Advertisement

Quick Links

User Manual
Avira AntiVir WebGate
Avira WebGate Suite
www.avira.com

Advertisement

Table of Contents
loading

Summary of Contents for AVIRA ANTIVIR UNIX WEBGATE

  • Page 1 User Manual Avira AntiVir WebGate Avira WebGate Suite www.avira.com...
  • Page 2: Table Of Contents

    6.3 Configuring AntiVir WebGate Using the GUI ..................62 6.4 Updating WebGate Using the GUI ......................71 6.5 Configuring AntiVir Updater Using the GUI ..................73 Chapter 7. Service ..................77 7.1 Support ..............................77 7.2 Online Shop.............................. 77 7.3 Contact..............................78 Avira GmbH AntiVir WebGate...
  • Page 3 Chapter 8. Appendix ..................79 8.1 Glossary ..............................79 8.2 Further Information ..........................80 8.3 Golden Rules for Protection Against Viruses ..................81 AntiVir WebGate Avira GmbH...
  • Page 4: Chapter 1. About This Manual

    The RELEASE_NOTES file included in the product kit presents additional current information about AntiVir WebGate. For further information and assistance, please refer to our Website, to the Hotline of our Technical Support and to our regular Newsletter (see Service – Page 77). Your Avira Team Avira GmbH AntiVir WebGate...
  • Page 5: The Structure Of The Manual

    6 Graphical User Interface General information about GUI; Operation and (GUI) configuration of AntiVir WebGate using the 7 Service Avira GmbH Support and Service 8 Appendix Glossary of technical terms and abbreviations Golden Rules for Protection against Viruses Signs and Symbols...
  • Page 6: Abbreviations

    File Transfer Protocol Graphical User Interface HTTP Hypertext Transfer Protocol HTTPS Hypertext Transfer Protocol Secure ICAP Internet Content Adaptation Protocol Possible Malicious Software SMTP Simple Mail Transfer Protocol SNEWS Secure NEWs Server Secure Sockets Layer Virus Definition File Avira GmbH AntiVir WebGate...
  • Page 7 About this Manual AntiVir WebGate Avira GmbH...
  • Page 8: Chapter 2. Product Information

    Furthermore, AntiVir WebGate also scans the entire outgoing traffic. Usually company computers access the Internet indirectly, via a proxy server. AVIRA WebGate co-operates with the proxy server and completes it in an ideal way. Right from the beginning, two really important hints: Losing valuable files usually has dramatic consequences.
  • Page 9: Features

    The license is given in a license file named hbedv.key . You will receive it by email from Avira GmbH. It contains certain data, such as the programs you will use and the time interval of your license. The same license file may refer to more Avira products.
  • Page 10: Modules And Operating Mode Of Antivir Webgate

    Avira Web Access and Content Control library AntiVir Search Engine AntiVir Search Engine essentially represents the scanning and repairing modules of Avira software. These are also used by the other AntiVir products. Internet Updater The Internet Updater searches over the Internet and automatically updates your AntiVir product, if necessary.
  • Page 11: System Requirements

    Violence, Gambling, Erotic etc. To determine the categories for a certain URL, the Web Access and Content Control library is used. (This module is only activated with the license for Avira AntiVir WebGate Suite.) To find out more details about the Web Access and Content Control library, please refer to the Manual file within the WebGate installation directory.
  • Page 12: Chapter 3. Installation

    Downloading the Installation Files from the Internet Download the current version file from our Website http://www.avira.com/en/downloads/avira_antivir_unix_webgate.html on your local computer. The file name is antivir-webgate-prof-<version>.tar.gz. Save the file in a /tmp folder on the computer, on which you want to run WebGate. Avira GmbH AntiVir WebGate...
  • Page 13: Licensing

    Without the license file, AntiVir WebGate runs only as Demo Version, with restricted features. Purchasing the License You may contact us by telephone or by email (info@avira.com), for acquiring a license file for AntiVir WebGate. You will receive the license file by email.
  • Page 14: Installing Antivir Webgate

    Go to the directory where you have unpacked AntiVir WebGate: cd /tmp/antivir-webgate-prof-<version> Installing AntiVir WebGate Depending on the AntiVir products you have already installed on your computer, the installation procedure may vary. Engine Type: ./install Confirm the License Agreement. Avira GmbH AntiVir WebGate...
  • Page 15 ... done installation of the internet update daemon complete Installation If you want to install the Internet update daemon later or never at all: without update Type N or press Enter. daemon AntiVir WebGate Avira GmbH...
  • Page 16 (not required) for the product to run. The GUI requires Java 1.4.x or higher. Would you like to install the GUI (+ SMC support)? [y] AntiVir WebGate is completely functioning and fully configurable, even without the graphic user interface. Avira GmbH AntiVir WebGate...
  • Page 17 – Page 25). Answer N. In the end you will see a report, confirming that the installation was completed successfully: Installation of the following features complete: AntiVir Engine AntiVir Internet Update Daemon AntiVir WebGate AntiVir GUI AntiVir WebGate Avira GmbH...
  • Page 18: Reinstalling Antivir Webgate

    Go to the temporary directory where you have unpacked AntiVir WebGate: cd /tmp/antivir-webgate-prof-<version> Type: ./install The installation script runs as described above (see Installing AntiVir WebGate – Page 13). Make the necessary changes during installation. AntiVir WebGate is installed, with the desired settings. Avira GmbH AntiVir WebGate...
  • Page 19: Installing Antivir Webgate Using The Graphical User Interface

    You will see the license terms window: In order to continue the installation, you have to accept the License Agreement. If Disagree is active, the installation can not continue. Select Agree and click Next . The following window is displayed: AntiVir WebGate Avira GmbH...
  • Page 20 Select Express setup and click Next . All settings and further instructions appear in a window. Click Install . The program is installed. Custom setup You can install the program with user-defined settings. Select Custom setup and click Next . Avira GmbH AntiVir WebGate...
  • Page 21 If you wish to install the Internet Updater: Select Yes and click Next (in this case, you are asked if you want the Internet Updater to start automatically by computer boot). The next window asks if the license file is to be copied: AntiVir WebGate Avira GmbH...
  • Page 22 Select the license file with Choose and click Next . The next window asks if WebGate should start automatically by computer boot: Select Yes or No and click Next . An optional question asks if the Internet Updater should start automatically: Avira GmbH AntiVir WebGate...
  • Page 23 Choose this option, if you wish to install only the GUI. Select GUI only and click Next . The GUI is installed in the following directory: /usr/lib/AntiVir All settings and further instructions appear in a window. Click Install . GUI is installed. AntiVir WebGate Avira GmbH...
  • Page 24 Following any installation type you selected, a window will list the performed installation steps: Click Next . You will see the following window: If you want to start the GUI directly: Activate the option Start GUI now and click Done . The installation is completed. Avira GmbH AntiVir WebGate...
  • Page 25 Installation AntiVir WebGate Avira GmbH...
  • Page 26: Chapter 4. Configuration

    Regular Updates Configuration – Page 44 you learn how to keep WebGate up- to-date. Testing AntiVir WebGate – Page 51 describes how you can test the performance of WebGate, after completing the configuration. Avira GmbH AntiVir WebGate...
  • Page 27: Overview

    WebGate between Client and Proxy Server (Network Configuration 1) – Page 28 WebGate between Proxy Server and Internet (Network Configuration 2) – Page 29 If you set ports under 1024 during configuration, WebGate has to reboot as root. AntiVir WebGate Avira GmbH...
  • Page 28 For Proxy server address enter the IP address 127.0.0.1 or localhost . The real settings can differ from those given in the example, but for a correct configuration, the settings in avwebgate.conf must be compatible with the Client’s browser configuration. Avira GmbH AntiVir WebGate...
  • Page 29 Now, the Clients will communicate through WebGate for HTTP and FTP inquiries, not directly through the original proxy server. The browser settings on the Client computers must not be changed. Enter the following values in avwebgate.conf (example): HTTPProxyServer 127.0.0.1 HTTPProxyPort 8080 AntiVir WebGate Avira GmbH...
  • Page 30 WebGate directs the Clients’ inquiries through the proxy towards the Internet and scans the answers from the Internet. The access to infected files from a Website is blocked and only uninfected ones are forwarded to the Clients, through the proxy server. Avira GmbH AntiVir WebGate...
  • Page 31: Monitoring Ftp Traffic

    FTP Client and even block them. It scans both downloads and uploads. In avwebgate.conf set the port for the WebGate to communicate with the FTP Clients: FTPPort 2121 Now, the FTP Clients can communicate to FTP servers, through WebGate, which AntiVir WebGate Avira GmbH...
  • Page 32 FTP proxy. Thus, more FTP servers can operate consecutively. In order to avoid Client timeouts during the transfer of larger files, WebGate sends Keepalive messages to the Client. The time interval is the value of Avira GmbH AntiVir WebGate...
  • Page 33: Integration Over Icap Interface

    Client. If the answer is blocked (e. g. in case of a virus detection), WebGate generates an HTML page, based on the corresponding HTML template, and sends this to the ICAP Client. The page is then forwarded to the Client instead of the original answer from the server. AntiVir WebGate Avira GmbH...
  • Page 34 WebGate generates an HTML page, based on the corresponding HTML template, and sends this to the ICAP Client. In this case, the original request is not sent to the server anymore. You can find further details about ICAP server integration in the ICAP Client documentation. Avira GmbH AntiVir WebGate...
  • Page 35: Configuration Files

    ICAPPort [hostname_or_ip:]1344 User Switching to users and groups: Group After starting, WebGate can switch to other user and group, for running its process. WebGate should not run as root. Enter the user and group IDs, which AntiVir WebGate Avira GmbH...
  • Page 36 If the option RefreshInterval is deactivated or the Client is not a browser, (temporary) HTTP redirects are sent to the Client. Thus, the Client is cyclically redirected to a dynamic-generated URL, intercepted by WebGate in order to avoid the timeout. Default: RedirectInterval 0 Avira GmbH AntiVir WebGate...
  • Page 37 ArchiveScan ArchiveMax Maximum size of archived files: Size This option limits the scanning process to the files with unpacked size smaller than ArchiveMaxSize (in Bytes). The null value means no limit. Default is 1 GB: ArchiveMaxSize AntiVir WebGate Avira GmbH...
  • Page 38 Level for log notes: This option defines the logging level for WebGate notifications (possible values: 0 to 7). The higher the level, the more information is logged. The values correspond to Unix standard levels used in syslog : Avira GmbH AntiVir WebGate...
  • Page 39 This option could also enable the use of ACLs for a Squid proxy, which is configured by WebGate as parent proxy. The parent proxy must certainly hold the necessary functionality for header analysis. AddXForwardedForHeader AntiVir WebGate Avira GmbH...
  • Page 40 Manual. AclConfigFile /etc/avwebgate.acl WSLicense License for the Avira Web Access and Content Control library. This is used for Ticket library authentication. This option and both WSKeyFile and WSBlockCategories must be set in order to use the URL filtering capabilities of WebGate.
  • Page 41 /dev/urandom In case of missing or invalid parameters, the GUI is not available. The log file records eventual errors. Please refer to the Manual file in WebGate’s installation directory, for more details about advanced configuration options. AntiVir WebGate Avira GmbH...
  • Page 42: 2Configuration File Avupdater.conf

    These entries must not be confused with those from avwebgate.conf . The settings made in avupdater.conf influence only the Internet connection for automatic updates, not specific WebGate settings. By default, the settings are deactivated; a direct connection to Internet is assumed. You must specify: Avira GmbH AntiVir WebGate...
  • Page 43: 3Configuration File Avwebgate.acl

    Using this feature it is possible to set up rules to allow tunneling for certain types of requests and responses. This is useful for supporting streaming Internet content or user agents, that require using HTTP range requests. AntiVir WebGate Avira GmbH...
  • Page 44: Configuration Script

    If you do not agree with all displayed options: Type N, for restarting the configuration script and correcting the values If all settings correspond to the configuration you desire: Confirm with Y or Enter, for saving the configuration file with the new values. Avira GmbH AntiVir WebGate...
  • Page 45: Regular Updates Configuration

    If not, refer to your Unix documentation for the information you need. Proxyserver If your AntiVir WebGate computer is connected to the Internet via HTTP proxy server (Network Configuration 1), you must make the necessary settings for AntiVir: Call configantivir : /usr/lib/AntiVir/configantivir AntiVir WebGate Avira GmbH...
  • Page 46 Does the HTTP proxy server require a username/password? [n] If this is the case: Type Y. Then you are asked for the username and password. Enter the username and password. Confirm with Enter all remaining settings. The Internet connection is now configured. Avira GmbH AntiVir WebGate...
  • Page 47: 1Configuring Automatic Updates Through Internet Updater

    Updating from a Local Mirror By default, the Internet Updater fetches new versions of the software from the official Avira download servers. Optionally the Internet Updater can be redirected AntiVir WebGate Avira GmbH...
  • Page 48 Using the startup script for the Internet Update Daemon when it is disabled will result in an error. available options: 2 d n How often should AntiVir check for updates? [2] Type: – n, if you do not want automatic updates Avira GmbH AntiVir WebGate...
  • Page 49: 2Performing Cron Updates

    45 */2 * * * root /usr/lib/AntiVir/antivir --update -q This command activates updates every 2 hours, but performs them 15 minutes ahead of the set time: 0:45, 2:45, 4:45 and so on. The -q parameter states that no report will be given. AntiVir WebGate Avira GmbH...
  • Page 50: Verifying Updates Authenticity With Gnupg

    Import the AntiVir public PGP key into your key-ring: gpg --import antivir.gpg Display the fingerprint of the key, to check if it really is the AntiVir PGP key: gpg --fingerprint build@avira.com The 40-character fingerprint is displayed. Check if the fingerprint corresponds with the one on AntiVir Website (http:// www.avira.com).
  • Page 51: Templates Configuration

    Displayed if the user has aborted the download (this template is used only when the refresh method for timeout prevention is used) Displayed if the page was part of a category blocked by ws_blocked.html the user AntiVir WebGate Avira GmbH...
  • Page 52: Testing Antivir Webgate

    Read the information about the test virus eicar.com . Download the test virus on your computer. AntiVir WebGate will block the access to the file and issues a warning in the browser: Check the logfile for detailed notifications about the detection. Avira GmbH AntiVir WebGate...
  • Page 53 Configuration AntiVir WebGate Avira GmbH...
  • Page 54: Chapter 5. Operating

    Starting AntiVir WebGate Type: /usr/lib/AntiVir/avwebgate start The program starts with the following message: Starting AntiVir: avwebgate Stopping AntiVir WebGate Type: /usr/lib/AntiVir/avwebgate stop The program ends with the following message: Stopping AntiVir: avwebgate Avira GmbH AntiVir WebGate...
  • Page 55: Procedures When Detecting Viruses Or Unwanted Programs

    Inform your team, superiors or partners. Inform your system administrator and security provider. Submitting Infected Files to Avira GmbH Please send us the malware or suspicious files that our product does not yet recognize or remove. Send us the virus or file packed (gzip, WinZIP, PKZip, Arj) in the attachment of an email to virus@antivir.de.
  • Page 56: Chapter 6. Graphical User Interface (Gui)

    You must specify the following parameters in the configuration file avwebgate.conf : GuiSupport GuiCAFile /usr/lib/AntiVir/gui/cert/cacert.pem GuiCertFile /usr/lib/AntiVir/gui/cert/server.pem GuiCertPass antivir_default GuiRandFile /dev/urandom If these parameters are missing or invalid, the GUI is not available. Eventual errors are recorded in the logfile. Avira GmbH AntiVir WebGate...
  • Page 57: Operating Antivir Webgate Using The Gui

    Operating AntiVir WebGate Using the GUI Starting GUI The entry GuiSupport must be activated in avwebgate.conf in order for WebGate to communicate with the GUI. Start the GUI: /usr/lib/AntiVir/antivir-gui The GUI appears, displaying the Realtime view . AntiVir WebGate Avira GmbH...
  • Page 58 2 WebGates are active 1 WebGate will be restarted there is 1 WebGate with unknown status Symbols Click to display the Realtime view . Click to switch to the Logfile window. Click to open the Configuration window. Avira GmbH AntiVir WebGate...
  • Page 59 Start WebGate : to start WebGate. This menu option is active only when WebGate is not running Stop WebGate : to stop WebGate. This menu option is active only when WebGate is running Restart WebGate : to restart WebGate (WebGate will be stopped and restarted). GUI Options AntiVir WebGate Avira GmbH...
  • Page 60 Shows the name of the computer, paths and names of the currently scanned files. Last log entries Displays the last three lines of the logfile. The entries are updated, every time WebGate writes new lines in the logfile. The amount depends on the log level settings. Avira GmbH AntiVir WebGate...
  • Page 61 Choice of date to view : selecting the time interval for the logfile entries to be displayed; Default: complete logfile. Show the following log levels: selecting the log levels to be displayed; Default: All . Rows Number of displayed log lines Load new Reloading the logfile AntiVir WebGate Avira GmbH...
  • Page 62 Set the time interval in GUI Options/Realtime view/Time view . You can choose from: – 30 seconds – 1 minute – 2 minutes – 3 minutes Closing GUI When you close GUI, it retains the current status of AntiVir WebGate. Select System/Exit . The GUI is closed. Avira GmbH AntiVir WebGate...
  • Page 63: Configuring Antivir Webgate Using The Gui

    Opening the Configuration Window Click the symbol for configuration – OR – Select the menu option WebGate/Configuration . The Configuration window appears, with the basic WebGate settings: Click the symbol buttons and make the corresponding settings AntiVir WebGate Avira GmbH...
  • Page 64 Here you can enable an HTTPS protocol. The data tunneled through this tunnel connection is not scanned by Webgate. FTP Port These entries set the ports for FTP and ICAP protocol. The changes are saved in ICAP Port avwebgate.conf . Avira GmbH AntiVir WebGate...
  • Page 65 If none of the above mentioned methods is used, WebGate can send messages to the Client at certain intervals. The interval is set using Keepalive Interval . The value must be smaller than the one set in the Client or proxy server. AntiVir WebGate Avira GmbH...
  • Page 66 Backdoor Clients , Double Extension Files , Dialers , Adware/ Spayware (default values). WebGate detects even Jokes , Games , Security Privacy Risk or Unusual Runtime Compression Tools . The configuration parameters in avwebgate.conf are: DetectGame, DetectJoke etc. Avira GmbH AntiVir WebGate...
  • Page 67 HTTPProxyPort and FTPProxyPort in avwebgate.conf . Username : username for access on proxy server, if necessary. The parameter is HTTPProxyUsername in avwebgate.conf . Password : Password for proxy server access, if necessary. The parameter is HTTPProxyPassword in avwebgate.conf . AntiVir WebGate Avira GmbH...
  • Page 68 This action ensures protection against so-called "Mail bombs", which occupy ratio unexpectedly large amount of memory when decompressed. The null value means all archives are completely decompressed, regardless of their compression rate. Default is 150. Avira GmbH AntiVir WebGate...
  • Page 69 Select the facility for messages sent to syslog daemon. Default: user. Path of logfile All important WebGate operations are logged through a syslog daemon. You could specify an additional logfile, by entering the full path. For example: /var/log/avwebgate.log . It corresponds to LogFile in avwebgate.conf . AntiVir WebGate Avira GmbH...
  • Page 70 There is no default value. In order to send emails, you must enter a recipient address. For example, root@localhost . It corresponds to EmailTo in avwebgate.conf . ACL Settings Avira GmbH AntiVir WebGate...
  • Page 71 Select the malware types you want WebGate to detect. Make the settings for the logfile and email messages in the area for Logfile Settings – Page 68. Press Save to keep the values you set. The new settings are now activated. AntiVir WebGate Avira GmbH...
  • Page 72: Updating Webgate Using The Gui

    Updater logfile, according to the logfile settings (see below). Symbols Click to view Updater main window. Click to switch to Logfile view. Click to access the Configuration window. Avira GmbH AntiVir WebGate...
  • Page 73 Updater. Four buttons appear on the bottom of the window: Settings, Rows , Load new and More . Settings Press Settings . An additional area appears in the Logfile window: AntiVir WebGate Avira GmbH...
  • Page 74: Configuring Antivir Updater Using The Gui

    When working with WebGate, the Expertmode option has no influence on the configuration settings. Click the symbol for configuration – OR – Select the menu option Updater/Configuration . The Configuration window appears, with the Automatic updates settings: Avira GmbH AntiVir WebGate...
  • Page 75 Port : port for update proxy server communication with WebGate. Username : username for access on update proxy server, if necessary. Password : password for update proxy server access, if necessary. The parameters avupdater.conf are: HTTPProxyServer, HTTPProxyPort, HTTPProxyUsername, HTTPProxyPassword . AntiVir WebGate Avira GmbH...
  • Page 76 AntiVir Updater is able to send emails with additional information after performing updates. There is no default value. In order to send emails, you must enter a recipient address. For example, root@localhost . It corresponds to EmailTo in avupdater.conf . Avira GmbH AntiVir WebGate...
  • Page 77 Graphical User Interface (GUI) AntiVir WebGate Avira GmbH...
  • Page 78: Chapter 7. Service

    The competence and experience of our developers is at your disposal. The experts from Avira answer your questions and help you with difficult technical problems. During the first 30 days after you have purchased a license, you can use our AntiVir Installation Support by phone, email or by online form.
  • Page 79: Contact

    Service Contact Address Avira GmbH Lindauer Strasse 21 D-88069 Tettnang Germany Internet You can find further information about us and our products by visiting http://www.avira.com. AntiVir WebGate Avira GmbH...
  • Page 80: Chapter 8. Appendix

    Software that does not usually harm the computer. It is programmed Malicious Software) to harm other users. For example, Mail bombs: with such a program, the victim can be attacked by thousands of emails. AntiVir detects PMS. Avira GmbH AntiVir WebGate...
  • Page 81: Further Information

    Update to load the most recent version of this file. Further Information You can find further information on viruses, worms, macro viruses and other unwanted programs at http://www.avira.com . AntiVir WebGate Avira GmbH...
  • Page 82: Golden Rules For Protection Against Viruses

    Set up a plan for data protection and recovery. Your network must be correctly configured and the access rights must be wisely assigned. This is a good protection against viruses. Avira GmbH AntiVir WebGate...
  • Page 83 Errors excepted. Content suject to change. Issued Q4/2007 AntiVir is a registered trademark of the Avira GmbH. ® All other brand and product names are trademarks or registered trademarks of their respective owners. Protected trademarks are not marked as such in this manual. However, this does not mean that they may be used freely.

This manual is also suitable for:

Antivir webgateWebgate suite

Table of Contents