F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 Service-Handbuch
F-Secure Client Security
Administrator's Guide
Contents
Chapter 1: Introduction.......................................................................9
System requirements..............................................................................................................10
Policy Manager Server.................................................................................................10
Policy Manager Console..............................................................................................10
Main components...................................................................................................................12
Features..................................................................................................................................13
Product registration.................................................................................................................14
Application management........................................................................................................15
Basic terminology...................................................................................................................16
Chapter 2: Installing the product......................................................17
Installation steps.....................................................................................................................18
Download and run the installation package.................................................................18
Select components to install........................................................................................18
Complete installation of the product............................................................................19
Run Policy Manager Console......................................................................................19
Changing the web browser path.............................................................................................21
Uninstalling the product..........................................................................................................22
Chapter 3: Anti-virus mode user interface......................................23
Policy domains tab..................................................................................................................24
Management tabs...................................................................................................................25
Summary tab................................................................................................................25
Settings tab..................................................................................................................27
Status tab.....................................................................................................................35
Alerts tab......................................................................................................................37
Reports tab..................................................................................................................37
Installation tab..............................................................................................................38
Operations tab.............................................................................................................38
The toolbar..............................................................................................................................39
Menu commands....................................................................................................................40
Settings inheritance................................................................................................................42
How settings inheritance is displayed on the user interface........................................42
Locking and unlocking all settings on a page at once.................................................43
Settings inheritance in tables.......................................................................................43
Chapter 4: Setting up the managed network...................................45
Logging in...............................................................................................................................46
F-Secure Client Security | TOC | 3
Connection properties..................................................................................................46
Changing communication preferences........................................................................46
Managing domains and hosts.................................................................................................48
Adding policy domains.................................................................................................48
Adding hosts...........................................................................................................................49
Adding hosts in Windows domains..............................................................................49
Importing autoregistered hosts....................................................................................49
Push installations.........................................................................................................51
Policy-based installation..............................................................................................53
Local installation and updates with pre-configured packages.....................................55
Local installation and Policy Manager....................................................................................58
System requirements...................................................................................................58
Uninstall other antivirus programs...............................................................................58
Installation steps..........................................................................................................59
Installing on an infected host..................................................................................................60
Checking that the management connections work.................................................................61
Chapter 5: Configuring virus and spyware protection...................63
Configuring automatic updates...............................................................................................64
How do automatic updates work?................................................................................64
Automatic update settings ...........................................................................................64
Configuring automatic updates from Policy Manager Server......................................64
Configuring Policy Manager Proxy..............................................................................65
Configuring clients to download updates from each other...........................................65
Configuring real-time scanning...............................................................................................67
Real-time scanning settings.........................................................................................67
Enabling real-time scanning for the whole domain......................................................68
Forcing all hosts to use real-time scanning.................................................................69
Excluding Microsoft Outlooks's .pst file from real-time scanning.................................69
Configuring DeepGuard..........................................................................................................70
DeepGuard settings.....................................................................................................70
DeepGuard server queries...........................................................................................70
Configuring rootkit scanning (Blacklight)................................................................................72
Rootkit scanning settings.............................................................................................72
Launching a rootkit scan for the whole domain...........................................................72
Configuring e-mail scanning...................................................................................................73
E-mail scanning settings..............................................................................................73
Enabling e-mail scanning for incoming and outgoing e-mails......................................74
Configuring web traffic (HTTP) scanning................................................................................75
Web traffic scanning settings.......................................................................................75
Enabling web traffic scanning for the whole domain....................................................75
Excluding a web site from HTTP scanning..................................................................75
Configuring spyware scanning................................................................................................77
Spyware control settings..............................................................................................77
4| F-Secure Client Security | TOC
Setting up spyware control for the whole domain........................................................78
Launching spyware scanning in the whole domain.....................................................79
Allowing the use of a spyware or riskware component................................................79
Managing quarantined objects................................................................................................80
Deleting quarantined objects.......................................................................................80
Releasing quarantined objects....................................................................................80
Preventing users from changing settings...............................................................................82
Setting all virus protection settings as final..................................................................82
Configuring alert sending........................................................................................................83
Setting Client Security to send virus alerts to an e-mail address.................................83
Disabling Client Security alert pop-ups........................................................................83
Monitoring viruses on the network..........................................................................................84
Testing your antivirus protection.............................................................................................85
Chapter 6: Configuring Internet Shield............................................87
Global firewall security levels..................................................................................................88
Design principles for security levels........................................................................................89
Configuring security levels and rules......................................................................................90
Selecting an active security level for a workstation.....................................................90
Configuring a default security level for the managed hosts.........................................90
Adding a new security level for a certain domain only.................................................90
Configuring network quarantine..............................................................................................93
Network quarantine settings........................................................................................93
Turning network quarantine on in the whole domain...................................................93
Fine-tuning network quarantine...................................................................................93
Configuring rule alerts.............................................................................................................94
Adding a new rule with alerting....................................................................................94
Configuring application control...............................................................................................97
Application control settings..........................................................................................97
Setting up application control for the first time.............................................................98
Creating a rule for an unknown application on root level.............................................99
Editing an existing application control rule.................................................................100
Turning off application control pop-ups......................................................................100
Using alerts to check that Internet Shield works...................................................................102
Configuring intrusion prevention...........................................................................................103
Intrusion prevention settings......................................................................................103
Configuring IPS for desktops and laptops.................................................................103
Chapter 7: How to check that the network environment is protected.105
Checking that all the hosts have the latest policy.................................................................106
Checking that the server has the latest virus definitions......................................................107
Checking that the hosts have the latest virus definitions......................................................108
Checking that there are no disconnected hosts...................................................................109
Viewing scanning reports......................................................................................................110
F-Secure Client Security | TOC | 5
Viewing alerts.......................................................................................................................111
Creating a weekly infection report........................................................................................112
Monitoring a possible network attack....................................................................................113
Chapter 8: Upgrading software......................................................115
Using the installation editor...................................................................................................116
Chapter 9: Local host operations...................................................119
Scan manually .....................................................................................................................120
How to select the type of manual scan......................................................................120
Clean malware automatically.....................................................................................121
View the results of manual scan ...............................................................................121
Scan at set times .................................................................................................................122
Schedule a scan .......................................................................................................122
Cancel a scheduled scan ..........................................................................................122
View the results of scheduled scan............................................................................123
Where to find firewall alerts and log files..............................................................................124
View firewall alerts.....................................................................................................124
View the action log ....................................................................................................125
Monitor network traffic with packet logging................................................................125
Connecting to Policy Manager and importing a policy file manually.....................................128
Suspending downloads and updates....................................................................................129
Allowing users to unload F-Secure products........................................................................130
Chapter 10: Virus information.........................................................131
Malware information and tools on the F-Secure web pages................................................132
How to send a virus sample to F-Secure..............................................................................133
How to package a virus sample.................................................................................133
What should be sent..................................................................................................133
How to send the virus sample....................................................................................134
What to do in case of a virus outbreak?...............................................................................136
Chapter 11: Setting up the Cisco NAC plugin...............................137
Installing the Cisco NAC plugin............................................................................................138
Importing posture validation attribute definitions..................................................................139
Using attributes for the application posture token................................................................140
Chapter 12: Advanced features: virus and spyware protection...141
Configuring scheduled scanning...........................................................................................142
Advanced DeepGuard settings.............................................................................................143
Notifying user on a deny event..................................................................................143
Letting an administrator allow or deny program events from other users..................143
6| F-Secure Client Security | TOC
Allowing or denying events requested by a specific application automatically..........143
Configuring Policy Manager Proxy.......................................................................................145
Configuring automatic updates on hosts from Policy Manager Proxy..................................146
Excluding an application from the web traffic scanner..........................................................147
Chapter 13: Advanced features: Internet Shield...........................149
Managing Internet Shield properties remotely......................................................................150
Using packet logging..................................................................................................150
Using the trusted interface.........................................................................................150
Using packet filtering..................................................................................................150
Configuring security level autoselection...............................................................................152
Troubleshooting connection problems..................................................................................153
Adding new services.............................................................................................................154
Creating a new Internet service based on the default HTTP.....................................154
Setting up dialup control.......................................................................................................156
Allowing and blocking phone numbers......................................................................156
Using call logging.......................................................................................................156
Chapter 14: Modifying prodsett.ini.................................................159
Configurable prodsett.ini settings.........................................................................................160
Chapter 15: E-mail scanning alert and error messages...............167
Alert and error messages.....................................................................................................168
Chapter 16: Products detected or removed during client installation.171
Product list............................................................................................................................172
F-Secure Client Security | TOC | 7
8| F-Secure Client Security | TOC
Chapter
1
Introduction
Policy Manager can be used for:
Topics:
• defining security policies,
•System requirements
• distributing security policies,
•Main components
• installing application software to local and remote systems,
•Features • monitoring the activities of all systems in the enterprise to ensure
compliance with corporate policies and centralized control.
•Product registration
•Application management
When the system has been set up, you can see status information from
the entire managed domain in one single location. In this way it is very
•Basic terminology
easy to make sure that the entire domain is protected, and to modify the
protection settings when necessary. You can also restrict the users from
making changes to the security settings, and be sure that the protection
is always up-to-date.
System requirements
This section provides the system requirements for both Policy Manager Server and Policy Manager Console.
Policy Manager Server
In order to install Policy Manager Server, your system must meet the minimum requirements given here.
Microsoft Windows:Operating system:
• Microsoft Windows Server 2003 SP1 or higher
(32-bit); Standard, Enterprise, Web Edition or Small
Business Server editions
• Windows Server 2003 SP1 or higher (64-bit);
Standard or Enterprise editions
• Windows Server 2008 SP1 (32-bit); Standard,
Enterprise or Web Server editions
• Windows Server 2008 SP1 (64-bit); Standard,
Enterprise, Web Server, Small Business Server or
Essential Business Server editions
• Windows Server 2008 R2; Standard, Enterprise or
Web Server editions
P4 2 GHz processor or faster.Processor:
Managing more than 5000 hosts or using Web
Reporting requires P4 3 GHz level processor or faster.
512 MB RAM, 1 GB RAM recommended.Memory:
Managing more than 5000 hosts or using Web
Reporting requires 1 GB RAM.
5 GB of free hard disk space; 8 GB or more is
recommended. The disk space requirements depend
on the size of the installation.
Disk space:
In addition to this it is recommended to allocate about
1 MB per host for alerts and policies. The actual disk
space consumption per host is hard to anticipate, since
it depends on how the policies are used and how many
installation packages are stored.
10 Mbit network.Network:
Managing more than 5000 hosts requires a 100 Mbit
network.
Policy Manager Console
In order to install Policy Manager Console, your system must meet the minimum requirements given here.
10 | F-Secure Client Security | Introduction
Andere Handbücher für ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00
2
Dieses Handbuch passt für folgende Modelle
1
Inhaltsverzeichnis
Andere F-SECURE Software Handbücher
F-SECURE
F-SECURE ANTI-VIRUS - FOR MICROSOFT EXCHANGE Kurzanleitung
F-SECURE
F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 7.10 - Service-Handbuch
F-SECURE
F-SECURE CLIENT SECURITY 9.10 - RELEASE NOTES Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY 6 FOR ANDROID Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY 6 FOR WINDOWS MOBILE - Bedienungsanleitung
F-SECURE
F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 6.62 - Service-Handbuch
F-SECURE
F-SECURE MOBILE SECURITY 6 FOR S60 - Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY FOR WINDOWS MOBILE - Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY 6 FOR WINDOWS MOBILE - Bedienungsanleitung
F-SECURE
F-SECURE ONLINE BACKUP 2.1 - WEB USER INTERFACE HELP Bedienungsanleitung
F-SECURE
F-SECURE POLICY MANAGER PROXY - Service-Handbuch
F-SECURE
F-SECURE MOBILE SECURITY FOR SERIES 80 Bedienungsanleitung
F-SECURE
F-SECURE LINUX SECURITY Bedienungsanleitung
F-SECURE
F-SECURE ONLINE BACKUP - WEB USER INTERFACE HELP Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY 3.1 FOR SYMBIAN Bedienungsanleitung
F-SECURE
F-SECURE POLICY MANAGER 7.0 - Service-Handbuch
F-SECURE
F-SECURE POLICY MANAGER PROXY 2.0 - Service-Handbuch
F-SECURE
F-SECURE ONLINE BACKUP Bedienungsanleitung
F-SECURE
F-SECURE MOBILE SECURITY FOR S60 - Bedienungsanleitung
F-SECURE
F-SECURE PSB Service-Handbuch
Beliebte Software Handbücher anderer Marken
COMPRO
COMPRO COMPROFM Bedienungsanleitung
Muratec
Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung
Oracle
Oracle Contact Center Anywhere 8.1 Bedienungsanleitung
Adobe
Adobe 65007312 - Photoshop Lightroom Handbuch
Avaya
Avaya NULL One-X for RIM Blackberry Bedienungsanleitung
HP
HP ProLiant BL420c Bedienungsanleitung
PS Audio
PS Audio PowerPlay Betriebsanleitung
Brady
Brady LOCKOUT PRO 3.0 Service-Handbuch
Avaya
Avaya Interaction Center Bedienungsanleitung
Texas Instruments
Texas Instruments TI-83 Plus Silver Edition Handbuch
Novell
Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung
Oracle
Oracle Application 9i Bedienungsanleitung
Acer
Acer RDM Bedienungsanleitung
Canon
Canon Vixia HF21 Bedienungsanleitung
Canon
Canon ZR950 Bedienungsanleitung
Samsung
Samsung Auto Backup Bedienungsanleitung
Polycom
Polycom Vortex EF2201 Montage- und Bedienungsanleitung
Brocade Communications Systems
Brocade Communications Systems Brocade 8/12c Bedienungsanleitung