and Spy Sweeper icons are registered trademarks or trademarks of Webroot Software, Inc. All
other trademarks are properties of their respective owners.
A: Webroot Enterprise Port Requirements61
B: Migrating an Existing Installation from DBISAM to SQL Server63
Index 65
ii Contents
1: Planning Your Inst allation
Webroot Enterprise™ lets you install and manage Webroot® products throughout your company.
You can set up groups with different settings, install updates automatically or manually, view the
status of all products, and much more.
Webroot Enterprise gives you companywide management and control to ensure that your
company’s computer resources are protected from a variety of threats.
About This Guide
This Guide tells you how to set up and use Webroot Enterprise to install and manage Webroot
products throughout the company. It assumes that you have detailed knowledge of the Windows
operating systems in use in your company and your network.
The information in this Guide is also available from the help button.
Conventions
This Guide uses several typographical conventions to help explain how to use Webroot Enterprise.
ConventionDefinition
BoldWords in bold show it ems to select or click, such as menu item s or buttons.
Tree navigationThe Guide uses parent node > child node notation for tree navigation. For
Note
Caution
example, Admin Tasks > Settings. This means to expand to the Admin Tasks
node in the tree and select the Settings node.
This symbol means the following information is a note that gives you important
information that may affect how you use Webroot Enterprise.
This symbol means the following information is a caution that warns you about
actions that may affect your ability to use some programs on your computer.
This symbol means that the following information is a procedure.
Webroot Enterprise System Administrator Guide1
Technical Support
Technical support is available by phone and e-mail:
•Call 800-870-8102
•Send your questions to: esupport@webroot.com.We will respond within one business day.
System Requirements
Following are the system requirements for Webroot Enterprise.
Table 1: Company server system requirements
Operating system
CPU
Memory
Disk
space30 MB free space for operation. Additional free space needed
Windows NT 4.0 SP5 or higher , W indows 2000 , Wind ows XP
(see note below), Windows Server 2003
Windows 98, 98SE, ME, NT 4.0, 2000, or XP
150 MHz or better recommended
32 MB RAM minimum; 128 MB RAM or better recom mended
Version 6.0 with Service Pack 1 required for Windows 98,
98SE, and ME
Note
Due to modifications that Microsoft made in Service Pack 2 for Windows XP that limit
simultaneous TCP/IP connections, we do not recommend using the Poll Now or Sweep Now
functions for more than five client workstations at a time. If you do, you may see temporary
system lag and an Event ID error 4226 entry in your Windows system log. If you are managing
large numbers of clients with frequent polling intervals from a server with Windows XP and SP2,
you may also see the 4226 error when more than five clients poll in simultaneously.
21: Planning Your Installation
Understanding W ebroot Enterprise
Webroot Enterprise offers a total enterprise solution for your companywide spyware management
using a client/server architecture. Figure 1 shows a base configuration and how Webroot
Enterprise works.
Webroot Update Server where
application and definition
updates are available.
You r company server, with Webroot
Enterprise installed, downloads updates from
the Webroot Update Server over the Internet.
Internet
LAN
Workstations on your LAN, with the Spy
Sweeper client installed, download updates
from your company server.
Figure 1: Webroot Enterprise base architecture
The Webroot Enterprise product includes three types of components that you install on your
computers:
•On a company server, you install Webroot Enterprise Server™, which is described in
Table 4.
–If you want to use more than one company server, consider using additional
distributor servers, as described in “Planning for Webroot Enterprise Deployment” on
page 5, or contact technical support for assistance.
•On each end user’s computer, you install the client workstation components, which are
described in Table 5.
•On each distributor server, you install the distributor service, which is described in
Table 6.
If you have a complex internal network, run firewall pr ograms at the desktop or server level, or use
proxy servers internally , you should review “Appendix A, Webroot Enterprise Port Requirements”
on page 61.
Webroot Enterprise System Administrator Guide3
Table 4: Webroot Enterprise Server components
ComponentFile nameDescriptionInstallation/Network
Access Requirement
Client Service™WebrootClientService.exeControls the
communication between
the client workstations and
your company server.
Update Service
Admin Console™
WebrootUpdateService.exeControls the updates from
™
the Webroot Update
Server
™ to your company
server.
WebrootAdminConsole.exeProvides a graphical user
interface (GUI) to let you
set up and manage the
Webroot applications
across the company. Most
of this Guide describes
how to use this component.
• Installed during the
installation of Webroot
Enterprise Server.
• Requires local network
access.
• Installed during the
installation of Webroot
Enterprise Server.
• Requires local network and
Internet access.
• Requires use of port 443 on
your server.
• Installed during the
installation of Webroot
Enterprise Server.
Table 6: Webroot Enterprise distributor server components
ComponentFile nameDescriptionInstallation/Network
Distributor service
CommAgent.exe• Communicates periodically
with the Client Service on your
company server to see if any
new or updated applications
are available.
• Runs as a system service on
each client workstation.
SpySweeper.exe• Detects spyware and provides
access to options for
workstations users.
• Runs as a system service on
each client workstation.
WebrootUpdateDistribu
tor.exe
• Communicates periodically
with the Client Service on your
company server to receive
updates and with CommAgents
to distribute updates.
• Runs as a system service on the
server.
• Installed when you set
up client workstations.
• Requires local network
access.
• Installed when you set
up client workstations.
Access Requirement
• Installed when you set
up distributor servers.
• Requires local network
access.
41: Planning Your Installation
Planning for Webroot Enterprise Deployment
If you plan to deploy W ebroot Enterprise to 500 or fewer client workstations, you can use the base
configuration shown in Figure 1. If you are deploying to more than 500 client workstations, you
should review the information in this section to determine the best configuration and settings to
use.
Table 7 provides general configuration and database recommendations based on the number of
client workstations.
Table 7: Configuration and database recommendations
Number of client
workstations
Up to 500Single 350 MHz processor
500 to 10,000Single 1 GHz processor,
10,000 to 40,000Single 1 GHz processor,
40,000 to 75,000Dual 1 GHz processors,
Over 75,000Deploy multiple company
Company server
specifications
with 512 MB RAM
512 MB RAM
1GB RAM
2GB RAM
servers
Contact technical support
for assistance
DatabaseNumber of
distributor servers
DBISAM0One hour
DBISAM0 to 2Two hours
MS SQL Server 2 to 3Four hours
MS SQL Server 3 to 6Four hours
Base on number
of client
workstations
each server
handles
Base on number of
client workstations each
server handles
Poll no more
frequently than
Base on number of
client workstations
each server
handles
You may want to install additional distributor servers or company servers for two reasons:
•You have multiple sites and want to minimize bandwidth usage on WAN segments
between the sites. The normal communication between the client and the server is only
about 1 KB. Spy definition updates are typically 1 MB. A new Spy Sweeper client update
can be as large as 5.5 MB.
•You have a large number of clients relative to your server capabilities. Many things can
affect the performance of the server.
Deploying distributor servers reduces WAN bandwidth consumed when spy definitions or
software updates are delivered. Distributor servers receive copies of Spy Sweeper client and
definitions updates. For more information about how updates work, see “How W ebroot Enterprise
Updates Work” on page 7.
In a configuration that uses distributor servers, the client workstations poll the company server. If
updates are available, the company server sends a randomized list of distributor servers to each
client workstation. The client workstation requests updates from the first distributor server on the
list. The distributor server sends the updates to the client workstation. If the distributor server is
not available, the client workstation sends its request to the next distributor server on the list. The
company server is always the last server on the list and will send the updates if no distributor
server is able to do so.
The figures that follow show some recommended configurations for typical deployments.
Webroot Enterprise System Administrator Guide5
Company server using DBISAM
Configuration poll and sweep results
Settings and updates
Clients
Figure 2: Single site with 500 clients
Configuration poll and sweep results
Company server
using DBISAM
Settings and distributor addresses
Request for
updates
Updates
Distributors
Figure 3: Single site with 10,000 clients
Clients
Updates
61: Planning Your Installation
Company server
using SQL
Configuration poll
and sweep results
Updates
Updates
Settings and
distributor addresses
Site 2
Request for
updates
Site 1
Updates
Request for
updates
Clients
Clients
Updates
Distributors
Distributors
Figure 4: Multiple sites with more than 10,000 total clients
How Webroot Enterprise Up dates Work
Most Webroot Enterprise updates are completely automatic after initial installation and setup. The
whole update process works like this:
1. Your company server automatically moves updates to all assigned distributors once they
are downloaded from the Webroot Update Server. Your distributor servers synchronize
with your company server every minute.
2. The client workstations poll the company server.
3. If updates are available, the company server sends a randomized list of distributor servers
containing the update to the client workstation.
•For client workstations to receive updates, you must assign updates to specific groups
or to the company as a whole. From the Admin Console, select Manage Desktop
Applications > Spy Sweeper > Update Spy Sweeper and go to either Manual
Install or Auto Install. If you set up automatic installation on after an update has
downloaded, the automatic installation does not apply to that update. For more
information, see “Updating Spy Sweeper” on page 48.
4. The client workstation requests updates from the first distributor server on the list.
Webroot Enterprise System Administrator Guide7
5. The distributor server sends the updates to the client workstation.
6. If the distributor server is not available, then the client workstation sends its request to the
next distributor server on the list. The company server is always the last server on the list,
and it will send the updates if no other distributor server is able to do so.
This process spreads the load across all distributor servers to ensure that the servers are not
overwhelmed with update requests.
Key Step s to Inst alling and Setting Up Webroot
Enterprise
Once you have determined how you will deploy Spy Sweeper Enterprise in your environment, you
are ready to begin the installation and setup. The six major steps in getting started are:
1. Gather information for server installation.
•For more information, see Table 8 on page 11.
2. Install Webroot Enterprise Server.
•For more information, see “Installing Webroot Enterprise Server on Your Company
Server” on page 11.
3. Check for latest news and updates.
•For more information, see “Accessing the Admin Console and Viewing News” on
page 29 and “Installing Updates Manually” on page 49.
4. Deploy initial clients.
•For more information, see “Setting Up Client Workstations” on page 20.
5. Set up sweep settings and initial sweeps.
•For more information, see “Managing Spyware” on page 39, “Configuring Sweeps”
on page 43, and “Running Sweeps” on page 46.
6. Broader deployment.
81: Planning Your Installation
2: Inst alling Webroot Enterprise
You must perform the following tasks to install Webroot Enterprise:
1. If you are using Microsoft SQL Server for your database, set up the SQL database. (See
page 9.)
•For information about determining what database to use, see “Planning for Webroot
Enterprise Deployment” on page 5.
2. Install Webroot Enterprise Server on your company server. (See page 11.)
3. Set up one or more client workstations. (See page 20.)
4. If you are using distributor servers, install one or more distributors. (See page 24.)
Setting up a SQL Server Database
If you determined that you will use Microsoft SQL Server for your installation, you must create
the database and a system DSN before starting the installation process. You must also have the
user name and password available.
For information about determining whether to use SQL Server, see “Planning for Webroot
Enterprise Deployment” on page 5. If you have an existing Webroot Enterprise installation and
need to migrate the database from DBISAM to SQL Server, see “Appendix B, Migrating an
Existing Installation from DBISAM to SQL Server” on page 63.
To set up the SQL Server database:
1. Open the SQL Enterprise Manager.
2. Browse to the Databases folder.
3. Right-click and select New Database.
Webroot Enterprise System Administrator Guide9
4. Give the new database a unique name.
5. Browse to the Users pane of the new database.
6. Right-click and select New Database User.
7. Create a new user and select the db_owner role in the Database Role Membership section.
8. Configure your SQL server for SQL Server and Windows authentication and use a SQL
user account instead of a Windows account to access a SQL database with Webroot
Enterprise.
9. When you install Webroot Enterprise Server, select SQL Server 2000 in the Database
Settings window.
•The Select the SQL Server 2000 drop-down list takes a moment to populate with the
list of SQL servers in your environment.
10. Select the SQL server where you just set up the database.
102: Installing Webroot Enterprise
•If the server name of your SQL Server does not appear in the drop-down list, you can
manually enter the name into the field.
11. Enter the name and login information for the database created above.
•The installer program attempts to log in to the SQL database with the credentials
provided and displays a message if it cannot connect to the database.
Note
SQL Server databases must use Case Insensitive collation to function correctly with Webroot
Enterprise Server.
Installing W ebroot Enterprise Server on Your
Company Server
The Webroot Enterprise Server installation process installs all of the executables described in
Table 4 on page 4. You must install Webroot Enterprise Server while logged in with
Administrative rights.
The WebrootClientService.exe and We brootUpdateService.exe run as Windows services and
should always be started. This permits your company server to download updates from the
Webroot Update Server and client workstations to download updates and configuration changes
from your company server.
During the installation, you must enter all of the information requested to continue the process.
You should be prepared with information listed in Table 8.
Table 8: Information required for Webroot Enterprise Server installation
FieldDescription
Download Folder
Key Code
E-mail Host
From Address
Client Service Port
Path to the folder where your company server stores the updates it
downloads from the Webroot Update Server. For best performance,
use a folder on the same server. It can also be a folder on any drive
your company server can access.
Unique code that identifies the rights and privileges associated with
your installation, such as the number of licenses you have purchased
for each client workstation application.
Be sure to include the brackets.
Fully qualified domain name for your e-mail server used for outgoing
mail (SMTP server).
E-mail address that notification messages will come from. Must be a
real e-mail address in the format: tom@webroot.com.
Port on your company server that the Client Service will use to
communicate with your client workstations. The default port is 50000.
Be sure that the port you use is not used to by another process.
Webroot Enterprise System Administrator Guide11
Table 8: Information required for Webroot Enterprise Server installation (Contin ued)
FieldDescription
Proxy Server
Proxy Username
Proxy Password
Client Service IP
If you use a proxy server to access the Internet, enter your proxy
server name or IP address and port number in one of the following
formats:
• server_name.company.com:80
• 10.0.0.1:80
If you do not use a proxy server, leave the field blank.
If you use a proxy server that requires authentication, enter your proxy
server username.
If you use a proxy server that requires authentication, enter your proxy
server password.
Enter the IP address or host name that the client workstations will use
to communicate with your company server. For IP resolution, select
the IP address of the network interface card (NIC) visible to client
workstations. For host name resolution, enter the fully qualifi ed
domain name of your server (requires a properly configured DNS
environment).
To install Webroot Enterprise Server:
1. Close all other Windows programs that you have open on your computer.
2. Start the installation program.
To install from a CDTo install from a downloaded file
1. Insert the CD into your CD drive.
•The installation options should display
automatically. If they do not, use
Windows Explorer to navigate to your
CD drive. Then double-click
WebrootEnterpriseServerSetup.exe to
start the installation.
2. Click Install Webroot Enterprise to start
the installation.
•The Welcome window displays.
1. Follow the instructions on the Web site to
download the WebrootEnterpriseServerSetup.exe
file.
2. Go to where you downloaded the file.
•If you downloaded the file to your Windows
Desktop, close all open programs, and you
will see an icon on your desktop for the file
you downloaded.
•If you downloaded the file to a different
location, use Windows Explorer to navigate
to the file.
3. Double-click WebrootEnterpriseServerSetup.exe.
•The Welcome window displays.
122: Installing Webroot Enterprise
3. Click Next.
•The Software License Agreement window displays.
4. Read the license agreement and click Yes if you agree with the content.
•The Installation Path window displays showing you the default installation location.
Webroot Enterprise System Administrator Guide13
5. Click Next.
•If you want to install to a different location, click browse and navigate to the new
•The Start Menu window displays showing the default Start menu folder.
location.
6. Click Next.
•If you want to use a different Start menu folder , enter a new name or select an existing
group.
•The Company Information window displays.
142: Installing Webroot Enterprise
7. Enter the information and click Next.
Company Name
Key Code
Name of your company. This identifies your Webroot Enterprise
product when your company server looks for updates from the
Webroot Update Server.
Unique code that identifies the rights and privileges associated with
your installation, such as the number of licenses you have purchased
for each client workstation application.
If you purchased Webroot Enterprise through a sales representative or
online, you received your key code in an e-mail message. You can
copy the key code from the message and paste it in. If you purchased
Webroot Enterprise from a store or received it already installed on
your computer, the key code is on the product packaging.
Be sure to include the braces.
•The Update Settings window displays.
8. Enter or select the information and click Next.
Webroot Server Polling
Interval
Path to Download Folder
Select how often you want your server to check the Webroot Update
Server for updates.
Path to the folder where your company server stores the updates it
downloads from the Webroot Update Server. For best performance,
use a folder on the same server. It can also be a folder on any drive
your company server can access.
•The Proxy Settings window displays.
Webroot Enterprise System Administrator Guide15
9. Enter or select the information and click Next.
Proxy Server
Use Proxy Login
Proxy Username
Proxy Password
If you use a proxy server to access the Internet, enter your proxy
server name or IP address and port number in one of the following
formats:
• server_name.company.com:80
• 10.0.0.1:80
If you do not use a proxy server, leave the field blank.
If you use a proxy server that requires authentication, select this
option.
If you use a proxy server that requires authentication, enter your
proxy server username.
If you use a proxy server that requires authentication, enter your
proxy server password.
•The Client Service Settings window displays.
162: Installing Webroot Enterprise
10. Enter or select the information and click Next.
CommAgent Polling
Interval
Client Service IP
Client Service Port
How often you want installed CommAgents on each client
workstation to check for updates and for schedule and configuration
changes from your server.
Enter the IP address or host name that the client workstations will use
to communicate with your company server. For IP resolution, select
the IP address of the network interface card (NIC) visible to client
workstations. For host name resolution, enter the fully qualified
domain name of your server (requires a properly configured DNS
environment).
Port on your company server that the Client Service will use to
communicate with your client workstations. The default port is 50000.
Be sure that the port you use is not used to communicate with another
system.
•The E-mail Settings window displays.
11. Enter or select the information and click Next.
E-mail Host
From Address
Message Timeout
Fully qualified domain name for your e-mail server used for outgoing
mail (SMTP server). If you do not have this information, enter NA
and edit the information from the Admin Console.
E-mail address that notification messages will come from. Must be a
real e-mail address in the format: tom@webroot.com.
Amount of time the Admin Console will wait to connect to the mail
server before timing out.
•The SMTP Settings window displays.
Webroot Enterprise System Administrator Guide17
12. Enter or select the information and click Next.
Use SMTP Login
Username for SMTP
Password for SMTP
If you use a secure SMTP e-mail server, select this option and enter
the username and password below.
Name needed to log in to a secure SMTP server.
Password needed to log in to a secure SMTP server.
•The Client Settings window displays.
13. Enter or select the information and click Next.
Tray Icon Setting
Pop up on Scan
182: Installing Webroot Enterprise
Select how you want Spy Sweeper to appear on client workstations.
You can change this setting from the Admin Console by selecting
Displays a system tray icon that end users can double-click to display
the Spy Sweeper window and automatically pops up the window
whenever a sweep starts, whether scheduled or using Sweep Now.
Loading...
+ 50 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.