User Guide

User’s Guide 307
Using Dr Solomon’sAnti-VirusUtilities
Dr Solomon’s Anti-Virus as an Alert Manager client
Dr Solomon’s Anti-Virus works as a client program with respect to NetShield
software and an Alert Manager server. It can send alert “events” whenever it
detects a virusor malicious softwareto anyAlertManager server you specify.
The AlertManagerserverthenrelays those events—and anyothers itreceives
from other workstations—as alert messages, via the methods you or your
system administrator defined for alert distribution.
Dr Solomon’s Anti-Virus can instead send these same alert messages as text
(.ALR) files to a Centralized Alerting directory visible to the Alert Manager
server. The Alert Manager server checks the Centralized Alerting directory
periodically, looking for any new .ALR files, and distributing the alert
messages from any it finds.
 NOTE: Dr Solomon’s Software recommends that you send alert events
directly to an Alert Manager server rather than via Centralized Alerting,
unless your network configuration does not permit you to use Alert
Managerservers.TheAlertManagerservercanworkinconjunctionwith
Network Associates Event Orchestrator software to tie alert messages
into the Network Associates Magic HelpDesk application for
trouble-ticket generation and other features.
AlertManagermessages alsocontainmuchricherdatathandothosesent
via Centralized Alerting. Enabling SNMP traps for Alert Manager will
collect a host of information about the computer that generates the alert
message and its software configuration.
The Dr Solomon’s Anti-Virus client can supplement either method with
Desktop Management Interface (DMI) alerts for network management
software, such as Hewlett-Packard OpenView, to process.
Configuring the Alert Manager client utility
Dr Solomon’s Anti-Virus includes a simple client configuration utility that
allows you to choose the Alert Manager server that you want to receive alert
events, designate a Centralized Alerting directory to receive alert messages,
and specify the numeric value of DMI alert messages you want to send.
Settingupacompletealertsystemisatwo-partprocess:First,youmustenable
the Alert Manager Client Configuration utility and pointit to thecorrect Alert
Manager server or Centralized Alerting location. Next, you must verify that
you have selected the Notify Alert Manager checkbox in the Dr Solomon’s
Anti-Virus Advanced Alert property page, in the Alert page for the E-Mail
Scan extension and in the Alert pages for each VShield module you have
enabled.