Medicine, Science & Technology

TREND MICRO. ServerProtect5. Comprehensive server and storage virus protection. For Network Appliance. Filers

Description
ServerProtect5 TM TREND MICRO Comprehensive server and storage virus protection TM For Network Appliance Filers TM Trend Micro Incorporated reserves the right to make changes to this document and to the
Published
of 41
All materials on our website are shared by users. If you have any questions about copyright issues, please report us to resolve them. We are always happy to assist you.
Related Documents
Share
Transcript
ServerProtect5 TM TREND MICRO Comprehensive server and storage virus protection TM For Network Appliance Filers TM Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files, release notes, and the latest version of the Quick Start Guide which are available from the Trend Micro Web site at: NOTE: A license to the Trend Micro Software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. Maintenance should be renewed on an annual basis at the Trend Micro then-current Maintenance fees. Trend Micro, the Trend Micro t-ball logo, Control Manager, MacroTrap, ServerProtect, and TrendLabs are trademarks or registered trademarks of Trend Micro, Incorporated. All other product or company names may be trademarks or registered trademarks of their owners. Copyright Trend Micro Incorporated. All rights reserved. No part of this publication may be reproduced, photocopied, stored in a retrieval system, or transmitted without the express prior written consent of Trend Micro Incorporated. Document Part No. SSEG51567/30718 Release Date: October 2003 Protected by U.S. Patent No. 5,951,698 The Quick Start Guide for Trend Micro ServerProtect for Network Appliance (NetApp) Filers introduces the main features of the software and installation instructions for your production environment. You should read it before installing or using the software. For technical support, please refer to Troubleshooting ServerProtect for NetApp Filers on Page 30 for technical support information and contact details. Detailed information about how to use specific features within the software are available in the online help file and online Solution Bank at Trend Micro s Web site. Trend Micro is always seeking to improve its documentation. If you have questions, comments, or suggestions about this or any Trend Micro documents, please contact us at Your feedback is always welcome. Please evaluate this documentation on the following site: Contents System requirements...2 Overview...4 ServerProtect for Windows architecture review...7 Enabling Trend Micro update server...9 What s new in ServerProtect for NetApp Filers?...10 Multi-filer support...10 User notification upon client infection...10 NetApp Filer status available through the Management Console...10 Conveniently update NetApp Filer logon information...10 Trend Micro Control Manager agent compatibility...10 NetApp Filer notification of new updates...11 NetApp Filer RPC status notification...11 Installing ServerProtect for NetApp Filers...11 Verifying vscan is enabled...12 Confirming the CIFS default share (C$) still exists...12 Deleting connections between Scan Servers and a NetApp Filer...14 Installing a Scan Server...14 Using multiple Scan Servers for a single NetApp Filer...16 Adding more NetApp Filers to a Scan Server...17 Removing ServerProtect for NetApp Filers...19 Removing a NetApp Filer...19 Upgrading ServerProtect for NetApp Filers...19 Configuring NetApp Filer options...20 Updating NetApp Filer information...20 Using Scan Servers as Normal Servers...21 Scanning viruses...23 Notifying NetApp Filer clients upon infection...23 Viewing the status of a NetApp Filer...24 Configuring NetApp Filer RPC connection status notifications...25 Notifying NetApp Filers of new update components...26 Registration and technical support...27 Contacting technical support and registering ServerProtect...27 Online resources...28 i Trend Micro Serverprotect for Network Appliance filers Quick Start Guide Security information Knowledge Base TrendLabs Sending infected files to Trend Micro Upgrading the ServerProtect evaluation copy Troubleshooting ServerProtect for NetApp Filers Network Appliance (NetApp) Filers do not recognize ServerProtect for Network Appliance Filers Scan Servers The Scan Server completed scan on a file but original request was not found when scanning large files on the NetApp Filer Configuring the ServerProtect for Network Appliance Filers to scan all file types Testing your installation ii Trend Micro ServerProtect for Network Appliance (NetApp ) Filers Trend Micro ServerProtect for Network Appliance (NetApp ) Filers Trend Micro ServerProtect for Network Appliance (NetApp) Filers is an enhanced version of ServerProtect developed exclusively to provide antivirus solutions for NetApp Filers. Scalable and reliable, ServerProtect for NetApp Filers protects NetApp s line of Filer storage appliances against viruses, Trojans, and other malicious code. This Quick Start Guide is an addendum to the ServerProtect for Windows Getting Started Guide (GSG). Many of the ServerProtect for NetApp features can be found in the ServerProtect for Windows GSG. If you cannot find information regarding a specific feature in this book, please refer to the ServerProtect for Windows GSG. This addendum manual includes the following sections: System requirements Overview What s new in ServerProtect for NetApp Filers Installing ServerProtect for NetApp Filers Removing ServerProtect for NetApp Filers Upgrading ServerProtect for NetApp Filers Configuring NetApp Filer options Contacting technical support and troubleshooting Upgrading the ServerProtect evaluation copy 1 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide System requirements ServerProtect for NetApp Filers requires the following: Scan Server Intel Pentium III 550MHz processor or equivalent Operating System: Microsoft Windows Microsoft Windows Server 2003 Microsoft Windows 2000 Server/Advanced Server with SP3 or above Network Protocols and Services TCP/IP, Microsoft Network (NetBIOS Compatible Transport Protocol), and RPC services must be running on the installed Windows server 256MB RAM or above is recommended 70MB of free disk space Note: In the ServerProtect for Windows documentation, the Scan Server is called Normal Server . However, this document uses the term Scan Server to describe the machines in Information Server domains that protect the NetApp Filers. Information Server Intel Pentium III 550MHz processor or equivalent Operating System: Microsoft Windows Microsoft Windows Server 2003 Microsoft Windows 2000 Server/Advanced Server with SP3 or above Network Protocols and Services TCP/IP, Microsoft Network (NetBIOS Compatible Transport Protocol), and RPC services must be running on the installed Windows server 256MB RAM or above is recommended 70MB of free disk space 90MB free disk space (if installing with Trend Micro Control Manager agent) 2 Trend Micro ServerProtect for Network Appliance (NetApp ) Filers Management Console Operating System: Microsoft Windows Microsoft Windows Server 2003 Microsoft Windows 2000 Server/Advanced Server with SP3 or above Network Protocols and Services TCP/IP, Microsoft Network (NetBIOS Compatible Transport Protocol), and RPC services must be running on the installed Windows server Monitor with 800 x 600 or higher resolution NetApp Filer The NetApp Filer must be AV-enabled with an RPC agent running to communicate with ServerProtect The NetApp Filer must have the proprietary Operating System Data ONTAP or above installed Note: For optimal scanning performance, Trend Micro recommends the connection between the filer and a Scan Server to have a bandwidth of at least 1Gbps. 3 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide Overview ServerProtect for NetApp Filers scans viruses using on-access mode, which takes place on a Scan Server. In turn, the Information Server manages the Scan Servers. FIGURE 1. ServerProtect for NetApp Filers product architecture When a ServerProtect for NetApp Filers user tries to access a file or store a new file in a NetApp Filer, the NetApp Filer performs a virus check. If the filename extension matches the file scanning criteria (For example, an .EXE or a .VBS file), the NetApp Filer sends a manual scan request (Scan Now) to the Scan Server(s). The Scan Server then passes back the scan result to the NetApp Filer and according to the scan result, the user is either allowed to open/save the file or is denied access to the file (to set NetApp Filer file scanning criteria, refer to your NetApp Filer documentation). Note: Since only specific file types contain viruses, establishing the right file scanning criteria can help optimize Scan Server performance, reduce bandwidth usage, and minimize scanning time. To learn how ServerProtect for NetApp Filers can efficiently and safely scan files, see IntelliScan in chapter 1 of the ServerProtect for Windows Getting Started Guide. If a file contains a virus, ServerProtect for NetApp Filers performs a designated action. Refer to Scanning Viruses in chapter 3 of the ServerProtect for Windows Getting Started Guide for additional information about scan actions. For example, if 4 Trend Micro ServerProtect for Network Appliance (NetApp ) Filers the file is cleanable and ServerProtect for NetApp Filers is configured to perform a Clean action the following occurs: 1. The Scan Server cleans the file and informs the NetApp Filer that the file is no longer infected. 2. The NetApp Filer allows its client to access the cleaned file and replaces the original file with the cleaned one. Note: The NetApp Filer trusts registered Scan Servers, so if a Scan Server also functions as a Normal Server (as a file or data server) and happens to send a file to the NetApp Filer, the latter will not request the file be scanned. To protect both the NetApp Filer, and the Normal Server, set the ServerProtect Real-time Scan to Incoming & outgoing . See To set Real-time Scan to Incoming & outgoing, do the following: on page 21. 5 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide Below is an explanation of the ServerProtect for NetApp Filers organizational flow: RPC Scan Server RPC RPC Scan Server (Serverprotect- Normal Server) RPC ServerProtect Information Server Download source NetApp Filer HTTP RPC Trend Micro Update Server RPC Scan Server FIGURE 2. ServerProtect for NetApp Filers organizational flow ServerProtect for NetApp Filers consists of an agent that communicates with the NetApp Filer via remote procedure calls (RPCs). This agent performs the following functions: Registers the Normal Server with the NetApp Filer as a Scan Server. This informs the NetApp Filer of the availability and location of a Scan Server Watches for NetApp Filer file-scanning requests Returns scan results to the NetApp Filer Answers any queries from the NetApp Filer Informs the NetApp Filer of any pattern file or scan engine updates Communicates with the NetApp Filer to check the connection between the Scan Server and the NetApp Filer 6 Trend Micro ServerProtect for Network Appliance (NetApp ) Filers ServerProtect for Windows architecture review As previously mentioned, ServerProtect for NetApp Filers is an enhanced version of ServerProtect for Windows. To understand the ServerProtect for NetApp Filers enhancements, it is useful to review the architecture of ServerProtect for Windows. ServerProtect for Microsoft Windows protects networks through a three-tier architecture: the Management Console, the Information Server, and the Normal Server. You can use the Management Console to configure the Information Server (IS), which lets you control the Normal Servers managed by the IS. The three components are independent from each other, yet you can install each on one machine, on separate machines, or in a combination (for example, you can install the Management Console on one machine, and you can install the Information Server and the Normal Server together on a separate machine). For additional information on ServerProtect architecture, refer to ServerProtect Architecture in chapter 1 of the ServerProtect for Windows Getting Started Guide. Management Console: this portable console gives you centralized control of multiple network servers and domains. The Management Console lets you simultaneously configure servers in the same IS domain and generate integrated virus incident reports for all servers. The ServerProtect domain browser tree shows all the ServerProtect servers along with the status of each server. Status information includes the version of the virus pattern, scan engine, and program file; the type and version of operating system; the direction of real-time scanning, and so on. For additional information on the Management Console, refer to ServerProtect Architecture in chapter 1 of the ServerProtect for Windows Getting Started Guide. Information Server: a communications hub for coordinating antivirus defense activities within its domains. An Information Server (IS) provides a single point of contact for assigned Normal Servers and Scan Servers. This saves time because the Information Server makes it unnecessary to directly communicate with each individual Normal Server. What are ServerProtect domains? In ServerProtect, domains are virtual groupings of Normal Servers that simplify the identification and management of Normal Servers. You can create, rename, or delete domains according to your network needs (refer to Managing ServerProtect Domains in chapter 3 of the ServerProtect for Windows Getting Started Guide.) 7 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide If there is a large number of Normal Servers in a domain, you can add more Information Servers and divide the number of Normal Servers among them. For example, if a domain has 100 Normal Servers assigned to one IS, you can share the workload among two Information Servers by adding another IS and assigning 50 Normal Servers to each IS. The IS also collects log files. For additional Information Server information, refer to ServerProtect Architecture in chapter 1 of the ServerProtect for Windows Getting Started Guide. Note: In addition to managing Scan Servers, the ServerProtect for NetApp Filers Information Server can also manage ServerProtect for Windows Normal Servers. Normal Server (Scan Server): the first line of defense in the ServerProtect architecture and where all the scanning takes place. The Normal Servers are the machines in the organization, which typically act as file servers, data servers, etc. Normal Servers can scan both manually and in real time. For more Normal Server information, refer to ServerProtect Architecture in chapter 1 of the ServerProtect for Windows Getting Started Guide. Note: In ServerProtect for NetApp Filers, Normal Servers are referred to as Scan Servers . Scan Servers scan files NetApp Filer clients try to access or modify in the NetApp Filer. 8 Trend Micro ServerProtect for Network Appliance (NetApp ) Filers Key differences between the ServerProtect versions are listed in the following table: Protection Focus: Normal Server Role: ServerProtect for NetApp Filers NetApp Filer. Acts as a Scan Server and scans files in the NetApp Filer on access. ServerProtect Normal Servers (the machines in the organization which act as file servers, Web servers, etc.). Scans files on the Normal Server. Table 1. ServerProtect Version Comparison Enabling Trend Micro update server A virus scanner must have the latest updates in order to be effective. You can configure ServerProtect for NetApp Filers to automatically download the newest virus patterns and scan engine updates. To minimize download times and preserve network bandwidth, Trend Micro update server distributes available updates to the designated servers via an incremental update mechanism. This ensures ServerProtect for NetApp Filers downloads only the latest virus signatures since the last version. For detailed information about Trend Micro update server, refer to Configuring Updates in chapter 3 of the ServerProtect for Windows Getting Started Guide. 9 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide What s new in ServerProtect for NetApp Filers? This section includes the new features in this version of ServerProtect for NetApp Filers. Multi-filer support One Scan Server can scan multiple NetApp Filers at the same time. Now, network administrators can dedicate one physical server to protect several NetApp Filers, this can contribute to reduce the total cost of ownership. See Adding more NetApp Filers to a Scan Server on page 17 for additional information. User notification upon client infection ServerProtect for NetApp Filers can get the IP address and host name of a client causing an infection, and then alert both the user and the network administrator. This function is only available if using Data ONTAP version 6.4 or later. See Notifying NetApp Filer clients upon infection on page 23 for additional information. NetApp Filer status available through the Management Console Network administrators can view if a registered NetApp Filer is online or offline from the Management Console. See Viewing the status of a NetApp Filer on page 24 for additional information. Conveniently update NetApp Filer logon information Network administrators can update the logon information for several NetApp Filers simultaneously. See Updating NetApp Filer information on page 20 for additional information. Trend Micro Control Manager agent compatibility ServerProtect for NetApp Filers is compatible with Trend Micro Control Manager agent for ServerProtect. 10 Trend Micro ServerProtect for Network Appliance (NetApp ) Filers NetApp Filer notification of new updates When new update components (scan engine and pattern) are downloaded to a Scan Server, the Scan Server will notify NetApp Filers to flush the cache of previously scanned files. This ensures that NetApp Filers continuously utilize the most current protection. Each NetApp Filer will then begin rebuilding the cache of previously scanned files until a new update arrives from Trend Micro update server. See Notifying NetApp Filers of new update components on page 26 for additional information. NetApp Filer RPC status notification ServerProtect for NetApp Filers monitors the RPC connection with each NetApp Filer. If the RPC connection between a NetApp Filer and the Scan Server is inactive, the Scan Server will attempt to reconnect to the NetApp Filer. Upon configuration, ServerProtect for NetApp will notify network administrators whenever a connection to a NetApp Filer succeeds or fails. You can also select the type of notification you wish to receive. This feature can help in troubleshooting. See Configuring NetApp Filer RPC connection status notifications on page 25 for additional information. Installing ServerProtect for NetApp Filers Before installing ServerProtect for NetApp Filers, perform the following tasks. Verify that vscan is enabled. See Verifying vscan is enabled on page 12 Confirm the default CIFS default share (C$) still exists. See Confirming the CIFS default share (C$) still exists on page 12 Delete connections between Scan Servers and a NetApp Filer. See Deleting connections between Scan Servers and a NetApp Filer on page 14 Note: To verify ServerProtect for NetApp Filers functions correctly, it is important to perform the necessary pre-installation checks and actions listed above. 11 Trend Micro ServerProtect for Network Appliance Filers Quick Start Guide Verifying vscan is enabled Before installing ServerProtect, it is important to verify that vscan is enabled on the NetApp Filer. To verify that vscan is enabled, type vscan at the command prompt of the NetApp Filer console. FIGURE 3. Virus scanning enabled If vscan is disabled, enable it so ServerProtect for NetApp Filers can function correctly. To enable vscan, type vscan on at the command prompt. For more information, at the command prompt type vscan help or refer to your NetApp Filer documentation. Confirming the CIFS default share (C$) still exists It is important to confirm that the Common Internet File System (CIFS) defa
Search
Related Search
We Need Your Support
Thank you for visiting our website and your interest in our free products and services. We are nonprofit website to share and download documents. To the running of this website, we need your help to support us.

Thanks to everyone for your continued support.

No, Thanks