1. Manuals
  2. Brands
  3. Symantec Manuals
  4. Software
  5. 10551441 - AntiVirus Corporate Edition
  6. Installation manual

Symantec 10551441 - AntiVirus Corporate Edition Installation Manual

Installation guide
Hide thumbs Also See for 10551441 - AntiVirus Corporate Edition:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administrator's Manual, Reference Manual
Symantec AntiVirus™
Corporate Edition
Installation Guide

Advertisement

Table of Contents
loading

Related Manuals for Symantec 10551441 - AntiVirus Corporate Edition

Summary of Contents for Symantec 10551441 - AntiVirus Corporate Edition

  • Page 1 Symantec AntiVirus™ Corporate Edition Installation Guide...

  • Page 2: Installation Guide

    NO WARRANTY. The technical documentation is being delivered to you AS-IS, and Symantec Corporation makes no warranty as to its accuracy or use. Any use of the technical documentation or the information contained therein is at the risk of the user.

  • Page 3: Technical Support

    Technical support As part of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. The Technical Support group’s primary role is to respond to specific questions on product feature/ function, installation, and configuration, as well as to author content for our Web-accessible Knowledge Base.

  • Page 4: Customer Service

    Recent software configuration changes and/or network changes ■ Customer Service To contact Enterprise Customer Service online, go to www.symantec.com, select the appropriate Global Site for your country, then choose Service and Support. Customer Service is available to assist with the following types of issues: Questions regarding product licensing or serialization ■...
  • Page 5 (each a “License Module”) that media containing multiple Symantec products, any accompanies, precedes, or follows this license, and as Symantec software on the media for which You have may be further defined in the user documentation not received permission in a License Module; nor accompanying the Software, Your rights and G.

  • Page 6: Limited Warranty

    Software to You. Your sole remedy in the event of a other relevant sections of the Code of Federal breach of this warranty will be that Symantec will, at Regulations, as applicable, Symantec’s computer its option, replace any defective media returned to...
  • Page 7 (ii) prevails over any conflicting or additional terms of Software other than an EMC Celerra server. any quote, order, acknowledgment, or similar E. If the Software You have licensed is Symantec Client communications between the parties. This Agreement Security, this Software utilizes the Standard Template...

  • Page 9: License Agreement

    Sun Microsystems, Inc. Binary Code License Agreement 5. LIMITATION OF LIABILITY. READ THE TERMS OF THIS AGREEMENT AND ANY PROVIDED SUPPLEMENTAL LICENSE TERMS TO THE EXTENT NOT PROHIBITED BY LAW, IN NO (COLLECTIVELY “AGREEMENT”) CAREFULLY EVENT WILL SUN OR ITS LICENSORS BE LIABLE FOR BEFORE OPENING THE SOFTWARE MEDIA PACKAGE.
  • Page 10 frustrate the intent of the parties, in which case this Agreement will immediately terminate. 11. Integration. This Agreement is the entire agreement between you and Sun relating to its subject matter. It supersedes all prior or contemporaneous oral or written communications, proposals, representations and warranties and prevails over any conflicting or additional terms of any quote, order, acknowledgment,...
  • Page 11 JAVA 2 RUNTIME ENVIRONMENT (J2RE), STANDARD EDITION, VERSION 1.4.1_X SUPPLEMENTAL LICENSE TERMS These supplemental license terms (“Supplemental California 95054, U.S.A. Terms”) add to or modify the terms of the Binary Code (LFI#133025/Form ID#011801) License Agreement (collectively, the “Agreement”). Capitalized terms not defined in these Supplemental Terms shall have the same meanings ascribed to them in the Binary Code License Agreement.

  • Page 13: Table Of Contents

    Deploy protection efficiently ..............31 Protect against viruses ................32 Protect against other threats ..............33 Manage Symantec AntiVirus clients based on their connectivity ..34 Centrally manage and update security ............. 34 Ensure that remote clients comply with your security policy ....35 Verify security status ..................
  • Page 14 14 Contents About administration tools ................48 Methods for updating virus definitions files ........... 50 Best practice: Piloting Symantec AntiVirus in a lab setting ......52 Simulating a realistic network environment in a lab setting ....52 Chapter 3 Preparing to install Symantec AntiVirus General preinstallation considerations ............
  • Page 15 Move servers among server groups ............80 Train your support staff and end users ............ 80 Server migration ....................80 About migrating from the Symantec System Center ......81 Manually uninstalling server components ..........81 Installing new server components ............82 Migrating from Symantec AntiVirus on NetWare platforms ....
  • Page 16 Running the client setup program ............134 Setting up client installations using logon scripts ........137 Setting logon script options in the Symantec System Center .... 137 Associating users with the logon script ..........139 Installing from the client installation package on the server ....141 Deploying installation packages using Web-based deployment ....
  • Page 17 Contents Post-installation client tasks ................157 How to protect the Symantec AntiVirus registry key on Windows NT 4.0 computers ................157 Configuring clients using the configurations file .........158 Obtaining the configurations file ............159 Copying the configurations file to the client .........159 Uninstalling Symantec AntiVirus clients ............160 Appendix A Windows Installer (.msi) command-line reference...
  • Page 18 18 Contents...

  • Page 19: Introducing Symantec Antivirus

    How Symantec AntiVirus works ■ What you can do with Symantec AntiVirus ■ Where to get more information about Symantec AntiVirus ■ About Symantec AntiVirus Symantec AntiVirus Corporate Edition (Symantec AntiVirus) provides scalable, cross-platform antivirus protection for workstations and network servers throughout the enterprise.

  • Page 20: Components Of Symantec Antivirus

    Perform a customizable, integrated installation of all of the security ■ components and set policies simultaneously. Components of Symantec AntiVirus Table 1-1 lists and describes the main components of Symantec AntiVirus. You can also view supported operating systems for each feature. “Installation requirements” on page 69. Table 1-1...

  • Page 21: What's New In This Release

    Note: Symantec Security Response was formerly known as Symantec AntiVirus Research Center. What’s new in this release Symantec AntiVirus includes new features, as well as improvements to existing features. Table 1-2 lists and describes what’s new in this release.
  • Page 22 File caching, which stores an index of clean files, ■ can help track problems and fine tune Auto- Protect’s memory usage. Rtvscan, the main Symantec AntiVirus service, and ■ Auto-Protect are separate components in the Windows version. If Rtvscan stops, Auto-Protect continues to detect viruses.
  • Page 23 POP3 and SMTP Internet Lets you configure Symantec AntiVirus clients to scan email scanning email body text and attachments that are transported using the POP3 or SMTP protocols. The ports that are scanned for POP3 and SMTP traffic are fully configurable.

  • Page 24: How Symantec Antivirus Works

    The Symantec System Center console lets you view and administer your Symantec AntiVirus network. The Symantec System Center console is installed to the computers from which you plan to manage your Symantec products. You must have at least one installation of the Symantec System Center console. If...
  • Page 25 This snap-in is used for client firewall administration, which is not included with Symantec AntiVirus. NT Client Install tool The NT Client Install tool lets you remotely install the Symantec AntiVirus client to one or more Windows NT-based computers. AV Server Rollout tool The AV Server Rollout tool lets you remotely install the Symantec AntiVirus server to the Windows NT-based servers that you select.

  • Page 26: How Installation Works

    26 Introducing Symantec AntiVirus How Symantec AntiVirus works How installation works The methods that you use to install Symantec AntiVirus and the components that you select depend on how you plan to implement security at your site. Installation typically involves the following processes: Installing the Symantec System Center console and the default ■...

  • Page 27: How Symantec Antivirus Communication Works

    System Center can query each server for additional information, such as which computers running Symantec AntiVirus client report to the server. The Symantec System Center uses the data that it gathers from Discovery to display the system hierarchy in the console. Each server group is represented based on its server group membership.
  • Page 28 LiveUpdate is initiated on the client. During a scheduled or manual LiveUpdate session, clients communicate with an internal LiveUpdate server or the Symantec LiveUpdate server to verify that their virus definitions are current. If virus definitions are not current, the client pulls virus definitions updates from the contacted LiveUpdate server.

  • Page 29: How Alerting Works

    A list that specifies the servers to which roaming clients can connect. ■ This list is merged into the registry of each Symantec AntiVirus roaming client. A list that describes the hierarchy of parent servers in your network.

  • Page 30: How The Digital Immune System Works

    Send SNMP Trap ■ Load an NLM ■ server is installed by default when the Symantec AntiVirus server program is installed using the AV Server Rollout tool. Managed antivirus clients do not require AMS client to generate alerts. When you install an unmanaged Symantec AntiVirus client, AMS client is not installed by default.

  • Page 31: What You Can Do With Symantec Antivirus

    For details about configuring the Central Quarantine and using the Digital Immune System, see the Symantec Central Quarantine Administrator’s Guide. What you can do with Symantec AntiVirus You can use Symantec AntiVirus to accomplish the following key protection tasks on your network servers and workstations: Deploy protection efficiently.

  • Page 32: Protect Against Viruses

    Symantec Packager deployment tool (part of Symantec Packager) ■ Note: Symantec Packager is included with this release of Symantec AntiVirus as an unsupported tool. For more information, see Using Symantec Packager with Symantec AntiVirus (pkgrinfo.pdf) in the Symantec Packager folder on the Symantec AntiVirus CD.

  • Page 33: Protect Against Other Threats

    Schedule scans of specific drives, folders, and files to run automatically at a ■ specific time and date. Protect against other threats Symantec AntiVirus can expand the types of threats for which it scans to include the following categories: Spyware ■...

  • Page 34: Manage Symantec Antivirus Clients Based On Their Connectivity

    Lightly managed clients are typically mobile computers that do not connect ■ to the network, but have email. They are configured outside of the Symantec System Center through a configurations file (Grc.dat). Unmanaged clients do not connect to the network and have no parent server ■...

  • Page 35: Ensure That Remote Clients Comply With Your Security Policy

    Symantec AntiVirus server and Symantec AntiVirus client. You can use Symantec VPN Sentry on remote computers that connect to your network through a virtual private network (VPN) connection.

  • Page 36: Verify Security Status

    What you can do with Symantec AntiVirus Verify security status Using the Symantec System Center console, you can select and view the protection settings for any managed computer that is running Symantec AntiVirus. Managed computers appear in the right pane of the console when their parent servers are selected in the tree.

  • Page 37: Where To Get More Information About Symantec Antivirus

    Online Help that contains all of the content found in the above guides and ■ more The primary documentation is available in the Docs folder on the Symantec AntiVirus CD. Some individual component folders contain component-specific documentation. Updates to the documentation are available from the Symantec Technical Support and Platinum Support Web sites.
  • Page 38 38 Introducing Symantec AntiVirus Where to get more information about Symantec AntiVirus...

  • Page 39: Planning The Installation

    Installation overview Before you can install Symantec AntiVirus you should plan appropriately. Typical installation tasks To install a Symantec AntiVirus solution on your network you would typically perform the following steps: Install the Symantec System Center and console components. ■...

  • Page 40: Installation Guidelines

    Create a server group for each site location. ■ Designate a primary server for each server group. ■ Install Symantec AntiVirus server on a computer with a single NIC. Select ■ systems with low to moderate use for the Symantec AntiVirus primary server and any secondary servers.

  • Page 41: How To Implement A Solution

    69. How to implement a solution You can use Symantec AntiVirus in environments that range in size from a small business to a large enterprise. Different sized environments must consider how they are going to perform the following tasks: Rolling out the installation ■...

  • Page 42: About Symantec System Center Management Components

    About Symantec System Center management components If you plan to use the Symantec System Center for management services, including the rollout of the installation to managed computers, it is important to have an understanding of the management components and issues related to their installation.
  • Page 43 NT Client Install tool This tool lets you remotely install Install this component to manage remote Symantec AntiVirus client to one or more client installations. Windows NT-based computers. You can also run this tool from the Symantec AntiVirus CD.

  • Page 44: Server Installation Methods

    44 Planning the installation Server installation methods Server installation methods You can install Symantec AntiVirus servers using any of the methods that are listed in Table 2-2. You can use any combination of methods that suits your network environment. Table 2-2...

  • Page 45: Client Installation Methods

    Planning the installation Client installation methods Client installation methods You can install a Symantec AntiVirus client using any of the methods that are listed in Table 2-3. You can use any combination of methods that suits your network environment. Table 2-3...
  • Page 46 Description Preparation Local You can run the installation directly from the Copy the configurations file (Grc.dat) from Symantec AntiVirus CD. This is the primary the parent server to the client computer. installation method supported for 64-bit computers. Third-party tools You can use a variety of third-party See the documentation that came ■...

  • Page 47: Types Of Symantec Antivirus Clients

    Planning the installation Client installation methods Types of Symantec AntiVirus clients Symantec AntiVirus manages protection for client computers based on their network connectivity. Table 2-4 categorizes the types of client computers that you can manage and lists how they are managed.

  • Page 48: About Administration Tools

    These clients do not connect to the network and have Configurations file ■ no parent server with which to communicate. They will (Grc.dat) during not appear in the Symantec System Center even if they installation are later connected to the network. Self-managed ■...
  • Page 49 Publishing Application (CCPA) on a Application documents and program files. You can work with computer that is running a Symantec content, or any content that is related to supported Windows operating other products or services. system. You can target content to classes of client computers based on the target client’s network location,...

  • Page 50: Methods For Updating Virus Definitions Files

    50 Planning the installation Methods for updating virus definitions files Methods for updating virus definitions files Symantec AntiVirus provides several methods for keeping the virus definitions files current across all networked and non-networked computers. The information in Table 2-6 will help you understand the various methods, the types of clients to which they apply, and considerations for using each method.
  • Page 51 This method allows Symantec AntiVirus servers or clients to initiate updates through the LiveUpdate feature of Symantec AntiVirus and receive new virus definitions files from an internal LiveUpdate server, if you have one, or the Symantec LiveUpdate server. For fully managed and sometimes managed computers, LiveUpdate configurations can be pushed directly from the Symantec System Center.

  • Page 52: Best Practice: Piloting Symantec Antivirus In A Lab Setting

    “Installation requirements” on page 69. Simulating a realistic network environment in a lab setting When you test Symantec AntiVirus server and client components in a lab setting, you should do the following: Create a realistic and representative network environment. ■...
  • Page 53 Best practice: Piloting Symantec AntiVirus in a lab setting How to create a representative network environment Table 2-7 describes how to get the most out of a trial in which you test Symantec AntiVirus servers. Table 2-7 Creating a representative network environment...
  • Page 54 “Obtaining a virus test file” on page 54. Let scheduled scans and other automated functions run for several days. ■ Verify that the Symantec System Center can view servers on both sides of ■ routers. “Required protocols” on page 69.
  • Page 55 Lock some Symantec AntiVirus client scanning parameters using the ■ Symantec System Center and verify that users cannot change these settings. Launch a virus sweep and verify that the Symantec AntiVirus client scans ■ take place. Verify that log files and reports reflect the expected data.
  • Page 56 56 Planning the installation Best practice: Piloting Symantec AntiVirus in a lab setting...

  • Page 57: Preparing To Install Symantec Antivirus

    ■ How to prepare for the Symantec System Center installation Before you install the Symantec System Center, on the computer to which you are installing the Symantec System Center, you should uninstall the following: Any earlier versions of the Symantec System Center ■...

  • Page 58: About Customizing The Client And Server Installation Files Using Windows Installer Options

    The Symantec System Center can manage any earlier supported versions of Symantec AntiVirus, but the computer that is running the Symantec System Center must be using the current version of Symantec AntiVirus. You can install the Symantec System Center console to as many computers as you need to manage Symantec AntiVirus.

  • Page 59: Preparing For Symantec Antivirus Server Installation

    ■ Symantec AntiVirus server installation options The computers on which you install Symantec AntiVirus server will be added to a single server group. You can create additional server groups from the Symantec System Center console and use a drag-and-drop operation to populate them.

  • Page 60: About Required Restarts

    Restart necessary for Windows NT computers. Locating servers across routers during installation You can browse to find the computers on which you want to install Symantec AntiVirus server. Computers that are located across routers might be difficult to find.

  • Page 61: Verifying Network Access And Privileges

    Verifying network access and privileges Review the following before installing the Symantec AntiVirus server program: The computer that you use to run the Symantec AntiVirus server ■ installation program should have the appropriate network clients and protocols running (IP and IPX/IPX). This allows you to see all of the NetWare and Windows NT computers on which you want to install Symantec AntiVirus.

  • Page 62: Installation Order For Citrix Metaframe On Terminal Server

    To install to the NDS or bindery, you need administrator or supervisor rights. After you run the Symantec AntiVirus server installation program, go to the ■ server console (or have rights to run RCONSOLE) to load the Symantec AntiVirus NLMs.
  • Page 63 If you are installing to any supported NetWare servers, the installation program prompts you to enter a user name and password for the NDS container that you select to hold logon scripts. Using the Symantec System Center and your network administration tools, you can enable the logon scripts to automate the Symantec AntiVirus client installation.

  • Page 64: Terminal Server Protection

    Symantec AntiVirus does not provide functionality to Terminal Server ■ clients. For example, Symantec AntiVirus does not route alerts to the proper client session, or allow for the Symantec System Center to run within a session. Vptray.exe is the program that displays the antivirus Auto-Protect status in ■...

  • Page 65: Preventing User-Launched Virus Scans

    Preventing user-launched virus scans You can prevent users from running manual scans in Terminal sessions by doing the following: Restrict the Windows Start menu and directories for Symantec AntiVirus to ■ prevent users from running manual virus scans. Use the Application Security (AppSec) registration utility to restrict ■...

  • Page 66: Preparing For Symantec Antivirus Client Installation

    You can protect and manage Windows NT/2000 cluster servers with Symantec AntiVirus. To protect cluster servers, complete the following tasks: Install the Symantec AntiVirus client to each local computer that is part of ■ the cluster server. Do not install to the shared drives.

  • Page 67: About Required Restarts

    If a manual scan of the shared drives is being performed when a failover occurs, the scan does not restart on the new computer. You must initiate a new scan. If one Symantec AntiVirus client in the cluster is unavailable temporarily, it receives the latest virus definitions when the Symantec AntiVirus service starts and the client checks in with the parent.
  • Page 68 Symantec AntiVirus protects both incoming and outgoing email messages that use the POP3 or SMTP communications protocol. When Auto-Protect scanning for Internet email is enabled, Symantec AntiVirus scans both the body text of the email and any attachments that are included. If you do not want to install the extra layer of protection provided by Internet email support, you can deselect the Internet email scanning component during installation.

  • Page 69: Installation Requirements

    This also applies to setting up server groups that cross a link. For example, servers and clients will not be visible in the Symantec System Center if it is running on...

  • Page 70: Symantec System Center And Snap-In Requirements

    Windows NT 4.0 Workstation/Server with Service Pack 6a; Windows 2000 ■ Professional/Server/Advanced Server; Windows XP Professional 32 MB RAM ■ 35 MB disk space (in addition to the Symantec System Center requirement) ■ Internet Explorer 5.5 Service Pack 2 ■ Microsoft Management Console version 1.2 ■...

  • Page 71: Symantec Antivirus Server Installation Requirements

    The AV Server Rollout tool requires 130 MB disk space in addition to the Symantec System Center requirements. NT Client Install tool requirements The NT Client Install tool requires 2 MB disk space in addition to the Symantec System Center requirements. Symantec AntiVirus server installation requirements Symantec AntiVirus server runs under several operating systems, each with unique installation requirements.

  • Page 72: Quarantine Server Requirements

    20 MB disk space for AMS server files (if you choose to install the AMS ■ server) Note: Symantec AntiVirus is not supported on NetWare servers that are running SFT III. Quarantine Server requirements Quarantine Servers have the following requirements: Windows NT 4.0 Workstation/Server with Service Pack 6a;...

  • Page 73: Symantec Antivirus Client Installation Requirements

    System Restore works, see the Microsoft operating system documentation. Symantec AntiVirus client installation requirements Symantec AntiVirus client requirements vary based on the type of protection installed to the computer. Disk space requirements are based on the installation of all features.
  • Page 74 Requirements for clients that are running IPX only When you install Symantec AntiVirus to computers that are running IPX only, the parent server to which they will connect must have Microsoft File and Print Services for NetWare installed. If you are installing from a network share on the parent server, or using a configurations file (Grc.dat) that contains the IPX...

  • Page 75: Migrating To The Current Version Of Symantec Antivirus

    Symantec AntiVirus provides a seamless upgrade from earlier versions of Symantec antivirus products, which helps to minimize risk and continually increase the quality of security tools available to administrators. The Symantec AntiVirus client and server installation programs use Microsoft Windows Installer (.msi) technology, which provides flexibility, a smaller deployment...

  • Page 76: Steps To Migrating Your Network To The Current Version Of Symantec Antivirus

    76 Migrating to the current version of Symantec AntiVirus Migration overview Steps to migrating your network to the current version of Symantec AntiVirus Upgrading to the current version of Symantec AntiVirus is a multi-step process. The steps should include the following: Create a migration plan. ■...
  • Page 77 After migrating from several of these supported platforms, the computers may need to be restarted before they will be protected by Symantec AntiVirus. For the most up-to-date information on supported migration paths and potential migration issues, see the Symantec Knowledge Base.

  • Page 78: Creating Migration Plans

    ■ Quarantine items are automatically migrated If there are any items in Quarantine on Symantec AntiVirus clients or servers, they are migrated automatically to the Symantec AntiVirus Quarantine. However, if any items in Quarantine are determined by Symantec AntiVirus to be uninfected, they are deleted rather than migrated.

  • Page 79: Evaluate The Current System Requirements

    Symantec AntiVirus, you should organize your network into temporary groups that divide your network into logical deployment tiers. For example, you can create one group that is managed by a legacy Symantec AntiVirus Corporate Edition parent server and a second group that will be upgraded immediately to the current version.

  • Page 80: Plan Your Virus Definitions Update Strategy

    Symantec AntiVirus running on your clients. For example, to manage both Symantec AntiVirus 9.0 clients and supported legacy clients, use the latest version of the Symantec System Center console to which you have installed the 9.0 antivirus management snap-in. You cannot manage the latest client version with an older management snap-in.

  • Page 81: About Migrating From The Symantec System Center

    107. About migrating from the Symantec System Center Before you migrate the Symantec System Center, on the computer to which you are installing the Symantec System Center, you should uninstall the following: Any earlier versions of the Symantec System Center ■...

  • Page 82: Installing New Server Components

    You can upgrade the server from Symantec AntiVirus Corporate Edition 8.0 and later on supported Windows and NetWare server operating systems. To prepare a server for an upgrade to the current version of Symantec AntiVirus On the Windows desktop, click Start > Settings > Control Panel.
  • Page 83 When the installation is complete, click Finish, and then restart the computer. Installing the antivirus server program You can install the antivirus server program from the Symantec AntiVirus CD. To install Symantec AntiVirus server From the Symantec AntiVirus CD, run Setup.exe.
  • Page 84 Quarantine Console. To install the Quarantine Console From the Symantec AntiVirus CD, run Setup.exe. In the Symantec AntiVirus panel, click Install Administrator Tools > Install Quarantine Console. In the welcome panel, click Next. In the License Agreement panel, click I agree, and then click Next.

  • Page 85: Migrating From Symantec Antivirus On Netware Platforms

    NetWare platforms, unload Symantec AntiVirus from the Symantec AntiVirus console on the server. If you do not unload the Symantec AntiVirus NLM and you try to install the current version of Symantec AntiVirus, the installation will fail when you try to load Vpstart /Install.

  • Page 86: About Migration From Other Server Antivirus Products

    “Installing Symantec AntiVirus clients” on page 129. Installing from the CD To migrate from an earlier version of Symantec AntiVirus, you can follow the standard installation procedure for installing a client. “Installing Symantec AntiVirus clients locally” on page 150.

  • Page 87: Installing From The Symantec System Center

    Proceed with the upgrade process. Restart the computer. Installing from the Symantec System Center To migrate from an earlier version of Symantec AntiVirus, you can deploy a client installation from the Symantec System Center. To install a client upgrade from the Symantec System Center In the Symantec System Center, in the left pane, click System Hierarchy or any object under it.
  • Page 88 Also, the clients inherit the policy that was set on the parent server. “Client installation methods” on page 130. Note: If the Symantec AntiVirus user interface (Vpc32.exe) is open when you try to install Symantec AntiVirus, the migration and installation stop on the client. Windows 98/Me client migrations There are two recommended methods for migrating Windows 98/Me clients: Use a logon script.

  • Page 89: Existing Liveupdate Server Migration

    Existing LiveUpdate server migration If you have already set up LiveUpdate FTP servers or UNC paths, there is no need to modify them. They will continue to be used the same way with Symantec AntiVirus. When the Symantec System Center is installed, you have the option to install LiveUpdate Administrator as well.
  • Page 90 90 Migrating to the current version of Symantec AntiVirus Existing LiveUpdate server migration...

  • Page 91: Installing Symantec Antivirus Management Components

    Installing the Symantec System Center The Symantec System Center is installed directly from the Symantec AntiVirus CD. Install the Symantec System Center to the computers from which you want to manage your antivirus protection. In addition to the Symantec System Center, the following management...
  • Page 92 Symantec System Center, you can run the Symantec System Center installation later and select them. Note: If you are not managing Symantec Client Firewall clients, you do not need to install the Symantec Client Firewall snap-in. However, doing so will not cause any problems.
  • Page 93 Installing Symantec AntiVirus management components Installing the Symantec System Center In the Symantec AntiVirus panel, click Install Administrator Tools > Install Symantec System Center. In the welcome panel, click Next.
  • Page 94 94 Installing Symantec AntiVirus management components Installing the Symantec System Center In the License Agreement panel, click I accept the terms in the license agreement, and then click Next. If Microsoft Management Console version 1.2 is not installed on the computer, a message indicates that you must allow it to install.
  • Page 95 Installing Symantec AntiVirus management components Installing the Symantec System Center Click Next. In the Destination Folder panel, do one of the following: To accept the default destination folder, click Next. ■ Click Change, locate and select a destination folder, click OK, and then ■...

  • Page 96: Installing The Central Quarantine

    Windows computers. The Quarantine Server is managed by the Quarantine Console, which snaps in to the Symantec System Center. To manage the Central Quarantine from the Symantec System Center console, the Quarantine Console snap-in must be...
  • Page 97 Server. To install the Quarantine Console snap-in On the computer on which the Symantec System Center is installed, insert the Symantec AntiVirus CD into the CD-ROM drive. If your computer is not set to automatically run a CD, you must manually run Setup.exe.
  • Page 98 Installing the Central Quarantine To install the Quarantine Server On the computer on which you want to install the Quarantine Server, insert the Symantec AntiVirus CD into the CD-ROM drive. In the Symantec AntiVirus panel, click Install Administrator Tools > Install Central Quarantine.

  • Page 99: In The Welcome Panel, Click Next

    Installing Symantec AntiVirus management components Installing the Central Quarantine In the welcome panel, click Next. In the License Agreement panel, click I accept the terms in the license agreement, and then click Next.
  • Page 100 100 Installing Symantec AntiVirus management components Installing the Central Quarantine In the Destination Folder panel, do one of the following: To accept the default destination folder, click Next. ■ Click Change, locate and select a destination folder, click OK, and then ■...
  • Page 101 In the Maximum Disk Space panel, type the amount of disk space to make available on the server for Central Quarantine submissions from clients, and then click Next. In the Contact Information panel, type your company name, your Symantec contact ID/account number, and contact information, and then click Next.
  • Page 102 102 Installing Symantec AntiVirus management components Installing the Central Quarantine 10 In the Web Communication panel, change the gateway address if necessary, and then click Next. By default, the Gateway Name field is filled in with the gateway address. 11 In the Alerts Configuration panel, check Enable Alerts to use AMS...

  • Page 103: Installing And Configuring The Liveupdate Administration Utility

    Administration Utility You can use the LiveUpdate Administration Utility to create a single download point for virus definitions and updates to Symantec products that use LiveUpdate. You can set up a LiveUpdate server on one or more Internet-ready computers to distribute updates across an internal local area network (LAN).
  • Page 104 LiveUpdate Administrator’s Guide PDF on the Symantec AntiVirus CD. To install the LiveUpdate Administration Utility Insert the Symantec AntiVirus CD into the CD-ROM drive. In the Symantec AntiVirus panel, click Install Administrator Tools > Install LiveUpdate Administrator. Follow the on-screen instructions.
  • Page 105 For example, new virus definitions files for Symantec AntiVirus might require an engine update that is also available for download. Because all installed Symantec products that use LiveUpdate now point to your intranet server, it is safer to download full product lines rather than individual products.

  • Page 106: Where To Find Symantec Vpn Sentry Installation Instructions

    Where to find Symantec VPN Sentry installation instructions Vendor-specific Symantec VPN Sentry installation packages and documentation are located on the Symantec AntiVirus CD in the SymSentry folder. Uninstalling Symantec AntiVirus management components You can uninstall all of the Symantec AntiVirus management components using Add/Remove Programs in the Control Panel on the local computer.

  • Page 107: Installing Symantec Antivirus Servers

    Manually installing AMS server ■ Uninstalling Symantec AntiVirus server ■ Server installation methods You can install Symantec AntiVirus servers using any of the methods that are listed in Table 6-1. You can use any combination of methods that suits your network environment.

  • Page 108: About Symantec Antivirus Server Installation

    Installer deployment options provided by Microsoft. The only prerequisite is that you are familiar with Windows Installer package creation and deployment. Symantec Packager You can create a package with Symantec Packager Create a custom Symantec ■ self-extracting that includes a preconfigured Windows Installer...

  • Page 109: Why Ams Is Installed With Symantec Antivirus Server

    If a secondary server needs to be made a primary server, no AMS events will be lost. In the Symantec System Center, you can select the computer that will perform many AMS actions. AMS is required for some of the actions to run. Installing on more computers gives you flexibility in choosing the computers that can perform advanced alert actions, such as sending pages.

  • Page 110: Installing Symantec Antivirus Servers Locally

    Installing Symantec AntiVirus servers locally If the server computer is connected to the network, installing directly from the Symantec AntiVirus CD is the least preferred option because the CD might get damaged or lost, and only one user can install at a time.
  • Page 111 Installing Symantec AntiVirus servers Installing Symantec AntiVirus servers locally In the welcome panel, click Next. In the License Agreement panel, click I accept the terms in the license agreement, and then click Next. In the Client Server Options panel, click Server, and then click Next.

  • Page 112: Deploying The Server Installation Across A Network Connection

    NLMs” on page 123. Starting the server installation You can install the Symantec AntiVirus server from the Symantec AntiVirus CD or the Symantec System Center. Note: When you are installing to NetWare, log on to all of the NetWare servers before you start the installation.
  • Page 113 “Running the server setup program” on page 114. To start the installation from the Symantec System Center In the Symantec System Center, in the left pane, do one of the following: Click System Hierarchy. ■ Under System Hierarchy, select any object.

  • Page 114: Running The Server Setup Program

    112. To run the server setup program In the welcome panel, do one of the following: To install the server to computers that have never had Symantec ■ AntiVirus installed, click Install, and then click Next. To install the server to computers that have had Symantec AntiVirus ■...
  • Page 115 In the Select Items panel, ensure that Server program is checked. If you plan to use Alert Management System (AMS ), ensure that it is checked. “Why AMS is installed with Symantec AntiVirus server” on page 109. Click Next. Continue the installation. “Selecting computers to which you want to install”...

  • Page 116: Selecting Computers To Which You Want To Install

    116 Installing Symantec AntiVirus servers Deploying the server installation across a network connection Selecting computers to which you want to install You can install to one or more computers. In a WINS environment, you can view the computers to which you can install. If you are installing in a non-WINS environment, you must select computers by importing a text file that contains the IP addresses of the computers to which you want to install.
  • Page 117 Installing Symantec AntiVirus servers Deploying the server installation across a network connection In the Select Computers panel, click Import. Locate and double-click the text file that contains the IP addresses to import. During the authentication process, you may need to provide a user name and password for computers that require authentication.
  • Page 118 (indicated by a server icon). To install to NDS, double-click Novell Directory Services, and then ■ select the SYS volume object in which you want to install Symantec AntiVirus. To locate a SYS volume object, double-click the tree object and continue expanding the organizational objects until you reach the organizational unit that contains the SYS volume object.

  • Page 119: Completing The Server Installation

    To complete the server installation In the Select Computers panel, click Finish. In the Server Summary panel, do one of the following: To accept the default Symantec AntiVirus installation path, click Next. ■ To change the path, select a computer, and then click Change ■...
  • Page 120 If you are installing to a NetWare server, the new folder name is limited to eight characters. In the Select Symantec AntiVirus Server Group panel, do one of the following: Under Symantec AntiVirus Server Group, type a name for a new server ■...
  • Page 121 Installing Symantec AntiVirus servers Deploying the server installation across a network connection Click Next. In the Using the Symantec System Center Program panel, click Next.

  • Page 122: Checking For Errors

    Deploying the server installation across a network connection In the Setup Summary panel, read the message that reminds you that you will need your password to unlock the server group in the Symantec System Center, and then click Finish. In the Setup Progress panel, view the status of the server installations.

  • Page 123: Manually Loading The Symantec Antivirus Nlms

    Vpstart.nlm Installing Symantec AntiVirus with NetWare Secure Console enabled If you are using NetWare Secure Console, you can install Symantec AntiVirus while Secure Console is running. After you perform a standard Symantec AntiVirus installation, you must copy the NLM to the appropriate directory and then run the NLM on each NetWare server to complete the installation.
  • Page 124 Type each command exactly as it appears. These NetWare commands are case- sensitive. To manually load the Symantec AntiVirus NLMs for the first time while running NetWare Secure Console From the Sys:\Sav default installation directory (or the directory that was specified during installation), copy Vpstart.nlm to the Sys:\System...

  • Page 125: Installing Directly To A Windows Computer Using The Server Installation Package

    The Windows Installer (.msi) antivirus server installation package (Setup.exe) that comes with Symantec AntiVirus can be used to install directly to a supported Windows computer by executing the installation program manually or through other deployment methods, such as distributing and executing the installation using a third-party tool.

  • Page 126: Manually Installing Ams Server

    Knowledge Base on the Symantec Web site. If a Symantec AntiVirus server is managing Symantec AntiVirus clients and you plan to uninstall and then reinstall the Symantec AntiVirus server software, ensure that the computer to which you reinstall has the same computer name...
  • Page 127 IP address. If this information changes, clients will not be able to locate their parent server. If you don’t plan to replace a Symantec AntiVirus server that is managing Symantec AntiVirus clients, you should reassign any clients that are managed by the server before you uninstall the Symantec AntiVirus server software.
  • Page 128 128 Installing Symantec AntiVirus servers Uninstalling Symantec AntiVirus server...

  • Page 129: Installing Symantec Antivirus Clients

    Chapter Installing Symantec AntiVirus clients This chapter includes the following topics: Client installation methods ■ About Symantec AntiVirus client installation ■ Deploying the client installation across a network connection ■ Setting up client installations using logon scripts ■ Installing from the client installation package on the server ■...

  • Page 130: Client Installation Methods

    130 Installing Symantec AntiVirus clients Client installation methods Client installation methods You can install Symantec AntiVirus client using any of the methods that are listed in Table 7-1. You can use any combination of methods that suits your network environment.
  • Page 131 Preparation Local You can run the installation directly from Copy the configurations file (Grc.dat) from the Symantec AntiVirus CD. This is the the parent server to the client computer. primary installation method supported for 64-bit computers. “Installing Symantec AntiVirus clients locally”...

  • Page 132: About Symantec Antivirus Client Installation

    ■ If managed, communicates with its Symantec AntiVirus parent server ■ Symantec AntiVirus client runs on supported computers that may act as network servers or workstations. If a Windows network server needs antivirus protection only, install the Symantec AntiVirus client.

  • Page 133: About The Client Configurations File

    Deploying the client installation across a network connection You can remotely install the Symantec AntiVirus client to computers running supported Microsoft Windows operating systems that are connected to the network. You can install to multiple clients at the same time without having to visit each workstation individually.

  • Page 134: Starting The Client Installation

    “Running the client setup program” on page 134. To start the client installation from the Symantec System Center In the Symantec System Center, in the left pane, do one of the following: Click System Hierarchy. ■ Under System Hierarchy, select any object.
  • Page 135 Repeat steps 5 and 6 until all of the clients that you want to manage are added. You can reinstall to computers that are already running Symantec AntiVirus. You can also import a text file to add Windows NT-based clients.
  • Page 136 136 Installing Symantec AntiVirus clients Deploying the client installation across a network connection Do one of the following: If you created a text file that contains IP addresses to import computers ■ that are in non-WINS environments, continue to step 9.

  • Page 137: Setting Up Client Installations Using Logon Scripts

    14 In the Status of Remote Client Installations window, click Done. Setting up client installations using logon scripts You can automate client installations using the logon scripts that the Symantec AntiVirus server installation program copies to each Symantec AntiVirus server.
  • Page 138 Setting up client installations using logon scripts To set logon script options in the Symantec System Center In the Symantec System Center console, right-click a server, and then click All Tasks > Symantec AntiVirus > Client Login Scan And Installation.

  • Page 139: Associating Users With The Logon Script

    On NetWare servers, the server setup program creates a user group called SymantecAntiVirusUser. When you add a user to the group, the logon script runs according to the options that you set in the Symantec System Center the next time that the user logs on to the server.
  • Page 140 Novell NetWare client. Close the NetWare Administrator utility. To associate Windows users with a logon script Copy the following files from the Program Files\Symantec AntiVirus\Logon directory on the protected server to the netlogon share (by default, C:\Winnt\System32\Repl\Import\Scripts for Windows NT and C:\Winnt\Sysvol\Sysvol\Domainname\Scripts for Windows 2000/XP/2003): Vplogon.bat...

  • Page 141: Installing From The Client Installation Package On The Server

    When its associated server is selected in the Symantec System Center tree in the left pane, the client displays in the right pane. In the Symantec System Center, you can configure and manage the client.

  • Page 142: Deploying Installation Packages Using Web-Based Deployment

    Windows Installer installation packages using Symantec Packager is not supported. Note: Symantec Packager is included with this release of Symantec AntiVirus as an unsupported tool. See Using Symantec Packager with Symantec AntiVirus (pkgrinfo.pdf) in the Symantec Packager folder on the Symantec AntiVirus CD.

  • Page 143: Web-Based Deployment Requirements

    Installing Symantec AntiVirus clients Deploying installation packages using Web-based deployment Web-based deployment requirements Before you begin to implement a Web-based deployment, you should review the requirements in Table 7-2 for the Web server and the target computer. Table 7-2 Web server and target computer requirements...

  • Page 144: Setting Up The Web Server

    Configure the Web server. ■ Alternately, if Symantec AntiVirus server is installed on the Web server, you can copy the files in the Web Install folder to the client installation folder on that server, and then configure the Web server to use the client installation folder as the virtual directory.
  • Page 145 Installing Symantec AntiVirus clients Deploying installation packages using Web-based deployment readme.htm ■ start.htm ■ webinst.cab ■ Deploy\Webinst\Webinst ■ files.ini ■ The installation package (for example, Package.msi) ■ Configuring the Web server You must configure the Web server to create a virtual directory.

  • Page 146: Customizing The Deployment Files

    146 Installing Symantec AntiVirus clients Deploying installation packages using Web-based deployment To configure Apache Web Server In a text editor, open Srm.conf. The Srm.conf file is installed by default under C:\Program Files\ Apache Group\Apache\conf. Type the following five lines at the end of the Srm.conf file: DirectoryIndex default.htm...
  • Page 147 Installing Symantec AntiVirus clients Deploying installation packages using Web-based deployment Table 7-3 InstallOptions switches Switch Description Set the level of logging verboseness. The valid values are 0, 1, and 2. The parameters in the Start.htm file contain information about the Web server and the locations of the files that need to be installed.
  • Page 148 For example, InstallOptions=/qn /l:”C:\temp\example.log” /v:2 Save Files.ini. Some IIS configurations require that you rename the .ini file using a .txt extension. For more information, see the Symantec Knowledge Base. To customize Start.htm In a text editor, open Start.htm. Search for the <object> tags and type the correct values.

  • Page 149: Testing The Installation

    5.01 Service Pack 2 or later on their computers. The Internet Explorer security level for the local intranet must be set to Medium so that Symantec ActiveX controls can be downloaded to the client. When the installation is complete, the security level can be restored to its original setting.

  • Page 150: Installing Symantec Antivirus Clients Locally

    Symantec AntiVirus server to connect to when installing from the CD. If users do not specify a Symantec AntiVirus server to connect to when they install from the Symantec AntiVirus CD, the Symantec AntiVirus client is installed in unmanaged mode. This means that users are responsible for getting their own virus definitions files and program updates using the Internet.
  • Page 151 Installing Symantec AntiVirus clients Installing Symantec AntiVirus clients locally To start the installation If users will run the client in managed mode, inform them of the Symantec AntiVirus server to which they will connect. The installation program prompts them for this information.
  • Page 152 152 Installing Symantec AntiVirus clients Installing Symantec AntiVirus clients locally In the Symantec AntiVirus panel, click Install Symantec AntiVirus > Install AntiVirus Client. In the welcome panel, click Next. In the License Agreement panel, click I accept the terms in the license agreement, and then click Next.
  • Page 153 Next. Continue with “To finish an unmanaged installation” on page 153. If you are migrating from a previous version of Symantec AntiVirus as ■ a managed client, the Network Setup Type panel does not appear. Continue with “To finish an unmanaged installation”...

  • Page 154: About Installing Clients Using Third-Party Products

    Management Server (SMS), and Novell ManageWise ZENworks. About installing clients with Active Directory and Tivoli You can install Symantec AntiVirus client using the standard options that are provided by Active Directory and Tivoli for all Windows Installer-based installation packages. In addition, Symantec AntiVirus provides a set of properties and features that let you customize the deployment options at the command line.

  • Page 155: About Installing Clients With The Novell Managewise Zenworks Application Launcher

    From Network Administrator, locate an Organization Unit and create an ■ Application Object that points to the location of the Symantec AntiVirus installation files on the server (for example, Sys:\Sav\ Clt-inst\Win32\Setup.exe for Windows 98/Me/NT/2000/XP).

  • Page 156: Configuring Automatic Client Installations From Netware Servers Without The Symantec System Center

    156 Installing Symantec AntiVirus clients Configuring automatic client installations from NetWare servers without the Symantec System Center Configuring automatic client installations from NetWare servers without the Symantec System Center If you have a Novell NetWare server but no Windows NT workstations on which to run the Symantec System Center, you can configure Symantec AntiVirus to install automatically on your Windows clients.

  • Page 157: Installing The Ams Client Stand-Alone Program On An Unmanaged Client

    To resolve this security problem, remove the permissions that give users open access to the registry. The Reset ACL tool (ResetACL.exe) removes the permissions that allow full access by all users to the following Symantec AntiVirus registry key and subkeys:...

  • Page 158: Configuring Clients Using The Configurations File

    Configuring clients using the configurations file To use the Reset ACL tool, complete the following tasks: Roll out ResetACL.exe, which is located on the Symantec AntiVirus CD in the ■ Tools folder, to Windows NT 4.0 computers that are not secure.

  • Page 159: Obtaining The Configurations File

    To create a configurations file with the name of a parent server In a text editor, open a Grc.dat file. You can find a minimal version of the configurations file on the Symantec AntiVirus CD in the Sample\Tools folder. Search for the following line:...

  • Page 160: Uninstalling Symantec Antivirus Clients

    Uninstalling Symantec AntiVirus clients You should uninstall Symantec AntiVirus clients using the uninstallation program that is provided by Symantec. You must uninstall Symantec AntiVirus client from the local computer. If a manual uninstallation is required, see the support Knowledge Base on the Symantec Web site.

  • Page 161: Appendix A Windows Installer (.Msi) Command-Line Reference

    Windows Installer switches and Symantec-specific parameters to customize the installation. For the most up-to-date list of Symantec installation commands and parameters, see the Symantec Knowledge Base. For more information on using the standard Windows Installer commands, see...

  • Page 162: Default Symantec Antivirus Client Installation

    ■ LiveUpdate is installed and updated virus definitions files are downloaded ■ from the Symantec Web site (if the client is connected to the Internet). The default Symantec AntiVirus client installation package includes the following installation settings: The client is installed as an unmanaged client.

  • Page 163: Windows Installer Commands

    Windows Installer commands and properties Table A-1 describes the basic set of commands and properties that are used for Symantec AntiVirus client and server installations. See the Windows Installer documentation for further information on the usage of standard Windows Installer commands and properties.

  • Page 164: Symantec Antivirus Properties

    <feature>: Uninstalls the feature or list of ■ features from the target computer. ALL: Uninstalls the program and all of the ■ installed features. This is the default. Symantec AntiVirus properties There are many Symantec AntiVirus properties that are used to customize Windows Installer installation packages.

  • Page 165: Symantec Antivirus Server Properties

    Windows Installer (.msi) command-line reference Symantec AntiVirus properties Symantec AntiVirus server properties Table A-2 describes the properties that are configurable for the Symantec AntiVirus server installation. Table A-2 Symantec AntiVirus server properties list Property Description INSTALLSERVER=1 Specifies that the installation to be used is the server installation.

  • Page 166: Symantec Antivirus Client Properties

    Files\Symantec AntiVirus. If the path specified contains long file names, use quotation marks around it. Symantec AntiVirus client properties Table A-3 describes the properties that are configurable for the Symantec AntiVirus client installation. Table A-3 Symantec AntiVirus client properties Property Description ENABLEAUTOPROTECT=<val>...

  • Page 167: Symantec Antivirus Features

    Symantec AntiVirus features There are many Symantec AntiVirus features that can be installed using a customized Windows Installer package. These features are used by the Windows Installer ADDLOCAL property to specify the features that are installed.

  • Page 168: Symantec Antivirus Client Features

    168 Windows Installer (.msi) command-line reference Using the log file to check for errors Symantec AntiVirus client features Table A-5 describes the features that are configurable for the Symantec AntiVirus client installation. Table A-5 Symantec AntiVirus client features Feature Description SAVMain Specifies the basic Symantec AntiVirus client files.

  • Page 169: Identifying The Point Of Failure Of An Installation

    "Symantec AntiVirus.msi" Symantec AntiVirus client with INSTALLDIR=C:\SFN /qn default settings to c:\SFN. Silently install an unmanaged msiexec/i "Symantec AntiVirus.msi" Symantec AntiVirus client that is ADDLOCAL=SAVMain,SAVUI,SAVHelp, managed by the SR1 server (having EMailTools,OutlookSnapin,NotesSnapin, the password hello) with all of the Pop3Smtp NETWORKTYPE=2 default features except QClient.
  • Page 170 170 Windows Installer (.msi) command-line reference Command-line examples Table A-6 Command-line examples Task Command line Silently install a managed Symantec msiexec/i "Symantec AntiVirus.msi" AntiVirus client to the default path ADDLOCAL=SAVMain,SAVUI,SAVHelp, that is managed by the SR1 server EMailTools,OutlookSnapin,Pop3Smtp,QClient (having the password hello) with no NETWORKTYPE=1 SERVERNAME= SR1 SAV Help and no Lotus Notes Snap-in.
  • Page 171 47 and server installation 109 installation installing with Symantec AntiVirus server 109 about 130 installing with the Symantec System Center 91 automatic from NetWare servers 156 manually installing 126 post-installation tasks 157 snap-in requirements 71 preparing for 66...
  • Page 172 SMS Package Definition Files 154 selecting computers 116 download location, notifying users of 149 server methods 107 starting server 112 Symantec System Center 91 testing 54 email, scanning for viruses 67 Web server 143 errors, server installation 122...
  • Page 173 Launcher 155 deploying 112 Novell NetWare, requirements 72 enabling sharing 61 NT Client Install tool methods 107 installing with the Symantec System Center 92 options 59 management component 43 requirements 71 requirements 71 restart may be required 60 rights 61, 62...
  • Page 174 Symantec System Center 91 Symantec Client Firewall snap-in, installing with the Symantec System Center 91 Virus Definition Transport Method 28, 50 Symantec Client Security, how it works 21 virus definitions Symantec Packager deployment tool 32 communication for updates 28 Symantec Security Response 30, 31...

This manual is also suitable for:

Antivirus corporate edition

Table of Contents