AVIRA SECURITY MANAGEMENT CENTER 2.5 - SUPPORT 03-2010, SECURITY MANAGEMENT CENTER 2.5 User Manual
Avira Security Management Center | HowTo
Status: March 2010 1
Avira Security Management Center 2.5
Support
März 2010
www.avira.com
Errors in design and contents cannot be excluded
© Avira GmbH
Contents
1. Installation of the SMC Server ........................................................................................ 3
2. Installation of the SMC Frontend .................................................................................... 6
3. Starting the SMC and Logon .......................................................................................... 6
4. Licensing of the SMC ...................................................................................................... 6
5. Installing the Software Repositories .............................................................................. 6
6. How to Install the Security Environment ....................................................................... 9
7. Configuration Settings of the SMC ...............................................................................10
8. Installation of the SMC Agents via the SMC Frontend .................................................10
9. Pull / Push Mode of the SMC Agent ..............................................................................13
10. Filtering groups ............................................................................................................15
11. Windows Installation ....................................................................................................18
11.1. “Unattended“ Installation of the SMC Agents .....................................................18
11.2. Installation of the Avira AntiVir Professional ......................................................18
11.3. Configuration of the Avira AntiVir Professional ..................................................20
11.4. Planning and Executing of Updates and Scans ..................................................24
11.5. Installation of the Avira AntiVir Server .................................................................25
11.6. Configuration of Avira AntiVir Server ..................................................................25
11.7. Planning and Executing of Updates and Scans ..................................................28
11.8 To reset or to transfer the Configuration ..............................................................29
11.9 Migration of the SMC 2.4 to 2.5 and AV8 to AV10 .................................................30
12. Automatic Product Installation ....................................................................................32
13. Automatic Synchronization with ADS/LDAP ..............................................................33
14. Administration of several IUMs via the SMC Frontend ..............................................33
17. UNIX ..............................................................................................................................36
17.1. Manual Installation of the SMC Agents for UNIX .................................................36
17.2. Installation and configuration of the Avira AntiVir UNIX Professional/Server ..36
17.3 Installation and Configuration of the Avira AntiVir UNIX Updater (for SMC) ......37
17.4. Installation and Configuration of Avira AntiVir UNIX WebGate ..........................38
17.5. Installation and Configuration of Avira AntiVir UNIX MailGate ..........................38
Avira Security Management Center | HowTo
Status: March 2010 3
All installation files which are necessary for the installation and the manuals in
pdf format can be found on our website for being downloaded.
http://www.avira.
com
(http://www.avira.com/en/download/index.html).
1. Installation of the SMC Server
After having downloaded the installation file of the SMC and unpacked it on your
windows server, please, start the installation of the AntiVir Security Management
Center Server: AntiVir_Security_Management_Center_Server_en.exe.
During the installation routine the following window will appear. Here you can
change the network configuration of the AntiVir Security Management Center
Server, if necessary.
Illustration 1 SMC – Installation Network settings
Make sure that the network ports „7000“, „7001“, „7010“, „7030“, “7050”,
7051”, “7080” and „7100“ are not yet used by any other application installed on
the server.
You can check this by means of the order „netstat –an“ which can be entered via
the command prompt.
During the installation the following window will appear. In order to install the
necessary services you have to enter an administrator account (as the case may
by the domain administrator account) with the corresponding password:
Avira Security Management Center | HowTo
Status: March 2010 4
Illustration 2 SMC – Installation
After you have clicked on “Next“, the following window appears:
Illustration 3 SMC – Installation user account
Avira Security Management Center | HowTo
Status: March 2010 5
The activated Option “Reuse account of SMC-Server service as SMC user
account” means that you can login to the SMC with this user as “administrator”
(same Login data as the formerly entered windows administrator.)
By deactivating the option you can also enter a special SMC user who will be
used for the login to the SMC.
After that, a window will appear which allows you to configure the scheduler of
the Internet Update Manager. According to the settings, it will load the product
updates, the virus definition file and engine updates.
Illustration 4 Configuration Scheduler
Avira Security Management Center | HowTo
Status: March 2010 6
2. Installation of the SMC Frontend
The SMC Frontend (Graphical User Interface) is necessary in order to configure
the SMC and has to be installed separately.
This can be done on the windows server or/and on the administrator’s
workstation PC.
Execute the file „AntiVir_Security_Management_Center_Frontend_en.exe“ for the
installation of the AntiVir Security Management Center Frontend and confirm the
appearing window by “accept”. Finish the installation via the installation
assistant.
3. Starting the SMC and Logon
The SMC is started via the start menu „Start“ „Programs“ „AVIRA“ „AntiVir
Security Management Center“ „Management Center“
In order to log on to the AVIRA Security Management Center Console, click on
„AVIRA Security Management Center Frontend“.
Please, enter the user (default: administrator) and the password you have used
during the installation. After that, click on “ok” in order to logon to the SMC.
Please, take care to change the mark from local computer to computer in the
network in case the SMC Frontend should not be installed on the SMC Server. In
such a case enter the IP address/hostname of the server on which the SMC
Server is installed. Alternatively you can choose it via “Browse”.
4. Licensing of the SMC
In case you should already have a valid license file „hbedv.key“ for the SMC, you
can implement it after the logon as follows:
Click on “AntiVir Security Management Center Frontend“ with the right mouse
button and then on “License”.
Via the now appearing window you have the possibility to import the SMC license
file.
5. Installing the Software Repositories
In order to be able to work with the SMC, the AVIRA products have to be
integrated into the SMC.
First download the necessary installation file(s) from our website.
www.avira.com (http://www.avira.com/en/download/index.html).
In order to add the installation file(s) as software to the SMC, click on “Software”
in the SMC Frontend with the right mouse button and then chose “New”
„Software“.
Avira Security Management Center | HowTo
Status: March 2010 7
Via the now appearing window you can directly select the already downloaded
installation files in the self unpacking “exe” format
The formats „zip“ or for linux software packages „gz“ and „tgz“ are also possible.
After the software has been inserted, it will appear with a faded icon as a point in
the menu of the SMC software.
After the license file has been integrated into the corresponding software (this is
possible in the right half of the window) the icon for the software will appear in
solid colours.
Illustration 5 Software Packages
Confusing the license or saving an invalid license for the software package is not
possible with the new SMC version. Before saving the license will be checked for
validity.
The license which is integrated into the software package is only used for the
first installation of the software on the clients.
In case this license has expired, it has to be renewed for the corresponding
software for possible new installations of the AVIRA products on the clients.
Avira Security Management Center | HowTo
Status: March 2010 8
The license on the already installed clients will not be renewed. This has
to be done separately via the copy function in the security environment
and the point “Installation” “AntiVir Professional” “Copy Files”
The installation files which were added via the software packages will be
automatically added to the Internet Update Manager which has been integrated
into the SMC.
The Internet Update Manager downloads the necessary updates for the software
packages and makes them available for the clients via http and the port which
was defined in the configuration of the Internet Update Manager (by default: port
7080). In order to proceed the updates automatically you should configure the
“planer” which is integrated in the Internet Update Manager (please, click with
the right mouse button on “Internet Update Manager” and choose “Plan
Update”).
The planer has to be activated first. The activation can be done via a right mouse
click on “Internet Update Manager” choose “planer” “Activate planer”.
Please, make sure that the Internet Update Manager has already proceeded the
first update before you update the clients. You can do that by a click with the
right mouse button on “Internet Update Manager” “Update now”.
If the function “Update automatically” is activated in the configuration of the
Internet Update Manager, the updates which are downloaded by the Internet
Update Manager will be loaded automatically via a command which is sent to the
clients. The corresponding update source (f. ex. http://10.50.11.91:7080/upd/)
will be included automatically.
The clients can also be updated independently of the “automatic updates” of the
Internet Update Manager. Please, note the chapter 11.4 in which the planning
and proceeding of updates and scans is described.
For further information about the “automatic updates” of the Internet Update
Manager, please, read the corresponding chapter in the SMC manual.
Avira Security Management Center | HowTo
Status: March 2010 9
6. How to Install the Security Environment
The security environment consists of clients which shall be managed via the SMC
and can be organized in groups and subgroups.
A new group can be a subgroup of the security environment or of an already
existing group.
A group can be created by clicking on the designated place in the security
environment with the right mouse button and choosing “New” “Group“.
This example shows how the group “Server” and “Clients” are created.
You can drag the computers which are located in your network from the network
environment which is shown underneath the security environment into the
security environment or to created groups:
Illustration 6 Security Environment
Computers which are not shown in the network, f. ex. linux clients, can be
manually added to a group
For this purpose click on the designated group with the right mouse button and
choose “New” “Computer”.
Then the following window appears which allows to name the computer via the
host name or the IP address.
Avira Security Management Center | HowTo
Status: March 2010 10
Moreover a differing name can be given with which the computer will be shown
in the SMC:
Illustration 7 Security Environment
7. Configuration Settings of the SMC
The configuration of the SMC is divided into the following sections:
• General
• Server
• Internet Update Manager
• Alert Manager
The configuration allows defining general settings of the SMC. If you should use a
proxy server it can be entered beneath “configuration settings” “Internet
Update Manager” –> “Communication settings”. Further configuration settings
like f. ex. the configuration of the “Alert Manager” are explained in the SMC
manual.
8. Installation of the SMC Agents via the SMC Frontend
The SMC agent is responsible for the communication between the SMC Server
and the clients that have to be managed.
The agent has to be installed on the client in addition to the necessary virus
protection. This can be done directly via the SMC, manually or by means of a
script.
In order to enable the SMC Agent to communicate with the SMC Server the
following conditions have to be fulfilled:
−
Firewall: If a firewall is used on the client, the following network ports (TCP)
have to be opened:
Out (TCP): 7000, 7001, 7010, 7020, 7021, 7030, 7050, 7051, 7080, 7100.
In (TCP): 7030
Moreover ICMP requests, PING (incoming echo demands) have to be enabled.
−
Guest account: The user account “Guest“ has to be deactivated
−
The simple Filesharing (“Explorer” “Extras“ “Archive Options” “View”
“Use simple filesharing” (recommended)) should be deactivated.
Avira Security Management Center | HowTo
Status: March 2010 11
−
The access from the SMC Server to the hidden filesharing “C$“ of the clients
has to be possible (\\<IP address Client\c$\).
−
For a smooth installation via the SMC a network wide, standardised user
account is indispensable.
The installation of the SMC Agents via the SMC is done by clicking in the security
environment on the corresponding client/group with the right mouse button and
choosing “Installation” “AntiVir SMC Agent“ “Install”.
The computers on which the SMC Agent is installed have to be powered on and
Windows has to be activated!
The following authentication window appears:
Illustration 8: SMC Agent Installation
Enter an existing user with administrative rights on the client into the field “user
name” and a corresponding “password”. For linux clients f. ex. the user “root”.
In case the account of the SMC server service also exists on the clients
(standardised local administrator login, domain administrator, …) you can also
choose the option “Use the current account of the server”.
For the installation via SSH (linux clients) you can additionally use SSH key for
the authentication. For this purpose choose the option “Use SSH public/private
key authentication” and enter the corresponding key.
After the successful installation of the SMC Agent the client will be shown with a
green icon in the security environment (communication is working):
Avira Security Management Center | HowTo
Status: March 2010 12
Illustration 9 Security Environment; installed agent
In order to uninstall click with the right mouse button on the designated
client/group and the choice of “Installation” “AntiVir SMC Agent” “Uninstall”.
The appearing pop-up window has to be confirmed with “Yes”.
Loading...