Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Bedienungsanleitung

Novell®

www.novell.com

novdocx (en) 13 May 2009

AUTHORIZED DOCUMENTATION

ZENworks Endpoint Security Client 3.5 User Guide

ZENworks

Endpoint Security Management

3.5

March 31, 2009

Endpoint Security Client 3.5 User Guide

novdocx (en) 13 May 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 13 May 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4ZENworks Endpoint Security Client 3.5 User Guide

novdocx (en) 13 May 2009

Contents 5

Contents

novdocx (en) 13 May 2009

About This Guide 7

1 Introduction 9

1.1 Security Enforcement for Mobile Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 NDIS Layer Firewall Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

2 Endpoint Security Client 3.5 Overview 11

2.1 ESM Terminology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2 Logging In to the Endpoint Security Client 3.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

3 Using the Endpoint Security Client 3.5 15

3.1 Moving Among Network Environments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.2 Changing Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.2.1 Saving a Network Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.2.2 Saving a Wi-Fi Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3.2.3 Removing a Saved Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.3 Changing Firewall Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.4 Data Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.4.1 Managing Files on Fixed Disks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.4.2 Managing Files on Removable Storage. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.5 Updating Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.6 Viewing Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.7 Overriding a Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.8 Diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

6ZENworks Endpoint Security Client 3.5 User Guide

novdocx (en) 13 May 2009

About This Guide 7

novdocx (en) 13 May 2009

About This Guide

This Novell®ZENworks®Endpoint Security Client 3.5 User Guide is written to instruct the end-user

on the operation of the Endpoint Security Client 3.5 for Windows* XP* and Windows 2000*.

The information in this guide is organized as follows:

Chapter 1, “Introduction,” on page 9

Chapter 2, “Endpoint Security Client 3.5 Overview,” on page 11

Chapter 3, “Using the Endpoint Security Client 3.5,” on page 15

Audience

This guide can be sent to all employees in the enterprise to help them understand how to use the

Endpoint Security Client 3.5.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/

documentation/feedback.html) and enter your comments there.

Additional Documentation

ZENworks Endpoint Security Management is supported by other documentation (in both PDF and

HTML formats) that you can use to learn about and implement the product. For additional

documentation, see the ZENworks Endpoint Security Management 3.5 documentation Web site

(http://www.novell.com/documentation/zesm35).

Documentation Conventions

In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

When a single pathname can be written with a backslash for some platforms or a forward slash for

other platforms, the pathname is presented with a backslash. Users of platforms that require a

forward slash, such as Linux*, should use forward slashes as required by your software.

8ZENworks Endpoint Security Client 3.5 User Guide

novdocx (en) 13 May 2009

Introduction

novdocx (en) 13 May 2009

Introduction

Novell®ZENworks®Endpoint Security Management (ESM) is designed to protect corporate data

assets, through a centrally managed tool called the Endpoint Security Client. The Endpoint Security

Client 3.5 is installed on Windows XP and Windows 2000 enterprise computers and enforces

security policies written and sent down through the ESM management and distribution system. This

allows large enterprises and small businesses to create, deploy, enforce, and monitor computer

security policies on computers inside and outside of the corporate security perimeter.

For Windows Vista computers, see ZENworks Endpoint Security Client 4.0 User Guide.

The following sections contain additional information:

Section 1.1, “Security Enforcement for Mobile Computers,” on page 9

Section 1.2, “NDIS Layer Firewall Protection,” on page 9

1.1 Security Enforcement for Mobile Computers

Security is enforced both globally and by network location. Each location listed in a security policy

determines the user's permissions in that network environment and determines which firewall

settings are activated. The firewall settings determine which networking ports, network addresses,

and applications are granted network access and how that access is permitted.

Figure 1-1 ESM Adjusts Security Settings Based on the Detected Network Environment

Normal operations of the Endpoint Security Client 3.5 are transparent to the user, after the network

environments have been defined. Occasionally, Endpoint Security Client 3.5 protective measures

can interrupt normal operation; when this occurs, messages and hyperlinks display to notify the user

about the security policy, what protective steps have been taken, and refer them to additional

information to help correct the issue.

1.2 NDIS Layer Firewall Protection

In securing mobile devices, ESM is superior to typical personal firewall technologies that operate

only in the application layer or as a firewall-hook driver. ESM client security is integrated into the

Network Driver Interface Specification (NDIS) driver for each network interface card (NIC),

10 ZENworks Endpoint Security Client 3.5 User Guide

novdocx (en) 13 May 2009

providing security protection from the moment traffic enters the computer. Differences between

ESM and application-layer firewalls and filter drivers are illustrated in Figure 1-2, “Effectiveness of

an NDIS-Layer Firewall,” on page 10.

Figure 1-2 Effectiveness of an NDIS-Layer Firewall

Security decisions and system performance are optimized when security implementations operate at

the lowest appropriate layer of the protocol stack. With the Endpoint Security Client 3.5, unsolicited

traffic is dropped at the lowest levels of the NDIS driver stack by means of Adaptive Port Blocking

(stateful packet inspection) technology. This approach protects against protocol-based attacks,

including unauthorized port scans, SYN Flood attacks, and others.

It is recommended that you follow all operation and maintenance recommendations in this

document, in order to ensure that the endpoint security environment is protected.

Andere Handbücher für ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5

Inhaltsverzeichnis

Andere Novell Software Handbücher

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell GROUPWISE 7 - DISTRIBUTION LISTS Bedienungsanleitung

Novell

Novell ZENWORKS PATCH MANAGEMENT 6.4 SP2 - SERVER Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6. - INTEGRATION Kurzanleitung zur Einrichtung

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 2.0 - INSTALLATION AND ADMINISTRATION GUIDE... Bedienungsanleitung

Novell

Novell CLIENT FOR LINUX 1.1 Bedienungsanleitung

Novell

Novell IFOLDER 3.6 - CROSS-PLATFORM Bedienungsanleitung

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 9.3 - ADMINISTRATION... Bedienungsanleitung

Novell

Novell INTELLISYNC MOBILE SUITE 7.0 - SECURE GATEWAY ADMINISTRATOR GUIDE... Service-Handbuch

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell Account Management 2.1 Bedienungsanleitung

Novell

Novell APPARMOR - AND Handbuch

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 Bedienungsanleitung

Novell

Novell CUSTOMER CENTER 2.3 - GUIDE 4-8-2009 Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6.1 - STAGING BEST PRACTICES GUIDE... Bedienungsanleitung

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - UPGARDE GUIDE... Installations- und Betriebshandbuch

Novell

Novell EDIRECTORY 8.8 SP5 Kurzanleitung

Novell

Novell GROUPWISE 7 - MESSAGE TRANSFERT AGENT Bedienungsanleitung

Novell

Novell GROUPWISE 7 WEBACCESS Bedienungsanleitung

Novell

Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ... Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6.1 - TASK SERVICE DRIVER Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP1 - GNOME... Bedienungsanleitung

Novell

Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - ... Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Lexmark

Lexmark Apps Service-Handbuch