McAfee NAPCKE-AB-AA Configuration Guide

McAfee NAPCKE-AB-AA - VirusScan For NetApp Manual

McAfee NAPCKE-AB-AA manual content summary:

  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 1
    VirusScan® for NetApp® for use with ePolicy Orchestrator™ 3.0 Service Pack 1 version 7.1.0 Configuration Guide Revision 1.0
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 2
    ), McAfee and design, McAfee.com, MultiMedia Cloaking, NA Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, 1995-2002 International Business Machines Corporation and others. All Microsystems®, Inc. Œ Software copyrighted by Gisle Aas. All rights reserved, © 1995-2003. Œ
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 3
    -risk processes 29 Processes tab for high-risk processes 30 Detection tab 31 Advanced tab 32 Actions tab 32 Setting user interface policies 33 Configuration Guide iii
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 4
    Contents Display Options tab 34 Password Options tab 36 Setting policies for Alert Manager Alerts 37 Alert Manager Alerts tab 37 Setting NetApp policies 38 Enforcing policies 40 Creating and configuring tasks 40 On-demand scan tasks 41 Creating a new on-demand scan task 41 Configuring the
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 5
    version 7.1.0 with ePolicy Orchestrator™ version 3.0 Service Pack 1. VirusScan for NetApp 7.1.0 installs on scanner-servers. We do not support deploying the product using ePolicy Orchestrator. The following information is provided in this guide: „ Installing the VirusScan for NetApp 7.1.0 Network
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 6
    at: http://www.networkassociates.com Run this command on the client computer: C:\SETUP.EXE For emphasis or when introducing a new term; for names of product manuals and topics (headings) within the manuals. Example Refer to the VirusScan Enterprise Product Guide for more information. Angle brackets
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 7
    Guide ePolicy Orchestrator 3.0. Installation Guide Product Guide * Product introduction and features, detailed instructions services and resources: technical support, customer service, site. ^ A printed manual that accompanies the product CD. Note: Some language manuals may be available only as
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 8
    Contacting McAfee Security & Network Associates Technical Support Home Page http://www.networkassociates.com/us/support/ KnowledgeBase Search https://knowledgemap.nai.com/phpclient/homepage.aspx PrimeSupport Service Portal * https://mysupport.nai.com McAfee Security Beta Program http://www
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 9
    policies for the product on page 13. „ Enforcing policies on page 40. „ Creating and configuring tasks on page 40. „ Scheduling tasks on page 52. Configuration Guide 9
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 10
    Configuring VirusScan for NetApp 7.1.0 Adding the VirusScan for NetApp .NAP file Before configuring VirusScan for NetApp, you must add the VirusScan for NetApp .NAP file to the Repository. 1 Log on to the ePolicy Orchestrator server with administrator rights. 2 Open the Configuration Wizard using
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 11
    a Software Package dialog box. 4 Locate and select the VNA710.NAP file. 5 Click Open to add the file to the Repository. 6 Click OK when complete. Configuration Guide 11
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 12
    Configuring VirusScan for NetApp 7.1.0 Accessing the VirusScan for NetApp policy pages To locate policies for VirusScan for NetApp: 1 Log on to the ePolicy Orchestrator server with administrator rights. 2 In the console tree under ePolicy Orchestrator | Directory, select the site, group, single
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 13
    Console. For complete information about the options that you can set for VirusScan for NetApp, refer to the VirusScan for NetApp 7.1.0 Product Guide. Once you have configured and saved the desired policy options, you must enforce the policies to make them available to the ePolicy Orchestrator
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 14
    on the General Policies tabs apply to default, low-risk, and high-risk processes for on-access scanning. See the VirusScan for NetApp 7.1.0 Product Guide for more information about low-risk and high-risk processes. Policies can be configured on these tabs: „ General tab on page 15. „ Messages tab
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 15
    the maximum scan time for all files. You can also enforce the scan time limit for all files. 5 Click Apply to save these settings. Configuration Guide 15
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 16
    Configuring VirusScan for NetApp 7.1.0 Messages tab Specify the user message policies. 1 In the lower details pane, select the Messages tab. Figure 1-5. General Policies - Messages tab 2 Deselect Inherit. 3 Configure which messages are sent to local and network users: a Under Messages for local
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 17
    file. b Under What to log in addition to virus activity, choose what types of information you want logged. 4 Click Apply to save these settings. Configuration Guide 17
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 18
    on-access scanning which are defined as any processes that are not specified as low-risk or high-risk. See the VirusScan for NetApp 7.1.0 Product Guide for information about assigning risk to a process. Policies can be configured on these tabs: „ Processes tab on page 19. „ Detection tab on page 20
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 19
    the settings on these tabs for all processes. Š Use different settings for high-risk and low-risk processes. 5 Click Apply to save these settings. Configuration Guide 19
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 20
    Configuring VirusScan for NetApp 7.1.0 Detection tab Specify what is scanned and not scanned during an on-access scan. 1 In the lower details pane, select the Detection tab. Figure 1-8. Default Processes Policies - Detection tab 2 Deselect Inherit. 3 Configure the following options: a Under Scan
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 21
    programs. c Under Compressed files, choose whether to scan packed executables, inside multiple-file archives, and MIME-encoded files. 4 Click Apply to save these settings. Configuration Guide 21
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 22
    Configuring VirusScan for NetApp 7.1.0 Actions tab Define the primary and secondary actions to perform on infected files during an on-access scan. 1 In the lower details pane, select the Actions tab. Figure 1-10. Default Processes Policies - Actions tab 2 Deselect Inherit. 3 Use the drop-down lists
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 23
    of infection, and are used during an on-access scan. For information about assigning risk to a process, see the VirusScan for NetApp 7.1.0 Product Guide. The options on these tabs affect processes specified as low-risk on the Processes tab. The Detection, Advanced, and Actions tabs are identical to
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 24
    Configuring VirusScan for NetApp 7.1.0 Use different settings for low-risk processes Before you can define low-risk processes, you must specify that you want to use different settings for low-risk and high-risk processes: 1 In the upper details pane under VirusScan for NetApp 7.1, select Default
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 25
    - Processes tab 3 Deselect Inherit. 4 Use the Add and Remove buttons to define the list of low-risk processes. 5 Click Apply to save these settings. Configuration Guide 25
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 26
    Configuring VirusScan for NetApp 7.1.0 Detection tab Specify what is scanned and not scanned during an on-access scan. 1 In the lower details pane, select the Detection tab. 2 Deselect Inherit. 3 Configure these policy options: a Under Scan files, choose when to scan files and whether files on
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 27
    select the primary action for When a virus is found and the secondary action If the above Action fails. 4 Click Apply to save these settings. Configuration Guide 27
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 28
    to the tabs of the same names under Default Processes Policies. For more information about configuring these options, see the VirusScan for NetApp 7.1.0 Product Guide. Policies can be configured on these tabs: „ Use different settings for high-risk processes on page 29. „ Processes tab for high-risk
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 29
    . Default Processes Policies - Processes tab 2 Deselect Inherit. 3 Select Use different settings for high-risk and low-risk processes. 4 Click Apply to save these settings. Configuration Guide 29
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 30
    Configuring VirusScan for NetApp 7.1.0 Processes tab for high-risk processes Specify which processes have a high risk of spreading infection. 1 In the upper details pane under VirusScan for NetApp 7.1, select High-Risk Processes Policies. 2 In the lower details pane, select the Processes tab. Figure
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 31
    is not selected, the client computer uses the exclusions that were set locally and the exclusions set here. 4 Click Apply to save these settings. Configuration Guide 31
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 32
    Configuring VirusScan for NetApp 7.1.0 Advanced tab Specify advanced scan options to be used during an on-access scan. 1 In the lower details pane, select the Advanced tab. 2 Deselect Inherit. 3 Configure these policy options: a Under Heuristics, choose whether to scan for unknown program viruses
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 33
    tabs: „ Display Options tab on page 34. „ Password Options tab on page 36. For complete information about these options, see the VirusScan for NetApp 7.1.0 Product Guide. Configuration Guide 33
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 34
    Configuring VirusScan for NetApp 7.1.0 Display Options tab Configure security-related display settings. 1 In the upper details pane under VirusScan for NetApp 7.1, select User Interface Policies. 2 Select the Display Options tab in the lower details pane. Figure 1-15. User Interface Policies -
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 35
    for NetApp. The schedule is disabled when the policy is enforced. This policy depends on the Task Manager service, which must be running in order for the task's schedule to be disabled. When this option is not SHSTAT.EXE is launched. 5 Click Apply to save these settings. Configuration Guide 35
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 36
    Configuring VirusScan for NetApp 7.1.0 Password Options tab Define a password, and the policy pages and tabs that the password protects. 1 Select the Password Options tab in the lower details pane. Figure 1-16. User Interface Policies - Password Options 2 Deselect Inherit. 3 Under User interface
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 37
    that generate alerts and the destination for alerts. NOTE For complete information about configuring these options, see the Alert Manager Product Guide. Alert Manager Alerts tab Configure alert policies. 1 In the upper details pane under VirusScan for NetApp 7.1, select Alert Manager Alerts Policies
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 38
    Configuring VirusScan for NetApp 7.1.0 3 Configure these policy options: a Under Which components will generate alerts, select the VirusScan for NetApp components for which you want to generate alerts when infections are detected. b Under Alert Manager destination selection, choose to enable or
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 39
    cache of files already scanned, after the scanner-server sends the filer a DAT or engine an update notification. 6 Click Apply to save these settings. Configuration Guide 39
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 40
    ePolicy Orchestrator agent. 5 Click Apply to save these settings. Creating and configuring tasks You can create VirusScan for NetApp tasks and configure them to meet your needs. These topics are included in this section: „ On-demand scan tasks on page 41. „ Update tasks on page 49. „ Mirror tasks on
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 41
    Task 2 Type a New Task Name. 3 Select VirusScan for NetApp 7.1 - On-Demand Scan from the Software/Task Type list. 4 Click OK to create the task. Configuration Guide 41
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 42
    on page 46. Š Reports tab on page 47. Š Task tab on page 48. For complete information about these options, see the VirusScan for NetApp 7.1.0 Product Guide. 42 VirusScan® for NetApp® software version 7.1.0
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 43
    , Remove, and Edit buttons to define the locations to scan. 4 Under Scan Options, choose whether to include subfolders, and whether to scan boot sectors. Configuration Guide 43
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 44
    Configuring VirusScan for NetApp 7.1.0 Detection tab Specify the file types to scan. 1 Select the Detection tab. Figure 1-23. On-Demand Scan Task - Detection tab 2 Deselect Inherit. 3 Configure these policy options: a Under What to scan, select All files, Default + additional types, or Specified
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 45
    to scan MIME-encoded files. Advanced tab Define additional settings. 1 Select the Advanced tab. Figure 1-24. On-Demand Scan Task - Advanced tab 2 Deselect Inherit. Configuration Guide 45
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 46
    Configuring VirusScan for NetApp 7.1.0 3 Configure these policy options: a Under Heuristics, choose whether to scan for unknown program viruses and/or unknown macro viruses. b Under Non-viruses, choose whether to scan for potentially unwanted programs, and whether to scan for joke programs. c Under
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 47
    file, and the location of the log file. b Under What to log in addition to virus activity, choose what types of information to log. Configuration Guide 47
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 48
    Configuring VirusScan for NetApp 7.1.0 Task tab Specify user account settings. 1 Select the Task tab. Figure 1-27. On-Demand Scan Task - Task tab 2 Deselect Inherit. 3 Under User account settings, type the user name, password, and domain name in the appropriate fields if you want the task to run
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 49
    . New Update Task 2 Type a New Task Name. 3 Select ePolicy Orchestrator Agent - Update from the Software/Task Type list. 4 Click OK to create the task. Configuration Guide 49
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 50
    Configuring VirusScan for NetApp 7.1.0 Configuring the update task settings 1 On the Tasks tab in the details pane, right-click the VirusScan for NetApp update task that you created, then select Edit Task. The ePolicy Orchestrator Scheduler dialog box appears. 2 Click Settings to display the Update
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 51
    . New Mirror Task 2 Type a New Task Name. 3 Select ePolicy Orchestrator Agent - Mirror from the Software/Task Type list. 4 Click OK to create the task. Configuration Guide 51
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 52
    Configuring VirusScan for NetApp 7.1.0 Configuring the mirror task settings On the Tasks tab in the upper details pane, right-click the VirusScan for NetApp task that you created, then select Edit Task. The ePolicy Orchestrator Scheduler dialog box appears. 5 Click Settings to display the Mirror
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 53
    choose to stop the task after a defined amount of time, the task resumes from the point it was interrupted the next time it runs. Configuration Guide 53
  • McAfee NAPCKE-AB-AA | Configuration Guide - Page 54
    Schedule tab. 3 Select the options on this tab to schedule the task. NOTE For more information about scheduling tasks, see the VirusScan for NetApp 7.1.0 Product Guide. 4 Click OK when you are through configuring and scheduling the task. 54 VirusScan® for NetApp® software version 7.1.0
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54

VirusScan
®
for NetApp
®
for use with ePolicy Orchestrator
3.0 Service Pack 1
version 7.1.0
Configuration Guide
Revision 1.0