Content SAP System Requirements ..................3 SAP Platforms......................3 OS System Requirements..................3 Important Transactions ....................3 What should be considered? ..................4 How is the VSA connected to the SAP system (ABAP)?..........5 How to define a new RFC destination with TCP/IP ..........5 Definition of an RFC Destination................
SAP System Requirements SAP Platforms SAP NetWeaver 6.40 with support package 7 or more; for the ABAP engine with SAP-BASIS 640 support package 11 or more; for the J2EE engine with support package 13 or more SAP NetWeaver 2004s (7.0) OS System Requirements Operating systems Linux/Unix (32-bit/64-bit): Red Hat Enterprise Linux 5 Server;...
What should be considered? Important information about the specific configuration of ABAP: For the installation of the RFC connection it is important that the name of the RFC destination begins with “VSCAN_”. The virus scanner can only work with this beginning of the name.
Definition of an RFC Destination Transaction SM59 ► Create an RFC connection of the type T in transaction SM59 You have to use the following name convention for the configuration of the scan server: • VSCAN_<Hostname>, in case you want to start only one virus scan server on the host •...
► Choose the kind of activation “Registered server program”. ► Use the name of the RFC destination as program ID. ► Enter the address of the system gateway as gateway host and gateway service. In case you start the virus scan server via the computing center management system on an application server, choose the gateway of this application server.
Definition of a virus scanner group ► Transaction ‘vscangroup’ Choose new entries. You get to the menu new entries: Overview of added entries. Enter the data for the definition of the scanner group. Scanner group: Freely definable name of the scanner group. Business add-in: If this indicator is set, the program transfers the request for a virus scan instance for this scanner group to the Business Add-In VSCAN_INSTANCE, with which customers can include their own virus scanners.
Provider type choice: ADAPTER (Virus Scan Adapter): This option can be chosen in case Avira GmbH supports the SAP operation system directly. The virus scanner runs directly in the SAP web application server and no files have to be sent to an outsourced server via the network. With this configuration, there is no need to set a VCSAN_RFC as the SAP system communicates directly with the virus scanner.
Page 10
SERVER (Virus Scan Server): This option has to be activated if Avira does not support the SAP operation system. The files which have to be scanned are sent to an outsourced server. After the scan the virus scanner informs the SAP system if a virus has been found or not. The further handling of the upload is done by the SAP virus scan interface.
Page 11
The following parameters are supported by Avira AntiVir for SAP:...
parameters activated default except parameter SCANHEURISTICLEVEL. You can activate it in the menu ‘vscanprofile’ afterwards. Definition for profiles which control the activation of the VSA Transaction vscanprofile...
Page 13
Scan Profile: Specifies the name of a virus scan profile. Profile Text: Explanatory text for a virus scan profile. Active: Specifies that this virus scan profile is active. The virus scan profile can only be used if this indicator is set. SAP applications can use fixed profile names that are delivered.
Definition of the Steps in the Virus Scan Profile Transaction vscanprofile Position: Specifies the position of the scanner group in the virus scan profile. You can activate the parameters SCANHEURISTICLEVEL in the menu Configuration parameters. Value1 = low Value 2 = medium Value 3 = high...
Page 15
In case a virus scan profile uses several scanner groups, you can serialize them by a position number. Type: Specifies whether a step in the virus scan profile refers to a scanner group or another virus scan profile. If you choose Group, the system uses a virus scan server ∗...
Scanner Group: Combines multiple virus scan servers or allows the use of a BAdI implementation. All of the virus scan servers of a scanner group have the same set of configuration parameters and will therefore use the same scan engine. Viren Scan Profile: Specifies the name of a virus scan profile that you can include as a step in the profile that you are currently processing.
Trace possibilities in the SAP system Transaction vscantrace Definition of a trace log for certain events...
Page 19
Trace possibilities in the SAP System Transaction vscantrace Trace runs and recollects data...
Page 20
Trace possibilities in the SAP System Transaction vscantrace Trace runs and collects data A file with an eicar (test virus) has been uploaded...
Activation of the Active Content Scanning Transaction vscanprofile How to enter a new virus scan profile ZACTIVCONTENT Beneath Steps, the virus scan profile ZACTIVCONTENT has to be assigned to a group. Therefore a new group can be defined or an already existing group can be used.
Page 22
Then you can define the parameter and the value beneath the menu item Configuration parameters.
Page 24
You choose the parameter CUST_ACTIVE_CONTENT and activate it with the value Beneath the menu item Steps the virus scan profile ZACTIVCONTENT has to be assigned to a group. You can define a new group or you can assign it to an already existing group.
Testing the Installation of the Virus Scan Server (profile ZACTIVECONTENT) This procedure allows you to check the function of the virus scan server you have configured. ► Start the transaction VSCANTEST ► Enter the object you want to check. You can use the given test files or you own local file Choose the scan profile you want to use for the scan beneath virus scan profile.
It is possible to load the virus scanner directly into the SAP Netweaver Choose virus scan adapter in the transaction “vscan” provider type Important: The basic system has to be supported by Avira if you want to use the provider type “virus scan adapter”.
Environment variables VSA_LIB and VSA_DEBUG Used environment variables (Windows) VSA_LIB: refers to the antivirvsa.dll The variable is entered automatically VSA_DEBUG: refers to a path ot he debug log file of the VSA Variable value, f.ex. „C:\avsapvsa.log“ Application server or self-starter You can install an application server starter (started by the application server) or a self-starter (f.
In the running system the difference between application starter and self-starter affects the Computing Center Management System (CCMS). You can supervise the virus scanners by means of the CCMS (transaction RZ20) in the “SAP CCMS Monitors for Optional Components” in the monitor Virus Scan Server (you find further information on the SAP website) The following differences have to be taken into consideration: •...
Scan of SAR and CAR archives Usually the Avira Virus Scan Adapter is unable to unpack such archives. But you can influence this behavior by means of the configuration file savapi.ini which you find in the installation directory. Hints: This adjustment of the Avira Virus Scan Adapter is possible with both, a windows ABAP system and a windows Java system.
Need help?
Do you have a question about the ANTIVIR VIRUS SCAN ADAPTER FOR SAP NETWEAVERM and is the answer not in the manual?
Questions and answers