F-secure POLICY MANAGER PROXY ADMINISTRATOR GUIDE

F-Secure Policy
Manager Proxy
Administrator’s Guide
"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure Corporation reserves the right to modify specifications cited in this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of F-Secure Corporation.
This product may be covered by one or more F-Secure patents, including the following:
GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233 GB2374260
Copyright © 2007 F-Secure Corporation. All rights reserved. 12000076-7A11
Contents
About This Guide 5
How This Guide Is Organized .............................................................................................. 6
Who Should Use This Guide................................................................................................ 7
Conventions Used in F-Secure Guides................................................................................ 8
Symbols .......... ...... ....... ............................................. .................................................. 8
Chapter 1 Introduction 10
1.1 An Up-To-Date System is a Secure System..............................................................11
1.2 When Should You Use F-Secure Policy Manager Proxy? .........................................12
1.3 How are F-Secure Policy Manager Proxy and F-Secure Anti-Virus Proxy Different?14
Chapter 2 Installation 15
2.1 System Requirements........ ....... ...... ....... ...... ............................................. .................16
2.2 Installing F-Secure Policy Manager Proxy ...................... ....... ...... ....... ...... .................16
2.2.1 Local Installation.............................................................................................16
Chapter 3 Configuration 22
3.1 Overview ....................................................................................................................23
3.2 Remote Configuration ............................ ...... ...... ....... ...... ....... ....................................23
3.2.1 Chained Proxy Configuration..........................................................................24
Chapter 4 F-Secure Policy Manager Proxy on Linux 26
4.1 Introduction ................................................................................................................27
iii
4.2 System Requirements........ ....... ...... ....... ...... ............................................. .................27
4.3 Installation..................................................................................................................27
4.4 Configuration..............................................................................................................28
4.4.1 Chained Proxy Configuration..........................................................................28
4.5 Upgrading...................................................................................................................29
4.6 Uninstallation..............................................................................................................30
4.7 Frequently Asked Questions ......................................................................................30
Chapter 5 Troubleshooting 32
5.1 Overview ....................................................................................................................33
5.2 The Error Log.............................................................................................................33
5.3 Reading the Error Log................................................................................................33
5.3.1 Message Structure .........................................................................................33
5.3.2 Message Levels..............................................................................................35
5.4 Error Numbers............................................................................................................36
5.4.1 Internal Error Numbers...................................................................................36
5.4.2 External Error Numbers..................................................................................36
5.5 Troubleshooting with the Error Log............................................................................36
5.5.1 Some Example Error Messages.....................................................................37
5.6 The Status Report Log...............................................................................................37
Technical Support 39
Overview ............................................................................................................................ 40
Web Club ...........................................................................................................................40
Virus Descriptions on the Web.................................................................................. 40
Advanced Technical Support .............................................................................................40
F-Secure Technical Product Training .................................................................................41
Training Program ...................................................................................................... 41
Contact Information................................................................................................... 42
About F-Secure Corporation
iv

ABOUT THIS GUIDE

How This Guide Is Organized...................................................... 6
Who Should Use This Guide....................................................... 7
Conventions Used in F-Secure Guides....................................... 8
5

How This Guide Is Organized

The F-Secure Policy Manager Proxy Administrator’s Guide provides an overview of F-Secure Policy Manager Proxy concepts, a step-by-step guide to installation and all the information you need to set up and manage your F-Secure Policy Manager Proxy.
F-Secure Policy Manager Proxy Administrator’s Guide is divided into the following chapters:
Chapter 1. Introduction provides general information about F-Secure
Policy Manager Proxy
Chapter 2. Installation contains a step-by-step guide to installing
F-Secure Policy Manager Proxy.
Chapter 3. Configuration describes how F-Secure Policy Manager Proxy
is configured.
Chapter 4. F-Secure Policy Manager Proxy on Linux describes how to
install, configure and troubleshoot F-Secure Policy Manager Proxy for Linux.
Chapter 5. Troubleshooting describes how the diagnostic log files are
read.
and how it works.
About This Guide 6
Technica l S u ppo rt provides contact information for assistance and details
about the Web Club.
About F-Secure Corporation describes the company background and
products
7

Who Should Use This Guide

This guide is intended for system administrators. It is assumed that the
reader has:
Working knowledge of Microsoft Windows Server operating
systems.
A basic understanding of the Internet and TCP/IP protocols.

Conventions Used in F-Secure Guides

This section describes the symbols, fonts, and terminology used in this manual.

Symbols

WARNING: The warning symbol indicates a situation with a risk of irreversible destruction to data.
IMPORTANT: An exclamation mark provides important information that you need to consider.
REFERENCE - A book refers you to related information on the topic available in another document.
NOTE - A note provides additional information that you should consider.
l
8
Fonts
TIP - A tip provides information that can help you perform a task more quickly or easily.
An arrow indicates a one-step procedure.
Arial bold (blue) is used to refer to menu names and commands, to
buttons and other items in a dialog box.
Arial Italics (blue) is used to refer to other chapters in the manual, book
titles, and titles of other manuals. Arial Italics (black) is used for file and folder names, for figure and table
captions, and for directory tree names. Courier New is used for messages on your computer screen.
9
Courier New bold is used for information that you must type.
SMALL CAPS (BLACK) is used for a key or key combination on your
keyboard.
PDF Document
For More Information
Arial underlined (blue )
Arial italics is used for window and dialog box names.
This manual is provided in PDF (Portable Document Format). The PDF
document can be used for online viewing and printing using Adobe®
Acrobat® Reader. When printing the manual, please print the entire
manual, including the copyright and disclaimer statements.
Visit F-Secure at http://www.f-secure.com for documentation, training
courses, downloads, and service and support contacts.
In our constant attempts to improve our documentation, we would
welcome your feedback. If you have any questions, comments, or
suggestions about this or any other F-Secure document, please contact
us at documentation@f-secure.com
is used for user interface links.
.
1

INTRODUCTION

An Up-To-Date System is a Secure System............................... 11
When Should You Use F-Secure Policy Manager Proxy?.......... 12
How are F-Secure Policy Mana ger Pr oxy an d F-S ecu re Anti -Virus
Proxy Different?.......................................................................... 14
10
11
\

1.1 An Up-To-Date System is a Secure System

To be protected, a workstation must have the latest defence against
viruses and other malware that exist in the internet.
What Is The Virus Definition Database?
Information against known viruses, worms and other malware are
compiled into the virus definition database.
This virus definition database is regularly made available to all the
workstations with F-Secure Client Security installed. It is this virus
definition database that enables F-Secure Client Security to protect a
workstation from viruses and malware.
How Do the Virus Definition Databases Get To F-Secure Client Security?
)6HFXUH9LUXV
'HILQLWLRQ'DWDEDVH
)6HFXUH
8SGDWH
6HUYHU
)6HFXUH
3ROLF\
0DQDJHU
Figure 1-1 A typical virus definition database delivery chain.
)6HFXUH
3ROLF\
0DQDJHU
)6HFXUH &OLHQW 6HFXULW\
The virus definition database travels through the steps shown in Figure
1-1.
Figure 1-1 is the primary path; there are fallback paths if one or more of the links is unavailable (for example if the machine running F-Secure Policy Manager has a power cut).
CHAPTER 1 12
Introduction
What Does F-Secure Policy Manager Do?
F-Secure Policy Manager allows you to centrally manage all the F-Secure products in your network. It is the central monitoring and configuration point for your network.
See F-Secure Policy Manager Administrator’s Guide for more information.
What Does F-Secure Policy Manager Proxy Do?
F-Secure Policy Manager Proxy helps deliver the virus definition databases quickly and efficiently.

1.2 When Should You Use F-Secure Policy Manager Proxy?

The effects of F-Secure Policy Manager Proxy are most obvious in large, vastly spread networks; for example a large corporation with remote offices in different parts of the globe. An example of one situation where F-Secure Policy Manager Proxy is useful is shown in Figure 1-2.
13
)6HFXUH3ROLF\0DQDJHU3UR[\
5HJLRQDO2IILFH
)6HFXUH
$QWL9LUXV
&OLHQW
6HFXULW\
)6HFXUH &OLHQW 6HFXULW\
:LWKRXW
)6HFXUH
)6HFXUH
8SGDWH
6HUYHU
:LWK
)6HFXUH
)6HFXUH
8SGDWH
6HUYHU
)6HFXUH
3ROLF\
0DQDJHU
3UR[\
6ORZ
&RQQHFWLRQ
)6HFXUH9LUXV 'HILQLWLRQ'DWDEDVH
&RUSRUDWH
+HDGTXDUWHUV
)6HFXUH
3ROLF\
0DQDJHU
0DQ\6ORZ
&RQQHFWLRQV
)6HFXUH9LUXV 'HILQLWLRQ'DWDEDVH
&RUSRUDWH
+HDGTXDUWHUV
)6HFXUH
3ROLF\
0DQDJHU
)6HFXUH3ROLF\0DQDJHU3UR[\
5HJLRQDO2IILFH
)6HFXUH
$QWL9LUXV
&OLHQW
6HFXULW\
)6HFXUH &OLHQW 6HFXULW\
Figure 1-2 On the right, with F-Secure Policy Manager Proxy, the numbe r of slow connections is dramatically reduced.
There are three reasons to use F-Secure Policy Manager Proxy:
To Decrease Network Bandwidth Usage
You should use F-Secure Policy Manager Proxy when you have a group of workstations far away from you F-Secure Policy Manager Server; for example a “remote office” scenario like in Figure 1-2.
To Decrease Virus Definition Database Delivery Time
You should use F-Secure Policy Manager Proxy when you have a group of workstations separated from the F-Secure Policy Manager Server by a slow connection (for example a dialup connection), for example in a situation like in Figure 1-2
Loading...
+ 30 hidden pages