KASPERSKY LABS Kaspersky Anti-Virus 4.00.
KASPERSKY ANTI-VIRUS 4.00.02 FOR NOVELL NETWARE User guide Kaspersky Labs Ltd. Visit our website: http://www.kaspersky.
Table of contents CHAPTER 1. INTRODUCTION..........................................................................7 1.1. Purpose and Main Functions.............................................................................7 1.2. Supply Set..........................................................................................................9 1.2.1. What's in the Supply Set .............................................................................9 1.2.2. License agreement ........................
Kaspersky Anti-Virus for Novell NetWare 3.5.2. Filter mode .................................................................................................33 3.5.3. On-demand Scanning ...............................................................................34 3.5.4. Scheduled Scanning..................................................................................35 3.6. Configuring Kaspersky Scanner......................................................................35 3.6.1.
Table of contents 5 4.1. Organizing Centralized Update Distribution....................................................66 4.2. Installing and Uninstalling Kaspersky Updater................................................67 4.2.1. System requirements.................................................................................67 4.2.2. Installing Kaspersky Updater.....................................................................67 4.2.3. Uninstalling Kaspersky Updater ................................
Kaspersky Anti-Virus for Novell NetWare 5.2. The purpose of Kaspersky AV Updater ........................................................100 5.3. Kaspersky AV Updater Interface...................................................................100 5.3.1. Kaspersky AV Updater initial window......................................................100 5.3.2. The Connection window..........................................................................101 5.3.2.1. Configuring updating via Internet.............
Chapter 1.Introduction 1.1. Purpose and Main Functions Kaspersky Anti-Virus 4.00.02 for Novell NetWare (Kaspersky AV) is an antivirus software package consisting of various modules (see table) that provide a high protection level for corporate networks running under Novell NetWare. Kaspersky AV's implementation is based on a client-server technology.
Kaspersky Anti-Virus for Novell NetWare Figure 1 displays the situation when the first Update server retrieves anti-virus database updates via the Internet and then sends them to the first three Kaspersky AV servers. The second Update server retrieves updates from the network folder (saved here by the first server) and sends them to the rest of the Kaspersky AV servers. Client side is represented by two back-end control modules — NetWare Administrator (NWAdmin) module and similar ConsoleOne module.
Introduction Module Short name Comments Kaspersky Updater Automatic updating support module Front end: NWAdmin control module NWAdmin module control Front end: ConsoleOne control module ConsoleOne control module Kaspersky control Scanner Kaspersky Scanner and Kaspersky Updater control Kaspersky AV users are provided with a day-and-night support service via phone and e-mail (in Russian and English).
Kaspersky Anti-Virus for Novell NetWare Read the license agreement carefully! If you don't accept the terms of this license agreement, you can return Kaspersky Anti-Virus retail box to your dealer and get back the subscription fee. If this occurs, please make sure the envelope with diskettes remains sealed. By opening the sealed envelope with diskettes you confirm that you agree with the terms of this license agreement. 1.2.3.
Introduction • daily updating of anti-virus bases; • provision of new versions of this product; • phone and e-mail consultations on matters which concern operating this product; • notifying about new Kaspersky Labs products and new viruses detected in the world. Consultations concerning functioning and using operating systems, as well as using various technologies, are not provided.
Chapter 2.Program installation 2.1. System requirements Kaspersky AV requires: • Server with installed Novell Netware system versions 4.11, 4.2, 5.x or 6. • Corresponding Support Pack installed: • for Novell NetWare 4.11 or 4.2: Support Pack 9 or higher; in addition, it requires installed WinSock 2 and the server should support the TCP/IP protocol. • for Novell NetWare 5.0: Support Pack 6.а or higher; • for Novell NetWare 5.
Program installation 2. Choose the Run item in the menu that appears when you click Start. 3. Launch setup.exe (installation file). 4. Click OK. 5. This launches the installation program. Follow the instructions carefully. 6. When you finish reading information in the Welcome window, click Next (see Fig. 2). Figure 2. Starting installation. 7. Read the license agreement, then click Yes if you accept the terms of the license agreement.
Kaspersky Anti-Virus for Novell NetWare Figure 3. License agreement. 8. In the Select Component dialog box (see Fig. 4), select components to install: • Indicate what module(s) should be installed using the keys Kaspersky Scanner, Snapin for ConsoleOne, and Snapin for Netware Administrator; • Сlick Next button. Figure 4. Selecting components to install. 9. If you chose installing Kaspersky Scanner on the server, the Choose Destination Server dialog box appears on the screen (see Fig. 5).
Program installation the connected servers available at the moment of installation. Select a server on which you want to install Kaspersky Scanner and click Next. This section describes installing Kaspersky Scanner on a single server. Using the ConsoleOne control module, you can install Kaspersky Scanner on several servers (see 3.3.2 on page 27). Figure 5. Choosing server. 10. In the Choose Destination Location dialog box (see Fig.
Kaspersky Anti-Virus for Novell NetWare Figure 6. Selecting Directory. • select the required directory in the directory list located in the Select Directory dialog box and click Select (see Fig. 7). • if you install Snapin for Netware Administrator program module and/or Snapin for ConsoleOne, specify directory/directories where NWAdmin32 and/or Novell ConsoleOne are installed.
Program installation Figure 7. Selecting Directory. 11. Read the installation information in the Start Copying Files dialog box. To continue installation, click Next button (see Fig. 8). Figure 8. Installation information. 12. In the Install Key File dialog box (see Fig. 9), click Install Key and specify a key file (*.key) for this very installation in the dialog box that appears (see Fig.
Kaspersky Anti-Virus for Novell NetWare The key file is your own "key" containing the housekeeping information necessary for proper running of the program, namely Information on support (who provides support and where it may be obtained); License title, number, and expiration date. Without the key file, the program runs as a demo Demo mode), when only detection of infected files is available without "healing" them. Figure 9. Installing key file. Figure 10. Choosing key file.
Program installation 13. At this moment, the program starts copying files to the server and storing settings in NDS. During the installation, the NDS scheme is being changed in the following way: a new "AVP" class is created, serving as a basis for the new "Kaspersky Anti-Virus ()" object where is a name of the server where Kaspersky Scanner is installed. Figure 11. Copying files. 14. Click Next upon completion of the installation process. 15.
Kaspersky Anti-Virus for Novell NetWare 16. If you chose installing Snapin for Netware Administrator , the installation process will continue (see Fig. 13). Click Next to install the required ActiveX components, then installation will be completed. Figure 13. Installing ActiveX components.
Chapter 3.Anti-Virus Protection for Servers 3.1. Creating and Maintaining Anti-Virus Protection for Servers To ensure an effective protection for local network servers, administrator should perform the following steps: 1. Install control module for NWAdmin and/or ConsoleOne. 2. Select Kaspersky AV servers to act as protection units. Install Kaspersky Scanner on these servers. Use control module to adjust Kaspersky Scanner settings. 3.
Kaspersky Anti-Virus for Novell NetWare 3.2. Control Modules Interface 3.2.1. Control module interface for ConsoleOne In the left panel of the Novell ConsoleOne main window, the resources of your local network as well as other added items are displayed as a set of objects headed by primary tree items with the "My World" item as a root object (see Fig. 14). Upon installing ConsoleOne control module, the Kaspersky Anti-Virus primary item with the corresponding icon appears in the items set. Figure 14.
Anti-Virus Protection for Servers The primary tree item comprises the list of NDS trees, each indicated by the icon. An NDS tree contains the list of anti-virus software products that can be installed on servers included in this tree. The list contains two software products: an anti-virus scanner represented by the Kaspersky Scanner line with the icon and an automatic updating program represented by the Kaspersky Updater line with the icon.
Kaspersky Anti-Virus for Novell NetWare The Kaspersky Updater item comprises the names of only those tree servers where Kaspersky Updater has been installed. These items are indicated by the icon depicting the globe with tools: . This served icon is marked with a red circle is another user blocks the access to Kaspersky Updater. The globe icon turns red if an old version of the program is installed on the server. The old version cannot be launched and should be updated.
Anti-Virus Protection for Servers 25 You can access the Kaspersky Scanner for NWAdmin control module window by double clicking on the item or by choosing Details in the context menu of the item. 3.3. Installing and Uninstalling Kaspersky Scanner (ConsoleOne) 3.3.1. Installing Kaspersky Scanner on Server Kaspersky Scanner is installed from the workstation where the ConsoleOne control module has been installed.
Kaspersky Anti-Virus for Novell NetWare Figure 16. Installing Kaspersky Scanner for Novell NetWare dialog box. 7. If required, change the destination volume and directory names in the Select destination directory field. 8. Select a key. To do this, click the Install Key button and specify the key file in the Select dir and keyfiles dialog box that appears (see Fig. 17). Figure 17. Select dir and KeyFiles dialog box. 9. Click the Install button. 10.
Anti-Virus Protection for Servers After that, Kaspersky Scanner will be installed on the specified server and the icon will change to the Fig. 18). icon in the corresponding namespace line(see Figure 18. Installing Kaspersky Scanner has been finished. 3.3.2. Installing Kaspersky Scanner on Server Group Kaspersky Scanner is installed from a workstation or a server where the ConsoleOne control module has been installed. To install Kaspersky Scanner on a server group, 1.
Kaspersky Anti-Virus for Novell NetWare 4. Right-click the product chosen to open the context menu and select the Install line. 5. Select the names of the required servers in the Select servers to install to list of the Installation Kaspersky Scanner for Novell Netware dialog box (see Fig. 19). 6. Names of the volume and directory used for installing Kaspersky Scanner on servers of the selected NDS tree are displayed in the Select destination directory field. Figure 19.
Anti-Virus Protection for Servers 29 3.3.3. Uninstalling Kaspersky Scanner from the Server or the Server Group To uninstall Kaspersky Scanner from the server, 1. Expand the Kaspersky Anti-Virus primary item in the left panel of the Novell ConsoleOne window. 2. In the list of NDS trees, choose the name of the tree with the server you want to uninstall Kaspersky Scanner from. 3. Expand the NDS tree and select the Kaspersky Scanner item. 4.
Kaspersky Anti-Virus for Novell NetWare 3.3.4. Upgrading Kaspersky Scanner If you have Kaspersky Scanner version lower than 4.00.02 installed on your server, you have to upgrade the program. The servers on which the program should be upgraded are indicated in the Kaspersky Anti-Virus primary item by the red umbrella icon page 22). (see 3.2.1 on To upgrade Kaspersky Scanner on the server, choose the Upgrade Version item in the context menu (see Fig. 21). Figure 21.
Anti-Virus Protection for Servers To load Kaspersky Scanner on a server from the workstation: 1. Launch the Netware administration utility. Administrator (NWAdmin) 2. Choose the Kaspersky Anti-Virus item. 3. Double click the mouse or click the right mouse button, then choose the Details item in the context menu. A dialog box for the Kaspersky Scanner control module appears (see Fig. 23). Figure 22. Netware Administrator window. Figure 23. Dialog box for Kaspersky Scanner control module.
Kaspersky Anti-Virus for Novell NetWare 4. Click Load NLM. After that, a program kernel (AVKernel.NLM module), anti-virus databases will be loaded into the server memory and the corresponding status window will appear on the server. Figure 24. Status window. The control module automatically detects any changes that may happen in the network.
Anti-Virus Protection for Servers 33 2. Expand the selected NDS tree by clicking on it. 3. Choose the Kaspersky Scanner item in the list of anti-virus products. 4. Open the context menu and choose the Load Kaspersky AV on all servers/Unload Kaspersky AV on all servers item. To load/unload Kaspersky Scanner on a single server, 1. Choose the name of the server whereon/wherefrom you want to load/unload Kaspersky Scanner in the NDS list of the Kaspersky Anti-Virus primary item. 2.
Kaspersky Anti-Virus for Novell NetWare Kaspersky Scanner checks all the files before they are launched or opened, allowing the viruses to be detected and disinfected before their expansion. Filter mode scanning slightly slows the server operation. Thus, it is not recommended to switch on archive unpacking in the filter mode.
Anti-Virus Protection for Servers 35 If infected or "suspicious" (resembling viruses) files are detected (using the heuristic analyzer), the program will perform certain actions (for configuring actions to be taken with infected or suspicious files, see 3.6.5 on page 44). The checking statistics is constantly updated during the scanning process. You can abort scanning at any moment. To do this, click Stop. A record registering the interruption of on-demand scanning will appear in the result log. 3.5.4.
Kaspersky Anti-Virus for Novell NetWare Both Kaspersky Scanner control module windows have a similar appearance. Later in this guide, the NWAdmin control module window will be given upon descriptions of this window, or, in case of any differences – windows of both control modules. Kaspersky Scanner control module window contains nine tab pages enabling users: About – to view general information about Kaspersky Scanner and load/unload it from the server memory.
Anti-Virus Protection for Servers 37 Figure 25. Viewing information about the program.
Kaspersky Anti-Virus for Novell NetWare • Load NLM: loading the program on server; • Unload NLM: unloading the program from the server; • Register: registering the program. Upon clicking the button, a standard file search dialog box appears where you should select a key file (*.key extension) . 3.6.3. On-demand scanning mode options. Manual Scanning tab page 3.6.3.1.
Anti-Virus Protection for Servers 39 Figure 27. Specifying scan area for the on-demand scanning mode (ConsoleOne) To specify the directory to be included into the scan area, Clicking the Browse button near the Path for Scan field opens the Select Directory dialog box (see Fig. 28). Select the necessary directory from the list and click the Select button. You can specify scanning of all the server’s volumes indicating *:\*.* in the input field. Figure 28.
Kaspersky Anti-Virus for Novell NetWare 3.6.3.3. Files to scan Files to scan are specified by means of the Files to Scan field group (see Fig 29). To specify files to be scanned, 1. In the option buttons group, specify which files you want to include into the scan list: • All Files — to include all files into the list; • Files with These Extensions — to include files with certain masks. Specify desired masks in the corresponding value field. Figure 29.
Anti-Virus Protection for Servers 41 *.exe и *.sys), Windows and OS/2 (*.exe, *.dll), Linux (elf); files of the Microsoft Office (OLE2 and Access) document and spreadsheet type, Java-applets. 2. If you want to exclude files with certain masks from the scanning procedure, mark the Except These checkbox and enter masks of these files in the corresponding value field. You can specify various file masks via space, for example: *.tmp *.txt. 3.
Kaspersky Anti-Virus for Novell NetWare Performing code scanning, the heuristic analyzer checks a variety of branches constituting the program algorithm (including several sublevels). This mechanism detects about 92% of viruses (including a lot of encrypted viruses) registered in Kasperky Labs Ltd. virus databases, so we assume that new unknown viruses will be found with the same degree of probability. 3.6.3.5.
Anti-Virus Protection for Servers 43 3.6.3.6. Unpacking Engine for Processing Executable Modules You can enable executable module unpacking engine using the Packed Executable checkbox. Being enabled, Kaspersky Scanner can start detecting and deleting viruses from packed executable files. Packed executable files contain a special unpacking module. When this file is started, at first the main program is unpacked in RAM and only then it is being executed.
Kaspersky Anti-Virus for Novell NetWare 3.6.4. Filter mode scanning options. Real-time Scanning tab page Filter mode scanning options are specified on the Real-time Scanning tab page (see Fig. 30). Scan area for the filter mode is specified on the Real-time Scanning tab page. This tab page is similar to the Manual Scanning page designed for configuring scan area for the on-demand scanning mode (see 3.6.2 on page 36), except the following.
Anti-Virus Protection for Servers Figure 31. Specifying scan area for the filter mode (ConsoleOne) 3.6.5. Actions to take with infected and suspicious files. Actions tab page To specify which actions to take with infected or suspicious files, 1. Choose the Actions tab page (see Fig. 32). Figure 32.
Kaspersky Anti-Virus for Novell NetWare 2. 3.
Anti-Virus Protection for Servers 47 Kaspersky Scanner blocks any accesses to server performed from this workstation until the workstation is turned off the server by the network administrator or a user. 5. 6.
Kaspersky Anti-Virus for Novell NetWare To do this, mark the Send Alerts checkbox on the Alerts tab page (see Fig. 34). Use the Alert Recipients field to specify the list of network users who will receive messages about detected viruses; write down the message text in the Alert Message field. While editing message lines, use the following macros: $NAME-OF-USER user name; $NAMES-OF-INFECTED-FILES name of infected file; $NAMES-OF-VIRUSES virus name; $ANTI-VIRUS-SERVER server name. Figure 34.
Anti-Virus Protection for Servers 49 Figure 35. Creating a list of users who will receive messages 2. Add those users who ought to receive messages about found users. To add a user: • click Add, the Select object dialog box appears (see Fig. 36); Figure 36. Selecting a user who will receive messages about viruses • select the required user from the list; • click OK. To delete a user from the group of message recipients, choose him in the list of the Select Recipient dialog box and click Remove.
Kaspersky Anti-Virus for Novell NetWare 3.6.7. Advanced options. Advanced tab page 3.6.7.1. Specifying paths to working and "quarantine" directories Kaspersky Scanner unpacks packed files and archives to temporary files in its working directory. You can specify a path to the working directory on the Advanced tab page (see Fig. 37). Here you can specify paths to the ''quarantine" directories where infected and suspicious files are copied to (only if you previously enabled the backup mode – see 3.6.
Anti-Virus Protection for Servers 51 Use the same procedures to specify a path to the "quarantine" directory for infected files in the Infected Files Quarantine Directory field, a path to the corresponding directory used for storing suspicious files – in the Suspicious Files Quarantine Directory field. To stop virus distribution, the "quarantine" directories for infected and suspicious files should be accessed only by the system administrator. 3.6.7.2.
Kaspersky Anti-Virus for Novell NetWare 3.6.7.4. Specifying the number of scan requests You can determine the number of file scan requests simultaneously processed by the server on the Advanced tab page. Enter the maximum number of requests in the Number of Scan Processes field. The default field value is "2". The administrator is the one to determine the optimal value on the basis of server resources data. 3.6.8. Scheduled scanning options. Scheduled Scans tab page 3.6.8.1.
Anti-Virus Protection for Servers 53 Figure 39. Specifying scan area for the scheduled scanning mode (ConsoleOne). To specify the directories and/or volumes to be scanned, 1. Click the Select button near the Scan These Folders field. The Objects List dialog box appears (see Fig. 40). Figure 40. The list of directories for scanning 2. Specify the path for scanning: • To add a scanning path to the list, click the Add button to open the Select Directory dialog box (see Fig.
Kaspersky Anti-Virus for Novell NetWare Figure 41. Selecting directory The program checks ALL the directories added to the Folders to Scan list. To view all the directories to be scanned, open the list. • 3. To exclude a directory, mark it in the list of the Objects List dialog box and click the Remove button. Click the OK button in the Objects List dialog box. Similarly, directories can be excluded from the list to scan using the Select button near the Exclude Folders. 3.6.8.2.
Anti-Virus Protection for Servers • every week; • every month. 55 Furthermore, you can disable the scheduled scanning mode, if necessary. Figure 42. Scheduled scanning mode. Configuring daily scanning. To start daily scanning at the desired moment of time, 1. Select the Every Day option button. 2. Form the At these times list by adding the desired scanning startup times. To add scheduled scanning time: • Click Add, and the Time dialog box appears (see Fig.
Kaspersky Anti-Virus for Novell NetWare Figure 43. Choosing time for scheduled scanning • 3. enter the scanning start-up time in the Hours and Minutes fields – hours and minutes, correspondingly; Click OK. You can launch scanning processes more than once a day. To do this, add several items to the At these times list. You can delete a start-up time by selecting the corresponding item in the list and clicking Delete. To start the task on a weekly basis, 1.
Anti-Virus Protection for Servers To start monthly scanning at the desired days of the month, 1. Select the Every Mont option button (see Fig. 45). 2. Using the mouse, click on the calendar days to specify when the scheduled scanning should be performed. 3. Form the At these times list by adding the desired scanning startup times. NWAdmin ConsoleOne Figure 45. Scheduled scanning mode. Configuring monthly scanning.
Kaspersky Anti-Virus for Novell NetWare To disable the scheduled scanning mode, select the "Never" option button. 3.6.9. Scanning result logs. Logging, Statistics tab pages After loading the AVKernel module on the server, scanning results are recorded in logs: • Manual Log — a result log for the on-demand and scheduled scanning modes; • RealTime Log — a result log for filter mode scanning. 3.6.9.1.
Anti-Virus Protection for Servers • Suspicious files — messages about suspicious files; • Warnings — warnings notifying users that modified or damaged viruses have been detected; • Information about packed executables — information on packed executable files; • Information about archived files — information about archived files; • Clean files — information about clean files.
Kaspersky Anti-Virus for Novell NetWare If by any reason, it is not possible to perform the action (of your choice) regarding the infected file, the record will have the following format: SYS:\TEST\MY_FILE.EXE : infected: (User : ) SYS:\TEST\MY_FILE.EXE : failure or, if disinfection was chosen as an action to take, but it turned out as an impossible one, SYS:\TEST\MY_FILE.EXE : disinfection failed: 3.6.9.1.2.
Anti-Virus Protection for Servers 61 • Macro.Word97.Fs – a virus of the Macro.Word97.Fs type is suspected. • RemoteTemplate – a document contains a reference to the template which automatically loads when the file is opened; • HTML.SecurityBreach.2 – an HTML-file or an HTML-formatted email message contains a reference to a suspicious object; • IRC-Worm.
Kaspersky Anti-Virus for Novell NetWare You can limit the size of scan result logs. To do this, in the Log File Options group: 1. Mark the Limit Log File Size to a maximum of checkbox. 2. Enter the maximum log size (in kilobytes) in the value field. 3.6.9.2. View scan results To view statistics and/or filter mode scan results, perform the following. For NWAdmin control module: 1. Choose the Real-time Scanning page (see Fig. 47). 2. Switch to the Statistics tab page.
Anti-Virus Protection for Servers Console One Figure 47.
Kaspersky Anti-Virus for Novell NetWare You can view the scan result log (see Fig. 48). To do this, click View Log. NWAdmin ConsoleOne Figure 48. Scan result log To view statistics and/or the on-demand and scheduled scan results log, perform the following. For NWAdmin control module: 1. Choose the Manual Scanning page (see Fig. 49).
Anti-Virus Protection for Servers 2. Switch to the Scan tab page. For ConsoleOne control module: 3. Choose the Statistics tab page (see Fig. 49). 4. Select the View Manual Statistics option button. Displaying statistics is similar to that of the filter mode scanning. NWAdmin Console One Figure 49.
Chapter 4.Updating Anti-Virus Bases (ConsoleOne) 4.1. Organizing Centralized Update Distribution Kaspersky Updater module is designed for automatic updating of anti-virus databases on Kaspersky AV servers of a corporate network. Kaspersky Updater: • copies anti-virus databases to the Update server via the Internet (using network or remote connections) or from the local folder.
Updating Anti-Virus Bases (ConsoleOne) 67 4.2. Installing and Uninstalling Kaspersky Updater 4.2.1. System requirements To run on a server, Kaspersky Updater requires: • Novell NetWare operating system (version 5.x or 6). • Approximately 5 MB of free disk space. • Support for TCP/IP interface. • JVM of any version (version 2 or higher is recommended). 4.2.2.
Kaspersky Anti-Virus for Novell NetWare Figure 50. The Install Kaspersky Updater dialog box 6. If required, change the destination volume and directory names for storing anti-virus databases in the Select destination directory field. 7. Click the Install button. These steps result in installing Kaspersky Updater on the selected server. In addition, the name of this server and the Kaspersky Updater item of the NDS tree. icon will be included in the 4.2.3.
Updating Anti-Virus Bases (ConsoleOne) 69 Figure 51. Request for uninstalling Kaspersky Updater To uninstall Kaspersky Updater from a group of servers, follow the same procedure. The only difference is that in this case you have to access the context menu in the line with the Kaspersky Updater item of the selected NDS tree, not the name of a server. The program will be uninstalled from all the servers of this tree. 4.2.4. Upgrading Kaspersky Updater If Kaspersky Updater (version 4.0.
Kaspersky Anti-Virus for Novell NetWare 2. Click the OK button in the appearing Upgrade Kaspersky Updater request (see Fig. 53). Figure 53. Request for upgrading the version. 3. Click the OK button in the appearing system message on successful Kaspersky Updater upgrading. 4.3. Kaspersky Updater Loading/Unloading Kaspersky Updater is loaded on/unloaded from a server from a workstation or a server with installed ConsoleOne control module.
Updating Anti-Virus Bases (ConsoleOne) 71 To load/unload Kaspersky Updater on/from a server 1. Expand the Kaspersky Anti-Virus primary item in the left panel of the Novell ConsoleOne window. 2. In the list of NDS trees, select the name of the tree containing the server whereto/wherefrom you want to load/unload Kaspersky Updater. 3. Expand the NDS tree selected and choose the Kaspersky Updater item. 4.
Kaspersky Anti-Virus for Novell NetWare To access the configuring dialog box of Kaspersky Updater installed on a server, 1. Expand the Kaspersky Anti-Virus primary item in the left panel of the Novell ConsoleOne window. 2. In the list of NDS trees, choose the name of the tree with the required Update server. 3. Expand the NDS tree and choose Kaspersky Updater from the list of anti-virus products. 4.
Updating Anti-Virus Bases (ConsoleOne) 73 from a given Update server, enables users to set up the update distribution mode and load/unload Kaspersky Updater on the server (see 4.4.5 on page 85). Settings – enables users to configure settings for an Update server to retrieve updates of anti-virus bases (see 4.2.2 on page 67). Scheduler – schedules retrieving of updates of anti-virus bases by Update server (see 4.4.4 on page 82).
Kaspersky Anti-Virus for Novell NetWare Select one of the two update sources — via the Internet or from a network folder — in the dialog box opened. The default source of updates is via the Internet. 4.4.2.1. Configuring updating from the network folder The updating from the network folder is recommended for Update servers that retrieve updates from the main server. To configure the Update server for retrieving updates from the network folder , 1.
Updating Anti-Virus Bases (ConsoleOne) 3. In the next dialog box, select the directory of the server specified with the updates—the update source. If Kaspersky Updater copies the updates to the main server in an automatic mode, select the Bases subdirectory in the directory for storing the anti-virus bases (see Fig. 58). Address your network administrator for the location of updates if the updates are copied manually from the Internet. Upon selecting the directory, click the OK button. Figure 57.
Kaspersky Anti-Virus for Novell NetWare Figure 59. The Settings tab page; the Source of updates mode; updating of anti-virus bases via the Internet The default list contains the addresses recommended by Kaspersky Labs for retrieving updates of anti-virus bases.
Updating Anti-Virus Bases (ConsoleOne) 77 Figure 60. The Enter new Url dialog box. 4.4.2.2.1. Configuring parameters of a proxy server If updating via the Internet is selected as the update source and a proxy server will be used to connect to the Internet provider, its settings need configuring. To configure the settings for connection via a proxy server, 1. Select the Proxy line in the popup menu called by the shortcut button on the Settings tab page (see Fig. 61). 2.
Kaspersky Anti-Virus for Novell NetWare Figure 61. The Settings tab page; Proxy mode. 4.4.2.2.2. Configuring reconnection settings If connection with the update source in the automatic updating mode via the Internet has failed, three attempts to reconnect will be made with a 5-min interval (each next attempt is made after connection failure of the previous attempt). The number of reconnection attempts with the source and the interval may be changed on the Settings tab page.
Updating Anti-Virus Bases (ConsoleOne) 79 • The number of reconnection attempts in the field Amount; • The time interval between reconnection attempts in the field through. 4.4.2.3. Configuring the mode for copying antivirus bases Independently of the updating source selected, it is necessary to set the mode for copying anti-virus bases. Only changes and new anti-virus bases will be copied from the source by default. To set the copying mode for anti-virus bases, 1.
Kaspersky Anti-Virus for Novell NetWare Figure 62. The Settings tab page. The Modes of copying mode. 4.4.3. Connecting the control module with an Update server. The Advanced tab page Parameters for connection of the control module with an Update server and a directory for storing anti-virus bases are specified on the Advanced tab page (see Fig. 63).
Updating Anti-Virus Bases (ConsoleOne) 81 Figure 63. The Advanced tab page. To specify a directory for storing anti-virus bases, on an Update server: 1. Click the Browse button located on the right from the Directories field. 2. In the dialog box appeared, select the directory of the Update server whereto you want to place updates of anti-virus bases and click OK (see Fig. 64). The default directory for storing anti-virus bases was specified during installation of Kaspersky Updater.
Kaspersky Anti-Virus for Novell NetWare Figure 64. The dialog box for choosing a directory for storing updates. To specify the connection parameters, in the Manage Information field group: 1. Enter a numerical IP address of an Update server in the IP address field. By default, the program has the server IP address in this field. 2. Enter the decimal number of the communication port into the Port field. By default, the program has port 8194. 4.4.4.
Updating Anti-Virus Bases (ConsoleOne) • Every Month – monthly update retrieving; • On Demand – manual update retrieving; corresponds to disabling the scheduled updating mode. 83 The default value is Every Day, the time of update retrieving is 0:00 PM. 2. In the field group that corresponds to the selected mode, set the schedule for retrieving updates. • If the daily updating mode is selected, you should set a time for retrieving updates by creating the At these times list (see Fig. 65).
Kaspersky Anti-Virus for Novell NetWare • If the weekly updating mode is selected, mark the checkboxes that correspond to the days of week when you need to receive updates (see Fig. 65). You can mark several checkboxes at the same time. After this, you must set the time for retrieving updates by forming the At these times list (see above). Figure 66. Setting the time for scheduled retrieving updates.
Updating Anti-Virus Bases (ConsoleOne) 85 4.4.5. Creating a list of servers for distributing updates. Setting the distribution modes. The About tab page The About tab page serves to create a list of Kaspersky AV servers, which will receive updates from an Update server, set the distribution modes for each of the Kaspersky AV servers, and load/unload Kaspersky Updater on the server. The upper part of the About – Kaspersky Updater tab page contains general information on Kaspersky Updater settings (see Fig.
Kaspersky Anti-Virus for Novell NetWare • Daily – every day; • Weekly – every week; • Monthly – ever month. • Source — this line shows an updating source for an Update server: Internet – via the Internet and Folder – from a folder. • Last Date of Update — this line contains the date and time when the Update server received the last update of anti-virus bases.
Updating Anti-Virus Bases (ConsoleOne) 87 Figure 69. The KAV Servers dialog box The list of servers contains only those Kaspersky AV servers that belong to the same NDS tree as the corresponding Update server. You will not be able to update anti-virus bases on servers of other NDS trees. 3. Click OK. To remove a server from the list of Kaspersky AV servers that will receive updates from an Update server, select it in the table an click Delete. You can simultaneously remove a group of servers.
Kaspersky Anti-Virus for Novell NetWare p. 82). An exception is the value set for a default option – Automatic. Figure 70. The About tab page. Setting the schedule for distributing updates. Note the difference between schedules, which you set on the Scheduler tab page and the About tab page in the Kaspersky Scanner in… – Scheduler dialog box. On the Scheduler tab page you set a schedule for RETRIEVING updates by an Update server.
Updating Anti-Virus Bases (ConsoleOne) 89 To load Kaspersky Updater on a server using the About tab page, click the Load Updater button to load and the Unload Updater button to unload the program. 4.4.6. Manual start of retrieving and distributing updates. The Update tab page The Update tab page allows a manual start of retrieving updates by an Update server and distributing them to the Kaspersky AV servers.
Kaspersky Anti-Virus for Novell NetWare page is loaded in the mode of starting an updating session from an Update server (see Fig. 71). Figure 71. The Update tab page.
Updating Anti-Virus Bases (ConsoleOne) 4. 91 • Scheduler – the mode of receiving/distributing updates for this object; • Last date of Update – the date of last updating of anti-virus bases on this server; • State – a percentage of completed updating / distributing; after the process is completed, this cell gets empty. • On/Off – the current status of the object (enabled/disabled).
Kaspersky Anti-Virus for Novell NetWare Figure 72. The Update tab page. Starting an updating session from a workstation. If an updating session is opened on a workstation, there is no need to launch Kaspersky Updater, because all the necessary operations will be performed by the ConsoleOne control module. A source from which an Update server retrieves updates (Internet or Loсal) is indicated in the upper part of the Update tab page in the Connection in line.
Updating Anti-Virus Bases (ConsoleOne) 93 Kaspersky AV servers. In the Status cell of the table, you can see a percentage of updated anti-virus bases. The name of the Update Bases button is changed for Stop Updater. Clicking this button, you can terminate the updating process. If anti-virus bases were updated manually only on an Update server, the updates will be sent to the Kaspersky AV servers according to the settings on the About tab pages. 4.4.7. Configuring the log and viewing results.
Kaspersky Anti-Virus for Novell NetWare • Parameters — settings of Kaspersky Updater during the current session on updating anti-virus databases on the Update server (recorded only for the Update server); • Source of update — information about connection to the source of updates (recorded only for the Update server); • Result of update — results of updating anti-virus databases on the Update or Kaspersky AV servers; • Error of update — warning about failed updating anti-virus databases; • File
Updating Anti-Virus Bases (ConsoleOne) 95 To limit the log size, 1. In the Log File Options group, tick the Limit Log File Size to a maximum of checkbox. 2. Enter the maximum log size (in kilobytes) in the value field. By default, the log has a value of 1024 Kb. 4.4.7.2. Viewing the log To view the log of Update server's retrieving updates and distributing them to Kaspersky AV servers, click View Log on the Logging tab page. A log window will be opened. The left table of the log window (see Fig.
Kaspersky Anti-Virus for Novell NetWare To view the parameters and results of an updating session, select the corresponding row in the left table and you will see the necessary information in the right table. The content of the right table is defined by the settings on the Logging tab page (see 4.4.7.1 on page 93). To close the log, click Close. 4.4.7.2.1.
Updating Anti-Virus Bases (ConsoleOne) 97 file – only refreshed and new databases are copied. See section 4.4.2.3 on page 79).
Kaspersky Anti-Virus for Novell NetWare The left table, depending on the log settings, can contain the following information: • Result of update – informs about the results of updating the antivirus databases on the Kaspersky AV server; • File is not changed – reports that the anti-virus databases have remained unchanged; • File is successfully refreshed – reports that the anti-virus databases have been refreshed; • Error of update – informs about an error if updating has failed.
Chapter 5.Updating Anti-Virus Bases (NWAdmin) 5.1. Launching the Updater In managing Kaspersky AV server protection using the NWAdmin control module, simultaneous updating of anti-virus bases on several servers, as well as specifying an updating schedule, ARE NOT AVAILABLE. You will have to perform a regular manual launching of Kaspersky AV Updater for each protected server. You can perform updating of anti-virus bases without interrupting Kaspersky AV functioning on the server.
Kaspersky Anti-Virus for Novell NetWare 5.2. The purpose of Kaspersky AV Updater Kaspersky Anti-Virus Updater (Kaspersky AV Updater) is designed for automatic updating of anti-virus databases, which contain virus descriptions and methods of disinfection. The updater copies anti-virus databases and executable modules via Internet (using network or remote connections) or from a local folder. 5.3.
Updating Anti-Virus Bases (NWAdmin) 101 Figure 76. The updating wizard welcome window 5.3.2. The Connection window If you need to change the default settings, use the Connection window (see Fig. 77). Figure 77. Connection window The middle part of this and two following windows comprises the settings tree. This control element contains settings grouped in a hierarchical tree.
Kaspersky Anti-Virus for Novell NetWare The Connection window enables users to specify the way of updating and the objects to update themselves. The purpose of each item from the first tree level is explained below (see Fig. 78): Figure 78. General settings of the update program Update via Internet – to perform updating via the Internet. Update from local folder – to perform updating from the local folder. Update anti-virus bases – to perform updating of anti-virus databases.
Updating Anti-Virus Bases (NWAdmin) 103 5.3.2.1.1. Specifying location Updating is performed from one of the update servers registered in the list. To view the list, expand the URL settings tree branch (see Fig. 80). Figure 80. Specifying location of the update server The location of the first listed server is used by default. If failure occurs – the second is tried, then the third and so forth. The access error appears on the screen only if the system failed to connect any of listed servers.
Kaspersky Anti-Virus for Novell NetWare Figure 81. Editing URL list dialog box 5.3.2.1.2. Configuring settings for the connection with the Internet-provider It is necessary to configure settings for connecting the Internet-provider (see Fig. 82) in accordance with the way that you plan to connect to the update server: Figure 82. Configuring Internet-connection Dial-up settings – to configure the remote connection to the Internetprovider.
Updating Anti-Virus Bases (NWAdmin) Figure 83. Dial-up settings When you configure the remote connection, mark the following checkboxes (see Fig. 83): Automatically connect on startup – to dial the Internet-provider automatically immediately after the update process is initiated; Automatically disconnect on exit – to break connection (modem hang up) automatically after the updating process is completed.
Kaspersky Anti-Virus for Novell NetWare Verifying user name and password… will appear in the Status line (see Fig. 86). Figure 86. Connecting to Internet dialog box. Verifying user name and password If the system fails to recognize the user by specified parameters, the User Logon dialog box (see Fig. 87) appears on the screen. Specify connection parameters in the provided fields: User name, Password, Logon domain. Figure 87. User Logon dialog box.
Updating Anti-Virus Bases (NWAdmin) Setup connection settings manually – to configure connection settings manually. If a manual setup is chosen, the following connection parameters should be configured (see Fig. 90): Figure 90. Manual setup options Use proxy server – to use a proxy server or Firewall to establish connection with the Internet-provider; Address – the address of the selected proxy server (or Firewall), which will be used for establishing connection.
Kaspersky Anti-Virus for Novell NetWare Figure 92. Choosing a folder for retrieving updates 5.3.2.3. Choosing objects to be updated The lower part of the settings tree contains two options (see Fig. 93): Figure 93. Choosing an object to update Update anti-virus bases – to copy and install anti-virus databases from the update server; Update executable modules – to copy and install executable program modules from the update server.
Updating Anti-Virus Bases (NWAdmin) 109 Create report – to use a report on updating process. Report file – to enter information about the name and location for the report file used. Add – to add information to the existing report file or create a new one (every time). Limit size of report file (Kbs) – to specify the maximum permissible size of a report file. When the given size limit is achieved, report file will be overwritten.
Kaspersky Anti-Virus for Novell NetWare Figure 95.
Updating Anti-Virus Bases (NWAdmin) 111 To complete the session, click Done. If you mark the Visit Kaspersky Labs website checkbox, your browser window will be automatically opened with Kaspersky Labs web-pages loaded in it. Figure 96.
Appendix A. Kaspersky Labs Ltd About Kaspersky Labs Kaspersky Labs is a privately-owned, international, anti-virus softwaredevelopment group of companies headquartered in Moscow (Russia), and representative offices in the United Kingdom, United States of America, China, France and Poland. Founded in 1997, Kaspersky Labs concentrates its efforts on the development, marketing and distribution of leading-edge information security technologies and computer software.
Kaspersky Labs Ltd 113 A.1. Other Kaspersky Labs Products Kaspersky® Anti-Virus Lite The program is the most easy-to-use Kaspersky Lab anti-virus product that is developed for protection of home computers running Windows 95/98/Me, Windows 2000/NT Workstation, Windows XP.
Kaspersky Anti-Virus for Novell NetWare • • integrity checker that traces content changes on your hard drive and allows the complete recovery of modified files and boot sectors on demand; behavior blocker that guarantees 100% protection from destructive macro-viruses. Kaspersky® Anti-Hacker Kaspersky® Anti-Hacker is a personal firewall that is designed to safeguard a computer running a Windows operating system.
Kaspersky Labs Ltd 115 Kaspersky® Anti-Virus Business Optimal includes full-scale anti-virus protection for: • workstations running Windows 95/98/ME, Windows NT/2000 Workstation, Windows XP, Linux; • file and application servers running Windows NT/2000 Server, Linux, Solaris, Novell NetWare, FreeBSD, BSDi, OpenBSD; • mail gateways MS Exchange Server 5.5/2000, Lotus Notes/Domino, Sendmail, Postfix, Qmail, Exim.
Kaspersky Anti-Virus for Novell NetWare methods of e-mail filtration (including RBL lists) and a unique collection of services that allows users to identify and wipe out up to 95% of unwanted traffic. Kaspersky® Anti-Spam acts as a filter installed at a network’s entrance where it verifies incoming e-mail traffic streams for objects identified as spam. Software is compatible with any mail system, already used in the customer company, and can be installed both on existing mail server or dedicated one.
Appendix B. Index Filter mode scanning options............................................................................ 44 Keyfile......................................................................................................... 26, 38 On-demand scanning mode options ................................................................. 38 Primary tree item "Kaspersky Anti-Virus".......................................................... 22 Program registration ........................................
