AVIRA ANTIVIR VIRUS SCAN ADAPTER FOR SAP SOLUTIONS User Manual

Advertisement

Quick Links

www.avira.com
User Manual
Virus Scan Adapter (for SAP Solutions)

Advertisement

Table of Contents
loading

Summary of Contents for AVIRA ANTIVIR VIRUS SCAN ADAPTER FOR SAP SOLUTIONS

  • Page 1 User Manual Virus Scan Adapter (for SAP Solutions)
  • Page 2: Table Of Contents

    Define a Virus Scan Provider ..... . .54 7.1.3 Define a Virus Scan Profile ......56 Avira GmbH Avira AntiVir UNIX Server...
  • Page 3 10.2 Further Information ..........64 10.3 Golden Rules for Protection Against Viruses ......65 Avira GmbH Avira AntiVir UNIX Server...
  • Page 4: About This Manual

    For further information and assistance, please refer to our website, to the Hotline of our Technical Support and to our regular Newsletter (see Service – Page 61). Your Avira Team The Structure of the Manual The manual of your AntiVir software consists in a number of Chapters, bringing you the following information:...
  • Page 5: Signs And Symbols

    Contents 8 Operation Reactions when viruses and unwanted programs are detected. 9 Service Avira GmbH Support and Service. 10 Appendix Glossary of technical terms and abbreviations, Golden Rules for Protection against Viruses. Signs and Symbols The manual uses the following signs and symbols:...
  • Page 6: Product Information

    Within Group X, a Virus Scan Server supplied by SAP is selected via load balance and access to the antivirus software is achieved via the certified Virus Scan Adapter of the external provider. This software scans the files provided by Application A for viruses. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 7: Licensing Concept

    The license is contained in a license file named hbedv.key . You will receive it by email from Avira GmbH. It contains certain data such as the programs you will use and the period of your license. The same license file may refer to more than one AntiVir product.
  • Page 8: System Requirements

    Pentium III 500 MHz • 256 MB RAM • 20 MB hard disk space • Operating system: - Windows 2000 Server or Advanced Server - Windows 2003 Server - Windows NT Server • Administrator rights for installation. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 9 Product Information AntiVir Virus Scan Adapter Avira GmbH...
  • Page 10: Installation

    Page 6). The license is contained in a file named hbedv.key. This license file contains information regarding the scope and period of the license. Without the license file, AntiVir VSA does not run (not even with restricted features). Avira GmbH AntiVir Virus Scan Adapter...
  • Page 11: Installing Antivir Vsa

    Installation Purchasing the License You may contact us by telephone or by email (info@avira.com) to acquire a license file for AntiVir VSA. You will receive the license file by email. Copying the License File Copy the license file hbedv.key to the installation directory on your system /tmp/antivir-vsa-prof-<version>.
  • Page 12 ... done installation of the internet update daemon complete Installation If you choose not to install the Internet Update Daemon, or to do this later manually: without Update Type N or press Enter. Daemon Avira GmbH AntiVir Virus Scan Adapter...
  • Page 13: Reinstalling Antivir Vsa

    (see Configuration (UNIX) – Page 17), but inherited. • Later installation of some components, e.g. Internet Update Daemon. • Activation or deactivation of the automatic start of the Internet Update Daemon. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 14: Background

    The file name is antivir_vsa_en.exe. Getting the Installation Files from CD-ROM On the AntiVir CD-ROM open /en/products/vsa/windows Save the file to the computer on which you want to run AntiVir VSA. The file is currently named antivir_vsa_en.exe. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 15: Licensing

    Page 6). This license file contains information regarding the scope and period of the license. Purchasing the License You may contact us by telephone or by email (info@avira.com) to acquire a license file for AntiVir VSA. You will receive the license file by email.
  • Page 16 You must agree to these conditions in order to continue the installation. Confirm with Yes. The window for selecting the Destination folder appears: Confirm with Next if the path is correct – OR – Click Browse and select the path, then click Next. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 17: Background

    • Setting of the environment variable VSA_LIB in the absolute path for VSA; for example: VSA_LIB=C:\Program Files\Avira GmbH\AntiVir Savapi\ANTIVIRVSA.DLL • Searching for the tool to unpack SAP archives (SAPCAR format); searching for the environment variable PATH of SAPCAR.EXE file.
  • Page 18: Configuration (Unix)

    # character or by changing the values. You must restart the Internet Update Daemon if you modify any values manually in avupdater.conf, without using the configuration script. The changes will only take effect after a restart. Type: /usr/lib/AntiVir/avupdater restart Avira GmbH AntiVir Virus Scan Adapter...
  • Page 19 ZIP, CAB, TAR, etc. You can also scan archives with SAP-specific extensions CAR/ SAR, if you use an external "sapcar" tool. Write the full path to the binary of this tool. There is no default path. SapCarProgram /usr/local/bin/sapcar AntiVir Virus Scan Adapter Avira GmbH...
  • Page 20 Internet Updater functions properly. By default, the settings are deactivated; a direct connection to the Internet is assumed. You must specify: • HTTP proxy server • Port • Username and password for the HTTP proxy server if necessary. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 21: Configuration Script Configantivir

    Type: /usr/lib/AntiVir/configantivir The script reads the current settings in avupdater.conf and systematically asks if you want to enter new values. It displays all possible parameter values, while the current ones are shown as default. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 22 Starting AntiVir: avupdater AntiVir Status: avupdater running [ running ] Here are some commands that you should remember... configure updater: /usr/lib/AntiVir/configantivir start update daemon: /usr/lib/AntiVir/avupdater start stop update daemon: /usr/lib/AntiVir/avupdater stop update daemon status: /usr/lib/AntiVir/avupdater status Avira GmbH AntiVir Virus Scan Adapter...
  • Page 23: Configuring Regular Updates

    Then you are asked for the port of the proxy server. Type in the data: What is the HTTP proxy server name? [] proxy.domain.tld Which port number does the HTTP proxy server use? [] 3128 AntiVir Virus Scan Adapter Avira GmbH...
  • Page 24 - let the daemon choose a random time. The script chooses the time once and keeps it as the update time. In this case, the computer has to be online at the set hour. Run configantivir: /usr/lib/AntiVir/configantivir Avira GmbH AntiVir Virus Scan Adapter...
  • Page 25 R for a random time. Confirm all other configuration questions with Enter. The automatic updates via the Internet Update Daemon are now configured. The Daemon will automatically start (if not running already) or it restarts (if already running). AntiVir Virus Scan Adapter Avira GmbH...
  • Page 26 – Page 10, your system is correctly configured. If the Internet Update Daemon has not yet been automatically activated on system start- Reinstall AntiVir with the necessary settings (see Reinstalling AntiVir VSA – Page 12). Avira GmbH AntiVir Virus Scan Adapter...
  • Page 27 --keyserver=wwwkeys.pgp.net --recv-keys 0F821C2E Display the fingerprint of the key to check if it really is the AntiVir PGP key: gpg --fingerprint build@avira.com The 40-character fingerprint is displayed. Check whether the fingerprint corresponds with the one on the AntiVir website (http://www.avira.com).
  • Page 28: Configuration (Windows)

    It specifies the directory to which Savapi Service writes its temporary files. The location is usually the sub-folder \temp of the installation directory. You may, however, use another location – but ensure there is enough memory space. Example TempDirectory=C:\Program Files\Avira GmbH\AntiVir SAVA- PI\temp\ Avira GmbH AntiVir Virus Scan Adapter...
  • Page 29 This parameter defines the name of the license file to be copied to the SAVAPI installation folder. Example KeyFileName=C:\Program Files\Avira GmbH\AntiVir SAVA- PI\hbedv.key Logfile Name This value indicates the name of the Savapi Service logfile. You can move the logfile to another location on your hard disk.
  • Page 30 1 = sending emails in every case (Update successful or not). SMTP Server Name Type the full name or IP address of your SMTP server. This value is used only if SmtpMailEnabled is active. Example SmtpHostName=smtp.domain.net Avira GmbH AntiVir Virus Scan Adapter...
  • Page 31: Possible Entry In Savapidl.ini

    Immediate updates are useful, for example, to test the settings in SAVAPI.INI . You can also control updates entirely via the SAP environment (if supported). In this case, you should set the update interval to 0. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 32: Abap-Specific Configuration

    Scan parameters are transferred for each scan process and control the behavior of the individual request, such as yes/no for activating the scanning of macros. SAP does not supply any scanner groups. Type the transaction number spro (upper-left field). Avira GmbH AntiVir Virus Scan Adapter...
  • Page 33 ABAP-Specific Configuration In the Implementation Guide, choose (IMG) SAP Web Application Server/System Administration/Virus Scan Interface: Choose the Execute option next to Define Scanner Groups. The screen Change View "Scanner Groups": Overview appears Choose New Entries. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 34: Defining Virus Scan Servers

    For performance reasons, we recommend that you set up at least one virus scan server on each application server. SAP does not provide any configuration data for virus scan servers. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 35 Administration/Virus Scan Interface. Choose the Execute option next to Define Virus Scan Servers. The screen View: Change "Virus Scan Servers": Overview appears. Choose New Entries. The screen New Entries: Details of Added Entries appears. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 36 RFC destination that contains the technical connection to the virus scan server. Under Virus Scan Server Definition, enter the data for the virus scan server (see table below). Avira GmbH AntiVir Virus Scan Adapter...
  • Page 37 We recommend that you only use one of the first two levels Errors Only or Errors and Warnings in production systems. The two other trace levels are available for finding errors during test operation in the test system. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 38 If this number is exceeded, the virus scanner is no longer available for scan requests. The number of instances should correspond to the number of work processes. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 39 If this is not the case, the CCMS triggers an alert, and starts the virus scan server again as an auto-reaction. • Self-Starters: In this case, although the processes are monitored by CCMS, they are not AntiVir Virus Scan Adapter Avira GmbH...
  • Page 40 The following call generates both the server and the VSA configuration for savapi.dll (Windows) or libantivirvsa.so.<version> (UNIX): To set new parameters to overwrite existing parameters, execute additional commands and options in a new call. These are then set in the XML configuration. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 41 The Microsoft Windows NT command "net start VSCAN_XX“ starts the previously installed service only if the local configuration is used. Stops a running VSCAN_XX service. This command corresponds to stop the Microsoft Windows NT command “net stop ...”. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 42 Timeout in seconds for the internal instances operations RELOAD and SHUTDOWN. Maximum number of trace lines for the memory trace. Default value: 10000 Retention period in seconds for the memory trace: Default value: 86400 seconds. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 43 With this configuration option, the parameters for trace level (option -I), codepage (option -c), max. threads or max. instances (option -T), and VSA_LIB (option -V) are saved to the specified configuration using the Local button. If you leave the AntiVir Virus Scan Adapter Avira GmbH...
  • Page 44: Defining Virus Scan Profiles

    If you want to create your own virus scan profiles, you can use the namespaces Y* and Z*. You have created scanner groups. In the Implementation Guide, choose (IMG) SAP Web Application Server/System Administration/Virus Scan Interface. Choose the Execute option next to Define Virus Scan Profiles. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 45 ABAP-Specific Configuration The screen Change View "Virus Scan Profile": Overview appears. Choose New Entries. The screen New Entries: Overview of Added Entries appears. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 46 Use Reference Profile indicator is set, and the Reference Profile is empty. Use Reference To operate multiple applications using the same virus scan profile, set the Use Reference indicator and specify the reference profile. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 47 -The program could not check the document because the document is a password-protected archive. -The scan engine is obsolete. Save your entries. To define steps for the profile, select the Steps node in the dialog structure by double-clicking it. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 48 Specifies the name of a virus scan profile that you can include as a Profile provides a list of step in the profile that you are currently processing. all existing profiles. Save your entries. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 49: Implementing A Badi For Virus Scanners

    You can use an implementation for multiple filter values (group names). SAP does not provide a default implementation. Instead, with the virus scan server, there is a separate component available that integrates the scan engines of certified vendors into the virus scan interface. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 50: Problem Analysis For The Virus Scan Server

    Choose Memory. Otherwise the trace is output to a file, which you can display using the developer traces (transaction ST11, file name dev_VSCAN_<Hostname>.trc). The current trace level is displayed. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 51 • Stop: Stops the virus scan server. • Configuration: Branches to the display mode of the IMG activity Define Virus Scan Servers. • Test: Branches to the transaction VSCANTEST. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 52: Testing The Installation Of The Virus Scan Server

    Specify the object to be checked, using either the test data provided or your own local file. Select the virus scan profile, scanner group, or the virus scan server to be tested. Select an action. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 53: Commented Example Program

    - If you choose Check and Clean, the product also attempts to clean the data if a virus infection is diagnosed. Commented Example Program You can also find a Commented Example Program on the SAP website. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 54: Java-Specific Configuration

    Define a Virus Scan Provider – Page 54. - Specify exactly the program ID that you defined above under option –a as the name. However, you must omit the name prefix VSCAN_, since this is added automatically. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 55: Define A Scanner Group

    On the Provider tab page, create a virus scan provider either under the Virus Scan Adapter node or the Virus Scan Server node by choosing the New button. If you are creating a virus scan adapter, specify the following data on the Settings tab page: AntiVir Virus Scan Adapter Avira GmbH...
  • Page 56 Instance pool size The size of the instance pool delivered by an application inquiry. If there are more inquiries than authorized instances, this pool can also increase but it is reduced again as soon as possible. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 57: Define A Virus Scan Profile

    A virus scan is performed under the name of a virus scan profile. The system administrator can use the profile to activate or deactivate the virus scan for each component. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 58: Problem Analysis For The Virus Scan Provider

    You define data for the log output of the virus scan provider with trace indicators. You can use this data to investigate any errors that occur. You have defined at least one virus scan provider. In the Visual Administrator, choose the cluster Virus Scan Provider. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 59: Example Program

    \usr\sap\<SAP system name>\<instance name>\work\<serverID> such as C:\usr\sap\C11\JC00\work\server0. - For UNIX, the path is /usr/sap/<SAP system name>/<instance name>/work/dev_<node name> Example Program You can find an example program for the Virus Scan Provider on the SAP website. AntiVir Virus Scan Adapter Avira GmbH...
  • Page 60: Operation

    Send us the virus or unwanted program packed in a password-protected archive (PGP, gzip, WinZIP, PKZip, Arj), attached to an email message, to virus@avira.com. When packing, use the password virus. In this way the file will not be deleted by virus scanners on an email gateway.
  • Page 61 Operation AntiVir Virus Scan Adapter Avira GmbH...
  • Page 62: Service

    The expertise and experience of our developers is available to you. The experts of Avira answer your questions and help you with difficult technical problems. During the first 30 days after you have purchased a license, you can use our AntiVir Installation Support by phone, email or by online form.
  • Page 63 Service AntiVir Virus Scan Adapter Avira GmbH...
  • Page 64: Appendix

    For example, mail bombs: with such a program, the victim can be attacked by thousands of emails. AntiVir detects PMS. root The user with unlimited access rights (such as system administrator on Windows). Avira GmbH AntiVir Virus Scan Adapter...
  • Page 65: 10.2 Further Information

    Item Meaning SAVAPI Secure AntiVirus Application Programming Interface: AntiVir SAVAPI ensures quick and simple integration of the latest Avira technology for detection and protection against malware in third-party programs and applications. Signature A bytes-combination used to recognize a virus or unwanted program.
  • Page 66: 10.3 Golden Rules For Protection Against Viruses

    Draw up a plan for data protection and recovery. Your network must be correctly configured and the access rights must be wisely assigned. This represents good protection against viruses. Avira GmbH AntiVir Virus Scan Adapter...
  • Page 67 Errors and technical subject to change. Issued May 2007 AntiVir is a registered trademark of the Avira GmbH. ® All other brand and product names are trademarks or registered trademarks of their respective owners. Protected trademarks are not marked as such in this manual. However, this does not mean that they may be used freely.

Table of Contents