Avira ANTIVIR WEBGATE SUITE Installation And Configuration

HowTo

Avira AntiVir WebGate (Suite)

Settings and Configuration

Avira Support

October 2009

Content

1 Which environment can be protected by Avira AntiVir WebGate?...................................... 2

2 Installation.............................................................................................................................. 2

3 Recommended Basic Configuration ...................................................................................... 3

4 What can be configured additionally?................................................................................... 4

4.1 Proxy settings .............................................................................................................................. 4

4.2 Activation of an ICAP Server .................................................................................................... 4

4.3 Activation of an HTTPS Tunnel ................................................................................................ 4

4.4 Progress bar................................................................................................................................. 5

4.5 X-Header...................................................................................................................................... 5

4.6 Clients authorized to access ....................................................................................................... 5

5 Particularities .........................................................................................................................6

5.1 Squid as proxy server ................................................................................................................. 6

5.2 ICAP configuration..................................................................................................................... 6

6 Update Configuration............................................................................................................. 7

6.1 Reasonable values for an update ............................................................................................... 7

6.2 Large Enterprises........................................................................................................................ 7

6.3 Small Business ............................................................................................................................. 7

6.4 Customers with narrow strip connections (Modem/ISDN): ................................................... 8

6.5 Internet Service Providers.......................................................................................................... 8

7 WebGate Suite Features......................................................................................................... 9

1

1 Which environment can be protected by Avira AntiVir
WebGate?

- Avira AntiVir WebGate can be used as proxy server with HTTP or FTP via HTTP
supervision

- Avira AntiVir WebGate can work in front of or behind a further proxy server

- It can be used as an integration into an ICAP (Internet Content Adaptation Protocol)
environment

- It works as an access control on the basis of the client’s IP address or the target
port

2 Installation

- Decompress: gzip -d antivir-webgate-prof.tgz

- Unpack: tar -xvf antivir-webgate-prof.tgz

- Change directory: cd antivir-webgate-prof.tgz

- Execute installation: ./install

Follow the installation dialogue ...

The following requests are recommended and should be kept

- Would you like to setup Engine and Signature updates as cron task ? [y]

- Please specify the interval to check. Recommended values are daily or 2 hours.
available options: d [2]

- Please specify if boot scripts should be set up.
Set up boot scripts [y]

2

3 Recommended Basic Configuration

# HTTP Port
HTTPPort 8080
# Due to this command WebGate listens on port 8080. In case the port is already
occupied by another proxy server service the port has to be changed accordingly.

# FTP Port
FTPPort 2121
# WebGate offers an FTP proxy service. In case the port is already occupied by
another proxy server service the port has to be changed accordingly.

# Quarantine directory
MoveConcerningFilesTo /home/quarantine
# In case of a detection the file is moved into the quarantine directory and renamed.
Therefore the file cannot be opened anymore by the user. But the file is not deleted
or changed because false positives are possible.

# Defining log files
LogFile /var/log/avwebgate.log
# The command defines the log file of the OnAccess Scanner. It writes into the
syslog by default.

# Defining the quality of the information
LogLevel 4
# This command defines a medium log level. It records alerts (e.g. detections), error
messages (e.g. incorrect ACL configurations) and warnings (e.g. in case of encrypted
archives).

# Activates the heuristics on the medium level
HeuristicsLevel 2
# A good balance between detection and early detection which prevents a lot of
possible false positives.

# Activates the detection of possible macro viruses in office documents
HeuristicsMacro yes
# We recommend you the scan of office documents for an optimum of security.

3

4 What can be configured additionally?

# These settings should be reconsidered before and only be used as and if required!
The values have to be adjusted accordingly.

4.1 Proxy settings

# The following proxy settings are necessary in order to integrate a corresponding
proxy server in front of WebGate.

HTTPProxyServer your.proxy

HTTPProxyPort 3128

HTTPProxyUsername username

HTTPProxyPassword password

FTPProxyServer your.proxy

FTPProxyPort 2121

4.2 Activation of an ICAP Server

# This activates the ICAP server of WebGate. The service runs additionally on the
selected port. The ICAP server supports reqmod (Request modification) as well as
respmod (Response modification).

# Squid supports ICAP 1.0 with the version 3.x!
ICAPPort 1344

4.3 Activation of an HTTPS Tunnel

# WebGate blocks the HTTPS data traffic by default as this traffic can’t be scanned
due to its encryption.
# If you want to tunnel the HTTPS sites, you can use the following parameter:
# The HTTPS data traffic will NOT be scanned.

AllowHTTPSTunnel 1

4