Mcafee MANAGEMENT EDITION 2.5 User Manual

Management Edition
Getting Started Guide
Version 2.5
COPYRIGHT
Copyright © 1998–1999 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies.
* ActiveHelp, Bomb Shelter, Building a World of Trust, CipherLink, Clean-Up, Cloaking, CNX, Compass 7, CyberCop, CyberMedia, Data Security Letter, Discover, Distributed Sniffer System, Dr Solomon’s, Enterprise Secure Cast, First Aid, ForceField, Gauntlet, GMT, GroupShield, HelpDesk, Hunter, ISDN Tel/Scope, LM 1, LANGuru, Leading Help Desk Technology, Magic Solutions, MagicSpy, MagicTree, Magic University, MagicWin, MagicWord, McAfee, McAfee Associates, MoneyMagic, More Power To You, Multimedia Cloaking, NetCrypto, NetOctopus, NetRoom, NetScan, Net Shield, NetShield, NetStalker, Net Tools, Network Associates, Network General, Network Uptime!, NetXRay, Nuts & Bolts, PC Medic, PCNotary, PGP, PGP (Pretty Good Privacy), PocketScope, Pop-Up, PowerTelnet, Pretty Good Privacy, PrimeSupport, RecoverKey, RecoverKey-International, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, Site Meter, Sniffer, SniffMaster, SniffNet, Stalker, Statistical Information Retrieval (SIR), SupportMagic, Switch PM, TeleSniffer, TIS, TMach, TMeg, Total Network Security, Total Network Visibility, Total Service Desk, Total Virus Defense, T-POD, Trusted Mach, Trusted Mail, Uninstaller, Virex, Virex-PC, Virus Forum, ViruScan, VirusScan, VShield, WebScan, WebShield, WebSniffer, WebStalker WebWall, and ZAC 2000 are registered
trademarks of Network Associates and/or its affiliates in the US and/or other countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners.
LICENSE AGREEMENT
NOTICE TO ALL USERS: FOR THE SPECIFIC TERMS OF YOUR LICENSE TO USE THE SOFTWARE THAT THIS DOCUMENTATION DESCRIBES, CONSULT THE README.1ST, LICENSE.TXT, OR OTHER LICENSE DOCUMENT THAT ACCOMPANIES YOUR SOFTWARE, EITHER AS A TEXT FILE OR AS PART OF THE SOFTWARE PACKAGING. IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH THEREIN, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND.
Issued September 1999/Management Edition v2.5.0
Table of Contents
Chapter 1. Introducing the Management Edition Program . . . . . . . . . . . 5
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
What is the Management Edition program? . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
How does the Management Edition program work? . . . . . . . . . . . . . . . . . . . . .5
Management Edition program features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
New functionality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Seamlessly interactive management tools . . . . . . . . . . . . . . . . . . . . . . . .7
Automated software distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Real-time virus detection and notification . . . . . . . . . . . . . . . . . . . . . . . . .8
Conventions used in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
How to contact Network Associates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Customer service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Technical support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Network Associates training . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Comments and feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Reporting new items for anti-virus data file updates . . . . . . . . . . . . . . .11
International contact information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Chapter 2. Installing the Management Edition Program . . . . . . . . . . . .15
System requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Hardware recommended . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Software supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Defining anti-virus domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Installing the Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Installation scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Option 1: Local machine/server – one anti-virus domain manager . . . . . 17
Option 2: Server/server – more than one anti-virus domain manager . . .18
Option 3: Local machine/local machine – ten machines or fewer . . . . . . 18
Option 4: Local machine/server – ten machines or fewer . . . . . . . . . . . . . 19
Installation steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Getting Started Guide iii
Table of Contents
Running the Management Console (initial use) . . . . . . . . . . . . . . . . . . . . . . . .26
Installing the master repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Installing anti-virus components in the Repository . . . . . . . . . . . . . . . .32
Understanding the Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Menu bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Font bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Left pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Right pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Status bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Upgrading the Management Edition program . . . . . . . . . . . . . . . . . . . . . . . . .44
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
iv Management Edition
1
Introducing the Management
Edition Program

Introduction

As a network administrator, your time is valuable. Youre responsible for maintaining your corporate network at its optimum. The Management Edition program solves your need for timely, efficient, and cost-effective enterprise-wide anti-virus software distribution. With it, you can seamlessly install, configure, and manage anti-virus software for remote networked machines within anti-virus domains that you create.

What is the Management Edition program?

The Management Edition program is Network Associates* real-time software distribution system, which installs, configures, upgrades, and removes anti-virus software for remote machines on a network. The Management Edition software helps protect your network from attacks by enabling centralized upgrading of your networks anti-virus software, as well as centralized alerting of detected attacks. It reduces the time you must spend installing and managing anti-virus software, particularly on large networks, ensuring uninterrupted network security.
1
The Management Edition software helps you safeguard one of your most important assetsyour databy delivering timely upgrades of VirusScan* (for Windows95, Windows98, WindowsNT, and Windows3.1x) and NetShield* for Windows NT. Anti-virus software distribution is an important element in a comprehensive security program that includes a variety of safety measures, such as regular use of encryption and intrusion detection software, backups, meaningful password protection, training, and security awareness. Network Associates urges you to set up and comply with such a security program.

How does the Management Edition program work?

The Management Edition program installs software to member machines in the anti-virus domains that you create, from software repositories (master, mirror, and linked) that you create. You control these activities from the Management Console, a drag-and-drop application that runs on Microsoft Windows NT.
Getting Started Guide 5
Introducing the Management Edition Program
You can install the Management Edition program on the local hard disk drive of the administrators workstation. You will need a Microsoft Windows NT Domain Administrator account.
NOTE: You must install the Management Console and the Management Server only on a Windows NT system. (The Management Console runs only on Wind ows NT 4.0 , and the Mana gement Server runs on Windows NT 3.51 or later.) Both applications, however, handle all tasks in the same way across all Management Agent workstation platforms (Windows NT, Windows 95, Windows 98, Windows 3.x, and Novell NetWare 3.12 or later), which means less time spent learning new systems.
Most of the programs functionality is built into these integrated services:
Management Console. Use the Management Console to configure and
install anti-virus software on any machines in the anti-virus domain. For details, see Chapter 3, Creating Anti-virus Domains and Chapter 5,
Updating Your Anti-virus Software, in your online Administrators Guide.
Management Server. Use the Management Server to coordinate the scheduling of scans, receive alerts, and generate reports for the entire anti-virus domain. For details, see Chapter 4, Creating Schedules, in your online Administrators Guide.
Management Agent. Use the Management Agent to initiate on-demand
Alert Manager. Use the Alert Manager to configure alert notification
These services work together to provide easy management of machines in your anti-virus domain. Each service is configurable through a console. To access the Alert Manager settings from the Management Console, click
Anti-Virus Domain(s)
individual machine, and then click the
toolbar button.
6 Management Edition
scans via the Scheduler, and to send virus alerts from on-demand and on-access scans back to the Management Server. For details, see Chapter 4, Creating Schedules, in your online Administrators Guide.
settings. When the anti-virus software managed by the Management Edition program detects malicious activity on your servers, you can be notified immediately by one or more of a wide variety of notification methods. For details, see Chapter 6, Using the Alert Manager, in your online Administrators Guide.
, an individual domain, a members group, or an
Component Configuration
Introducing the Management Edition Program

Management Edition program features

This version of the Management Edition program builds on the strengths of previous versions, extending the established functionality and providing new features to help you manage your network anti-virus solutions. See the WHA TSNEW .TXT file inclu ded w ith the sof twar e for a full list of ne w feat ures and information on the latest changes.

New functionality

The Management Edition program now supports NetShield for NetWare v4.1.1 anti-virus software.
Forced updates of invalid external mirrors give you more control over how and when mirror repositories are updated.
This release includes the ability to configure custom toolssuch as the additional console required to configure remote NetShield for NetWare serversthat can be launched from the Console.
You can now use the Repositorys Products page to update product files such as SETUP.EXE or SETUP.ISS in addition to script (MCSCRIPT.INI) and extension .DLL files.
Tools
menu in the Management
You can now define custom messages that can be appear immediately before or after a client update.
This release features enhanced control over Name Provider-installed machines.

Seamlessly interactive management tools

The Management Console lets you configure and install anti-virus software on any machines in the anti-virus domain from any Windows NT machine on which it is installed.
The Management Server coordinates the scheduling of scans, receives alerts, and generates reports for the entire anti-virus domain from the Windows NT machine on which it is installed.
The Management Agent provides client installers for Windows 95 and Windows NT machines that have peer networking disabled or removed, so that you can add them to the network without need for file sharing.
The diagnostics wizard gathers information in an e-mailable format and helps our technical support staff solve your problems faster.
Getting Started Guide 7
Introducing the Management Edition Program

Automated software distribution

The Management Console enables enhanced distribution speeds to a large number of machines and efficiently stores domain and machine information as registry entries (not .INI files).
An enhanced Batch Install method lets desktop and laptop users initiate an update upon login for fast installation of anti-virus software and updates.
Linked repositories reduce WAN traffic by allowing you to distribute software between repositories without having to install software from separate CD-ROM discs.
Different language versions of the same anti-virus software can co-exist in a single repository. You specify the language version to be distributed for each machine, group, or domain.
Software installation reports show which anti-virus software is installed on which machines, which machines are in which anti-virus domain, and which machines have a non-standard configuration.

Real-time virus detection and notification

On-access (inbound and outbound) anti-virus scanning provides real-time identification of both known and unknown viruses upon file access, create, copy, rename, and run; disk access; system startup; and system shutdown.
On-demand anti-virus scanning offers user-initiated detection of known boot, file, macro, multi-partite, stealth, encrypted, and polymorphic viruses located within files, drives (local and network), and diskettes.
The Alert Manager offers centralized virus notification via alphanumeric pager, SMTP e-mail, SNMP messaging, DMI alerting, audible alerting, network broadcast, program execution, and Windows NT event logging. (For details, see Chapter 6, Using the Alert Manager, in your online Administrators Guide.)
At-a-glance scan status via the anti-virus domain view reveals whether a machine is all clear, infected, or overdue for a scan.
Scans can be scheduled for entire member groups, as well as individual machines or the whole domain.
Virus-scan reports display how many virus alerts have occurred over a specified period of time on specified machines.
8 Management Edition
Introducing the Management Edition Program

Conventions used in this guide

The following describes the typeface conventions used in this guide:
Bold
Sans-serif font
Keystrokes
Variables
Menu names, commands, buttons, and dialog box options are shown in a bold sans-serif font.
Folder, icon, and computer key names, as well as screen text on the software, are shown in a sans-serif font.
Text that the user must type in as a command or as a text box entry (e.g., a pathname) is shown in a monospaced font.
Command-line text for which you must supply a value is shown in an italic sans-serif font.

How to contact Network Associates

Customer service

To order products or obtain product information, contact the Network Associates Customer Care department at (408) 988-3832 or write to the following address:
Network Associates, Inc. McCandless Towers 3965 Freedom Circle Santa Clara, CA 95054-1203 U.S.A.

Technical support

Network Associates is famous for its dedication to customer satisfaction. We have continued this tradition by making our site on the World Wide Web a valuable resource for answers to technical support issues. We encourage you to make this your first stop for answers to frequently asked questions, for updates to Network Associates software, and for access to Network Associates news and virus information
World Wide Web http://support.nai.com
If you do not find what you need or do not have web access, try one of our automated services.
Internet support@nai.com
CompuServe GO NAI
America Online keyword MCAFEE
.
Getting Started Guide 9
Introducing the Management Edition Program
If the automated services do not have the answers you need, contact Network Associates at one of the following numbers Monday through Friday between 6:00
For corporate-licensed customers:
For retail-licensed customers:
To provide the answers you need quickly and efficiently, the Network Associates technical support staff needs some information about your computer and your software. Please have this information ready before you call:
Product name and version number
Computer brand and model
. and 6:00 P.M. Pacific time.
A.M
Phone (408) 988-3832
Fax (408) 970-9727
Phone (972) 855-7044
Fax (408) 970-9727
Any additional hardware or peripherals connected to your computer
Operating system type and version numbers
Network type and version, if applicable
Contents of your AUTOEXEC.BAT, CONFIG.SYS, and system LOGIN
script
Specific steps to reproduce the problem

Network Associates training

For information about scheduling on-site training for any Network Associates product, call (800) 338-8754.

Comments and feedback

Network Associates appreciates your comments and reserves the right to use any information you supply in any way it believes appropriate without incurring any obligation whatsoever. Please address your comments about Network Associates anti-virus product documentation to: Network Associates, Inc., 15220 NW Greenbrier Parkway, Suite 100, Beaverton, OR 97006-5762, U.S.A. You can also send faxed comments to (503) 531-7655 or e-mail to tvd_documentation@nai.com.
10 Management Edition
Introducing the Management Edition Program

Reporting new items for anti-virus data file updates

Network Associates anti-virus software offers you the best available detection and removal capabilities, including advanced heuristic scanning that can detect new and unnamed viruses as they emerge. Occasionally, however, an entirely new type of virus that is not a variation on an older type can appear on your system and escape detection.
Because Network Associates researchers are committed to providing you with effective and up-to-date tools you can use to protect your system, please tell them about any new Java classes, ActiveX controls, dangerous websites, or viruses that your software does not now detect. Note that Network Associates reserves the right to use any information you supply as it deems appropriate, without incurring any obligations whatsoever. Send your questions or virus samples to:
virus_research@nai.com Use this address to send questions or
virus samples to our North America and South America offices
vsample@nai.com Use this address to send questions or
virus samples gathered with Dr Solomon’s Anti-Virus Toolkit* software to our offices in the United Kingdom
To report items to our European research office, use these e-mail addresses:
virus_research_europe@nai.com Use this address to send questions or
virus samples to our offices in Western Europe
virus_research_de@nai.com Use this address to send questions or
virus samples gathered with Dr Solomon’s Anti-Virus Toolkit software to our offices in Germany
To report items to our Asia-Pacific research office, or our office in Japan, use one of these e-mail addresses:
virus_research_japan@nai.com Use this address to send questions or
virus samples to our offices in Japan and East Asia
virus_research_apac@nai.com Use this address to send questions or
virus samples to our offices in Australia and South East Asia
Getting Started Guide 11
Introducing the Management Edition Program

International contact information

To contact Network Associates outside the United States, use the addresses, phone numbers and fax numbers below.
Network Associates Australia
Level 1, 500 Pacific Highway
St. Leonards, NSW
Sydney, Australia 2065
Phone: 61-2-8425-4200
Fax: 61-2-9439-5166
Network Associates Belgique
BDC Heyzel Esplanade, boîte 43
1020 Bruxelles
Belgique
Phone: 0032-2 478.10.29
Fax: 0032-2 478.66.21
Network Associates Canada
139 Main Street, Suite 201
Unionville, Ontario
Canada L3R 2G6
Phone: (905) 479-4189
Fax: (905) 479-4540
Network Associates Austria
Pulvermuehlstrasse 17
Linz, Austria
Postal Code A-4040
Phone: 43-732-757-244
Fax: 43-732-757-244-20
Network Associates do Brasil
Rua Geraldo Flausino Gomez 78
Cj. - 51 Brooklin Novo - São Paulo
SP - 04575-060 - Brasil
Phone: (55 11) 5505 1009
Fax: (55 11) 5505 1006
Network Associates Peoples Republic of China
New Century Office Tower, Room 1557
No. 6 Southern Road Capitol Gym
Beijing
Peoples Republic of China 100044
Phone: 8610-6849-2650
Fax: 8610-6849-2069
Network Associates Denmark
Lautruphoej 1-3
2750 Ballerup
Danmark
Phone: 45 70 277 277
Fax: 45 44 209 910
12 Management Edition
NA Network Associates Oy
Sinikalliontie 9, 3rd Floor
02630 Espoo
Finland
Phone: 358 9 5270 70
Fax: 358 9 5270 7100
Introducing the Management Edition Program
Network Associates France S.A.
50 Rue de Londres
75008 Paris
France
Phone: 33 1 44 908 737
Fax: 33 1 45 227 554
Network Associates Hong Kong
19th Floor, Matheson Centre
3 Matheson Way
Causeway Bay
Hong Kong 63225
Phone: 852-2832-9525
Fax: 852-2832-9530
Network Associates Japan, Inc.
Toranomon 33 Mori Bldg.
3-8-21 Toranomon Minato-Ku
Tokyo 105-0001 Japan
Phone: 81 3 5408 0700
Fax: 81 3 5408 0780
Network Associates Deutschland GmbH
Ohmstraße 1
D-85716 Unterschleißheim
Deutschland
Phone: 49 (0)89/3707-0
Fax: 49 (0)89/3707-1199
Network Associates Srl
Centro Direzionale Summit
Palazzo D/1
Via Brescia, 28
20063 - Cernusco sul Naviglio (MI)
Italy
Phone: 39 02 92 65 01
Fax: 39 02 92 14 16 44
Network Associates Latin America
1200 S. Pine Island Road, Suite 375
Plantation, Florida 33324
United States
Phone: (954) 452-1731
Fax: (954) 236-8031
Network Associates de Mexico
Andres Bello No. 10, 4 Piso
4th Floor
Col. Polanco
Mexico City, Mexico D.F. 11560
Phone: (525) 282-9180
Fax: (525) 282-9183
Network Associates International B.V.
Gatwickstraat 25
1043 GL Amsterdam
The Netherlands
Phone: 31 20 586 6100
Fax: 31 20 586 6101
Getting Started Guide 13
Introducing the Management Edition Program
Network Associates Portugal
Av. da Liberdade, 114
1269-046 Lisboa
Portugal
Phone: 351 1 340 4543
Fax: 351 1 340 4575
Network Associates South East Asia
78 Shenton Way
#29-02
Singapore 079120
Phone: 65-222-7555
Fax: 65-220-7255
Network Associates Sweden
Datavägen 3A
Box 596
S-175 26 Järfälla
Sweden
Phone: 46 (0) 8 580 88 400
Fax: 46 (0) 8 580 88 405
Net Tools Network Associates South Africa
Bardev House, St. Andrews
Meadowbrook Lane
Epson Downs, P.O. Box 7062
Bryanston, Johannesburg
South Africa 2021
Phone: 27 11 706-1629
Fax: 27 11 706-1569
Network Associates Spain
a
Orense 4, 4
Planta.
Edificio Trieste
28020 Madrid, Spain
Phone: 34 9141 88 500
Fax: 34 9155 61 404
Network Associates AG
Baeulerwisenstrasse 3
8152 Glattbrugg
Switzerland
Phone: 0041 1 808 99 66
Fax: 0041 1 808 99 77
Network Associates Taiwan
Suite 6, 11F, No. 188, Sec. 5
Nan King E. Rd.
Taipei, Taiwan, Republic of China
Phone: 886-2-27-474-8800
Fax: 886-2-27-635-5864
14 Management Edition
Network Associates International Ltd.
Minton Place, Victoria Street
Windsor, Berkshire
SL4 1EG
United Kingdom
Phone: 44 (0)1753 827 500
Fax: 44 (0)1753 827 520
2
Installing the Management
Edition Program

System requirements

Before installing the Management Edition program, verify that your system has the features shown below, then consider the installation scenarios on
page 16.

Hardware recommended

The Management Edition program will install and run on any IBM PC or PC-compatible computer equipped with:
A Pentium processor-class CPU (central processing unit)
At least 17
Management Console; at least 1
At least 15
At least 15
you add more anti-virus software
NOTE: In order to optimize performance, Network Associates recommends that you not install the Management Console and the Repository on the same machine; however, you may prefer to do this for simplicity.
MB of RAM:
MB
of free hard disk space for the Management Console
MB
of free hard disk space for the Repository, which increases as
16MB of RAM (random-access memory) for the
MB
of RAM for the anti-virus components
2
A NIC (network interface card) suitable for your network speed

Software supported

È
IMPORTANT: Neither the Management Server nor the Management Console has been tested with Windows 2000 Professional or Server. Network Associates does not currently certify or support running on these platforms.
For the Management Console: Windows NT Server or Workstation, v4.0 (with domain administrator rights)
For the Management Server: Windows NT Server or Workstation, v3.51 and v4.0 (with domain administrator rights), running one or more TCP/IP, Novell IPX, and NetBIOS protocols
Getting Started Guide 15
Loading...
+ 33 hidden pages