Symantec Critical System Benutzerhandbuch

Symantec™ Critical System

Protection Installation Guide

Symantec™ Critical System Protection

Installation Guide

The software described in this book is furnished under a license agreement and may be

used only in accordance with the terms of the agreement.

Documentation version 5.1.3

Legal Notice

Federal acquisitions: Commercial Software - Government Users Subject to Standard

License Terms and Conditions.

Symantec, the Symantec Logo, Norton, Norton AntiVirus, and LiveUpdate are trademarks

or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other

countries. Other names may be trademarks of their respective owners.

The product described in this document is distributed under licenses restricting its use,

copying, distribution, and decompilation/reverse engineering. No part of this document

may be reproduced in any form by any means without prior written authorization of

Symantec Corporation and its licensors, if any.

THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED

CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED

WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-

INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH

DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL

NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION

WITH THE FURNISHING PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE

INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE

WITHOUT NOTICE.

Symantec Corporation

20330 Stevens Creek Blvd.

Cupertino, CA 95014 USA

http://www.symantec.com

Technical Support

Symantec Technical Support maintains support centers globally. Technical

Support’s primary role is to respond to specific queries about product feature

and function, installation, and configuration. The Technical Support group also

authors content for our online Knowledge Base. The Technical Support group

works collaboratively with the other functional areas within Symantec to

answer your questions in a timely fashion. For example, the Technical Support

group works with Product Engineering and Symantec Security Response to

provide alerting services and virus definition updates.

Symantec’s maintenance offerings include the following:

■A range of support options that give you the flexibility to select the right

amount of service for any size organization

■Telephone and Web-based support that provides rapid response and up-to-

the-minute information

■Upgrade insurance that delivers automatic software upgrade protection

■Global support that is available 24 hours a day, 7 days a week worldwide.

Support is provided in a variety of languages for those customers that are

enrolled in the Platinum Support program

■Advanced features, including Technical Account Management

For information about Symantec’s Maintenance Programs, you can visit our

Web site at the following URL:

www.symantec.com/techsupp/ent/enterprise.html

Select your country or language under Global Support. The specific features that

are available may vary based on the level of maintenance that was purchased

and the specific product that you use.

Contacting Technical Support

Customers with a current maintenance agreement may access Technical

Support information at the following URL:

www.symantec.com/techsupp/ent/enterprise.html

Select your region or language under Global Support.

Before contacting Technical Support, make sure you have satisfied the system

requirements that are listed in your product documentation. Also, you should be

at the computer on which the problem occurred, in case it is necessary to

recreate the problem.

When you contact Technical Support, please have the following information

available:

■Product release level

■Hardware information

■Available memory, disk space, NIC information

■Operating system

■Version and patch level

■Network topology

■Router, gateway, and IP address information

■Problem description:

■Error messages and log files

■Troubleshooting that was performed before contacting Symantec

■Recent software configuration changes and network changes

Licensing and registration

If your Symantec product requires registration or a license key, access our

technical support Web page at the following URL:

www.symantec.com/techsupp/ent/enterprise.html.

Select your region or language under Global Support, and then select the

Licensing and Registration page.

Customer service

Customer service information is available at the following URL:

www.symantec.com/techsupp/ent/enterprise.html

Select your country or language under Global Support.

Customer Service is available to assist with the following types of issues:

■Questions regarding product licensing or serialization

■Product registration updates such as address or name changes

■General product information (features, language availability, local dealers)

■Latest information about product updates and upgrades

■Information about upgrade insurance and maintenance contracts

■Information about Symantec Value License Program

■Advice about Symantec's technical support options

■Nontechnical presales questions

■Issues that are related to CD-ROMs or manuals

Maintenance agreement resources

If you want to contact Symantec regarding an existing maintenance agreement,

please contact the maintenance agreement administration team for your region

as follows:

■Asia-Pacific and Japan: contr[email protected]m

■Europe, Middle-East, and Africa: semea@symantec.com

■North America and Latin America: supportsolution[email protected]om

Additional enterprise services

Symantec offers a comprehensive set of services that allow you to maximize

your investment in Symantec products and to develop your knowledge,

expertise, and global insight, which enable you to manage your business risks

proactively.

Additional services that are available include the following:

To access more information about Enterprise Services, please visit our Web site

at the following URL:

www.symantec.com

Select your country or language from the site index.

Symantec Early Warning

Solutions

These solutions provide early warning of cyber attacks,

comprehensive threat analysis, and countermeasures to

prevent attacks before they occur.

Managed Security

Services

These services remove the burden of managing and monitoring

security devices and events, ensuring rapid response to real

threats.

Consulting services Symantec Consulting Services provide on-site technical

expertise from Symantec and its trusted partners. Symantec

Consulting Services offer a variety of prepackaged and

customizable options that include assessment, design,

implementation, monitoring and management capabilities,

each focused on establishing and maintaining the integrity and

availability of your IT resources.

Educational Services These services provide a full array of technical training,

security education, security certification, and awareness

communication programs.

Contents

Technical Support

Chapter 1 Introducing Symantec™ Critical System Protection

About Symantec Critical System Protection ................................................... 11

Components of Symantec Critical System Protection ................................... 12

How Symantec Critical System Protection works .......................................... 13

About the policy library ......................................................................................13

Where to get more information .........................................................................14

Chapter 2 Planning the installation

About planning the installation ........................................................................ 15

About network architecture and policy distribution .....................................15

System requirements .......................................................................................... 16

Operating system requirements ................................................................ 17

Solaris packages ................................................................................... 18

Linux kernel driver support ...............................................................19

Hardware requirements .............................................................................. 20

Disabling Windows XP firewalls ........................................................................21

Disabling Internet Connection Firewall ...................................................21

Disabling Windows Firewall ...................................................................... 22

About using firewalls with Symantec Critical System Protection ............... 22

About name resolution .......................................................................................23

About IP routing ..................................................................................................24

About intrusion prevention ............................................................................... 24

About simple failover ..........................................................................................25

How simple failover works .........................................................................25

About the fail back interval ........................................................................26

Specifying the management server list for an agent ............................. 27

About the Windows NT agent installation ...................................................... 27

About log files ......................................................................................................28

What to do after installation .............................................................................. 29

Chapter 3 Installing Symantec Critical System Protection on Windows

About installing Symantec Critical System Protection on Windows .......... 32

About port number mapping ..................................................................... 32

8Contents

Bypassing prerequisite checks .................................................................. 33

About installing a database to a SQL Server instance ................................... 34

About SQL Server installation requirements .......................................... 34

About installing on computers that run Windows 2000 ....................... 35

Configuring the temp environment variable .................................................. 36

Installing the management server .................................................................... 36

About installation types and settings ....................................................... 36

Installing the management server into a database instance

previously used for Symantec Critical System Protection .... 37

Management server installation settings and options .................. 38

Installing evaluation installation that runs MSDE on the local

system .................................................................................................... 42

Installing evaluation installation using existing MS SQL instance ..... 44

Installing production installation with Tomcat and database schema 45

Installing Tomcat component only ........................................................... 47

Installing and configuring the management console .................................... 48

Installing the management console .......................................................... 48

Configuring the management console ..................................................... 49

Installing a Windows agent ................................................................................ 51

About the SSL certificate file ..................................................................... 51

About the installation settings and options ............................................ 51

Installing the Windows agent software ................................................... 55

Unattended agent installation ........................................................................... 59

Displaying InstallShield commands ......................................................... 59

Microsoft Windows Installer commands ................................................. 60

Installation properties ................................................................................ 61

Installing the Windows NT policy ..................................................................... 64

Uninstalling Symantec Critical System Protection ....................................... 65

Uninstalling an agent using Add or Remove Programs ........................ 66

Unattended uninstallation of an agent .................................................... 66

Uninstalling the management console .................................................... 67

Uninstalling the management server and database .............................. 67

Temporarily disabling Windows agents .......................................................... 68

Temporarily disabling Windows 2000, Windows Server 2003,

or Windows XP Professional agents ................................................. 68

Resetting the prevention policy to the built-in Null policy .......... 68

Temporarily disabling Windows NT agents ............................................ 69

Reinstalling Windows agents ............................................................................ 71

Chapter 4 Installing UNIX agents

About installing UNIX agents ............................................................................ 73

Bypassing prerequisite checks .................................................................. 77

Installing an agent in verbose mode ................................................................. 78

9Contents

Installing an agent in silent mode ..................................................................... 79

Uninstalling agents using package commands ...............................................84

Uninstalling agents manually ........................................................................... 85

Uninstalling Solaris agents manually ...................................................... 85

Uninstalling Linux agents manually ........................................................ 87

Uninstalling HP-UX agents manually ...................................................... 88

Uninstalling AIX agents manually ............................................................ 89

Uninstalling Tru64 agents manually ........................................................ 90

Disabling and enabling UNIX agents ................................................................91

Disabling and enabling Solaris agents .....................................................91

Temporarily disabling the IPS driver ............................................... 91

Permanently disabling Solaris agents .............................................. 92

Enabling a disabled Solaris agent ...................................................... 93

Disabling and enabling Linux agents ........................................................ 93

Temporarily disabling the IPS driver ............................................... 93

Permanently disabling Linux agents ................................................93

Enabling a disabled Linux agent ........................................................94

Disabling and enabling HP-UX agents .....................................................94

Temporarily disabling HP-UX agents ...............................................94

Permanently disabling HP-UX agents .............................................. 95

Enabling a disabled HP-UX agent ...................................................... 95

Disabling and enabling AIX agents ........................................................... 95

Temporarily disabling AIX agents ....................................................96

Permanently disabling AIX agents .................................................... 96

Enabling a disabled AIX agent ........................................................... 96

Disabling and enabling Tru64 agents .......................................................97

Temporarily disabling Tru64 agents ................................................ 97

Permanently disabling Tru64 agents ...............................................97

Enabling a disabled Tru64 agent ....................................................... 98

Monitoring and restarting UNIX agents .......................................................... 98

Troubleshooting agent issues ............................................................................99

Chapter 5 Migrating to the latest version

Migrating legacy installations of Symantec Critical System Protection ..101

Providing scspdba password during management server upgrade ...102

Unattended Windows agent migration ..................................................103

Specifying the management server list for an agent ...........................103

Migrating other legacy agent installations ...................................................105

Checklist for migrating from Symantec Intruder Alert ..............................106

Checklist for migrating from Symantec Host IDS ........................................108

Migrating legacy agent software .....................................................................109

Preparing for detection policy migration ......................................................109

Installing the authoring environment and policy conversion utility 110

10 Contents

Copying files required for the policy conversion utility ......................110

Migrating legacy detection policy files ..........................................................111

Converting legacy detection policy files ................................................111

Importing the zip file ................................................................................113

Creating a new policy ................................................................................113

Validating your rules ................................................................................114

Validating rule types and criteria ...........................................................115

Configuring an option group ...................................................................116

Compiling a policy .....................................................................................116

Applying policies created and compiled

in the authoring environment .........................................................117

Index

Inhaltsverzeichnis

Andere Symantec Netzwerkkarte Handbücher

Symantec

Symantec S500 Bedienungsanleitung

Beliebte Netzwerkkarte Handbücher anderer Marken

FirstComm

FirstComm OBiWiFi5G Bedienungsanleitung

Sun Microsystems

Sun Microsystems Interface Adapter Bedienungsanleitung

TRENDnet

TRENDnet TU2-ETG Bedienungsanleitung

YASKAWA

YASKAWA SI-EN3 Bedienungsanleitung

Paradyne

Paradyne BitStorm 2600 IP DSLAM Bedienungsanleitung

Belkin

Belkin F5D7050 Bedienungsanleitung

3Com

3Com EtherLink 3C509B Bedienungsanleitung

TRENDnet

TRENDnet TEG-PCITX Bedienungsanleitung

Cisco

Cisco MC16E Bedienungsanleitung

Delta Electronics

Delta Electronics Braking Modules VFDB Series Bedienungsanleitung

TwinMOS

TwinMOS Booming Bedienungsanleitung

Dialogic

Dialogic Media Board DM/V1200BTEPEQ Bedienungsanleitung

Buffalo

Buffalo AirStation WLI-PCM-L11GP Bedienungsanleitung

National Instruments

National Instruments NI 9234 Bedienungsanleitung

Hama

Hama 49276 Bedienungsanleitung

Linksys

Linksys WCF54G - Wireless-G Compact Flash Card Bedienungsanleitung

Compaq

Compaq Wireless LAN 100 Bedienungsanleitung

Bose

Bose PowerMatch Dante Bedienungsanleitung