Avira ANTIVIR VIRUS SCAN ADAPTER FOR SAP SOLUTIONS User Manual

www.avira.com
User Manual
Virus Scan Adapter (for SAP Solutions)
More Than Security
Contents
1 About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.3 Signs and Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 Product Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.1 Licensing Concept . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.2 Operating Mode of AntiVir VSA (Windows) . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.3 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
3 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.1 AntiVir VSA Installation (UNIX) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.1.1 Getting the Installation Files . . . . . . . . . . . . . . . . . . . . . . . . 9
3.1.2 Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.1.3 Installing AntiVir VSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
3.1.4 Reinstalling AntiVir VSA . . . . . . . . . . . . . . . . . . . . . . . . . . .12
3.1.5 Background . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
3.2 AntiVir VSA Installation (Windows) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
3.2.1 Getting the Installation Files . . . . . . . . . . . . . . . . . . . . . . .13
3.2.2 Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
3.2.3 Installing AntiVir VSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
3.2.4 Background . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
4 Configuration (UNIX) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
4.2 Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.3 Configuration Script configantivir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
4.4 Configuring Regular Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
5 Configuration (Windows) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.1 Available Entries in SAVAPI.INI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.2 Possible Entry in SAVAPIDL.INI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
5.3 Immediate Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
6 ABAP-Specific Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
6.1 Setting the Virus Scan Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
6.1.1 Defining Scanner Groups . . . . . . . . . . . . . . . . . . . . . . . . . .31
6.1.2 Defining Virus Scan Servers . . . . . . . . . . . . . . . . . . . . . . . .33
6.1.3 Defining Virus Scan Profiles . . . . . . . . . . . . . . . . . . . . . . . .43
6.1.4 Implementing a BAdI for Virus Scanners . . . . . . . . . . . . .48
6.2 Problem Analysis for the Virus Scan Server . . . . . . . . . . . . . . . . . . . . . . . . . . 49
6.3 Testing the Installation of the Virus Scan Server . . . . . . . . . . . . . . . . . . . . . 51
6.4 Commented Example Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
7 Java-Specific Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
7.1 Setting Up Virus Scan Providers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
7.1.1 Define a Scanner Group . . . . . . . . . . . . . . . . . . . . . . . . . . .54
7.1.2 Define a Virus Scan Provider . . . . . . . . . . . . . . . . . . . . . . .54
7.1.3 Define a Virus Scan Profile . . . . . . . . . . . . . . . . . . . . . . . . .56
7.2 Problem Analysis for the Virus Scan Provider. . . . . . . . . . . . . . . . . . . . . . . . 57
7.3 Example Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58
8 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
8.1 Reaction to Viruses/ Unwanted Programs Detected . . . . . . . . . . . . . . . . . . . 59
9 Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
9.1 Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
9.2 Contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
10 Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
10.1 Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
10.2 Further Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
10.3 Golden Rules for Protection Against Viruses . . . . . . . . . . . . . . . . . . . . . . . . .65
1About this Manual
In this Chapter you can find an overview of the structure and contents of this manual.
After a short introduction, you can read information about the following issues:
The Structure of the Manual – Page 3
Signs and Symbols – Page 4

1.1 Introduction

We have included in this manual all the information you need about AntiVir UNIX Server (for SAP Solutions) and it will guide you step by step through installation, configuration and operation of the software.
The full name of the program is AntiVir Virus Scan Adapter (for SAP Solutions). For easier reading, we have shortened the name in this manual to AntiVir VSA.
About this Manual
The term "viruses" is used as a general reference to malware, such as worms, Trojans, hoaxes etc.
For further information and assistance, please refer to our website, to the Hotline of our Technical Support and to our regular Newsletter (see Service – Page 61).
Your Avira Team

1.2 The Structure of the Manual

The manual of your AntiVir software consists in a number of Chapters, bringing you the following information:
Chapter Contents

1 About this Manual The structure of the manual, signs and symbols.

2 Product Information General information on AntiVir software, its
3 Installation Instructions to install AntiVir UNIX Server on your
4 Configuration (UNIX) Directions for optimum settings of AntiVir VSA on
5 Configuration (Windows) Directions for optimum settings of AntiVir VSA on
6 ABAP-Specific Configuration Information on specific ABAP configuration of
7 Java-Specific Configuration Information on specific Java configuration of
modules, features, system requirements and licensing.
system – using both the UNIX installation script and the graphical installation routine.
your UNIX system.
your Windows system.
AntiVir VSA.
AntiVir VSA.
Avira GmbH AntiVir Virus Scan Adapter
3
About this Manual
Chapter Contents
8 Operation Reactions when viruses and unwanted programs are
9 Service Avira GmbH Support and Service.
10 Appendix Glossary of technical terms and abbreviations,

1.3 Signs and Symbols

The manual uses the following signs and symbols:
Symbol Meaning
detected.
Golden Rules for Protection against Viruses.
3
... shown before a step you have to perform. ... shown before the result that directly follows the preceding
For improved legibility and clear marking, the following types of emphasis are also used in the text:
Emphasis in text Explanation
Ctrl+Alt Key or key combination
/usr/lib/AntiVir/antivir Path and file name ls usr/lib/AntiVir User entries
... shown before a condition that must be met prior to performing an action.
action.
... shown before a warning if there is a danger of critical data loss or hardware damage.
... shown before a note containing particularly important information, e.g. on the steps to be followed.
... shown before a tip that makes it easier to understand and use AntiVir VSA.
Choose component Select all
http://www.avira.com URLs
Signs and Symbols – Page 4 Cross-reference within the document
Elements of the software interface such as menu items, window titles and buttons in dialog windows
4 AntiVir Virus Scan Adapter Avira GmbH

2 Product Information

AntiVir Virus Scan Adapter (for SAP Solutions) is the first and until now the only virus scanner for SAP business solutions certified by SAP. It is integrated into the SAP NetWeaver technology platform, monitors the data transfer of SAP applications via SAP Web Application Server and protects them against viruses and unwanted programs.
Using AntiVir VSA, for example, companies whose websites support online job applications and uploads of résumés in Word or PDF format can be certain that there is no malware in their databases. Files such as spreadsheets or pictures that have been processed by various employees can be scanned for malware before they are filed. It is therefore possible to file virus-free objects safely without leaving this important task to the antivirus software on the workstation.
Automatic Internet updates keep the software permanently up to date.
You increase the security of your system by integrating AntiVir VSA into the SAP system with the Virus Scan Interface. In this way, you can scan files or documents processed by applications for viruses and unwanted programs using a high-performance integration solution. This applies both to applications supplied by SAP and to your own processes, for example data transfer via networks or the exchange of documents via interfaces.
The interface has two components:
an external one, for certification of various antivirus products and
an internal one, for integrating the virus scanner feature in the application via a Business Add-In.
Product Information
The figure below shows an integrated ABAP-Java installation. You may also use the Virus Scan Interface on a simple ABAP or Java installation.
First, Application A accesses Group X via the Virus Scan Profile A, then Group Y and in the third step Group Z. Every group covers the antivirus software of a certain provider. Within Group X, a Virus Scan Server supplied by SAP is selected via load balance and access to the antivirus software is achieved via the certified Virus Scan Adapter of the external provider. This software scans the files provided by Application A for viruses.
Avira GmbH AntiVir Virus Scan Adapter
5
Product Information
Group Y has Virus Scan Providers with and without Virus Scan Server, which access the antivirus software via the certified Virus Scan Adapter of the external provider. The Virus Scan Provider in Group Z contains only the certified Virus Scan Adapter of the external provider, which ensures access to the antivirus software.
Alternatively you can implement your current virus scan solution via a Business Add-In (BAdI). This is shown as Group n in the above figure and it is also accessed through a Virus Scan Profile.

2.1 Licensing Concept

You must have a license to use AntiVir VSA. You are required to accept the license terms (see http://www.avira.com/documents/general/pdf/en/avira_eula_en.pdf).
There are different license models for using the various functions of AntiVir VSA:
•Full version
Convenience Package
The license is contained in a license file named hbedv.key . You will receive it by email from Avira GmbH. It contains certain data such as the programs you will use and the period of your license. The same license file may refer to more than one AntiVir product.
Full Version
Convenience
Package
The range of Full Version features includes:
Provision of AntiVir Versions by Internet download
•License file by email
Complete installation instructions (digital)
PDF manuals available for Internet download
Four weeks installation support, starting from acquisition date
Newsletter service (by email)
Internet update service for program files and VDF
In addition to the Full Version license, the Convenience Package includes:
Every three months: free delivery of a boot CD-ROM with the AntiVir Rescue System and all updated AntiVir products
Complete installation manual (printed) on first delivery
The Users’ Magazine "AntiVir Aktuell" (printed, sent by regular mail)

2.2 Operating Mode of AntiVir VSA (Windows)

The security pack AntiVir VSA consists of 2 modules:
•AntiVir Savapi:
- Savapi Service: it provides the actual scan and repairing features.
- Savapi Update Service: ensures that AntiVir VSA is kept up to date via Internet connection. It checks for available updates and it performs the update if necessary.
AntiVir Virus Scan Adapter (VSA): Interface for SAP, corresponding to the file ANTIVIRVSA.DLL.
You may save ANTIVIRVSA.DLL to another location, but you will have to specify the full path to the Adapter in the SAP interface to set the environment variable VSA_LIB
6 AntiVir Virus Scan Adapter Avira GmbH

2.3 System Requirements

AntiVir VSA asks for the following minimum system requirements on your computer:
UNIX
256 MB RAM (768 MB for Solaris)
100 MB on hard disk (1GB recommended)
CPU: i386 or higher (Linux), SPARC (SunOS)
Linux (with glibc 2.2, ia32 and x86_64) or SunOS (Version 5.9, SPARC).
Windows
Pentium III 500 MHz
256 MB RAM
20 MB hard disk space
Operating system:
- Windows 2000 Server or Advanced Server
- Windows 2003 Server
- Windows NT Server
Administrator rights for installation.
Product Information
Avira GmbH AntiVir Virus Scan Adapter
7
Product Information
8 AntiVir Virus Scan Adapter Avira GmbH

3 Installation

This Chapter describes AntiVir VSA installation for UNIX and Windows systems:
AntiVir VSA Installation (UNIX) – Page 9
AntiVir VSA Installation (Windows) – Page 13

3.1 AntiVir VSA Installation (UNIX)

You can find the current version of AntiVir VSA (UNIX) on the Internet. If you have a Convenience Package AntiVir CD-ROM, you may also install the product from it.
AntiVir VSA is supplied as a packed archive.
You will be guided step by step through the installation procedure:
Getting the Installation Files – Page 9
Licensing – Page 9
Installing AntiVir VSA – Page 10
Reinstalling AntiVir VSA – Page 12
Installation

3.1.1 Getting the Installation Files

Downloading the Installation Files from the Internet
Download the current version file from our website http://www.avira.com
to your local computer. The file name is antivir-vsa-prof-<version>.tar.gz.
Save the file in a /tmp folder on the computer on which you want to run AntiVir VSA.
Getting the Installation Files from CD-ROM
On the AntiVir CD-ROM open
/en/products/unix/server.
Copy the file antivir-vsa-prof-<version>.tar.gz in a directory, for example in
/tmp.
Unpacking Program Files
Go to the temporary directory:
cd /tmp
Unpack the archive containing the AntiVir kit:
tar xzvf antivir-vsa-prof-<version>.tar.gz
antivir-vsa-prof-<version> will then appear in the temporary directory.

3.1.2 Licensing

You must have an AntiVir license in order to use the full product (see Licensing Concept – Page 6). The license is contained in a file named hbedv.key.
This license file contains information regarding the scope and period of the license. Without the license file, AntiVir VSA does not run (not even with restricted features).
Avira GmbH AntiVir Virus Scan Adapter
9
Installation
Purchasing the License
You may contact us by telephone or by email (info@avira.com) to acquire a license file
for AntiVir VSA.
You will receive the license file by email.
Copying the License File
Copy the license file hbedv.key to the installation directory on your system
/tmp/antivir-vsa-prof-<version>.

3.1.3 Installing AntiVir VSA

AntiVir VSA is automatically installed using a script. This script performs the following tasks:
Checks integrity of the installation files.
Checks for the required authorizations for the installation.
Checks for an existing version of AntiVir on the computer.
Copies the program files. Overwrites existing obsolete files.
Copies AntiVir configuration files. Existing AntiVir configuration files are inherited.
Optionally it installs AntiVir Update Daemon.
Optionally it configures an automatic start for AntiVir Updater on system start-up.
You can also perform the installation without having a license key from the beginning. You will then have to copy the license file into the AntiVir program directory /usr/lib/AntiVir. Without a license, AntiVir will not run.
Preparing Installation
Login as root. Otherwise you do not have the required authorization for installation
and the script returns an error message.
Go to the directory in which you unpacked AntiVir:
cd /tmp/antivir-vsa-prof-<version>
Installing AntiVir VSA
Type:
./install
Please note the dot and slash in the command syntax. Typing the command without this path specification, triggers another command, which is not related to AntiVir installation process and this would result in error messages and unwanted actions. Press q to close the license text view.
10 AntiVir Virus Scan Adapter Avira GmbH
Installation
The installation script starts and copies the program files, after you accept the
license terms. Optionally, the Installer can read an existing license key:
Do you agree to the license terms? [n] y
creating /usr/lib/AntiVir ... done
1) installing AntiVir Engine copying bin/antivir to /usr/lib/AntiVir/ ... done copying vdf/antivir0.vdf to /usr/lib/AntiVir/ ... done copying vdf/antivir1.vdf to /usr/lib/AntiVir/ ... done copying vdf/antivir2.vdf to /usr/lib/AntiVir/ ... done copying vdf/antivir3.vdf to /usr/lib/AntiVir/ ... done
Enter the path to your key file: [hbedv.key] copying hbedv.key to /usr/lib/AntiVir/hbedv.key ... done copying script/configantivir to /usr/lib/AntiVir/ ... done linking /usr/bin/antivir to /usr/lib/AntiVir/antivir ... done installation of AntiVir Engine complete
Then you are asked if you want to install the Internet Update Daemon:
Installation
with Update
Daemon
2) installing internet update daemon An internet update daemon is available ...
Would you like to install the internet update daemon? [n]
You do not necessarily need the Internet Update Daemon to keep AntiVir up to date. You can perform this operation manually via the Internet. However, for the initial installation it is recommended to install the Update Daemon. You can deactivate it later in the configuration settings.
If you choose to install the Internet Update Daemon (recommended):
Type Y and confirm with Enter.
The Internet Update Daemon is installed. Then you are asked if the daemon should
start automatically:
Would you like to install the internet update daemon? [n] y copying script/rc.avupdater.SuSE8x to /usr/lib/AntiVir/avupdater ... done checking for existing /etc/avupdater.conf ... not found copying etc/avupdater.conf to /etc/ ... done
Would you like the internet update daemon to start automatically? [y]
Type Y and confirm with Enter. You can later change this setting manually.
The automatic system start is configured:
Would you like the internet update daemon to start automatically? [y] y setting up startup script ... done installation of the internet update daemon complete
Installation
without Update
Daemon
If you choose not to install the Internet Update Daemon, or to do this later manually:
Type N or press Enter.
Avira GmbH AntiVir Virus Scan Adapter
11
Installation
Installation of
VSA library
Starting
configuration
The next step installs VSA library:
3) installing VSA library copying lib/libantivirvsa.so.1.1.0 to /usr/lib/AntiVir/ ... done linking libantivirvsa.so to libantivirvsa.so.1.1.0 ... done installation of VSA library complete checking for existing /etc/avsapvsa.conf ... not found copying etc/avsapvsa.conf to /etc/ ... done
Afterwards, you can configure AntiVir:
4) configuring AntiVir Updater
Your connection to the internet might require special configuration settings (such as HTTP proxy settings). You may also want the updater to log to specific files or send email notification. You now have the opportunity to set these options.
Would you like to configure the AntiVir updater now? [y]
If you answer Y, the configuration script for AntiVir Updater starts. You can make the configuration at any time later. We recommend that you first learn about the configuration options and then perform it.
End this procedure by answering N.
You will see a report that indicates the completion of the installation:
Installation of the following features complete: AntiVir Engine AntiVir Internet Update Daemon AntiVir VSA
Finally, the Installer displays information about the update procedure:
Note: It is highly recommended that you perform an update now to ensure up-to-date protection. This can be done by running:
antivir --update
Be sure to read the README file for additional information. Thank you for your interest in AntiVir VSA.

3.1.4 Reinstalling AntiVir VSA

You can always launch the installation script. There are various possible situations:
Installation of a new version (upgrade). The installation script checks the previous version and installs the necessary new components. The configuration file settings already made are not overwritten (see Configuration (UNIX) – Page 17), but inherited.
Later installation of some components, e.g. Internet Update Daemon.
Activation or deactivation of the automatic start of the Internet Update Daemon.
12 AntiVir Virus Scan Adapter Avira GmbH
Reinstalling AntiVir VSA
The procedure applies to all these cases:
Open the temporary directory where you unpacked AntiVir VSA:
Type:
Make the changes you need during installation procedure.

3.1.5 Background

During the installation, please note the following:
AntiVir VSA Library is copied.
The administrator can set the environment variable VSA_LIB (see system
Installation
cd /tmp/antivir-vsa-prof-<version>
./install
The installation script runs more or less as described in Installing AntiVir VSA
Page 10.
AntiVir VSA is installed with the required features.
documentation). Otherwise you have to provide the full path in SAP setup:
/usr/lib/AntiVir/libantivirvsa.so.<version>
The administrator has to integrate the SAPCAR tool in /etc/avsapvsa.conf (see the given example); without this entry, AntiVir does not scan SAPCAR archives:
SapCarProgram /usr/bin/SAPCAR

3.2 AntiVir VSA Installation (Windows)

3.2.1 Getting the Installation Files

Downloading the Installation Files from the Internet
You can find the current program files for AntiVir VSA on our website. They are packed:
•in ZIP format (you need a program to unpack it, for example WinZip) or
•in EXE format as a self-extracting archive (no unpacking program needed).
Download the current version file from our website http://www.avira.com
to your local computer. The file name is antivir_vsa_en.exe.
Getting the Installation Files from CD-ROM
On the AntiVir CD-ROM open
/en/products/vsa/windows
Save the file to the computer on which you want to run AntiVir VSA. The file is
currently named antivir_vsa_en.exe.
Avira GmbH AntiVir Virus Scan Adapter
13
Installation

3.2.2 Licensing

You must have an AntiVir license in order to use AntiVir VSA (see Licensing Concept – Page 6). This license file contains information regarding the scope and period of the license.
Purchasing the License
You may contact us by telephone or by email (info@avira.com) to acquire a license file
for AntiVir VSA.
You will receive the license file by email.

3.2.3 Installing AntiVir VSA

Requirements
Please check the following requirements in order for the software to perform
efficiently:
3 Make sure the System Requirements are met. 3 Log in as administrator or as user with administrator rights. 3 Make sure the Internet connection is available and it allows automatic Updates with
the Internet Updater.
3 Be sure to have the hbedv.key license file at hand.
Open the folder containing the downloaded program file antivir_vsa_en.exe .
Double-click the file antivir_vsa_en.exe .
The setup starts in a dialog window.
Click Setup.
AntiVir VSA setup starts.
The welcome window of the Install Shield Wizard appears:
Click Next.
14 AntiVir Virus Scan Adapter Avira GmbH
You can read the License agreement:
You must agree to these conditions in order to continue the installation.
Installation
Confirm with Yes.
The window for selecting the Destination folder appears:
Confirm with Next if the path is correct
– OR – Click Browse and select the path, then click Next.
Avira GmbH AntiVir Virus Scan Adapter
15
Installation
The License file window follows:
Select the folder containing the hbedv.key license file and click Next.
Then you will see Install Shield Wizard completed.
Click Finish.
The setup program imports and installs the necessary files in the target folder.

3.2.4 Background

During installation, the following actions have been performed in the background:
Copying of the Virus Scan Adapter (VSA) file ANTIVIRVSA.DLL to the installation
Setting of the environment variable VSA_LIB in the absolute path for VSA;
Searching for the tool to unpack SAP archives (SAPCAR format); searching for the
Adding a parameter in SAVAPI.INI which activates SAPCAR archive scanning;
AntiVir VSA installation is completed. You do not need to restart your computer.
folder.
for example:
VSA_LIB=C:\Program Files\Avira GmbH\AntiVir Savapi\ANTIVIRVSA.DLL
environment variable PATH of SAPCAR.EXE file.
for example: SapCarProgram= (empty -> SAPCAR.EXE not found)
- OR ­SapCarProgram=C:\SAPCAR\SAPCAR.EXE (program found)
16 AntiVir Virus Scan Adapter Avira GmbH

4 Configuration (UNIX)

You can adjust AntiVir VSA for optimum performance. You can make the most important adjustments immediately after installation. The most common settings are suggested.
You can modify these settings at any time to adapt the product to your requirements.
After a short overview, you will be guided step by step through the configuration process:
Information on the configuration files:
- Parameters in the Configuration File avsapvsa.conf – Page 18 and
- Parameters in the Configuration File avupdater.conf – Page 19. If you wish to use the configuration script, you can skip this Section.
The procedure for using the configuration script: Configuration Script configantivir – Page 20.
Specific configuration for AntiVir VSA:
- Configuring Regular Updates – Page 22.
Configuration (UNIX)

4.1 Overview

Configuration
files
Configuration
script
The configuration file avupdater.conf defines automatic software updates; the file avsapvsa.conf defines the scanning parameters and logging rules when viruses or unwanted programs are detected.
You can make these settings directly in the configuration files. This is not very difficult.
A more convenient way is to use the configuration script included in the program. It intercepts possible errors and restarts the necessary processes.
You can use the script configantivir, located in /usr/lib/AntiVir, to edit the settings in avupdater.conf (Updater settings).

4.2 Configuration Files

This section describes the structure of AntiVir VSA configuration files avsapvsa.conf and avupdater.conf. AntiVir reads these files on program start-up. It ignores empty lines and
commented lines beginning with #.
The program is provided with default values which are important for many procedures. Some options can be deactivated with a # at the beginning of the line (commented). These can be activated by removing the # character or by changing the values.
You must restart the Internet Update Daemon if you modify any values manually in avupdater.conf, without using the configuration script. The changes will only take effect after a restart.
Type:
/usr/lib/AntiVir/avupdater restart
Avira GmbH AntiVir Virus Scan Adapter
17
Configuration (UNIX)
Parameters in the Configuration File avsapvsa.conf
This section provides a short description of the settings in avsapvsa.conf. These settings affect the scanner’s behavior.
You can edit most of these parameters using the SAP GUI. SAP NetWeaver applies them to the scanner, via the VSA. When inserting such a parameter in the file avsapvsa.conf, the scanner starts with the specified value, but the values in SAP GUI will immediately override it. This means that the settings made in SAP GUI for the AV scanner have a higher priority than those made in the configuration file avsapvsa.conf.
EmailTo
Suppress
Notification
Below
LogFile
Detect...
Email messages: AntiVir can send emails, when detecting viruses or unwanted programs. There is no default setting. You must specify a recipient in order to send emails:
EmailTo root@localhost
Filtering email notifications as required: This option can exclude certain messages, when notifications are sent with the EmailTo option, according to their priority level. The recipients will only receive notifications with the selected priority or higher. The possible priority levels (in ascending order) are Notice, Information, Warning, Error and Alert. By default, the scanner does not suppress notifications.
SuppressNotificationBelow Scanner Notice
Logfile: AntiVir logs all important operations via the syslog daemon. It can also create an additional logfile. There is no default setting. You must enter the full path to the logfile in order to use this option:
LogFile /var/log/avsapvsa.log
Detection of other types of unwanted programs: Besides viruses, there are other types of harmful or unwanted software. You can activate their detection using the following options. The virus detection is not optional and you can not deactivate it.
DetectAdspy yes DetectBDC yes DetectDial yes DetectGame no DetectJoke no DetectPck no DetectPhish yes DetectSPR no
You can use the parameter DetectAllTypes, in order to activate all known categories with a single entry.
SapCarProgram
Support for CAR/SAR Archives: AntiVir Virus Scan Adapter includes native support for the most popular archive types, such as ZIP, CAB, TAR, etc. You can also scan archives with SAP-specific extensions CAR/ SAR, if you use an external "sapcar" tool. Write the full path to the binary of this tool. There is no default path.
SapCarProgram /usr/local/bin/sapcar
18 AntiVir Virus Scan Adapter Avira GmbH
Parameters in the Configuration File avupdater.conf
This section provides a short description of the settings in avupdater.conf. These settings apply to AntiVir Updater.
You can conveniently edit this file using Configuration Script configantivir – Page 20, which also restarts the affected processes, if necessary.
Configuration (UNIX)
AutoUpdate...
EmailTo
Suppress
Notification
Below
Update scheduler: The security software can check regularly for updates online using the Internet Update Daemon and, if available, it performs the update. By default, the possible options are deactivated; the program therefore does not start automatic updates. In order to keep AntiVir up to date, please set the appropriate HTTP proxy parameters and use one of the two methods to run the updates: set an update schedule and start the Internet Update Daemon; or create an update job using cron daemon.
For updates every 2 hours, you must activate the following option:
AutoUpdateEvery2Hours
For daily updates, activate the option below:
AutoUpdateDaily
In the case of daily updates, you may also set the time for this action in HH:MM format:
AutoUpdateTime 04:23
Email messages: AntiVir can send email notifications with details regarding the performed updates. There is no default setting. You must specify a recipient in order to send emails:
EmailTo root@localhost
Filtering email notifications as required: This option can exclude certain messages, when notifications are sent with the EmailTo option, according to their priority level. The recipients will only receive notifications with the selected priority or higher. The possible priority levels (in ascending order) are Notice, Information, Warning, Error and Alert. By default, the Updater does not suppress notifications.
SuppressNotificationBelow Updater Notice
LogFile
Logfile: AntiVir logs all important operations via the syslog daemon. It can also create an additional logfile. There is no default setting. You must enter the full path to the logfile in order to use this option:
LogFile /var/log/avupdater.log
HTTPProxy...
Proxy server: If your computer is connected to the Internet via an HTTP proxy server, you must specify this, so that the automatic Internet Updater functions properly. By default, the settings are deactivated; a direct connection to the Internet is assumed. You must specify:
•HTTP proxy server
•Port
Username and password for the HTTP proxy server if necessary.
Avira GmbH AntiVir Virus Scan Adapter
19
Configuration (UNIX)
Example:
HTTPProxyServer proxy.domain.com HTTPProxyPort 8080 HTTPProxyUsername username HTTPProxyPassword password
Updater
Keeps
Backups
GnuPG...
Syslog...
The Internet Updater replaces installed files with newer versions when updates are available. Even if the program is testing the new files, you might want to keep backups of earlier versions.
When activating this option, your existing files will be moved to the newly created subdirectories of /usr/lib/AntiVir, named updater-backup-YYYYmmdd-HHMMSS.
If you activate the backup function of the Internet Updater, you should check this directory regularly and manually delete old versions as the size increases.
UpdaterKeepsBackups
GnuPG settings: The Updater can check the updates for authenticity using GnuPG. For more information, see Verifying Updates Authenticity with GnuPG – Page 26. If you use GnuPG, you have to enter the path to GnuPG executable, for example:
GnuPGBinary /usr/local/bin/gpg
You can also add other options using GnuPGOptions, depending on the specific GnuPG installation. This is usually not necessary. Both settings are deactivated by default.
Syslog settings: AntiVir sends messages for all important operations to the syslog daemon. You may specify the facility and priority for these messages. The default setting is:
SyslogFacility user SyslogPriority notice
These values apply even if the option is not active.

4.3 Configuration Script configantivir

You can conveniently configure AntiVir Internet Updater using the configuration script configantivir, which is able to intercept possible invalid entries and restart the necessary processes.
The script for configuring AntiVir Updater edits the parameters in avupdater.conf.
The procedure for using the script is very easy: Type:
/usr/lib/AntiVir/configantivir
The script reads the current settings in avupdater.conf and systematically asks if you want to enter new values. It displays all possible parameter values, while the current ones are shown as default.
20 AntiVir Virus Scan Adapter Avira GmbH
Loading...
+ 46 hidden pages