Corporate Solutions
Transcription
Corporate Solutions
Panda Security Corporate Solutions Quick Start Guide Before you begin................................................................................................................... page 5 Step 1 of 3 Installing AdminSecure .................................................................................................... page 9 Simple installation................................................................................................... page 10 Custom installation ................................................................................................. page 14 Installing additional components.............................................................................. page 17 Step 2 of 3 Distributing the communications agent ........................................................................ page 21 Step 3 of 3 Installing the protection ................................................................................................ page 25 Panda Security for Desktops .................................................................................... page 26 Panda Security for File Servers.................................................................................. page 26 Panda Security for Exchange Servers ........................................................................ page 27 Panda Security for Domino Servers........................................................................... page 27 Panda Security for ISA Servers.................................................................................. page 27 Panda Security for Sendmail .................................................................................... page 28 Panda Security for Qmail ......................................................................................... page 29 Panda Security for Postfix ........................................................................................ page 29 Installing protection modules independent from AdminSecure ........................................ page 31 Panda Security Commandline ................................................................................... page 32 Panda Security for Sendmail ..................................................................................... page 34 Panda Security for Qmail .......................................................................................... page 34 Panda Security for Postfix ......................................................................................... page 35 Panda Security for Linux ........................................................................................... page 39 Panda Security for Linux Servers................................................................................ page 39 Services ............................................................................................................................... page 41 Panda Security Corporate Solutions Installation and services guide The software described in this guide is delivered under the terms and conditions of the end user license agreement and can only be used after accepting the terms and conditions of this agreement. If the program has been acquired by a company that does not have a CORPORATE USER LICENSE, please contact Panda to extend use of the program to more than one computer. Copyright notice © 2008 Panda Security. All rights reserved. Neither the documentation, nor the programs included in this package may be copied, reproduced, translated or transferred to any electronic or machine readable medium or support without prior written permission from Panda Security. Runs with Lotus DominoTM is a Certification Mark of Lotus Development Corporation used only under license. The product has been tested during development. Lotus makes no warranties with respect to the product. Registered trademarks Panda SecurityTM. TruPrevent is registered in the US Patent and Trademark office. Windows is a registered trademark of Microsoft Corporation in the US and other countries. Other product names that are mentioned in this guide may be registered trademarks of their respective owners. Symbols and styles used in the guide Symbols used in this documentation: Note. Clarification and additional information. Important. Highlights the importance of a concept. Tip. Ideas to help you get the most from your program. Reference. Other references with more information of interest. Fonts and styles used in the documentation: bold Names of menus, options, buttons, windows or dialog boxes. code Style Names of files, extensions, folders, command line information or configuration files, for example, scripts. italics Names of options related with the operating system and programs or files with their own name. D. L. BI-2023-06 Licensed under U.S. Patent No. 5,623,600. © Panda Security 2008. All rights reserved. Printed in the European Union. Printed in 2008. CIP07-F-0408-PESGUIDE-US-03 4 Before you begin Firstly, you should be aware of the protection you can install on each type of computer in your network to ensure the highest levels of security. Corporate Solutions Panda Security for Business includes the following protection: Panda Security for Desktops Panda Security for File Servers Panda Security Commandline Panda Security for Linux Panda Security for Linux Servers Panda Security for Business with Exchange includes all protection in Panda Security for Business plus: Panda Security for Exchange Servers Panda Security for Enterprise includes all protection included in Panda Security for Business with Exchange plus: Panda Security for DominoServers Panda Security for ISA Servers Panda Security for Sendmail Panda Security for Qmail Panda Security for Postfix You may also have bought one of the protection units mentioned above separately. 5 To confirm which security solution you have bought, check the welcome email sent by Panda Security. You will find the following information necessary to activate your product: Username Password TIP: Make a note of these details at the back of this guide and keep it in a safe place. REFERENCE: You can recover this data from the Panda Security website: http://www.pandasecurity.com/enterprise/support/details/password/. You will need to enter the same email address that you gave us to receive the welcome email. Protection and features The protection in your security solution is designed specifically for each type of computer. Here you can see which type of workstations and servers each protection is aimed at: Protection What does it protect? Protection administered with AdminSecure * Panda Security for Desktops Windows workstations. Panda Security for File Servers Windows and Novell NetWare servers. Panda Security for Exchange Servers Exchange servers. Panda Security for Domino Servers IBM Lotus Domino servers. Panda Security for ISA Servers ISA servers. Protection administered with AdminSecure * or independently Panda Security for Sendmail Sendmail servers. Panda Security for Qmail Qmail servers. Panda Security for Postfix Postfix servers. Protection not administered with AdminSecure * Panda Security Commandline Commandline antivirus scanning Windows, Linux and MS-DOS workstations and servers. Panda Security for Linux Linux workstations. Panda Security for Linux Servers Linux servers. * Panda AdminSecure is the management tool that lets you administer the protection offered by Panda Security in its corporate solutions. You will find more information in the following sections. 6 Key concepts 1. AdminSecure is the tool that lets you centrally administer the protection you install. 2. Administrative components: The components that make up AdminSecure: (console, agent, repository, administration server and database). AdminSecure Console. Console through which the protection is administered. It enables a range of tasks including distribution of the Communications agents, installation of the protection, scanning, task queries, reports, update management, monitoring, etc. AdminSecure Communications Agent. Communications Agent. Distributed from AdminSecure to the computers to be protected, this allows communication between these computers and AdminSecure. It allows the periodic exchange of information between the console and the other computers on the network. AdminSecure Administration Server. Administration Server that acts as the system nerve centre. It controls the administrative components and the protection. AdminSecure Event Storage Database. Database that stores the information collected by the AdminSecure Communications Agent and presents it in the administration console as reports, statistics, notifications, etc. AdminSecure Repository Server. Repository or distribution server that organizes the files necessary for installation and update of the protection, including the Virus Signature File. There can be one or more repositories in a network, but there must always be a primary one in the same computer as AdminSecure. It must have an Internet connection. In large networks, or where there are branch offices in different geographical locations, it is advisable to create other repositories (primary or secondary). 7 REFERENCE: For more information, refer to the section that explains custom installation and additional components (page 15). 3. Signature File: This is the file that allows the protection to detect viruses and other threats. 4. Integration of computers: This is the process of distributing the communications agent to the workstations and servers to be protected. In this way they are recognized by Panda AdminSecure This is carried out from the AdminSecure console and is essential because computers without the communications agent cannot be protected. 5. Roaming: Remote Panda for Desktops update system via HTTP for computers outside the network administered through AdminSecure such as laptops or offices not connected to the corporate LAN. 6. Protection unit: Subdivisions of the protection. For example, Panda for Desktops has a series of protection units: antivirus, anti-spam, Content Filter, NetworkSecure and TruPrevent. REFERENCE: For more information, refer to the section that explains custom installation and additional components: http://www.pandasecurity.com/enterprise/support/. 8 Installing AdminSecure AdminSecure is the tool for administering the protection included in the corporate security solutions. Step 1 Step 1 Step 1: Installing AdminSecure 1. Simple installation 1. Insert CD 1 (white) or the DVD in the CD-ROM / DVD drive to start the installation process. If the main menu does not appear, run the AUTORUN.EXE. IMPORTANT: If your operating system has Microsoft's data execution prevention (DEP) enabled and cannot run the AUTORUN.EXE file or any of the executables that accompany the corporate solutions, you should temporarily disable this technology. For more information, refer to Microsoft documentation (www.microsoft.com). If you are using the installation program downloaded from the Internet (http://www.pandasecurity.com/enterprise/downloads/), go directly to point 5. The autorun.exe file uses Flash technology. You must have Adobe Flash Player installed to view it correctly. 2. Select a language to use during the installation process. 3. Click Install Corporate Solutions to start the complete installation of AdminSecure. 4. The installer welcome screen will appear. Click Next. 10 STEP 1: INSTALLING ADMINSECURE 5. The license agreement is displayed. Select the I accept the terms in this license agreement checkbox and click Next. 6. Select Install Panda AdminSecure and click Next. At this point the installer checks if there is a previous installation of AdminSecure on the computer. If there is, you are given the option to go back. If instead of carrying out a complete installation you only want to install an additional component, for example a repository, select Install additional components. For more information, refer to the section that explains installation of additional components (page 17). 7. Enter your User name and Password to activate the product. Click Next. The information requested in this window will have been sent to you by email in the welcome message. If you don't remember this information, go to the password reminder section of the Panda website (http://www.pandasecurity.com/enterprise/support/details/ password/). You will need to enter the same email address that you gave us to receive the welcome message. If you dont have the user name and password at that moment you can continue with the installation by selecting No, I will register late. Remember that you will not have daily updates of the signature file and the rest of services until you have activated the product. To activate it, go to the Help menu, select Activate AdminSecure, enter the registration information and click Activate AdminSecure. Simple installation to install all components 8. Select (repository, administration server, console, database and communications agent) and click Next. REFERENCE: If you want more information about custom installation, ignore the next steps and refer to the following section of this guide: Custom installation. 11 STEP 1: INSTALLING ADMINSECURE 9. If you want the Signature File to update automatically, follow these steps: Check the Enable automatic updates box. If you access the Internet via a proxy server, select the Access the Internet through a proxy server checkbox and click Settings If the proxy server requires authentication, enter the User name and Password for Internet access via proxy (these are not the ones supplied by Panda Security). Click OK and Next to continue. 10. If there is an HTTP server (Internet Information Server) computer, you will be given the option to Enable communication via HTTP. Select Enable communication via HTTP if you want to optimize communication between computers and the repository. To establish the list of URLs to be used for communication via HTTP between computers and the repository, click Settings. If you want to add a URL to the list, enter the URL in the Add URL to the list text field and then click Add. To remove a URL, select it and click Remove. Then click Next. 11. Select Automatically send items when entering quarantine if you want to enable sending these items to PandaLabs. It is advisable to enable it as it allows us to offer clients better service, providing a rapid response in the event of malware on the network. This option will be enabled by default. Select the Take part in the user experience improvement program by sending information checkbox so that we can offer you better service in future versions. Click Data Processing Policy for more information. Then click Next. 12 STEP 1: INSTALLING ADMINSECURE 12. Select the directory in which you want to install Panda AdminSecure. It is advisable to use the default installation directory. If you want to specify another directory, click Browse... and select one. Click Next. 13. During the installation process, the AdminSecure components will be copied and registered. If necessary, agree to the computer restart to continue with the installation. 14. To open the AdminSecure console at the end of installation, select the Open the AdminSecure management console when the installation is complete option. The next time you want to access the Panda AdminSecure console, open it (Start > Programs > Panda AdminSecure > AdminSecure console) or double-click the shortcut icon in the Windows taskbar, next to the system clock. NOTE: The first time you access the AdminSecure console, the Panda AdminSecure setup wizard will present a shortcut to the most common tasks (distribute agent, install protection ). Administration console: Tool for managing the protection, repositories, scans, etc. Modules: Items that belong to a platform (operating system type or characteristic) for which there is specific protection (Panda for Files Servers, ClientShield Panda for Desktops, Panda for Exchange Servers, etc.). Organization tree: Area of the AdminSecure console in which workstation servers and groups are classified. 13 STEP 1: INSTALLING ADMINSECURE 2. Custom installation This is the type of Panda AdminSecure installation recommended for complex corporate networks. To carry out a custom installation: 1. Follow the steps for simple installation until you reach the selection of installation type (point 8). Then you should select the options: Install Panda AdminSecure > Custom installation. Select the type of database you want to use to store the information related with the activity of the protection and administrative components of Panda AdminSecure: Install an MSDE database server. Create the MSDE by entering the requested data on the screen. Click Next. IMPORTANT: This is not available in Windows Vista. Use the database server that exists in another computer in the network. Select the name of an MS SQL-compatible database server. The server that you enter in the wizard must have the credentials of a user with administrator privileges on the database (e.g. DDL permission). This can be: NT: With automatic identification through the security integrated in Windows NT (this means it would have logged in to the session as administrator). SQL: By entering the user name and password of the SQL server administrator (SQL authentication). When you choose the second database engine option (MS SQL), AdminSecure will try to find the specified database server and connect to it. Click Next. 2. If you want the Virus Signature File to update automatically, follow the steps below: Check the Enable automatic updates box. If you access the Internet via a proxy server, select the Access the Internet through a proxy server checkbox and click Settings If the proxy server requires authentication, enter the User name and Password for Internet access via proxy (these are not the ones supplied by Panda Security). Click OK and Next to continue. 14 STEP 1: INSTALLING ADMINSECURE 3. User profile management. Select Enable user profiles if you want to allow user profile management. Then enter the superuser password and confirm it. Once you have done this a user will be created with all privileges. If you dont want to use user profiles, select Dont use user profiles. The console will operate in the same way for all users. Then click Next. 4. If there is an HTTP server (Internet Information Server) computer, you will be given the option to Enable communication via HTTP. Select Enable communication via HTTP if you want to optimize communication between computers and the repository. To establish the list of URLs to be used for communication via HTTP between computers and the repository, click Settings. If you want to add a URL to the list, enter the URL in the Add URL to the list text field and then click Add. To remove a URL, select it and click Remove. Then click Next. 5. Select Automatically send items when entering quarantine if you want to enable sending of these items to PandaLabs. It is advisable to enable it as it allows us to offer clients better service, providing a rapid response in the event of malware on the network. This option will be enabled by default. Select the Take part in the user experience improvement by sending information checkbox so that we can offer you better service in future versions. Click Data Processing Policy for more information. Then click Next. 15 STEP 1: INSTALLING ADMINSECURE 6. Select the directory in which you want to install Panda AdminSecure. It is advisable to use the default installation directory. If you want to specify another directory, click Browse... and select one. Click Next. 7. With the custom installation of Panda AdminSecure the frequency of the following actions can be configured manually (to do this, click Advanced settings): Click Enable manual configuration of frequency. In each case select the frequency from the dropdown menu. Check changes to platforms and protection modules installed every <select value> minutes. Check changes to the status of the protection modules every <select value> minutes. Check if new updates are available every <select value> minutes. 8. During the installation process, the AdminSecure components will be copied and registered. If necessary, agree to the computer restart to continue with the installation. 9. To open the AdminSecure console at the end of installation, select the Open the AdminSecure management console when the installation is complete. The next time that you want to access the Panda AdminSecure console, open it (Start > Programs > Panda AdminSecure > AdminSecure console) or double-click the shortcut icon in the Windows taskbar, next to the system clock. 16 STEP 1: INSTALLING ADMINSECURE Using previously used databases If you already had any version of Panda AdminSecure installed in your organization, you may want to use a database previously used by Panda AdminSecure Event Storage Database. In this case, there are several possibilities depending on the compatibility of the database. There is a database created with an older version of Panda AdminSecure and it needs to be updated. Decide if you want to update the database and take advantage of the available data or eliminate the database and use a new, completely empty one. There is a database created with an older version of Panda AdminSecure and it cannot be updated. Decide if you want to eliminate it or not. There is an active database and, as it is in use. You must select another database with the corresponding credentials. NOTE: When you select the database server, make sure you write the computer name and path correctly. If the data entered is correct but a connection cannot be made with the database server, check the user name and password as well. 3. Installing additional components When you have all the administrative tools installed in the same computer (AdminSecure Console, AdminSecure Communications Agent, AdminSecure Administration Server, AdminSecure Repository Server and AdminSecure Event Storage Database), it may be advisable to install additional components on other computers. 3.1 Advantages of installing additional components Installing additional components can let you share administration tasks among those computers with an administration console (AdminSecure Console) and share the workload when there are many workstations or servers to protect all when they are spread across different geographic locations. In the latter case it is advisable to install additional repositories (AdminSecure Repository Server). The installation of AdminSecure Administration Server as an additional component lets you spread the workload in those environments in which there are any workstations or servers to protect, assigning groups of computers or locations to each administration server. 17 STEP 1: INSTALLING ADMINSECURE NOTE: The computers administered with AdminSecure can only be assigned to one administration server. If during the process of installing AdminSecure you select the option to install additional components (step 6 of the simplified installation), you can choose one or more of the following components: Install an additional console (AdminSecure Console). Install an additional repository (AdminSecure Repository Server). Install an additional AdminSecure Server as an administration server to which the console will connect. 3.2 Installing an additional console The Panda AdminSecure Console is the graphic interface of Panda AdminSecure, i.e, the visual and operative part through which the protection is managed. When you select this type of installation, either in the complete installation or the installation of additional components, Panda AdminSecure will install the administration console which accompanies the rest of the components (AdminSecure Administration Server, AdminSecure Communications Agent, AdminSecure Repository Server and AdminSecure Event Storage Database) so they all form part of Panda AdminSecure. Installation of an additional console lets you administer the antivirus protection from a computer other than the one with the Panda AdminSecure Administration server installed. To do this, select the type of installation that lets you install additional components (in this case, selecting, at least, the installation of an additional console). 3.3 Installing an additional repository AdminSecure Repository Server is a software store, i.e, the place where the Panda Security solutions are kept, including the updates to the antivirus protection, the security solutions and the Signature File. The servers and workstations can connect to the repository server in order to update the antivirus protection. Panda AdminSecure can have several repositories: A primary repository, where the files are stored, and from where servers and workstations can update the protection, the Signature File and other updatable files via the Internet or UNC paths. Secondary repositories, are those that connect to the primary repository to get a replica of the installation packets. This replication between primary and secondary repositories is carried out periodically. These additional repositories are used as an alternative to the primary repository. The file repositories can be in the same computer as the administration server or in any other computer on the network. The installation of an additional repository lets you share the workload across the network. So, in large networks (more than 3000 computers) it is advisable to have several repositories to optimize use of bandwidth. 18 STEP 1: INSTALLING ADMINSECURE A practical example For example, in a company with different branch offices it would be advisable to have different repositories in each of the offices, and for the primary repository server to have fast Internet access and a good connection with the rest of the computers containing the secondary repositories. In companies with low speed connections between offices, it would be advisable to have a primary repository in each office. In this way, each local network would have a computer that receives updates directly from the Internet (primary repository) and could, as an option, transmit these updates to other repositories (secondary) or directly to computers with the protection. NOTE: The speed of updating and installing files depends on the number of computers connected and the speed of the network. Automatic updates The automatic updates keep the Signature File constantly up-to-date. To enable them, select the Enable automatic updates option in the Panda AdminSecure installation program. There are two options: Updates via Internet. If access is through a proxy server, select the corresponding checkbox and click Settings. Updates from another software repository. Select the repository from the drop-down menu. 3.4 Installation of an additional administration server Installation of an additional administration server, like installing an additional repository, allows the workload to be shared. By doing this, the server that has the main administration server will have more resources. To install an additional AdminSecure Administration Server, follow the steps below: 1. Start the AdminSecure installation program and select installation of additional components. 2. Select the Install an additional AdminSecure Server checkbox and click Next. 3. Select the administration server for which you want to install an additional component and click Next. If you have previously distributed a communications agent to the computer, you do not need to select an administration server, as the agent has one assigned. 4. If the main administration server uses an SQL system with NT authentication integrated, enter the details of a user with access to the database. The user must have rights to logon as a service in the computer where you are going to install it. 5. If the user details entered are correct, click Install. NOTE: Additional AdminSecure Administration Servers can only be installed in environments that use Microsoft SQL server databases (and not in MSDE environments). 19 20 Distributing the communications agent Distribute the communications agent from the AdminSecure console to the computers that you want to protect. This step must be carried out prior to installing the protection. This communications agent allows communication between AdminSecure and the computers. Step 2 Step 2 Step 2: Distributing the communications agent To distribute the communications agent: 1. Open the Tools menu in the AdminSecure console. 2. Select Distribute communications agent > Distribute communications agent. NOTE: The first time you access AdminSecure console, among other things, the Panda AdminSecure setup wizard will present a shortcut to the most common tasks (distribute agent, install protection ) If this is the case, click Distribute communications agent and follow the instructions in point 3. 3. Panda AdminSecure will display the wizard for distributing the agent. Click Next. 4. Specify how you want to distribute the agent: Install the communications agent directly on NT/2000/2003/XP/Vista or Novell NetWare systems. This is the fastest option. IMPORTANT: Direct installation does not apply to Windows Me/98/95 nor Linux. For these operating systems, use the third option in the wizard (Generate an installation package to distribute by any other means). Generate an installation packet which can be executed by login script. Users must validate themselves in the Windows or Novell NetWare server, and therefore must be working in a domain. This option is recommended for large networks with numerous computers. 22 STEP 2: DISTRIBUTING THE COMMUNICATIONS AGENT Generate an installation packet to be distributed by any other means. AdminSecure generates an installation packet that can be executed in each of the computers to which the agent needs to be distributed. This is the correct option for Windows Me/98/95 and XP Home Edition workstations or for Linux mail servers (Sendmail, Qmail and Postfix). For more information about installing the agent in Linux servers, refer to the following section. As the communications agent is installed in the computers across your organization, check that these computers are displayed in the organization tree in the AdminSecure console. Once a computer is visible in the console, the protection can be installed on it. REFERENCE: There is more information about the distribution of the communication agents in the Panda AdminSecure console help file, and the tech support section of the website: http://www.pandasecurity.com/enterprise/support/. NOTE: You can find an MSI file to distribute the agent through Windows Installer in your private download area. Installation of the agent in Sendmail, Qmail and Postfix servers After generating the installation packet, it must be saved to the same directory in which AdminSecure is installed (see point 12 of the simplified installation of AdminSecure), in a folder called Pavagent_Linux. This folder contains two files confpavagentln.ini contains the configuration parameters of the AdminSecure server. plagentln is the installer that has to run on the Linux mail server. Copy the Pavagent_Linux folder in the Linux server on which you want to install the protection and run the plagentln file. The agent will be installed in /usr/pandasoftware/pandaadministrator3/. Check in the AdminSecure Console administration tree that the server you want to protect appears in the list of Linux servers. NOTE: You must make sure that the AdminSecure server and the Sendmail, Postfix or Qmail servers can communicate with each other through port 19226. 23 24 Installing the protection Before installing the protection, confirm that the communications agent has been distributed to the workstations or servers in which you want to install the protection. To do this: a. Open the Panda AdminSecure console (Start- Programs - Panda AdminSecure Launch AdminSecure console). You can also double-click on the shortcut icon in the Windows taskbar, next to the system clock. b. In the organization tree (on the left of the console), in Control Panel mode, you will see the modules and groups where the protection can be installed. c. If you can't find any of the workstations or servers in which you want to install the protection, and you have already distributed the agent from the console it is likely that the computer in question has yet to be started up, restarted or connected to the network to receive instructions from the administration server. Step 3 Step 3 Step 3: Installing the protection 1. Panda Security for Desktops and Panda Security for Servers To install Panda for Desktops or Panda for File Servers, from the Panda AdminSecure Console: 1. Use the Install option in the Protection menu. 2. The installation wizard welcome screen will appear. Click Next. 3. Select the checkboxes corresponding to the platforms you want to protect. Also select the version and the language in which you want to install protection (if you want to change default values click Version and language settings). Click Next to continue. Workstations, in the case of Panda for Desktops. Windows or Novell NetWare servers, in the case of Panda for File. 4. Some of the protection such as Panda for Desktops and Panda for File Servers include different protection units (antivirus, anti-spam ). If you have bought the complete version with preventive technologies, it also includes: TruPrevent and NetworkSecure. The groups of antivirus units and preventive protection units (if you have bought the product with TruPrevent) can be enabled or disabled on installation. NOTES: The intelligent installation system offered by AdminSecure provides warnings if a workstation does not meet the minimum or recommended installation requirements. When the automatic installation option is enabled, go to the Protection menu and click Automatic installation settings...) Panda for Desktops and Panda for File Servers will be automatically installed on all the Windows workstations and servers that can be reached by the administration server and do not have protection installed. IMPORTANT: It is highly advisable to remove any antivirus installed on the computers in which you are going to install Panda Security solutions. 5. If there is already an antivirus in workstations or servers, the installer will display a list of the antivirus products detected. AdminSecure will uninstall them automatically where possible. Click Next. If for any reason AdminSecure cannot uninstall the antivirus detected, the process will be stopped. Uninstall it manually and then continue with the process. 26 STEP 3: INSTALLING THE PROTECTION 6. The wizard will indicate if it is necessary to restart any of the computers or servers. In addition, you will be given the option to restart the computers automatically or wait until they are restarted manually. Select an option and click Next. 7. Confirm that the options selected in previous steps are correct. Click Next. 8. AdminSecure will start to create installation jobs. When there are jobs awaiting execution (installation or any other) you can see their status in the Jobs tab in the Panda AdminSecure console. You can find the Jobs tab in the Control panel -> Jobs and scans. 2. Panda Security for Exchange Servers, Panda Security for Domino Servers, and Panda Security for ISA Servers 1. Use the Install option in the Protection menu (once the agent has been distributed). 2. The installation wizard welcome screen will appear. Click Next. 3. Select the checkboxes corresponding to the platforms you want to protect (Exchange, Domino, or ISA servers). Also select the version and the language in which you want to install protection (if you want to change default values click Version and language settings). Click Next to continue. 4. Some protection, such as Panda for Exchange and Panda for ISA, include several protection units (antivirus, anti-spam and Content Filter) which AdminSecure will install automatically and which can then be configured by enabling or disabling features. 5. The wizard will indicate if it is necessary to restart any of the computers. In addition, you will be given the option to restart the computers automatically or wait until they are restarted manually. Select an option and click Next. 6. Confirm that the options selected in previous steps are correct. Click Next. 7. AdminSecure will start to create installation jobs. When there are jobs awaiting execution (installation or any other) you can see their status in the Jobs tab in the Panda AdminSecure console. 3. Panda Security for Sendmail, Panda Security for Qmail and Panda Security for Postfix Once the communications agent is installed correctly on the server you want to protect. 1. Use the Install option in the Protection menu (once the agent has been distributed). 2. The installation wizard welcome screen will appear. Click Next. 27 STEP 3: INSTALLING THE PROTECTION 3. Select the checkboxes corresponding to the platforms you want to protect (Sendmail, Qmail or Postfix servers). Also select the version and the language in which you want to install protection (if you want to change default values click on Configure versions and languages). Click on Next to continue. 4. AdminSecure will start to create installation jobs. When there are jobs awaiting execution (installation or any other) you can see their status in the Jobs tab in the Panda AdminSecure console. 5. Depending on the type of server (Sendmail, Qmail or Postfix) on which the corresponding protection has been installed, additional steps may be needed as described below. Additional steps Panda Security for Sendmail 1. After installing the protection, you need to install and configure the Milter filter, which redirects messages to the antivirus. 2. To configure the Milter filter, you have to add the following lines to the sendmail.mc file: INPUT_MAIL_FILTER(`filterPav',`S=inet:10101@localhost, F=R, T=S:5m;R:5m;E:15m') define(`confINPUT_MAIL_FILTERS',`filterPav') Depending on the version of Sendmail installed, it may be necessary to omit the spaces. In this case the line would be: INPUT_MAIL_FILTER(`filterPav',`S=inet:10101@localhost,F=R,T=S:5m;R:5m;E:15m') 3. Compile the sendmail.mc file executing the following command in the directory in which sendmail.mc is saved: m4 sendmail.mc > /etc/mail/sendmail.cf NOTE: If the version of Sendmail installed is prior to 8.12.0, add the phrase _FFR_MILTER=1 to the command. First check that the sendmail.cf path is correct. Then run the command as follows: m4 D_FFR_MILTER=1 sendmail.mc > /etc/sendmail.cf NOTE: If sendmail.mc does not exist, the modifications must be made in sendmail.cf. The following lines must be added to this file: #Input mail filters O InputMailFilters= filterPav XfilterPav, S=inet:10101@localhost,F=R,T=S:5m;R:5m;E:15m 28 STEP 3: INSTALLING THE PROTECTION NOTE: Depending on the version, it may be necessary to restart Sendmail for the changes to take effect and for Sendmail to start operating jointly with Panda Security for Sendmail. NOTE: Panda Security for Sendmail runs as the panda user. This user creates its own installer during the installation process. 4. Configuring the Milter filter: You can configure the Milter filter through the config_milter.ini file, which is in the following antivirus directory: /etc/pav_milter The file is used to configure two types of options: those of the Milter filter (editing the [Milter] section) and those of the control module (editing the definitions in the [Control] section). Panda Security for Qmail 1. The Qmail protection does not require additional configuration. 2. After installation, a process (pav_qmail) is included in the sequence of processing the message by the mail server. Similarly, a process (pav_control_qm) is included to monitor and control the status of the protection configuration. NOTE: Programs such as Softlimit or Ulimit, which restrict the memory used by the Qmail process, can produce conflicts with Panda Security for Qmail. For example, installations which follow the lifewithqmail pattern use this type of characteristic. Panda Security for Postfix 1. From version 1.71, the protection installer edits the necessary lines in master.cf. These changes are needed for Postfix to operate jointly with Panda Security for Postfix. The lines added/edited by the installer are: smtp inet n - n - - smtpd -o content_filter=pav_postfix:dummy pav_postfix unix n n - 5 pipe flags=R user=panda argv=/opt/pandasoftware/bin/pav _postfix -f ${sender} -- ${recipient} NOTE: The installer itself restarts the Postfix service for the changes to take effect. 2. After installation, a process (pav_postfix) is included in the sequence of processing the message by the mail server. Similarly, a process (pav_control_po) is included to monitor and control the status of the protection configuration. 29 30 Panda Commandline is the commandline antivirus that scans Windows, Linux and MSDOS servers and workstations. It does not need the administration console. Panda for Sendmail, Panda for Qmail and Panda for Postfix can be installed and managed without using AdminSecure. Panda for Linux and Panda for Linux Servers are independent protection units installed and set up outside of AdminSecure. Independent Protections Installing protection modules independent from AdminSecure Installing protection modules independent from AdminSecure 1. Installing Panda Security Commandline Instructions for installing in Windows environments 1. Extract the contents of the file PAVCL32.EXE on CD-ROM 2 (blue) or the DVD. You will see the following files: PAVCL.EXE. Program that includes protection for Windows. PAV.SIG. The Signature File with identifiers for all viruses and security threats detected by the antivirus protection. PANDA.CHP. Data file defining the language used by Panda Commandline to communicate with the user. LANGUAGES. Directory containing the available Panda.chp files for each language. Another group of files: PAVCL.LNG, PAVCL.LOG, PAVCL.RPT, PAVCL.SAV, PORT16.DLL, PORT32.DLL and APVXDUT.VXD used by the main program (PAVCL.COM). 2. If you want to change the Panda Commandline language, go to the subdirectory of the language you want in the folder LANGUAGES and replace the PANDA.CHP file with the one created originally. Instructions for installing in Linux environments 1. Get the pavcl (.rpm or.tgz) file from the corporate CD-ROM 2/DVD or the download area on the Panda Security website (http://www.pandasecurity.com/enterprise/downloads/tree/). File .rpm (if you have Red Hat Package Manager): 1.1. Copy the file .rpm 1.2. Run the command: rpm -i [FileName] [FileName] is the file that installs the antivirus (for example pavcl-9.00.00.rpm). 32 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE File .tgz (if you dont have Red Hat Package Manager): 1.1. Copy the .tgz file to the root directory of your computer. 1.2. Extract the .tgz file as follows: gzip -d [FileName] [FileName] is the file that installs the antivirus (for example pavcl-9.00.00.tgz). This creates a .tar. file. (for example, depending on the antivirus version, pavcl-9.00.00.tar). 1.3. To install the antivirus, run the following command: tar -xvf [FileNameTAR] [FileNameTAR] is the file that installs the antivirus (for example pavcl-9.00.00.tar). 2. After extracting the .tar file you should verify the structure created, in which Panda for Commandline and the files that make up the protection are installed in /opt: The executable is in: opt/pavcl/usr/bin/pavcl, where pavcl is the antivirus. opt/pavcl/usr/lib/panda/pav.sig, where pav.sig is the Signature File with the identifiers of the viruses that the antivirus detects. /opt/pavcl/var/log/panda/pavcl.rpt (scan report file). /opt/pavcl/var/log/panda/pavcl.log (protection incident file). 2. Installing Panda Security for Sendmail, Panda Security for QmailSecure and Panda Security for Postfix on Linux Servers 1. Insert the DVD in the drive and go to the Product/Sendmail, Product/Qmail or Product/Postfix directory to get the RedHat, Mandrake and SUSE installation file. Installing in RedHat, Mandrake and SUSE rpm -i pav_milter-1.71.XX-xx.i386.rpm for Panda for Sendmail. rpm -i pav_qmail-1.71.XX-xx.i386.rpm for Panda for Qmail. rpm -i pav_postfix-1.71.XX-xx.i386.rpm for Panda for Postfix. Installing in Debian: dpkg -i pav_milter-1.71.XX-xx_i386.deb for Panda for Sendmail. dpkg -i pav_qmail-1.71.XX-xx_i386.deb for Panda for Qmail. dpkg -i pav_postfix-1.71.XX-xx_i386.deb for Panda for Postfix. (XX is the version xx the product) 33 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE 2. Depending on which installation of the protection for Linux messaging servers you are carrying out, the installation will continue as follows: Panda Security for Sendmail In Panda for Sendmail, when installation is complete, the antivirus will start up automatically for runlevels 2 to 5 and the files will have been copied in /opt/pandasoftware and /etc/pav_milter. In addition, in order for the antivirus to operate correctly, follow the instructions below: 2.1. Configuring the Milter filter and the control options: Configure the Milter fiter options through the /etc/pav_milter/config_milter.ini files. Configure control options. Configure language options. 2.2. If you will be using the Web console, configure the Web server: For any type of Web server: The corresponding files are in /opt/pandasoftware/lib/pav_milter/cgi_bin Web console home page: http://YourServer/pav_milter/html/default.html. Here YourServer is the name or address of the server with the antivirus installed. The CGI scripts are in /opt/pandasoftware/lib/pav_milter/cgi_bin/scripts To configure the Apache server you can use the file: /etc/pav_milter/sendmail-apache.conf Panda Security for Qmail In Panda for Qmail, when installation is complete, the antivirus will automatically start up for runlevels 2 to 5 and the installation process will take a series of actions automatically: 2.1. The qmail-queue program of the qmail server is renamed qmail-queue.orig. 2.2. A link called qmail-queue is created in the bin directory of the qmail server. This points to the program opt/pandasoftware/bin/qmail-queue_pav. 2.3. The antivirus start and stop scripts are created: The antivirus start and stop script, under the name pav_control in the /etc/rc.d/init.d directory. 34 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE The soft-link S79pav_control, under the name /etc/rc.d/init.d/pav_control, in the following directories: bin/etc/rc.d/rc2.d, /etc/rc.d/rc3.d, /etc/rc.d/rc4.d and /etc/rc.d/rc5.d. These will be executed by the computer during the boot process and will start the antivirus service. These scripts also start the services in their corresponding runlevels. El soft-link K31pav_control, under the name /etc/rc.d/init.d/pav_control, in the following directories: /etc/rc.d/rc0.d, /etc/rc.d/rc1.d and /etc/rc.d/rc6.d. These will be executed by the computer during the haltt process and will stop the antivirus service. These scripts also stop the services in their corresponding runlevels. Panda Security for Postfix In Panda for Postfix, unlike Sendmail, most options are configured automatically during the installation process. In any event, there are several parameters that can be edited. In addition, when installation is complete, the antivirus will automatically start for runlevels 2 to 5. Panda Security for Sendmail, Panda Security for Qmail, Panda Security for Postfix (installation process continued) 3. For the protection to operate correctly configure the filter and the control options: In Panda for Sendmail configure the Milter filter options in the /etc/pav_milter/config_milter.ini file. In Panda for Qmail configure the qmail filter options in the file /etc/pav_qmail/config_qmail.ini. In Panda for Postfix configure the filter options in the file /etc/pav_postfix/config_postfix.ini. In the path /etc/pav_milter. When you edit the file you can modify the following sections: Control options in the [Control] section. Antivirus language option in the [Language] section. In Panda for Postfix the Postfix filter options are available in the [Postfix] section. To send the filtered messages you have to modify the [SendMail] section in the installation location of the Postfix sendmail program. In Panda for Sendmail, Panda for Postfix and Panda for Qmail you can also edit: Level_log: maximum number of log messages produced by the antivirus (0: the antivirus will only display error messages). 35 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE Conf_interval: Seconds elapsed between readings of the configuration file (config.ini), by the antivirus. Mon_interval: Seconds elapsed between readings of the monitoring file (monitor.dat), by the antivirus. Lang: Language of the computer with the antivirus installed. Prog (only in Postfix): location of the Sendmail program The antivirus filter uses it to redirect scanned messages to the Postfix server process. In Panda for Sendmail, the pav_milter script in the /etc/rc.d/init.d directory (in SuSE /etc/init.d) stops and starts the antivirus service. Although this script must be executed by the root superuser, the antivirus process functions as a normal user (panda) without special privileges. This script allows the following options: pav_milter start: starts the antivirus program. pav_milter stop: stops the antivirus program. pav_milter status: Indicates the status of the antivirus (on or off). In Panda for Qmail, the pav_control script in the /etc/rc.d/init.d directory (in SuSE /etc/init.d) stops and starts the antivirus service. Although this script must be executed by the root superuser, the antivirus process functions as a normal user (panda) without special privileges. This script allows the following options: pav_control start: starts the antivirus program. pav_control stop: stops the antivirus program. pav_control status: Indicates the status of the antivirus (on or off). In Panda for Postfix, the pav_control_po script in the /etc/rc.d/init.d directory (in SuSE /etc/init.d) stops and starts the antivirus service. Although this script must be executed by the root superuser, the antivirus process functions as a normal user (panda) without special privileges. This script allows the following options: pav_control_po start: starts the antivirus program. pav_control_po stop: stops the antivirus program. pav_control_po status: Indicates the status of the antivirus (on or off). IMPORTANT: It is not advisable to use programs such as Softlimit or Ulimit the limit memory use of Qmail processes. 4. Installation and configuration of the Web server in Panda Security for Sendmail, Panda Security for Qmail or Panda Security for Postfix (only if using the web interface or console instead of the AdminSecure console). The files for the web console must be in: /opt/pandasoftware/lib/pav_milter/cgi-bin (for Panda for Sendmail) /opt/pandasoftware/lib/pav_qmail/cgi-bin (for Panda for Qmail) /opt/pandasoftware/lib/pav_postfix/cgi-bin (for Panda for Postfix) 36 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE The files for the web console must be in: http://YourServer/pav_qmail/html/default.html (for Panda for Qmail) or http://YourServer/pav_postfix/html/default.html (for Panda for Postfix, where YourServer is the name or the IP of the Web server). The CGI scripts should be in the /opt/pandasoftware/lib/pav_qmail/cgi_bin/scripts (for Panda for Qmail) or /opt/pandasoftware/lib/pav_postfix/cgi_bin/scripts (for Panda for Postfix). Each change of Apache server, requires the modification of the configuration file (httpd.conf). After modifying this file, youll have to restart the Apache server for the changes to come into effect. For an Apache server there are several possibilities: Automatic configuration: a. Copy the file sendmail-apache.conf (for Panda for Sendmail), qmail-apache.conf (for Panda for Qmail) o postfix-apache.conf (for Panda for Postfix) from etc/pav_milter/ (for Panda for Sendmail), /etc/pav_qmail/ (for Panda for QmailSecure) o /etc/pav_postfix/ (for Panda for Postfix) to the same place as httpd.conf. b. Enter the following line, in the httpd.conf file before the Aliases section: Include conf/sendmail-apache.conf (for Panda for Sendmail). Include conf/qmail-apache.conf (for Panda for Qmail). Include conf/postfix-apache.conf (for Panda for Postfix). c. Restart the Apache server for the changes to take effect. d. To configure authentication manually edit the file sendmail-apache.conf (for Panda for Sendmail), qmail-apache.conf (for Panda for Qmail) or postfix-apache.conf (for Panda for Postfix). Manual configuration (manually modify the httpdf.conf file): a. Location of the HTML pages: Alias /pav_milter/botones/ "/opt/pandasoftware/lib/pav_milter/cgibin/botones/" Alias /pav_milter/botonesingles/ "/opt/pandasoftware/lib/pav_milter/cgibin/botonesingles/" Alias /pav_milter/html/ "/opt/pandasoftware/lib/pav_milter/cgi-bin/html/" Alias /pav_milter/imagenessmtp/ "/opt/pandasoftware/lib/pav_milter/cgibin/imagenessmtp/" <Directory "/opt/pandasoftware/lib/pav_milter/cgi-bin"> Options -Indexes AllowOverride None Order allow,deny Allow from all </Directory> ScriptAlias /pav_milter/scripts/ "/opt/pandasoftware/lib/pav_milter/cgibin/scripts/" 37 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE <Directory "/opt/pandasoftware/lib/pav_milter/cgi-bin/scripts"> AllowOverride None Options -Indexes Includes ExecCGI AddHandler cgi-script .cgi .exe Order allow,deny Allow from all </Directory> Alias /pav_milter/download/ "/opt/pandasoftware/var/pav_milter/download/" <Directory "/opt/pandasoftware/var/pav_milter/download/"> Options -Indexes AllowOverride None Order allow,deny Allow from all </Directory> In the case of a qmail server, replace pav_milter with pav_qmail. In the case of a Postfix server, replace pav_milter with pav_postfix. b. Restriction of access to the antivirus web console: If the administrator doesnt use a password file, one should be created with the following command htpassword - c directorio/users panda (users is the user name and password file). Modify the entry that indicates the location of the HTML files: Alias /pav_milter/botones/ "/opt/pandasoftware/lib/pav_milter/cgibin/botones/" Alias /pav_milter/botonesingles/ "/opt/pandasoftware/lib/pav_milter/cgi-bin/botonesingles/" Alias /pav_milter/html/ "/opt/pandasoftware/lib/pav_milter/cgibin/html/" Alias /pav_milter/imagenessmtp/ "/opt/pandasoftware/lib/pav_milter/cgibin/imagenessmtp/" <Directory "/opt/pandasoftware/lib/pav_milter/cgi-bin"> Options -Indexes AllowOverride None Order allow,deny Allow from all AuthType Basic AuthName "Restricted Directory" AuthUserFile /%directorio%/users Require user panda </Directory> In the case of a qmail server, replace pav_milter with pav_qmail. In the case of a Postfix server, replace pav_milter with pav_postfix. c. Restart the Apache server for the changes to take effect. 38 INSTALLING PROTECTION MODULES INDEPENDENT FROM ADMINSECURE 5. In Panda Security for Postfix, to use the antivirus change the configuration of the Postfix server: 5.1 Specify the program responsible for message filtering. To do this, include the following line in the /etc/postfix/master.cf file: pav_postfix unix n n - 5 pipe flags=R user=panda argv=/opt/pandasoftware/bin /pav_postfix f ${sender} -- ${recipient} NOTE: The value 5 indicates the maximum number of scans that can be run simultaneously. It is advisable not to set it at more than 7 (fast systems), or 3 - 4 (slow systems). 5.2 Specify that SMTP mail must be filtered. To do this, include the text marked in bold in the follwing line, in the /etc/postfix/master.cf file: smtp inet ...[other data]... smtpd o content_filter=pav_postfix:dummy 3. Installing Panda Security for Linux and Panda Security for Linux Servers If you have an antivirus installed, make sure that it is completely uninstalled before starting to install Panda for Linux or Panda for Linux Servers. Problems can occur if two different security solutions are installed on the same computer. NOTE: Each program installed and each distribution has its own uninstallation instructions. Once you have downloaded the native application package you must install it through the package manager of your installation. .deb packages: During installation of the package, you will have to accept the license agreement. Once installation is complete, the permanent protection will start automatically. .rpm packages: Once the package is installed, follow these steps: Click the Panda for Linux icon in the Start menu. Enter the administrator password if necessary. The end-user license agreement appears. The permanent protection will start when you accept the agreement. 39 40 Panda helps you to use the security solutions through a range of documentation. Go to http://www.pandasecurity.com/enterprise/support/ for further information, to resolve any queries, get the most out of your services, find out about the latest updates, get the latest IT security news, etc. Services Services Services Panda Security is a pioneer when it comes to treating protection against viruses and other threats as an integrated solution. The main services available to registered clients are: Tech Support 24 hours a day, 365 days a year. Daily updates to keep you safe from new viruses and other threats. SOS Virus, a solution in record time to any possible incidents involving unkown viruses and threats. Automated malware audit service that complements your current security solution 1. Tech Support A team of genuine experts. The Tech Support department comprises highly qualified professionals. This guarantees that we will resolve your incident in the shortest possible time. The principal Tech Support channels are: Telephone Tech Support 24h, 365d. A personal response to your queries. Day and night, every day of the year. At www.pandasecurity.com/ you will find the countries, telephone numbers and products for which this type of support is available. Email tech support. Simply send an email explaining your inquiry. 2. Updates Updates are essential to enable your product to detect and eliminate the new viruses and other threats that appear every day. The main features of the updates provided by Panda Security include: Automatic updates. You can configure the updates to take place automatically. A simple, centralized update system. Thanks to Panda AdminSecure, the distribution of the updates across the entire network is a simple process that takes place almost immediately. Rapid, incremental updates. Updates are carried out through a Signature File, a common file for all versions and operating systems. In addition, each update only involves downloading and including the part of the file that has changed with respect to the previous version. This implies a maximum saving of time and resources in each update. IMPORTANT: Panda AdminSecure lets you administer different types of updates: Updates. Update of the Signature File. Upgrades. Updates to new versions of the program, including the protection and the administration tools that make up Panda AdminSecure. 42 SERVICES REFERENCE: The daily updates of the Signature File (Updates) and the product updates (Upgrades) are available at: http://www.pandasecurity.com/enterprise/downloads/clients/ 3. SOS Virus SOS Virus is a service that provides a rapid response to attacks from unknown viruses. It is the perfect complement to the updates and the Tech Support. The SOS Virus service is included in the Panda solution that you have bought. The main features of this service are: Solution in record time. Rapid response to your query. Surefire response. Panda Security technicians will personally analyze the suspicious program or document to confirm whether it is a virus or threat or a false alarm. Personal response. Each case is assigned to a team of experts. 4. Audit You can carry out an online scan of all your network thanks to the automated audit service. This service uses the latest available technologies to ensure maximum detection capacity, minimizing resource consumption on the computers scanned. Information, queries and services Home - Access the main page of Panda Securitys website (http://www.pandasecurity.com). Documentation - Access updated product documentation and other interesting publications (http://www.pandasecurity.com/enterprise/downloads/docs/product/). Updates - Keep your Panda Security antivirus updated by downloading the latest improvements, new versions of the Virus Signature File every day, etc., (http://www.pandasecurity.com/enterprise/downloads/clients/). Renewals - Contact your nearest dealer or Panda Security to renew the services or to purchase new licenses of products (http://www.pandasecurity.com/about/contact/). Online Support Center - Constantly updated information to help you to answer any questions you may have about infections, viruses, Panda´s products and services, etc., any time of the day or night, all year round (http://www.pandasecurity.com/enterprise/support/). User name/password reminder - Forgotten or lost your registered user name and password? Dont worry, we will send them to you immediately (http://www.pandasecurity.com/enterprise/support/details/password/). 43 SERVICES Online Registration - In order to use the services included with your product (Updates, Tech Support, Renewals, SOS Virus, FAQs, etc.), you must first register as a Panda user (http://www.pandasecurity.com/enterprise/support/register/). Repair Utilities - Use the special tools that Panda Security offers for eliminating certain viruses that make detrimental changes to your system (http://www.pandasecurity.com/enterprise/downloads/repair-utilities/). SOS Virus - Get rapid solutions to incidents involving new or unknown viruses (http://www.pandasecurity.com/homeusers/solutions/services/). Virus Encyclopedia - Consult information on any virus and find out how to correctly eliminate it (http://www.pandasecurity.com/enterprise/security-info/about-malware/encyclopedia/). Virus Map - View the virus map, which gives live graphic, interactive and statistical coverage of the impact of viruses in diverse geographic regions (http://www.pandasecurity.com/enterprise/securityinfo/map/). Global ThreatWatch - See todays virus climate and find out the current threat level across the whole world or in your country (http://www.pandasecurity.com/enterprise/security-info/gtw/). Evaluation Software - Download a free trial version of any Panda product you want (http://www.pandasecurity.com/enterprise/downloads/evaluation/). Products - Find out the features and characteristics of Panda Securitys products for large companies, small businesses and home users, and try them without any obligation (http://www.pandasecurity.com/enterprise/solutions/). Online store - Choose the product that best suits your needs and benefit from the advantages of download a product via the Internet (https://shop.pandasoftware.com/). Notes Username: Password: Client number: 44 © Panda Security 2008 0408-PESGUIDE-US-03
Similar documents
Panda Corporate Solutions
the main CD-ROM menu does not appear, run the AUTORUN.EXE file. Important: If your operating system has Microsoft's data execution prevention (DEP) enabled and cannot run the AUTORUN.EXE file or an...
More information