter and then the required filter option.
Deleting Events
As the list grows over time, you may want to delete it to save space on your system.
or:
You will see the filtered data in the Details panel
– OR –
Select Filter/String to type the string for data filtering in the String filter
window:
After writing the text, click OK.
The required data is displayed in the Details panel.
Right-click an event and select Delete.
Right-click Events and select Delete all.
Avira GmbH Avira Security Management Center 80
Operation
6.6 Performing Commands and Planning Tasks
For every Avira product there are various ways of performing actions such as scan
and update, using specific parameters or schedules. You can configure, activate and
plan these actions using Avira SMC for computers and groups in the Security
Environment. An action initiated by Avira SMC (e.g. Scan) is referred to as a
Command, while the planned, single or periodical action is called a Task (e.g.
weekly update).
The Avira SMC is able to run all commands accepted by the installed Avira
products.
For more details on Avira commands and parameters, please refer to the Avira product
documentation.
You should read and observe all instructions before performing Avira SMC
commands and planning tasks.
When SMC Server is closed, ongoing commands are saved as pending operations,
before shutdown.
You can see the results of a command (e.g. Scan) or task (e.g. Scan hard disk) in the
Details panel of the Events node or of the group/computer.
Push and Pull Mechanisms
According to the Agents’ settings (see Changing the SMC Agent Configuration –
Page 41), there are two mechanisms for performing tasks and commands:
z push mechanism performs the commands immediately or sends the tasks to
the scheduler, and they are run as planned.
In the case of offline computers, actions and commands are saved by SMC as
pending operations and automatically triggered by the program immediately
after the computers are online.
The computers will have the status for pending operations:
dark monitor, orange arrow, red marker on the left side.
z pull mechanism should be used for very large networks to reduce the network
traffic. It means the commands are registered as pending operations and they
are all performed when the Agent makes the synchronization.
The status icon for computers with pull Agents is:
green monitor, green arrow, red marker on the left side, if online;
or dark monitor, orange arrow, if offline.
Even for pull Agents, you might need to force the synchronization. For this case,
you can use the command Force agent synchronization, which you can activate as
follows:
81 Avira Security Management Center Avira GmbH
In the Console tree, click on Configurations/ Server, click on General settings
tab and activate the option Display agent synchronization command.
As a result, in the context menu of the Security Environment or for each
computer, a new command appears: Commands/ Force agent
synchronization
Performing Commands
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click the computer/group and select Commands.
The sub-menu displays all installed Avira products.
Select the product and then the command (for example Start update).
If the command accepts parameters, you can insert them in the Commands
dialog window. Example for Avira AntiVir Professional:
Operation
.
Planning Tasks
Type the required parameters and click OK.
The command is executed and the results are displayed in the Details panel of
the Events node. In case of a pull Agent, the command is saved as pending
operation, until synchronization.
All available commands can be scheduled for a certain time. Such a scheduled
command in Avira SMC is called a task.
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click the computer/group and select Commands.
The submenu displays all installed Avira products.
Select the product and the command (for example Start update).
Avira GmbH Avira Security Management Center 82
Operation
If the command accepts parameters, the Commands dialog window asks for
application path and parameters.
Type the required parameters and click Schedule this command.
The dialog window for Creating a task appears:
Type a name for the task and select the frequency.
Click Next.
The window with time and date settings appears:
Select the start time and date and click Finish.
The task is set and displayed in the Details panel of the computer/group (see
Tasks View – Page 76).
83 Avira Security Management Center Avira GmbH
Displaying Tasks or Pending Operations
The planned tasks are listed in the Details panel of the computer/group on which
they are scheduled to run.
Right-click the computer/group and select Tasks or Pending operations.
You will see the tasks listed in the Details panel with more information (see
Tasks View – Page 76).
Displaying Tasks for software packages or for SMC Server updates
Scheduled tasks for updating SMC Server components or software packages appear
in the Events node of Avira Security Management Center Frontend.
Right-click Avira Security Management Center Frontend and select Update/
Show tasks
The tasks appear in the Details panel:
.
Operation
Name
Task type
Name of the tasks.
Server task
: the tasks for software packages and for SMC Server are always SMC-
based.
Period
Start
Status
Weekdays
Created
The selected task frequency.
The first start time.
Information on task performance.
Weekdays, if the task is scheduled daily.
Date and time of task creation.
Avira GmbH Avira Security Management Center 84
Operation
6.7 Creating and Listing Reports
You can create reports on single computers/groups in the Security Environment
using SMC Agent.
First you should create a report template for a certain report type. Avira SMC
supports all report types accepted by the Avira products installed in the Security
Environment:
• Managed Computers
• Managed Products
• Product Version Information
• Product License Information
• Engine and VDF Version
• Found Malware (General)
• Found Malware (File)
• Found Malware (Email)
• Found Malware (Http)
• Top 10 Malware
• Top 10 Infected Computers
You can find more details of report types in the Avira product documentation.
Please read and observe all given instructions concerning report types before you
create and schedule Avira SMC reports.
The SMC Agent will arrange the report results according to the template and will
send them to the SMC Server.
85 Avira Security Management Center Avira GmbH
Reports Node
Operation
Both reports and report templates are displayed in the Details panel when
selecting Reports.
Tem plate
name
Tem plate
type
Group
Timeframe
Start time
Schedule
The report name defined by the user.
The selected report type.
The virtual computer/group on which the report is run.
The frequency of the report (where applicable).
The time of the first reported results.
The selected reporting time interval.
Creating Report Templates
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click on the computer/group and select Create report.
Avira GmbH Avira Security Management Center 86
Operation
The following window appears:
Select the report type and time interval for the report and click Next.
The Configure report window appears:
Enter a name for the report template.
If you want to run the report regularly:
Activate the option Schedule report, enter a start date and time and the report
frequency.
Click Finish.
The report template is created. The report is either run immediately or
scheduled periodically and is displayed in the
87 Avira Security Management Center Avira GmbH
Reports node.
Editing the Settings for Report Templates
You cannot change the selected report type in the template.
If you want the report to be of a different type, you must create a new template.
Right-click on a report template in Reports and select Properties.
The window Select Report Type appears.
Here you can edit the time frame and click Next.
The Configure Report window appears.
You can edit the Name and Scheduler settings and click Finish.
The changes are saved. The modified report template is displayed in the
Reports Details panel.
Operation
Listing Reports
You can view SMC reports as tables or as HTML pages.
Expand the Reports node in the console tree.
The Details panel displays the existing report templates.
Right-click on a report template in the Details panel.
You will see the reports created, with beginning and end date/time
Right-click on the required report in the console tree and select List or HTML.
The report is listed as the outcome of the Reports node (example: List).
Avira GmbH Avira Security Management Center 88
Operation
Printing Reports
When selecting HTML view, Avira SMC structures the reports as HTML pages using an
HTML editor provided with your operating system (e.g. Microsoft Word or Microsoft
Internet Explorer).
Select a report in the HTML view, as in the above section.
Right-click the report and select Print.
The report is opened in the HTML editor.
Use the Print command of the editor.
6.8 Deploying Files/ Licenses/ Programs in the Security Environment
You can share only certain programs, signed by Avira, between computers in the Security
Environment.
Avira SMC offers two ways of remotely deploying files or executable programs
certified by Avira on all computers in the Security Environment.
z You can deploy any file or program (possibly configured with start parameters
and commands) between computers or groups, such as special virus removers,
license files etc. and run them immediately if necessary.
89 Avira Security Management Center Avira GmbH
Operation
z You can send a command to SMC Agents, to run a program in the Agent
application folder. Or you can schedule these tasks (see also Planning Tasks –
Page 82).
When shared, the files are copied to the installation directory of Avira products
that you selected ( \\<client computer name>\C:\Program Files\Avira\Avira Security
Management Center Agent\
in Avira SMC. You can also create subdirectories (e.g. ...\New-VDF-files) so that you
can find your files more quickly.
In order for the program to be executed remotely, it must be placed in the SMC
Agent installation directory (\\<smc server>\C:\Program Files\Avira\Avira Security
Management Center Agent\
Data loss in the event of improper program configuration!
When sharing executable files:
Please read and observe all instructions for programs, commands and parameters
given in the documentation before sharing and running Avira SMC programs.
). This directory will be the root for this kind of actions
).
If the execution reports an error, an event is sent to SMC Agent. This is displayed
in Events Details.
In the case of offline computers or Agents set with pull mechanism, actions and
commands (such as configuring an installed Avira product) are saved in SMC as
pending operations and automatically triggered by the program immediately after
the computers are online, or when the Agent makes the synchronization. The
computers will have the status for pending operations: red marker on the left side.
Sharing and Opening Files/Programs
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Right-click on the computer/group and select Installation/[Avira product]/
Copy files
.
Avira GmbH Avira Security Management Center 90
Operation
The Copy files window appears:
Click <-add and select the file(s)/program(s) to be copied from the standard
Open window.
You can enter a Subdirectory for the copied files, relative to the product
installation directory.
If you want to execute the copied files immediately:
Activate the Execute … option and type the required Parameters.
Sharing License Files
In order to renew the license for an Avira product, you have to distribute the new
license file using the Copy files function.
Update the license file in the Software Repository, to be used for future
installations.
Right-click on the computer/group on which the product is installed in the
Security Environment, select Installation/[Avira product]/Copy files and
proceed as described above.
Running Programs
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
3 The program files are available in the Agent installation (sub-)directory on the
computer/group.
Right-click the computer/group and select Command/Avira SMC Agent/Start
application
.
91 Avira Security Management Center Avira GmbH
The Commands window appears.
Operation
Enter the path and the file name (e.g. Shared Files\<application>).
If you want to run the program immediately and only once:
Click OK.
The program is executed
– OR –
If you want to run the program at regular intervals as a scheduled task:
Click the button Schedule this command (see Planning Tasks – Page 82).
The task is displayed in the computer/group Details panel.
6.9 Handling Errors
If errors occur during installation, configuration or uninstallation of software
packages, or during actions of Avira products on computers or groups, or when
executing commands and tasks, Avira SMC can display the logfiles of Avira
products and of SMC services in the SMC Frontend.
Errors always occur at computer level, therefore the group nodes cannot produce
errors, because they do not represent physical networks. When a group has an
error icon, it means an error occured on one or more computers in that group.
For troubleshooting, we recommend that you first check the logfiles of the Avira products
and, if necessary, keep them at hand for support questions.
Viewing Logfiles
3 Computers/groups must be integrated into the Security Environment and the
status must be: green monitor, green arrow.
Avira GmbH Avira Security Management Center 92
Operation
Right-click on the computer and select View Logfile.
The window Logfile of [computer name] appears.
Select a logfile from the drop-down list in the Choose logfile section:
The logfile is listed in the window.
Select a filter from the filter drop-down list:
The logfile is filtered and listed in the window.
Resetting the Error Status
When an error occurs in Avira SMC, the affected Security Environment areas are
marked with a red Stop icon in the console tree.
3 An error icon appears next to the computer/group node.
Select the Error messages view (from the toolbar) for the computer/group in
the Security Environment and read the error message.
Check Logfile
Delete Error
Then check the logfile of the affected node, as described above, for identifying
and handling the error.
In order to avoid deleting relevant error messages: right-click the error and
select Delete.
Confirm with Yes.
The error message is deleted.
Reset Error
Status
If you have solved the problem:
Reset the error status of the node: Right-click the node and select Reset error
state
.
93 Avira Security Management Center Avira GmbH
7 Updating Avira Products
Avira SMC offers more ways to update Avira products:
z You can automatically update the Software Repository and the installed Avira
products, using Avira Internet Update Manager (activated by default).
Updating Avira Products
Activate
automatic
package
synchronization
Automatic update mode (activated by default): Automatic synchronization of
the software packages and installed Avira products, from the integrated IUM
servers. When this option is enabled, SMC automatically synchronizes all IUM
instances to mirror all products stored in the Software Repository.
-ORIf you disable the automatic mode (not recommended):
z You can update the software packages in the Software Repository via an
Internet connection (command or scheduled task).
z You can update the products installed on computers in the Security
Environment
(using remote update commands and even regularly, with a
scheduled task).
According to the configuration options for the manual updating routine of each Avira
product, you can update Avira products installed on computers in the Security
Environment via the Internet or via your Intranet. These updates are performed by each
computer individually. The products in the Software Repository are not updated in this
way.
Please read and follow the updating procedures described in Avira product manuals
before performing updates via Avira SMC.
When updating the Avira products stored in the Software Repository, the products
Avira GmbH Avira Security Management Center 94
Updating Avira Products
installed on the Security Environment computers are not updated.
95 Avira Security Management Center Avira GmbH
7.1 Using the Internet Update Manager
Avira Internet Update Manager service is a component of Avira SMC and its role is
to keep all Avira products over the entire enterprise up to date. It brings the
advantage of deploying over the network the updated files, so that the client
computers do not need to access the Internet.
The automatic update mode (Configurations - General Settings - Update:
Automatically synchronize software repositories between SMC and IUm Servers
is activated by default: all IUM servers automatically mirror all packages integrated
in the SMC Software Repository. When you remove or add a software package in
SMC Software Repository, the SMC Server also adds/ removes this product from
all IUM servers.
Updating Avira Products
)
To update all Avira products mirrored by an IUM server:
Right-click Released Products and select Update mirrored products.
To select an update server for updating Avira products on certain computers or
groups:
Right-click the computer or group in the Security Environment, select
Automatic update.
Avira GmbH Avira Security Management Center 96
Updating Avira Products
Click the option Inherit settings from parent node, to deactivate it, if still
active.
Click the option Use <server> for updating.
Test mode
You can also use the IUM in automatic test mode (which can be enabled under
Avira IUM - Server Settings - General - Updates: Activate test mode). In test mode,
new files are downloaded to a special test directory (Test products), hosted by a
second HTTP server. Here they are waiting for approval. When the new files are
validated (Released products), they can be committed to the default HTTP server
for enterprise deployment (right-click on Test products and select Commit
products
).
You can assign groups or individual computers to update from the test servers.
If you are in test mode and want to update via IUM, please commit the files before
update. Otherwise you will not be able to update the SMC Server and Frontend
afterwards.
7.2 Updating Packages in the Software Repository
When SMC is in automatic update mode (recommended), software packages are updated
automatically.
In order to perform update commands and tasks, without using Avira Internet Update
Manager, you have to disable the synchronization feature (Configurations - General
Settings - IUM: Activate automatic package synchronization
Updating software packages manually
Right-click on Software Repository and select Update Software Repository/
Execute update.
).
97 Avira Security Management Center Avira GmbH
– OR –
Right-click on a single software package in Software Repository and select
Update/Execute update.
Avira SMC connects to the default SMC-configured IUM, downloads the
available software updates and then saves them in the Software Repository
node.
Scheduling Regular Updates for software packages
You can also schedule regular update tasks for software packages in the SMC
Server. Via the Software Repository nodes you can update all or individual software
packages.
Right-click on Software Repository and select Update Software Repository/
Schedule update
– OR –
Right-click on an individual software package in Software Repository and select
Update/Schedule update check.
The window Create a task appears.
Updating Avira Products
Type a name for the task, select the frequency for updates and click Next.
The next window asks for the start date and time.
Select the start date and time and click Finish.
The task is saved.
You can edit the task at any time using the right-click menu (see Displaying Tasks
for software packages or for SMC Server updates – Page 84).
7.3 Updating Avira Products manually
You can schedule update tasks for Avira products installed on the computers in
Security Environment. See Performing Commands and Planning Tasks – Page 81.
When SMC is in automatic update mode (recommended), Avira products in the Security
Environment are updated automatically.
In order to perform update commands and tasks, without using the Internet Update
Manager, you have to disable the automatic mode: right-click the computer or group,
select Automatic update and click Disable.
Right-click on the group or computer and select Commands/[Avira product]/
Start Update
.
The Avira product starts its own update routine and installs the new program
files. You can also schedule the command.
Avira GmbH Avira Security Management Center 98
Updating Avira Products
7.4 Update overview
To update all Avira products via an IUM server right-click Released products or
Test products and select Update mirrored products.
Alternatively you can use the IUM scheduler for IUM updates.
7.4.1 Updating the SMC using the IUM automatic mode
You can receive automatic SMC updates via the IUM by selecting Server Settings
- General Updates and activating the option Automatic mode for SMC updates.
The automatic mode is activated by default.
The following table entails a list of all updateable SMC program elements and
information on whether they can be updated automatically.
Updateable program element Updated automatically?
IUM repository Yes
Software repository Yes
Agent Yes
Product Yes
SMC Server
SMC Frontend
IUM Server service self update
a.
You will be notified when there are new updates available.
b.
You will only be notified of new updates when using the integrated IUM which is available after the SMC installation.
c.
You will only be notified that new updates are available if you are using the integrated
IUM which is available after the SMC installation
No
No
No
a
b
c
7.4.2 Updating the SMC without using the IUM automatic mode
You can deactivate the automatic mode by selecting Server Settings - General
Updates and deactivating the option Automatic mode for updates.
If the automatic mode is deactivated, only the IUM repository is updated
automatically. All other program elements have to be updated manually.
7.4.3 Updating manually
The following table shows you
– how to start updating the update modules
99 Avira Security Management Center Avira GmbH
Updating Avira Products
– how to select which IUM should be used to update each module
Update module Update procedure Update IUM Configuration
SMC Server Right-click on SMC
Frontend node: Update
- Server - Start update
SMC Frontent Right-click on SMC
Frontend node: Update
- Frontend
Software repository Right-click on Software
Repository node:
Update - Start update
Agent Right-click on Agent
node: Commands Start update
Product Right-click on [Avira
product] node: Start
update
IUM Server service self
update
Right-click on IUM
a
node
Any IUM included in
the SMC
Configurations Update - Default IUM
for all updates
Any IUM included in
the SMC
Configurations Update - Default IUM
for all updates
Any IUM included in
the SMC
Configurations Update - Default IUM
for all updates
Any IUM included in
the SMC or another
update source
Agent node:
Configuration -
Configure Communication Update
Any IUM included in
the SMC or another
update source
[Avira product] node:
Configuration -
Configure - Update
Related IUM n/a
a.
You will only be notified that new updates are available if you are using the integrated IUM which is available after the SMC installation.
Avira GmbH Avira Security Management Center 100
Loading...