AVIRA ANTIVIR VIRUS SCAN ADAPTER FOR SAP NETWEAVERM, ANTIVIR VSA FOR SAP NETWEAVER 2004 ABAP, ANTIVIR VIRUS SCAN ADAPTER Configuration

HowTo

Configuration of the VSA

with

SAP NetWeaver 2004(s) ABAP

Avira Support

August 2009

2

Content

SAP System Requirements ........................................................................................ 3

SAP Platforms......................................................................................................... 3

OS System Requirements....................................................................................... 3

Important Transactions............................................................................................... 3

What should be considered? ...................................................................................... 4

How is the VSA connected to the SAP system (ABAP)?............................................ 5

How to define a new RFC destination with TCP/IP ................................................. 5

Definition of an RFC Destination............................................................................. 6

This transaction ‘spro’ is the way to the system administration of the Netweaver... 7

Definition of a virus scanner group.......................................................................... 8

Definition of a Virus Scan Adapter or Server........................................................... 9

Definition for profiles which control the activation of the VSA ............................... 12

Definition of the Steps in the Virus Scan Profile.................................................... 14

Testing the installation of the Virus Scan Server (Profile Z_AVIRA)......................... 16

Trace possibilities in the SAP system....................................................................... 18

Activation of the Active Content Scanning................................................................ 21

Testing the Installation of the Virus Scan Server (profile ZACTIVECONTENT)...... 25

Integration of the VSA without RFC destination........................................................ 26

Environment variables VSA_LIB and VSA_DEBUG................................................. 27

Application server or self-starter............................................................................... 27

External activation of the AntiVir VSA via VSCAN_RFC (self-starter) ...................... 28

Scan of SAR and CAR archives ............................................................................... 29

3

SAP System Requirements

SAP Platforms

SAP NetWeaver 6.40 with support package 7 or more; for the ABAP engine with
SAP-BASIS 640 support package 11 or more;
for the J2EE engine with support package 13 or more SAP NetWeaver 2004s (7.0)

OS System Requirements

Operating systems Linux/Unix (32-bit/64-bit):

Red Hat Enterprise Linux 5 Server; Red Hat Enterprise Linux 4 Server; Novell SUSE
Linux Enterprise Server 10 - 10.2; Novell SUSE Linux Enterprise Server 9; Debian
GNU/Linux 4 (stable); Ubuntu Server Edition 8; Sun Solaris SPARC 9; Sun Solaris
SPARC 10

Operating systems Windows (for 32-bit only):

Windows 2000 Server, SP4 recommended
Windows 2000 Advanced Server, SP4 recommended
Windows 2003 Server
Windows Server 2008 (not for Core-Setup)

Important Transactions

Transactions:

sm59 Æ Configuration of the RFC connection
spro Æ System administration of the SAP Netweaver
vscan Æ Virus Scan Provider Definition
vscantrace Æ directed Trace in case of virus attack
vscanprofile Æ direct access to the definition of the
virus scan profiles in the SAP system
vscangroup Æ direct access to the definition of the
virus scan groups in the SAP system
vscantest Æ Test for the virus scan interface

4

What should be considered?

Important information about the specific configuration of ABAP:

For the installation of the RFC connection it is important that the name of the RFC
destination begins with “VSCAN_”. The virus scanner can only work with this
beginning of the name.

In the menu “Technical settings -> program ID” the RFC destination has to be
entered again.

The option “Registered server program” has to be chosen as kind of activation for the
RFC destination.

The procedure is valid for the virus scan server via RFC destination.

5

How is the VSA connected to the SAP system (ABAP)?

How to define a new RFC destination with TCP/IP

Transaction SM59

6

Definition of an RFC Destination

Transaction SM59

► Create an RFC connection of the type T in transaction SM59

You have to use the following name convention for the configuration of the scan
server:

• VSCAN_<Hostname>, in case you want to start only one virus scan server on the
host

• VSCAN_<Hostname>-<Number>, in case you want to start several virus scan
servers on the host.

The figure is serially numbered and separated by a hyphen from the host name.
Possible names are: VSCAN_HOST123, VSCAN_HOST345-1,
VSCAN_HOST345-2 etc.

7

► Choose the kind of activation “Registered server program”.

► Use the name of the RFC destination as program ID.

► Enter the address of the system gateway as gateway host and gateway service.

In case you start the virus scan server via the computing center management system
on an application server, choose the gateway of this application server.

This transaction ‘spro’ is the way to the system administration of
the Netweaver

• Virus scanner group

• Virus scan server

• Virus scan profile

8

Definition of a virus scanner group

► Transaction ‘vscangroup’

Choose new entries.

You get to the menu new entries: Overview of added entries.
Enter the data for the definition of the scanner group.

Scanner group: Freely definable name of the scanner group.

Business add-in: If this indicator is set, the program transfers the request for a virus

scan instance for this scanner group to the Business Add-In VSCAN_INSTANCE,
with which customers can include their own virus scanners. If this option is not set,
the program searches for a suitable virus scan server among the set of virus scan
servers maintained in Customizing that have this scanner group.

Group text: Explanations about the scanner group.

9

Definition of a Virus Scan Adapter or Server

Transaction ‘vscan’

Provider type choice:

ADAPTER (Virus Scan Adapter):

This option can be chosen in case Avira GmbH supports the SAP operation system
directly. The virus scanner runs directly in the SAP web application server and no
files have to be sent to an outsourced server via the network. With this configuration,
there is no need to set a VCSAN_RFC as the SAP system communicates directly
with the virus scanner.