McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Transcription

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Installation Guide
McAfee VirusScan Enterprise for Linux
1.7.0 Software
COPYRIGHT
Copyright © 2011 McAfee, Inc. All Rights Reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by
any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.
TRADEMARK ATTRIBUTIONS
AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE),
MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered
trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of
McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.
LICENSE INFORMATION
License Agreement
NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS
FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU
HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR
SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A
FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET
FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF
PURCHASE FOR A FULL REFUND.
2
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Contents
Preface
5
About this guide . . . . . . . . . . . . . . . .
Audience . . . . . . . . . . . . . . . .
Conventions . . . . . . . . . . . . . . .
What's in this guide . . . . . . . . . . . .
Finding product documentation . . . . . . . . . .
1
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Introducing McAfee VirusScan Enterprise for Linux
5
5
5
6
6
7
Product Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
What’s new in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
2
System Requirements
9
Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3
Installing McAfee VirusScan Enterprise for Linux
Manual installation . . . . . . . . . . . .
Silent installation . . . . . . . . . . . . .
Running McAfee VirusScan Enterprise for Linux .
Handling old certificates . . . . . . .
Removing the software . . . . . . . . . .
Upgrading from previous versions . . . . . .
Integrating with ePolicy Orchestrator . . . . .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
11
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Index
.
.
.
.
.
.
.
.
.
.
.
.
.
.
11
14
15
16
17
17
18
21
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
3
Contents
4
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Preface
This guide provides the information you need to install your McAfee product.
For instructions on how to configure, use and maintain McAfee VirusScan Enterprise for Linux using
McAfee ePolicy Orchestrator software, see the McAfee VirusScan Enterprise for Linux 1.7 —
Configuration Guide. For detailed information all phases of product use from configuration to
troubleshooting, see the McAfee VirusScan Enterprise for Linux 1.7 — Product Guide.
Contents
About this guide
Finding product documentation
About this guide
This information describes the guide's target audience, the typographical conventions and icons used
in this guide, and how the guide is organized.
Audience
McAfee documentation is carefully researched and written for the target audience.
The information in this guide is intended primarily for:
•
Administrators — People who implement and enforce the company's security program.
•
Users — People who use the computer where the software is running and can access some or all of
its features.
Conventions
This guide uses the following typographical conventions and icons.
Book title or Emphasis Title of a book, chapter, or topic; introduction of a new term; emphasis.
Bold
Text that is strongly emphasized.
User input or Path
Commands and other text that the user types; the path of a folder or program.
Code
A code sample.
User interface
Words in the user interface including options, menus, buttons, and dialog
boxes.
Hypertext blue
A live link to a topic or to a website.
Note: Additional information, like an alternate method of accessing an option.
Tip: Suggestions and recommendations.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
5
Preface
Finding product documentation
Important/Caution: Valuable advice to protect your computer system,
software installation, network, business, or data.
Warning: Critical advice to prevent bodily harm when using a hardware
product.
What's in this guide
This guide is organized to help you find the information you need.
This guide provides you with an introduction to McAfee VirusScan Enterprise for Linux and how to
install and configure the software.
Topics include:
•
Introducing McAfee VirusScan Enterprise for Linux
•
System requirements and prerequisites before installing the software
•
Types of installation such as manual and silent installation
•
Detailed instructions on how to set up the software on various platforms
•
How to run the software
•
Handling old certificates
•
Upgrading the software from previous versions
•
Removing the software
•
Brief description about integrating the software with ePolicy Orchestrator
Finding product documentation
McAfee provides the information you need during each phase of product implementation, from
installation to daily use and troubleshooting. After a product is released, information about the product
is entered into the McAfee online KnowledgeBase.
Task
1
Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.
2
Under Self Service, access the type of information you need:
To access...
Do this...
User documentation
1 Click Product Documentation.
2 Select a product, then select a version.
3 Select a product document.
KnowledgeBase
• Click Search the KnowledgeBase for answers to your product questions.
• Click Browse the KnowledgeBase for articles listed by product and version.
6
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
1
Introducing McAfee VirusScan Enterprise
for Linux
McAfee VirusScan Enterprise for Linux (previously known as LinuxShield) detects and removes viruses
and other potentially unwanted software on Linux-based systems.
This information is intended for network administrators who are responsible for their company’s
anti-virus and security program.
Contents
Product Features
What’s new in this release
Product Features
This section describes the product features for the McAfee VirusScan Enterprise for Linux software.
McAfee VirusScan Enterprise for Linux software has the following features:
•
Support for 64-bit AMD64/Intel EM64T operating systems.
•
The latest version (5400) of the McAfee anti-virus engine.
•
Incremental Virus Signature (DAT) updates.
•
Mod-versioning for automatic kernel support.
•
Regular expression based exclusions for On-access scan and On-demand scan from the user interface.
•
Scanning
•
•
Comprehensive on-access anti-virus scanning and cleaning using the McAfee scanning engine.
•
On-access scanning for local file systems, NFS and Samba/CIFS.
•
Kernel-level scan cache for improved performance.
•
Scheduling of on-demand scans.
•
Scheduling of updates for scanning engine and virus definition files.
Administration
•
Remote administration using browser-based interface.
•
Secure browser interface with authentication and HTTPS (SSL) support.
•
Remote administration and reporting using ePolicy Orchestrator 4.5 or 4.6.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
7
1
Introducing McAfee VirusScan Enterprise for Linux
What’s new in this release
•
Reporting
•
Real-time statistics.
•
Detailed database for detected items and system events.
•
Ability to query the database by date range or individual field values, for example, virus name.
Results of query can be exported to a CSV file.
•
Configurable email notification for detected items, out-of-date virus definition files, configuration
changes, and system events.
•
Diagnostic report for use when reporting a problem with the product.
What’s new in this release
This section describes the new enhancements in this release of VirusScan Enterprise for Linux.
•
Support for Novell Cluster Services.
•
Support for Corosync OCFS2 File System Cluster.
•
Run-time Kernel Module Support
McAfee VirusScan Enterprise for Linux Kernel modules will be created dynamically in case of a
mod-version failure. To manually compile the kernel module, refer to the Frequently asked
questions — Run-time Kernel Module Support section in the Product Guide.
8
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
2
System Requirements
This section describes the software and hardware requirements to install VirusScan Enterprise for Linux.
Hardware and software requirements
The following hardware and software are required:
Supported operating systems (32-bit/64-bit)
•
SuSE Linux Enterprise Server/Desktop 10.x
•
SuSE Linux Enterprise Server/Desktop 11.x
•
Red Hat Enterprise 5.x Advanced Platform, Desktop
•
Red Hat Enterprise 6.x Server,Workstation, Client
•
Novell Open Enterprise Server 2.x
•
CentOS 5.x
•
CentOS 6.x
•
Ubuntu 10.04, 10.10 and 11.04 (Desktop/Server edition)
Supported kernels
•
McAfee VirusScan Enterprise for Linux v1.7 supports all kernels available on the supported
distributions.
Supported processors
•
Intel x86 architecture-based processor
•
Intel x86_64 architecture-based processor that supports Intel Extended Memory 64 Technology
(Intel EM64T)
•
AMD x86_64 architecture-based processor with AMD 64-bit technology
Memory
•
Minimum: 2 GB
•
Recommended: 4 GB
Free Disk space
•
Minimum: 1 GB
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
9
2
System Requirements
Hardware and software requirements
Supported browsers
•
Microsoft Internet Explorer 5.5, 6.0, 7.0 and 8.0
•
Konqueror 3.5.1, 4.1.3, 4.2.x, and 4.3.x
•
Mozilla 0.9.9, 1.0.1, 1.2.1, 1.4, 1.6, 1.7.8, 1.8.x, and 1.9.x
•
Firefox 1.0, 1.5, 2.0, 3.0, 3.5, 3.6, 4.0, 5.0, and 6.0
Supported McAfee Management software
•
McAfee ePolicy Orchestrator 4.5
•
McAfee ePolicy Orchestrator 4.6
Supported McAfee Agent software
•
McAfee Agent 4.5 Patch 2
•
McAfee Agent 4.6
Display
Monitor screen with a recommended minimum resolution of 1024 x 768.
10
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
3
Installing McAfee VirusScan Enterprise
for Linux
This chapter describes the installation process of McAfee VirusScan Enterprise for Linux.
You can install McAfee VirusScan Enterprise for Linux manually on hosts (see Manual installation) or
you can use a script (see Silent installation).
Download and extract the McAfee VirusScan Enterprise for Linux, version 1.7 package
(McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz) on to a temporary directory.
Contents
Manual installation
Silent installation
Running McAfee VirusScan Enterprise for Linux
Removing the software
Upgrading from previous versions
Integrating with ePolicy Orchestrator
Manual installation
During installation, you are prompted to supply a password and other information. For most of the
questions, you can accept the default value that is offered.
Before you begin
•
Ensure that there is no user named as "nails" or group named as "nailsgroup" on the
computer.
•
Ensure that you have root privileges to install McAfee VirusScan Enterprise for Linux.
•
If you are installing VirusScan Enterprise for Linux on a 64-bit RHEL 6.x system, ensure
that 32-bit RHEL 6.x PAM libraries are also installed.
•
If you are installing VirusScan Enterprise for Linux on a 64-bit Ubuntu system, ensure
that 32-bit Ubuntu libraries are also installed.
To set up email notification for alerts if it is required, you need a Mail Transfer Agent (MTA) configured,
and the following information:
•
Email address of the VirusScan administrator
•
Address for the SMTP host
•
TCP/IP port number for the SMTP host
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
11
3
Installing McAfee VirusScan Enterprise for Linux
Manual installation
Task
1
Download McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz on to a temporary
directory.
2
From the terminal, go to the temporary directory and execute the following command:
tar -zxvf McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz
3
To install McAfee Runtime, type the following command in the terminal window:
rpm -ivh MFErt.i686.rpm
4
To install McAfee Agent (MA), type the following command in the terminal window:
rpm -ivh MFEcma.i686.rpm
5
To confirm that the McAfee Agent is running correctly, type the following command in the terminal
window:
/etc/init.d/cma status
6
To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:
sh McAfeeVSEForLinux-1.7.0-installer
7
Answer the questions when prompted. Accept the default values, or specify your own.
8
When prompted to start the VirusScan services, select the default option Y.
9
To confirm that VirusScan Enterprise for Linux is running correctly, type the following command in
the terminal window:
/etc/init.d/nails status
Tasks
•
Installing on Novell Open Enterprise Server 2.x on page 12
Use this task to install VirusScan Enterprise for Linux on Novell Open Enterprise Server 2.x.
•
Installing on Ubuntu (Desktop or Server edition) on page 13
Use this task to install VirusScan Enterprise for Linux on Ubuntu Server.
Installing on Novell Open Enterprise Server 2.x
Use this task to install VirusScan Enterprise for Linux on Novell Open Enterprise Server 2.x.
Task
1
From the Novell eDirectory server, use iManager and create a user called "nails" and a group called
"nailsgroup".
2
Add the user "nails" a member of the "nailsgroup". Enable the user and group using the Linux User
Management.
3
Provide "nails" user with administrative privileges on all the NSS volumes.
rights -f /media/nss/<VOL-name> -r s trustee nails.<context>.<tree>
You need to provide administrative privileges to the "nails" user, every time a new NSS volume is
created.
4
12
Download the MFErt.i686.rpm and MFEcma.i686.rpm file.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Installing McAfee VirusScan Enterprise for Linux
Manual installation
5
3
Install McAfee Runtime and McAfee Agent using the following commands:
rpm -ivh MFErt.i686.rpm
rpm -ivh MFEcma.i686.rpm
6
To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:
sh McAfeeVSEForLinux-1.7.0-installer
7
Type nailsgroup for the Linux group for VirusScan administrator.
8
Type nails for the VirusScan user.
9
Answer the questions when prompted. Accept the default values, or specify your own.
10 When prompted to start the VirusScan services, select the default option Y.
Installing on Ubuntu (Desktop or Server edition)
Use this task to install VirusScan Enterprise for Linux on Ubuntu Server.
Before you begin
If you are installing VirusScan Enterprise for Linux on a 64-bit Ubuntu system, ensure that
you perform the following steps before installation:
1
Copy pam_unix.so from /lib/security of a 32-bit Ubuntu (till version 10.10) system
to a temporary directory (/tmp) on the 64-bit Ubuntu system. From Ubuntu 11.04
onwards, pam_unix.so is available under /lib/i386-linux-gnu folder.
2
In the root ( / ), create a folder pam32lib.
3
Execute the following command to copy pam_unix32.so to the pam32lib directory:
cp /tmp/pam_unix.so /pam32lib/pam_unix32.so
Task
1
Download the MFErt.i686.deb and MFEcma.i686.deb file.
2
Install McAfee Runtime and McAfee Agent using the following commands:
dpkg -i MFErt.i686.deb
dpkg -i MFEcma.i686.deb
3
Type the following at the command prompt:
sh McAfeeVSEForLinux-1.7.0-installer
4
Answer the questions when prompted. Accept the default values, or type your own.
5
When prompted to start the VirusScan services, select the default option Y.
6
To confirm that VirusScan Enterprise for Linux is installed and running correctly, type the following
at the command prompt:
/etc/init.d/nails status
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
13
3
Installing McAfee VirusScan Enterprise for Linux
Silent installation
Silent installation
Use this section to install McAfee VirusScan Enterprise for Linux in silent mode.
Before you begin
•
Before installing VirusScan Enterprise for Linux, make sure that there is no user as
"nails" and no group as "nailsgroup" in the computer.
•
Before installing McAfee VirusScan Enterprise for Linux, you must have McAfee Runtime
and McAfee Agent already installed on the computer.
•
Create a file "nails.options" in the root home (/root) directory.
For example:
SILENT_ACCEPTED_EULA=”yes”
SILENT_INSTALLDIR=”/opt/NAI/LinuxShield”
SILENT_RUNTIMEDIR=”/var/opt/NAI/LinuxShield”
SILENT_ADMIN=”[email protected]”
SILENT_HTTPHOST=”0.0.0.0”
SILENT_HTTPPORT=”55443”
SILENT_MONITORPORT=”65443”
SILENT_SMTPHOST=”0.0.0.0”
SILENT_SMTPPORT=”25”
SILENT_NAILS_USER=”nails”
SILENT_NAILS_GROUP=”nailsgroup”
SILENT_CREATE_USER=”yes”
SILENT_CREATE_GROUP=”yes”
SILENT_RUN_WITH_MONITOR=”yes”
SILENT_QUARANTINEDIR=”/quarantine”
SILENT_START_PROCESSES=”yes”
SILENT_CONTINUE_INSTALL_ON_PAM_ERROR=”no”
Use SILENT_CONTINUE_INSTALL_ON_PAM_ERROR only when 32-bit PAM libraries are
not present.
If you set this flag to yes and continue without Pluggable Authentication
Module (PAM) libraries, the installation of VirusScan Enterprise for Linux
monitor component is skipped, and the web interface will not be available.
However, you can still manage the VirusScan Enterprise for Linux host using
ePolicy Orchestrator or the web interface of some other VirusScan Enterprise
for Linux host. See information about Configuring VirusScan Enterprise for
Linux in the Product Guide.
Task
1
To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:
sh McAfeeVSEForLinux-1.7.0-installer
2
After performing the installation, use the command passwd to assign a password to the user "nails".
Tasks
14
•
Installing on Novell Open Enterprise Server 2.x in silent mode on page 15
Use this task to install on Novell Open Enterprise server 2.x in silent mode.
•
Installing on Ubuntu (Desktop or Server edition) in silent mode on page 15
Use this task to install on Ubuntu (Desktop/Server edition) in silent mode.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Installing McAfee VirusScan Enterprise for Linux
Running McAfee VirusScan Enterprise for Linux
3
Installing on Novell Open Enterprise Server 2.x in silent mode
Use this task to install on Novell Open Enterprise server 2.x in silent mode.
Task
1
From the Novell eDirectory server, use iManager and create a user called "nails" and a group called
"nailsgroup".
2
Add the user "nails" a member of the "nailsgroup", enable the user and group using the Linux User
Management.
3
Provide "nails" user with administrative privileges on all the NSS volumes.
rights -f /media/nss/<VOL-name> -r s trustee nails.<context>.<tree>
You need to provide administrative privileges to the "nails" user, every time a new NSS volume is
created.
4
In the "nails.options" file, check if the following parameters are available:
SILENT_NAILS_USER="nails"
SILENT_NAILS_GROUP="nailsgroup"
SILENT_CREATE_USER=”no”
SILENT_CREATE_GROUP=”no”
5
From the terminal window, type sh McAfeeVSEForLinux-1.7.0-installer
6
After performing the installation, use iManager to assign a password to the user "nails".
Installing on Ubuntu (Desktop or Server edition) in silent mode
Use this task to install on Ubuntu (Desktop/Server edition) in silent mode.
Before you begin
Ensure that the nails.options file is available in the root home (/root) directory. For
information on how to create the nails.options file, refer to the Silent installation section.
Task
1
Type the following at the command prompt:
sh McAfeeVSEForLinux-1.7.0-installer
2
After performing the installation, use the command passwd to assign a password to the user nails.
Running McAfee VirusScan Enterprise for Linux
Use this task to open the McAfee VirusScan Enterprise for Linux user interface.
Task
1
From a supported web-browser, go to https://<hostname or IP address>:<port number>
Specify the hostname or IP address of the computer, on which VirusScan Enterprise for Linux is
installed. By default, the port number is "55443".
https://192.168.200.200:55443 (or) https://server1:55443
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
15
3
Installing McAfee VirusScan Enterprise for Linux
Running McAfee VirusScan Enterprise for Linux
2
On the log on page, type the user name as nails and type the password that you specified during
installation.
If you see messages caused by the use of certificates, see the Handling old certificates section.
Tasks
•
Handling old certificates on page 16
Use this task if you see messages caused by the use of certificates.
Handling old certificates
Use this task if you see messages caused by the use of certificates.
VirusScan Enterprise for Linux has its own certificate which is added to the browser the first time you
install the product. When you add this certificate permanently, then reinstall VirusScan Enterprise for
Linux, you might experience an error, stating that the certificate is incorrect.
This happens because the certificate is different from the one stored in your browser. Every installation
creates a specific certificate for the host, and associates the certificate with the IP address or the
name that you have provided. If the certificate does not match the stored certificate, the browser
displays an error.
To fix this, remove the old certificate and accept the new one when prompted. The steps are described
for each supported browser.
Tasks
•
Konqueror on page 16
Use this task if you see messages on Konqueror caused by the use of certificates.
•
Mozilla on page 16
Use this task if you see messages on Mozilla caused by the use of certificates.
•
Microsoft Internet Explorer on page 17
Use this task if you see messages on Internet Explorer caused by the use of certificates.
Konqueror
Use this task if you see messages on Konqueror caused by the use of certificates.
Task
1
Open Konqueror.
2
At Settings, select Configure Konqueror.
3
At the new window, click the icon on the left side, called Crypto.
4
On the right pane, click the Peer SSL Certificate tab to display every certificate that you have saved.
5
Select and remove the Network Associates certificate. When you log on again, you are prompted with
the new certificate.
Mozilla
Use this task if you see messages on Mozilla caused by the use of certificates.
Task
16
1
Open Mozilla.
2
Select Edit | Preferences.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Installing McAfee VirusScan Enterprise for Linux
Removing the software
3
3
Expand Privacy & Security.
4
Select Certificate on the left side, and click Manage Certificates from the right pane.
5
On the new window, select the Authority tab and scroll to find Network Associates.
6
Expand this, and find the certificate displaying the IP address of the host or the host name. Select
the certificate and delete it.
These steps should remove the certificate, and allow you to import the new certificate associated with
the host.
Microsoft Internet Explorer
Use this task if you see messages on Internet Explorer caused by the use of certificates.
Task
•
Microsoft Internet Explorer does not save the certificate, but it will prompt you to accept the
certificate every time that you log on.
Removing the software
Use this task to remove McAfee VirusScan Enterprise for Linux from your computer.
Task
1
To uninstall VirusScan Enterprise for Linux, type the following at the command prompt:
rpm -e McAfeeVSEForLinux
rpm -e MFEcma
rpm -e MFErt
If you want to uninstall from a Ubuntu server, type:
dpkg --purge mcafeevseforlinux
dpkg --purge mfecma
dpkg --purge mfert
2
Reboot the computer to remove the VirusScan Enterprise kernel modules.
You do not have to reboot the computer immediately, because the VirusScan Enterprise for Linux
kernel modules does not interrupt functioning of any other running service.
Upgrading from previous versions
Use this task to upgrade your previous LinuxShield version 1.5.1 or McAfee VirusScan Enterprise for
Linux version 1.6 to version 1.7.
Task
1
To upgrade McAfee Agent (MA), type the following command in the terminal window:
rpm -Uvh MFEcma.i686.rpm
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
17
3
Installing McAfee VirusScan Enterprise for Linux
Integrating with ePolicy Orchestrator
2
To confirm that the McAfee Agent is running correctly, type the following command in the terminal
window:
/etc/init.d/cma status
3
To upgrade McAfee VirusScan Enterprise for Linux, type the following command in the terminal
window:
sh McAfeeVSEForLinux-1.7.0-installer
4
To confirm that VirusScan Enterprise for Linux is running correctly, type the following command in
the terminal window:
/etc/init.d/nails status
Integrating with ePolicy Orchestrator
Use this task to integrate McAfee VirusScan Enterprise for Linux with ePolicy Orchestrator.
Task
1
Download and extract the McAfee VirusScan Enterprise for Linux, version 1.7 package
(McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz) on to a temporary directory on
the ePolicy Orchestrator server.
2
Check in the McAfee Agent (MSA-LNX_4.6.0_Package.ZIP) bundled with this package on to the
ePolicy Orchestrator Master repository.
3
Check in McAfeeVSEForLinux-1.7.0-<build>-EPO.ZIP on to the ePolicy Orchestrator Master
repository.
4
Check in the following extensions on to the ePolicy Orchestrator "Extensions":
•
EPOAGENTMETA.ZIP
•
LYNXSHLD1700.ZIP
•
LYNXSHLD1700PARSER.ZIP
Before installing the reports extension (LYNXSHLD1700PARSER.ZIP), ensure that you have
removed the previous LinuxShield reports extension module (LYNXSHLDPARSER) from ePolicy
Orchestrator.
5
Create and download the agent installation package by performing the following steps:
a
From System Tree, click System Tree Actions | New Systems. The New Systems page appears.
b
Under How to add systems select Create and download agent installation package, click Non-Windows, then select
McAfee Agent for Linux 4.6.0 (Current) and click OK.
c
From Download file, right-click install and select Save Target As... to download the file on to your local
system.
If you are deploying the product on a Ubuntu client system, download the installdeb.sh file on to
your local system. In case of ePolicy Orchestrator 4.5, this file is not available for download,
hence copy this file from C:\Program Files\McAfee\ePolicy Orchestrator\DB\Software
\Current\EPOAGENT3700LYNX\Install\0409.
18
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Installing McAfee VirusScan Enterprise for Linux
Integrating with ePolicy Orchestrator
6
3
From the Linux terminal, execute the following command:
sh install.sh –i
This will establish a connection between ePolicy Orchestrator and the Linux client computer.
7
Create a Product Deployment Task on ePolicy Orchestrator to deploy McAfee VirusScan Enterprise for
Linux, version 1.7.
For more detailed information on how to integrate and configure McAfee VirusScan Enterprise for
Linux using ePolicy Orchestrator, see the McAfee VirusScan Enterprise for Linux, version 1.7 —
Configuration Guide.
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
19
3
Installing McAfee VirusScan Enterprise for Linux
Integrating with ePolicy Orchestrator
20
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
Index
A
L
about
McAfee VirusScan Enterprise for Linux 7
VirusScan Enterprise for Linux 7
Linuxshield
previously known as 7
about this guide 5
audience 7
M
C
conventions and icons used in this guide 5
D
documentation
audience for this guide 5
product-specific, finding 6
typographical conventions and icons 5
F
features
administration 7
reporting 7
scanning 7
VirusScan Enterprise for Linux 7
I
introduction
McAfee VirusScan Enterprise for Linux 7
VirusScan Enterprise for Linux 7
McAfee ServicePortal, accessing 6
McAfee VirusScan Enterprise for Linux
introduction 7
P
product features 7
S
ServicePortal, finding product documentation 6
T
Technical Support, finding product information 6
V
VirusScan Enterprise for Linux
features 7
introduction 7
W
what's in this guide 6
McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide
21
00