1.4 Abbreviations ...................... 6 Product Information ................7 2.1 Features ......................8 2.2 Licensing Concept ....................8 2.3 Modules and Operating Mode of Avira AntiVir WebGate ....... 9 2.3.1 System Requirements ................10 Installation ..................11 3.1 Choosing the WebGate Computer ..............11 3.2 Getting the Installation Files ................
Page 3
Appendix ..................46 8.1 Glossary ......................46 8.2 Further Information ..................47 8.3 Golden Rules for Protection Against Viruses ..........48 Avira GmbH Avira AntiVir WebGate...
Signs and Symbols – Page 5 Introduction We have enclosed in this manual all the information you need about Avira AntiVir WebGate and it will guide you step by step through installation, configuration and operation of the software. The appendix contains a Glossary, which explains the basic terms.
2 Product Information General information about Avira AntiVir WebGate software, its modules, features, system requirements and licensing 3 Installation Instructions to install Avira AntiVir WebGate on your system 4 Configuration Directions for optimum setting of Avira AntiVir WebGate on your system...
File Transfer Protocol Graphical User Interface HTTP Hypertext Transfer Protocol HTTPS Hypertext Transfer Protocol Secure ICAP Internet Content Adaptation Protocol SMTP Simple Mail Transfer Protocol SNEWS Secure NEWs Server Secure Sockets Layer Virus Definition File Avira GmbH Avira AntiVir WebGate...
Furthermore, Avira AntiVir WebGate also scans the entire outgoing traffic. Usually company computers access the Internet indirectly, via a proxy server. Avira AntiVir WebGate co-operates with the proxy server and completes it in an ideal way. Right from the beginning, two really important hints: Losing valuable files usually has dramatic consequences.
Access control to WebGate using IP addresses • ICAP support (enables connection through ICAP interface) Licensing Concept You must have a license to use Avira AntiVir WebGate. You are required to accept the license terms (see http://www.avira.com/documents/general/pdf/en/avira_eula_en.pdf). There are 2 license modes for Avira AntiVir WebGate: •...
AntiVir Engine. Avira URL Filtering library AntiVir WebGate uses a local filter to determine if an URL is dangerous, based on a list of known URLs, grouped in three categories: Malware, Phishing, Fraud. To increase your security, Avira URL Filter is enabled in every valid WebGate or WebGate Suite installation.
To find out more details about the Web Access and Content Control library, please refer to the MANUAL file within the WebGate installation directory. 2.3.1 System Requirements Avira AntiVir WebGate asks for the following minimum system requirements: • Computer: x386, Sparc •...
Installation Installation You can find the current version of Avira AntiVir WebGate on our website. Avira AntiVir WebGate is supplied as packed archive. This archive contains the AntiVir Engine and VDF files, the Avira Updater, the WebGate Main Program and the optional SMC plug-in.
-xzvf antivir-webgate-prof-<version>.tar.gz in the temporary directory will then appear antivir-webgate-prof-<version> . Licensing You must have a license for AntiVir WebGate, in order to use the program (see Licensing Concept – Page 8). The license comes in a file named hbedv.key .
• Installs Avira Updater • Optionally: installs the plug-in for SMC • Optionally: configures the automatic start of Avira AntiVir WebGate and Avira Updater For the first installation, you must follow these steps: Preparing Installation – Page 13 Installing Avira AntiVir WebGate –...
Page 14
The next step of the installation process is installing the main program: creating WebGate update cronjob ... done setup internet updater complete 3) installing main program copying doc/avwebgate_en.pdf to /usr/lib/AntiVir/ ... done copying bin/linux_glibc22/avwebgate.bin to /usr/lib/AntiVir/ ... done Avira GmbH Avira AntiVir WebGate...
Page 15
Then you are asked if you want to install WebGate with the optional plug-in for AntiVir Security Management Center. 4) activate SMC support If you are going to use AVIRA Security Management Center (SMC) to manage this software remotely you need this Would you like to activate SMC support? [y] If you are using Avira SMC: Type Y or confirm with Enter.
Page 18). • Later installation of some components. • Activating or deactivating the automatic start of Avira AntiVir WebGate or Avira Updater. Reinstalling Avira AntiVir WebGate The procedure is the same in all cases listed above: Go to the temporary directory where you have unpacked AntiVir WebGate: cd /tmp/antivir-webgate-prof-<version>...
Page 17
WebGate and Scanner. Answer the questions with y or n and press Enter . AntiVir WebGate is removed from your system. Avira GmbH Avira AntiVir WebGate...
HTTP proxy. Depending on the network and configuration, there are more possibilities for setting Avira AntiVir WebGate as "guard" between the Client computer and the Internet. In all these cases, the user does not have direct connection to the Internet, but through WebGate.
Page 19
Configure the browser according to the Clients. If WebGate is installed on the actual Client, we recommend the following settings in avwebgate.conf : HTTPPort 127.0.0.1:8080 . For HTTP Proxy enter the IP address 127.0.0.1 or localhost . Avira GmbH Avira AntiVir WebGate...
Page 20
WebGate. In this way, you do not need to make any changes on the Clients. This example assumes the following proxy server configuration: host proxy.mycompany.com serverport 3128 So, the proxy server communicates with the Clients over port 3128. Install WebGate on the machine proxy.mycompany.com. Avira GmbH Avira AntiVir WebGate...
Page 21
WebGate directs the Clients’ inquiries through the proxy towards the Internet and scans the answers from the Internet. The access to infected files from a Website is blocked and only uninfected ones are forwarded to the Clients, through the proxy server. Avira GmbH Avira AntiVir WebGate...
Page 22
These data will not be scanned, until the cache is emptied. It bears a risk, because a new virus might "penetrate" and it could be forwarded to Clients, even if they have updated VDFs. Avira GmbH Avira AntiVir WebGate...
FTP server with the IP address 10.0.0.1 , the user name "foo" and the password "bar". $ ftp 192.168.0.1 2121 Connected to 192.168.0.1. 220 AntiVir WebGate FTP proxy. Login with <user- name>@<host>[:<port>] Name (192.168.0.1:user): foo@10.0.0.1 331 Password required for foo.
Client. If the answer is blocked (e. g. in case of a virus detection), WebGate generates an HTML page, based on the corresponding HTML template, and sends this to the ICAP Client. The page is then forwarded to the Client instead of the original answer from the server. Avira GmbH Avira AntiVir WebGate...
Page 25
WebGate generates an HTML page, based on the corresponding HTML template, and sends this to the ICAP Client. In this case, the original request is not sent to the server anymore. You can find further details about ICAP server integration in the ICAP Client documentation. Avira GmbH Avira AntiVir WebGate...
Configuration Configuration Files This part describes the contents of Avira AntiVir WebGate configuration files: • /etc/avwebgate.conf - Product configuration • /etc/avwebgate-scanner.conf - Scanner configuration • /etc/avira/avupdate.conf - Updater configuration • /etc/avwebgate.acl - Access Control List configuration The program is provided with default values, which are important for many procedures.
Page 27
In order to avoid timeouts, WebGate offers the following possibilities. The entries are given in seconds. • If the Client is a browser, WebGate sends an HTML progress page, which is updated at regular intervals. Default: RefreshInterval 0 Avira GmbH Avira AntiVir WebGate...
Page 28
If WebGate serves as FTP proxy (see FTPPort option), you can set a parent proxy for FTP connections. Example: FTPProxyServer NONE FTPProxyPort 2121 Temporary Temporary directory: You can change the name of the temporary directory. The standard is /tmp . This Avira GmbH Avira AntiVir WebGate...
Page 29
If enabled, multi-volume archives will be blocked. Archive BlockPartialArchive no BlockArchive If enabled, WebGate blocks files detected as possible archive bombs. Bomb BlockArchiveBomb yes This option is not affected by ArchiveMaxSize , ArchiveMaxRecursion and ArchiveMaxRatio. Avira GmbH Avira AntiVir WebGate...
Page 30
Email messages: EmailTo Avira AntiVir WebGate is able to send emails with additional information (for example about the relevant file), if it detects a virus or unwanted program. There is no default value. In order to send emails, you must enter a recipient address. For...
Page 31
To use the access control scheme you must create a new configuration file containing the rules describing the desired behavior and have AclConfigFile contain the path to it. The syntax supported by the access control scheme is described in MANUAL.avwebgate file. AclConfigFile /etc/avwebgate.acl Avira GmbH Avira AntiVir WebGate...
Page 32
The Avira URL Filtering library is available with every valid WebGate or WebGate Suite license. If the Avira URL Filtering library does not find any match for the URL or the category is not blocked in the configuration file, the Avira Web Access and Content Control library ( OnlineFilter ) is used.
Sets the detection level of Win32-Heuristics. available values are 0 (off), 1 (low), 2 (medium) and 3 (high). Default: HeuristicsLevel 1 GUI... SSL parameters for secure communication with Avira SMC : These options must be activated, for a secure communication with SMC. GuiSupport yes GuiCertFile /usr/lib/AntiVir/gui/cert/server.pem GuiCertPass antivir_default GuiCAFile /usr/lib/AntiVir/gui/cert/cacert.pem...
"alerts" means information about potential malicious code. Default: ReportLevel 0 4.4.3 Updater Configuration in avupdate.conf Updates ensure that AntiVir WebGate components (WebGate, scanner, VDF and engine), which provide security against viruses or unwanted programs, are always Avira GmbH Avira AntiVir WebGate...
Page 35
Configuration kept up to date. With Avira Updater you can update Avira software on your computers, using Avira update servers. To configure the update process, use the options in /etc/avira/avupdate.conf described below. All parameters from avupdate.conf can be passed to the Updater via command line. For example: - parameter in avupdate.conf:...
Integration into Avira Security Management Center (SMC) In order to configure updates via Avira Security Management Center (SMC), it is necessary to add the update plug-in package to the SMC repository. Once added, a new product "Avira Updater" will be available for installation on machines administered by the SMC.
Templates Configuration If you have a valid license file, you may customize various notification web pages and emails generated by Avira AntiVir WebGate. WebGate will send these for example, in case of detecting viruses or unwanted programs: alert, blocked, error or progress template.
Testing Avira AntiVir WebGate After completing the installation and configuration, you can test the functionality of AntiVir WebGate using a test virus. This will not cause any damage, but it will force the security program to react when the computer is scanned.
Operation Operation After concluding installation and configuration and Avira AntiVir WebGate is running, WebGate guarantees continuous monitoring of your system. During operation you might have to make occasional changes in settings, as described in Configuration – Page 18. This Chapter is divided in the following parts: Starting and Stopping Avira AntiVir WebGate manually –...
Restarting AntiVir WebGate This is used, for example, after making changes in configuration scripts. Type: /usr/lib/AntiVir/avwebgate restart The program restarts after showing the following message: Stopping AVIRA AntiVir WebGate ... Stopping: avwebgate.bin Stopping: savapi Starting AVIRA AntiVir WebGate ... Starting: savapi Starting: avwebgate.bin...
Page 41
Operation Submitting Infected Files to Avira GmbH Please send us the malware or suspicious files that our product does not yet recognize or remove. Send us the virus or file packed (gzip, WinZIP, PKZip, Arj) in the attachment of an email to virus@antivir.de.
Regular updates are made using cron daemon. The settings for automatic updates in /etc/crontab have already been made if, when you installed Avira AntiVir WebGate with the install script, the answer for installing AntiVir Updater and starting it automatically was yes .
Page 43
WebGate - complete update (WebGate, scanner, engine and vdf files). • Start the update process to test the settings: /usr/lib/AntiVir/avupdate --product=[product] where [product] takes the same values as above. If successful, a report will appear in the logfile /var/log/avupdate.log Avira GmbH Avira AntiVir WebGate...
The competence and experience of our developers is at your disposal. The experts from Avira answer your questions and help you with difficult technical problems. During the first 30 days after you have purchased a license, you can use our AntiVir Installation Support by phone, email or by online form.
Service Contact Address Avira GmbH Lindauer Strasse 21 D-88069 Tettnang Germany Internet You can find further information about us and our products by visiting http://www.avira.com. Avira GmbH Avira AntiVir WebGate...
The directory where infected files are stored, to block the user’s access to them. root The user with unlimited access rights (such as system administrator on Windows) SAVAPI Secure AntiVirus Application Programming Interface Signature A bytes-combination used for recognizing a virus or unwanted program. Avira GmbH Avira AntiVir WebGate...
Update to load the most recent version of this file. Further Information You can find further information on viruses, worms, macro viruses and other unwanted programs at http://www.avira.com . Avira GmbH Avira AntiVir WebGate...
Set up a plan for data protection and recovery. Your network must be correctly configured and the access rights must be wisely assigned. This is a good protection against viruses. Avira GmbH Avira AntiVir WebGate...
Need help?
Do you have a question about the ANTIVIR WEBGATE and is the answer not in the manual?
Questions and answers