Table of Contents
Advertisement
Quick Links
Administration
Installation Guide
Remote Adminstrator 1.0.14
and LAN Update Server 2.7
Installation
Guide
NOD32 Version 2.7 Includes Windows Vista and 64-bit protection
Proactive protection
Best Detection
against Viruses, Spyware,
Fastest Performance
Worms, Trojans, Rootkits,
Minimal Resource
Adware and Phishing
Utilization
Advertisement
Table of Contents
Related Manuals for ESET REMOTE ADMINISTRATOR V1
Summary of Contents for ESET REMOTE ADMINISTRATOR V1
- Page 1 Administration Installation Guide Remote Adminstrator 1.0.14 and LAN Update Server 2.7 Installation Guide NOD32 Version 2.7 Includes Windows Vista and 64-bit protection Proactive protection Best Detection against Viruses, Spyware, Fastest Performance Worms, Trojans, Rootkits, Minimal Resource Adware and Phishing Utilization...
- Page 2 No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical, for any purpose without the express written permission of Eset LLC. Information in this document is subject to change without prior notice.
-
Page 3: Table Of Contents
Administration Installation Guide Page Contents Introduction Minimum System Requirements Section 1: Overview What you can do with Remote Administrator Summary of features Section : Installation for an office network Installing RAS and RAC Section : Running Remote Administrator Console Connecting to server Section 4: Configuration Editor Overview... - Page 4 Installation Guide Introduction Congratulations, you have just purchased NOD32 Enterprise Edition incorporating Eset’s Remote Administrator Server & Console, which will help you manage the most advanced antivirus solution available in a network environment. The following information will help you to get a better understanding of the many features of NOD32 Remote Administrator, so that you get the best protection and administration possible.
-
Page 5: Minimum System Requirements
Administration Installation Guide Minimum System Requirements Please make sure that the computer on which you plan to install NOD32 meets the minimum system requirements for the program to run: Operating system Windows 98/ME 133 M Hz/150 M Hz 32 M B Windows NT4/2000 133 ... - Page 6 Administration Installation Guide Overview...
- Page 7 It comprises of the standard NOD32 antivirus for workstations, the LAN Update Server (Mirror) version which will receive all updates & upgrades from Eset, the Remote Administrator Server which will run on the company’s server and the Remote Administrator Console where you can administrate the whole setup.
- Page 8 Administration Installation Guide Important features of NOD32 Remote Administrator: NOD32 Remote Administrator is a powerful tool that enables an administrator to manage large installations of the NOD32 antivirus system in large corporate networks. It consists of two modules - NOD32 RA Server (RAS) and NOD32 RA Console (RAC). FEATURES ►...
- Page 9 Administration Installation Guide Installation for an office network...
- Page 10 ► Save the nod32.lic key you received as an attachment with the email from Eset to the desktop for the time being. (Note: do NOT use a web based email program to download this attachment. eg: Outlook Web Access, because this will corrupt the key).
- Page 11 Update Server (Mirror) version (which is the same as installing the Standard, single-user version) please click here: http://download1. eset.com/manuals/StandardInstallGuide.pdf. The IMON module should not be running on the server. In fact, the only module that is required on a server is AMON.
- Page 12 2.5 to 2.7). Choose this to ensure that the program component upgrade will not be applied to a local update server immediately it is available on the servers of the Eset company. NOD32 on the workstations will remain in the current version, and the workstations will only accept virus signatures updates from the mirror.
- Page 13 RAS has both of the installers (Windows NT/2000/2003/XP/Vista and Windows 95/98/ME) embedded into the program but because the contents of RAS is not updated as frequently on the Eset website as the standard version of NOD32, you may wish to download the very latest...
- Page 14 Administration Installation Guide Running RAC...
- Page 15 Administration Installation Guide Setting up RAC connection to the server. ► Run RAC by double-clicking on this icon on the desktop of your workstation or laptop. Note: No clients will appear yet, unless you have already manually installed NOD32 onto some workstations and configured them for Remote Administration via their Control Center(s).
- Page 16 Administration Installation Guide ► The attribute Primary Server denotes the name of the server with RAS installed, to which the remote client is connected via NOD32 Control Center. If there is another server showing other than the one which the administrator is currently connected to, then it is a result of replication.
-
Page 17: Configuration Editor Overview
Administration Installation Guide Configuration Editor... - Page 18 Here are 3 ways to do this: Start ---> Program Files ---> Eset ---> Configuration Editor. Now make the necessary changes to your configuration as described on the next page and save, with a title and directory of your choice, on the server.
- Page 19 The configuration file (.xml) may be created on the server or, you can also install NOD32 LAN Update Server version on your workststion and create the configuration there and then copy it to the server (C:\Program Files\Eset\RA\Server\ MyConfiguration.xml). ► Start ►...
- Page 20 Administration Installation Guide General The first section is and we’ll look at the Settings area. Here it is advisable to ‘lock’ the settings in NOD32 and Password Protect them with a password of your choosing, so that only you can alter the configuration on any workstation, and not your clients.
- Page 21 Administration Installation Guide Remote Administration The next item of note is . This is vital to ensure the clients will connect to the RAS. The Configuration Editor will, by default, pick up the name of the server where RAS has been installed.
- Page 22 After you click the ‘Finish’ button you will need to enter the name of the task again and also the path to NOD32 on the client workstations. By default, this would be C:\Program Files\Eset\nod32.exe A list of the command line switches is shown on page 83 & 84.
- Page 23 Administration Installation Guide AMON AMON (Access MONitor) is a memory-resident (always running when computer is on) file scanning program. Automatic starting of AMON after computer restart is a fundamental defense against malicious code. Quitting AMON is not recommended and should only be done under special circumstances.
- Page 24 Administration Installation Guide IMON While the role of AMON is to provide real-time, resident, anti-virus monitoring of a system and user actions, the IMON module protects your computer from email and internet threats. To allow scanning of POP3 email and while also using the internet, we recommend having IMON enabled. IMON’s primary role is to monitor incoming email.
- Page 25 Administration Installation Guide HTTP: Active & Passive modes The download popup window is shown only for applications set to Active mode (Higher efficiency) in the HTTP scanner compatibility (default). With IMON in Passive mode, portions of a downloaded file are continuously passed on to the target application whilst IMON stores a temporary copy of each of the fragments.
- Page 26 Administration Installation Guide EMON EMON (Email MONitor), a complementary resident module, scans emails incoming via MAPI interface. The MAPI interface hooks into the different interfaces of Microsoft Outlook. MAPI interface is used also when receiving emails from the Microsoft Exchange Mail Server via the Exchange protocol. Even if the MAPI Interface is not used on the computer, EMON will still be installed.
- Page 27 ‘New profile’ or right click on a ‘Profile’ in the Configuration Editor window and choose ‘New profile’ from the context menu. Again, generally speaking, the default settings for NOD32’s On-Demand Scanning are probably adequate, secure and recommended. Eset’s developers have designed NOD32 to be ‘ready-to-go’ without the necessity for major setup changes.
- Page 28 Administration Installation Guide Profile (My Profile) So, looking through , most of the items in ‘Settings’ are self-explanatory and you will probably be familiar with, if you’ve tested the standard, single-user version of NOD32. However, there are one or two items of note which we should look at. In the ‘Scanner’...
- Page 29 Administration Installation Guide How many clients can I connect to my server? Experience has shown us that it is recommended to allow 5 times the number of connected sessions for any given operating system to calculate a practical number of clients that will connect to a given server. However, it’s possible that even if using the recommended maximum number of users per Mirror, there will be situations when some clients might get an error message during update.
- Page 30 You may have clients in your network that use laptops that are regularly taken away from the LAN and therefore need to update from another source, ie: Eset’s servers via the internet. This will require setting up a secondary profile. Follow these steps to set this up: ►...
- Page 31 Administration Installation Guide ► Next, go to NOD32 System Tools > NOD32 System Setup > Setup > Remote Administration tab and check the box by Connect to Remote Administrator Server and enter the name only of your server. ► Now go to NOD32 System Tools >...
- Page 32 If you created a configuration using method 3 as decribed on page 18, ie: whilst setting up a package, then it will be saved in: C:\Program Files\ESET\RA\Server\Packages\Default\nod32_ nt.nip and/or nod32_98.nip and is not accessible afterwards, other than via the package editor, however, you could choose File --->...
-
Page 33: Create A Package
Administration Installation Guide Create a package... - Page 34 Eset website. Save the package with a name of your choice. The default saving directory is C:\Program Files\Eset\RA\Server\packages ► Option 2: (Recommended) Press ‘Create’ to setup your own package using previously downloaded, and very latest, installers for NOD32 (as described on page 13).
-
Page 35: Remote Installation Of Nod 5
Administration Installation Guide Remote Installation... - Page 36 Administration Installation Guide General points to watch out for when installing remotely ► Especially on computers with the MS Windows XP operating system, ‘Simple file sharing’ should NOT be enabled. This will stop connections to the server. To disable this option, go to Start > Control Panel > Folder Options >...
-
Page 37: Push Installation 7
Administration Installation Guide Remote Installation NOD32 Remote Administrator enables installations of NOD32 for Windows to remote workstations in a network. In RAC, navigate to the “Remote Install” tab. RA offers three basic ways of how to install NOD32 for Windows remotely. In all cases, a TCP/IP connection between the target workstations and RAS is established on port 2224. - Page 38 Administration Installation Guide ► The client’s machine needs to be restarted to complete the installation. This can either be done remotely, manually at the workstation or automatically by a command line when setting up the installation package (see page 34) ►...
-
Page 39: Export To Logon Script 9
This will automatically create the Share path in the next box. ► Note: The nod32installer.exe for this package, already exists in “C:\Program Files\ESET\RA\Server\packages\” folder. We do not recommend overwriting this nod32installer since it may affect another installation method. So, in this step, you should choose a folder for a secondary nod32installer.exe which will serve for the purpose of a... - Page 40 Administration Installation Guide ► Choose the logonscript you want to affect and then hit the ‘Export’ button. A new line is added to the logon script which will make the installation happen. You may also see other lines of simple logon scripts which automatically map the server shared folder as drive X for clients.
- Page 41 Administration Installation Guide 3. Send via E-mail (for all workstation platforms including Win95/98/ME operating systems) ► Alternatively, ‘Send via E-mail’ naturally sends the file nod32installer.exe via e-mail. After the recipient(s) saves and runs the email attachment, either remote installation, or remote uninstallation, of NOD32 for Windows will start.
-
Page 42: Manual Installation
This will invoke a download from the server of the corresponding installation package. nod32installer.exe is located in this directory on the server: C:\Program Files\Eset\RA\Server\packages\{package_name}\nod32installer.exe You can also create your own pre-configured installation. See page 78. Installing manually if there are any problems... -
Page 43: Use Of Tasks
Administration Installation Guide Use of Tasks... -
Page 44: Creating Tasks
Administration Installation Guide Creating Tasks for your workstations. NOD32 Remote Administrator (RAS) enables the administrator to create tasks and apply them to remote client workstations running NOD32 for Windows. Using the RA Console (RAC) you can create three types of tasks: ►... - Page 45 Administration Installation Guide In the next step, choose workstations or groups, to which you want to assign the configuration (put them in the ‘Selected items’ section). Click on the ‘Add from Clients Pane’ to add currently displayed clients to the pane under ‘Selected items’.
-
Page 46: On-Demand Scan Task
Administration Installation Guide On-Demand Scan task To apply this type of task, first create (clicking on the ‘Create ...’ button), or choose an already existing (the ‘Select ...’ button) XML configuration file with a specific scanner configuration (a standard, full configuration setup will not suffice), which will be applied on remote client computers to start antivirus scanning. - Page 47 Administration Installation Guide To run the On-Demand Scan task in cleaning mode (not in the default mode, where the scanner only creates a scanner log, and any reported infiltrations are left on the target client computer), check the ‘Clean automatically’ option. Then, if an alert is generated, the scanner will then take the action defined in your configuration automatically (NOD32 Configuration Editor --->...
-
Page 48: Update Now Task
Administration Installation Guide Update Now task First, define the name of current Update profile that will be applied on remote workstations. If you do not use update profiles for update, you do not need to choose any profile, you can skip to the next step. Next, choose workstations or groups, to which you want to assign the configuration (put them in the ‘Selected items’... -
Page 49: More Detailed Information
Administration Installation Guide More detailed information... -
Page 50: Remote Install In Detail
Administration Installation Guide Remote install in detail In this chapter you can find more detailed information about the remote install process. In the case of a Push installation, the following operations take place: RAS contacts a remote workstation and attempts to authorize the connection by the username and password created and entered by the administrator from the RAC (the password cannot be left blank, or the connection will not work). -
Page 51: The File NodInstaller.exe
C:\nod32installer.log. It contains information about the most important operations. At the same time, nod32installer.exe creates a key, HKEY_LOCAL_ MACHINE\Software\Eset\NOD32 Remote Installer, in the Windows registry. This will prevent repeated installation of the same package, if previous installation was successful. -
Page 52: Server Name
Administration Installation Guide Main features and settings in the RA Console The Clients window - upper panel Server Name Shows the name(s) of available servers that RAC is connected to. Clients Shows the number of clients connected to the particularv server. Oldest Version Shows the oldest version of the virus signature database installed on client workstation(s). - Page 53 Administration Installation Guide Last Event Shows any recent events appertaining to this client. Once events have been checked by the administrator, they can be removed from the list. Right-click on the client and select the Clear “Last Event” Text option. You can switch to the Event Log window by double-clicking on the client under the Last Event column.
-
Page 54: Clients Window
Administration Installation Guide Context menu options Right-click on a client to bring up a menu that enables applying of other features to effectively filter events. Most options are self-explanatory, but here are the others: Select by ‘Client A’ Only records containing the thread ‘Client A’ in the same attribute (column), where the context menu has been brought up will be selected. -
Page 55: Practical Examples
Administration Installation Guide Practical Examples: We want only those workstations with some virus event to be displayed: Click the right mouse button in the Clients tab on any of the Last Virus Alert empty cells and choose Select by ‘ ‘ from the context menu. Now, in the context menu, select the Hide Selected feature. -
Page 56: Alert Log Window
Administration Installation Guide The other windows Alert Log Contains information about infiltrations detected by AMON, IMON, EMON and other modules. Double-click the left mouse button to gain more information about the alert. The displayed information can be filtered too by right-clicking on any column (Module, Object, Virus, etc.) and choose Select by ‘xxxx’... - Page 57 (press the ‘Select Target…’ button) specify how and where the report will be exported. The report will be saved to the report database (default - C:\Program Files\ESET\RA\Console\Reports - can be edited by going to RAC > Tools > Console Options... > Paths tab), but can be sent via e-mail to a chosen address, or exported to a folder.
- Page 58 Administration Installation Guide To send generated reports via e-mail, you need to set the SMTP server and sender address (RAC > Tools > Server Options... > Other Settings tab) and enter the server’s name (or IP address) plus the sending email address. To define the time period when generating will be active, go to the Range section.
-
Page 59: License Key (Nod.Lic)
NOD32 Remote Administration (or NOD32 Enterprise Edition package) is delivered with a license key – nod32.lic. After installation of RAS and RAC, the key must be copied into the folder C:\Program Files\Eset\RA\ Server. The license key file must always have .lic extension. The license file contains information about the expiry date and the number of clients allowed to connect to NOD32 Remote Administrator. - Page 60 Administration Installation Guide Paths tab: Here you can specify a directory to which the console will locally save reports downloaded from RAS. By default, it is C:\Program Files\ESET\RA\ Console\Reports. Date/Time tab: Appearance of the date/time columns. Time display format. ♦...
-
Page 61: Rac Server Options Setup
Administration Installation Guide RAC server options setup Further setup details are found by going to Tools > Server Options General Shows general information about the server’s name, the port that RAC is using to connect to RAS (default is 2223), the version of RAC/RAS that’s installed, who NOD32 Remote Administrator is licensed to, the number of clients that may connect to RAS, the expiry date of the license, the current NOD32 virus signature database version installed on the server, the date &... -
Page 62: Other Settings
Administration Installation Guide You can rotate logs when, by default, they reach 512MB in size and delete them when they are so many days old (default is 90 days). Plus there is a ‘View’ button to instantly view the most recent log details. Also, there are options to ‘Log to OS application log’... - Page 63 Administration Installation Guide How to use the console more effectively: Press F5 to refresh RAC. In a larger network, with more workstations, these features will come in handy: Selection of more records can be performed, for example, by pressing the CTRL key and left clicking on the selected items, or in a similar way, but with the SHIFT key.
- Page 64 What is relevant to saving information All data is saved in the file nod32ra.mdb, which is usually located in the folder C:\Program Files\Eset\RA\Server. It can be stored in case of server failure (when saving, please stop the NOD32 service – required). Details...
-
Page 65: Possible Problems & Error Codes
Administration Installation Guide Possible problems & error codes... -
Page 66: Error Messages
Administration Installation Guide Error messages As with most reputable software, NOD32 Remote Administrator can return more detailed information about a problem that has occurred. The error message is, in many cases, accompanied with its SC error code and GLE error code. SC codes mostly contain only internal information for easier orientation in the problem code, GLE codes (Get Last Error) are more important for the user. - Page 67 Administration Installation Guide Problem: Especially with MS Windows XP, you can come across other, already mentioned, problems connected with the option ‘Use simple file sharing’. In this case, the error ‘Access denied’ may appear when using the ‘Get Info’ option during the Push install process. Solution procedure: ►...
- Page 68 Administration Installation Guide Problem: During remote installation, the error “Could not retrieve required information from target computer (RES error code 14, GLE error code 997)” may occur. This problem occurs in some cases if an installation takes place from NOD32 Remote Administrator Server which is located on a Windows 2003 Server system, and NOD32 is installed on a Windows 2000 operating system.
- Page 69 NOD32 workstation The following error messages can be produced directly by the installer, which is used with all Eset MS Windows based products (ie: the installer launched by the file SETUP.EXE, or after running the installation file downloaded from the Eset website).
- Page 70 Administration Installation Guide Installation for a multi-site network...
- Page 71 Administration Installation Guide Installing NOD32 in a multi-site network In large networks, you can install more RA servers for easier manipulation. The servers would create an imaginary structure. The burden connected with communication with client workstations and RAS can be distributed. This way you can also define sub-administrators who will control only a group of client workstations.
- Page 72 Administration Installation Guide...
- Page 73 Administration Installation Guide Networks consisting of superior / inferior RAS servers allows the administrator to only control those client workstations that can be momentarily accessed by RAS (using RAC) and eventually can control clients connected to inferior RA server(s). So if the administrator connects using RAC to RAS 3, he/she will be able to control client workstations connected to RAS 3, RAS 4, RAS 5, and RAS 6.
- Page 74 Administration Installation Guide Installation for a small office network...
- Page 75 LAN Update Server (Mirror) version onto the machine that will always be connected to the internet, at least through the working day, and will therefore receive the virus signature updates from Eset automatically. The correct version should either be for Windows 95/98/ME or Windows NT/2000/2003/XP.
-
Page 76: Installation Instructions
2.0 to 2.5). Choose this to ensure that the program component upgrade will not be applied to a local update server immediately it is available on the servers of the Eset company. NOD32 on the workstations will remain in the current version, and the workstations will only accept virus signatures updates from the mirror. - Page 77 Administration Installation Guide Distributing a configuration Using a local update server – Mirror – you can also distribute a configuration for NOD32, by which the workstations will be configured at the next attempt to update. In order to automatically distribute a configuration, set the update server on the workstations to http://IP_address_of_your _server:8081 (if it is the version with an HTTP server) or to \\MAIN\ NOD32NET (if it is the version with a shared folder).
- Page 78 ► On your machine (assuming that is where NOD32 LAN Update Server [Mirror] version is installed), go Start > Programs > Eset > Configuration Editor. ► This will open a default configuration window which you can then adjust the settings to suit your needs.
- Page 79 For detailed installation instructions on a single PC, please refer to the Standard Installation Guide available for download from our website (http:// download1.eset.com/manuals/StandardInstallGuide.pdf). Installation command switches /INSTMFC this parameter turns on installation of MFC libraries – if it is necessary –...
- Page 80 Save your configuration as nod32.xml ► Next download from the Eset website, using your Username and Password, and save to your desktop, the version(s) of NOD32 that you will be installing on your client’s PCs. Do not run the installer(s).
- Page 81 Administration Installation Guide ► In the Run after extraction text box, you can enter any additional command switches to be run after the installer is extracted. For example: setup.exe /instmfc /silentmode /forceold /reboot /showrestart /cfg=nod32.xml ► Click OK, and OK again, and the installer will be created. ►...
-
Page 82: Additional Information
Administration Installation Guide Additional information... -
Page 83: Command Line Parameters
Administration Installation Guide Command Line Parameters Here is a list of the Command Line parameters and their effects: Many parameters are enabled or disabled with a plus (+) or minus (-) sign. For example, to enable the scanner self-check, use /selfcheck+ , to disable it, use /selfcheck- General: ►... - Page 84 Administration Installation Guide Log: /log+ (-) ► Enable (disable) log file creation /wrap+ (-) ► Enable (disable) wrapping text in log /logappend ► Enable (disable) appending to log file /logrewrite ► Enable rewriting of the Log file ► /logsize=N Set Log file to a maximum size of N KB ► /log=<FILENAME> Set the Log file name (e.g.: /log=NOD.LOG) Cleaning: ► /cleanmode Enables cleaning mode (the actions taken will depend on the action settings) ►...