Sophos Anti-Virus Unix server installation guide
Contents
1.2. 1 888 767 4679 Supportus sophos com Australia 24 hours 61 2 9409 9111 Support sophos com au France 33 140902090 support sophos fr Germany 24 hours 49 6136 91193 Support sophos de Italy 39 02 662810 O Support sophos it Japan 24 hours 81 45 227 1800 Support sophos co jp Singapore 24 hours 65 6776 7467 Supportasia sophos com FAQs and virus information are available on the Sophos website www sophos com If you contact technical support provide as much information as possible including Sophos software version number s operating system s and patch level s and the exact text of any error messages Copyright O 2002 2003 by Sophos Ple All rights reserved No part of this publication may be reproduced stored in a retrieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise without the prior permission in writing of the copyright owner Any name should be assumed to be a trademark unless stated otherwise nterCheck and Sophos are registered trademarks of Sophos Plc Unix server Contents Installation on the Unix server 1 Installing Sophos Anti Virus on the server 6 2 Scanning the server for viruses 11 3 Eliminating viruses 12 Creation of central installation directories 4 Creating the Windows NT 2000 XP central installation directory 14 5 Creating the Windows 95 98 Me central installation directory 19 6 Downloading the la
3. SOPHOS DU WTA may E MES 2 Ar LI v b aS 4 TAR Ma be iit oe oY e E Em ee 9 sophos anti virus Unix server Installation guide For networks with Servers Unix Workstations Windows NT 2000 XP Windows 95 98 Me About this guide This guide tells you how to NW install Sophos Anti Virus on a Unix server NE scan the server for viruses E eliminate viruses E install Sophos Anti Virus on Windows NT 2000 XP workstations E install Sophos Anti Virus on Windows 95 98 Me workstations fhe instructions for installation on Windows XP workstations apply only to Windows XP Professional not Windows XP Home networked computers You can find details of all other configuration options in the Sophos Anti Virus Unix user manual To find out how to update Sophos Anti Virus on Unix see the Sophos Anti Virus Unix server update guide To find out how to install Sophos Anti Virus on Mac OS 8 or 9 workstations connected to the Unix server see the Sophos Anti Virus Mac OS 8 or 9 on a network installation guide To find out how to install Sophos Anti Virus on Mac OS X workstations connected to the Unix server see the Sophos Anti Virus Mac OS X on a network installation guide Sophos documentation is published on the Sophos CD each month and at www sophos com support docs Sophos Anti Virus installation guide Technical support UK 24 hours 44 1235 559933 Support sophos com USA 24 hours
4. scan automatcallinat startup Lal Sb essa Fr tear ok A feo akart oe Pat hal Fal api Mea ate A US O E Le hs Lat EVEN Ses racial wi cneck oll ErecUta bles ahr local hard disks In the SOPHOS Setup Auto Update Mode dialog box click Non interactive Click Next SOPHOS Setup Auto Update Mode CGV ae me Wie lo ecaniguie sapnas Ani Ms Gita updates Unix server 9 In the SOPHOS Setup Configuration Details dialog box click Finish to complete the installation l SOPHOS Setup Configuration Details 10 In the SOPHOS Setup Complete message box click OK SOPHOS Setup Complete You have created the Windows 95 98 Me CID Now download the latest virus identity files IDEs from the Sophos website section 6 23 Sophos Anti Virus installation guide 6 Downloading the latest virus identity files IDEs 24 This section describes how to download IDEs from the Sophos website A virus identity file IDE enables Sophos Anti Virus to detect a specific virus You need IDEs to protect your network against viruses discovered since your version of Sophos Anti Virus was compiled Download the latest IDEs as follows At the same workstation you used in sections 4 or 5 go to the IDE download page of the Sophos website www sophos com downloads ide Download the compressed IDEs file for your version of Sophos Anti Virus If you want to install Sophos Anti Virus on Windows NT 2000 XP
5. Anti Virus at any time Savadmin exe is located at C Program Files Sophos SAVAdmin Ver2 20 For more information about SAVAdmin see the SAVAdmin user manual Remember to update Sophos Anti Virus every month In addition you must update Sophos Anti Virus whenever there is a significant new virus threat Updating is described in the Sophos Anti Virus Unix server update guide You have installed Sophos Anti Virus on the Windows NT 2000 XP workstations Now install Sophos Anti Virus on any Windows 95 98 Me workstations on the network Installation on Windows 95 98 Me workstations Sophos Anti Virus installation guide 9 Installing Sophos Anti Virus on the Windows 95 98 Me workstations 9 1 Install Sophos Anti Virus on the workstations 44 You can use one of two different methods to install Sophos Anti Virus on the Windows 95 98 Me workstations m Use the login script to install Sophos Anti Virus on all Windows 95 98 Me workstations simultaneously For details contact sophos technical support Test the installations as described in section 9 2 or m Install Sophos Anti Virus on each workstation one at a time by repeating the procedure described below To install Sophos Anti Virus on an individual workstation do the following At the workstation at the taskbar click Start Run In the Run dialog box click Browse Locate and double click Setup exe in servername InterChk W95Inst where servername Is th
6. Folder Selection OMAN SA ISBN TADA TA 45 ecunornlnterChkAN TI ns 1306 16 Unix server In the SOPHOS Setup Installation Options dialog box ensure Auto update is selected Click Next od SOPHOS Setup Installation Options Sophos Anti virus installation options Enables automatic updating of workstation installations from the central installation T Prevent removal Prevents Sophos Anti Virus from being removed by the Add Remove Programs Application in Control Panel Back Cancel In the SOPHOS Setup Auto Update Mode dialog box click Non interactive Deselect Allow users to postpone auto update and ensure the Auto update check frequency is set to 60 minutes Click Next 1 SOPHOS Setup Auto Update Mode Ed Auto update mode Interactive Alone the user to recargue Sophos Abts of Updater Horrinteractive Performs unattended auto updates T Allow users to postpone auto update Upto E a Himes for E days Suto update check frequency Every 0 minutes C Daily C Weekly Back Cancel 17 Sophos Anti Virus installation guide 18 9 In the SOPHOS Setup Configuration Details dialog box click Finish to copy the files to the CID 2 SOPHOS Setup Configuration Details _ SOPHOS Setup Complete SODNOS AaNntl VIFUS SecuriorNInterChRANTInsti386 You have created the Windows NT 2000 XP CID If you want to install
7. M Ovenwrite Files Without Prompting About Y When Done Unzipping Run sawadmin exe Help PEPER Licensed to Sophos Ple Unix server A In the WinZip Self Extractor message box click OK to display the SAVAdmin window WinZip Self Extractor Ed 6 file s unzipped successtully In the SAVAdmin window in the left hand pane locate your network and click it The computers in the network are shown in the right hand pane The workstation on which you installed Sophos Anti Virus shows Installed in the SAV Installed column E SAVAdmin Jal File Edit Miew Computer Help CE E Es 38 88 Key E SAW Installed LE yy SAV Active Updating lt gt Signalupdate L E a Network Neighborhood SAW Rolloul 29 SAM Admin Network view E Eh qa 410 Full Ho e il ae NT 40 Full No Eat Microsoft Windows Netw fal 7 7 5c NT 40 Full Installed Active 3 57 1 Hah Friday Ec 2000 50 Ful No h Legion Securion Unis 4 5 Hone Hovtest Eaa Saturday mas T total Filter active All computers NUM BZ If you have any Windows XP workstations SAVAdmin may not have access to them None is displayed in the Access column Continue to section 8 3 2 to enable SAVAdmin to access those workstations If there are no Windows XP workstations or if SAVAdmin has full access to your Windows XP workstations Full is displayed in the Access column go Straight to section 8 3 3 37 Sophos Anti
8. Operators Members can bypass file security to back up files af Guests Users granted quest access to the computer domain ae Power Users Members can share directories and printers a Replicator supports file replication in a domain ae Users Ordinary users 5 In the User Rights Policy dialog box select Show Advanced User Rights Click the drop down arrow on the Right box and select Log on as a service Then click Add User Rights Policy Computer SC Fight Log on as a service Cancel Grant To Help Renae e bli M Show Advanced User Rights 27 Sophos Anti Virus installation guide 6 In the Add Users and Groups dialog box click Show Users Scroll down the Names list to SWEEPUPD and click it Click Add When SWEEPUPD is displayed in the Add Names list click OK Add Users and Groups CE NETWORK Users accessing this object remotely Power Users Members can share directories and pri Replicator Supports file replication in a domain Users Ordinary users 5C 5C BC E Administrator Built in account for administering the co it Guest Built in account for quest access to the Bf SMEEPUPD Sweep odateAccount Aag SAT ov LU Sree SCS WEEPUPD 7 User Rights Policy Log on as 4 service kd SwEEFUFD 8 Close the User Manager window You have created the auto update account Now install Sophos Anti Virus from the central installation directory onto the Windows NT 2000 XP workstations sectio
9. and the directories where they are installed To perform a non default installation run the installation script install sh with any of the following options d prefix Installs the programs library virus data and manual pages in prefix bin prefix lib prefix sav and prefix man You do not have to install all these files in the same directory See the b 1 m and s options b directory Installs the virus scanning programs in directory The other files are installed in the default directory unless you specify otherwise with the 1 m or s options directory Installs the Sophos Anti Virus library in directory The other files are installed in the default directory unless you specify otherwise with the b m or s options m directory Installs the man pages in directory The other files are installed in the default directory unless you specify otherwise with the b 1 or s options S directory Installs the virus data in directory The other files are installed in the default directory unless you specity otherwise with the b 1 or m options i directory Installs the files for InterCheck Server in directory If no directory is specified the value in etc icheckd conf Is used or the default var spool intercheck The icheckd binary and manual pages are also installed 52 Unix server ni Does not install InterCheck Server at all SS
10. utility Version 3 56 April 2002 Linux Intel Includes detection for 73079 viruses trojans and worms Copyright c 1989 2002 Sophos Plc www sophos com System time 10 23 49 System date 07 May 2002 Quick Sweeping gt gt gt Virus EICAR AV Test found in file home source eicar src 33 files swept in 2 seconds l virus was discovered 1 file out of 33 was infected Please send infected samples to Sophos for analysis For advice consult www sophos com email support sophos com or telephone 44 1235 559933 2 5 For further help For help with using Sophos Anti Virus enter sweep h 11 Sophos Anti Virus installation guide 3 Eliminating viruses Q This section describes how to disinfect infected items on a Unix server For information on disinfecting non Unix workstations see the Sophos Anti Virus documentation for that platform The method you use for disinfection depends on whether you want to disinfect a data file or a program 3 1 To disinfect a data file To disinfect a specific data file e g a document or spreadsheet enter sweep data file path di Alternatively to detect and remove viruses in any data file or program on the system enter sweep di In either case Sophos Anti Virus asks for confirmation before it disinfects Check disinfected files carefully afterwards Sophos Anti Virus can remove the virus but cannot reverse any side effects Check the analysis of the virus on the Sophos we
11. workstations on the network extract the IDEs to servername InterChk NTInst i386 where servername Is the name of the Unix server Securion in the examples in this installation guide If you want to install Sophos Anti Virus on Windows 95 98 Me workstations on the network extract the IDEs to fservername InterChk W95Inst where servername Is the name of the Unix server Securion in the examples in this installation guide If you prefer scroll down the page and download the IDEs one by one to the locations above Help with downloading IDEs is available on the IDE FAQ page of the Sophos website www sophos com support fags ide html If you use Internet Explorer 5 0 read the note on why IDEs may acquire an extra file extension when you download them If you need further help with downloading IDEs please contact Sophos technical support You have downloaded the latest IDEs Now install Sophos Anti Virus on Windows NT 2000 XP workstations section 7 or Windows 95 98 Me workstations section 9 Installation on Windows NT 2000 XP workstations Sophos Anti Virus installation guide 7 Creating the auto update account 26 2 The auto update account is the account workstations use to log on to the server and collect Sophos Anti Virus updates from the central installation directory Create the auto update account at the same workstation you used in section 4 If the workstation is running Windows 2000 follow
12. Anti Virus installation guide Appendix 1 Installing on multiple Unix computers 50 If you have multiple networked Unix computers you may want to install and update Sophos Anti Virus from a central directory rather than carrying out installation at each computer separately This procedure assumes that there is a trust relationship between the computers On one Unix computer set up a shared area that is available to all the other computers Untar the Sophos Anti Virus for Unix distribution archive or archives to this shared area If you have computers on your network that use more than one Unix operating system e g Linux and FreeBSD untar the distribution archive for each system into a separate directory Use ssh to run the install sh script on every connected Unix computer from the shared area For example enter ssh 1 username hostname install sh where username is your user ID and hostname is the computer on which you want to install Sophos Anti Virus In each case ensure that you run install sh trom the correct set of distribution files for that computer s operating system On older Unix computers ssh may not be available You can use rsh instead though it is less secure Step 3 can be put into a script which Is run from one of your Unix computers Unix server Appendix 2 Installing central reporting InterCheck Server is a daemon that runs on the Unix server and processes vi
13. D Sophos Anti Virus is updated on the workstations automatically Create the CID as follows 1 At any Administrator s workstation running Windows NT 2000 not XP and having internet access log on with Administrator rights to the server Write down the name of the workstation in appendix 4 If you have already downloaded and unzipped the Sophos Anti Virus for Windows NT 2000 XP files from the Sophos website go to step 4 2 Insert the Sophos CD in the CD drive The CD should auto run If auto run is disabled run D Launchcd where D is the CD drive 3 In the Sophos CD window click Sophos Anti Virus At the next screen click Windows NT 2000 XP and start the setup program 14 Unix server 4 In the SOPHOS Setup dialog box click Next to continue the installation SOPHOS Setup 5 In the SOPHOS Setup Installation Type dialog box click Central installation update Click Next dl SOPHOS Setup Installation Type 15 Sophos Anti Virus installation guide 6 In the SOPHOS Setup Folder Selection dialog box you tell Sophos Anti Virus to use the InterChk directory you created on the Unix server Click the lower Browse button In the Browse for Folder dialog box browse to the shared InterChk directory on the Unix server called Securion in the example below Highlight the directory and click OK At the end of the path to the InterChk directory type NTInst i386 Click Next vd SOPHOS Setup
14. I Stops and starts InterCheck Server after installation default setting implies a nssi Does not stop and start InterCheck Server after installation h Prints help V Verbose operation Displays the location of each file as it is installed 93 Sophos Anti Virus installation guide Appendix 4 Notes about the installation This section lists the directories and accounts used in the Sophos Anti Virus installation You will need this information when adding workstations to the network and when updating Sophos Anti Virus Blanks are left for your own information E Name of the Unix server p6 E Name of the Windows workstation used to administer Sophos Anti Virus for Windows NT 2000 XP on the Unix server p14 NW Location of the central installation directory CID for the Sophos Anti Virus for Windows NT 2000 XP installation files as seen from workstations p16 servername InterChk NTInst i386 E Name of the Windows workstation used to administer Sophos Anti Virus for Windows 95 98 Me on the Unix server p19 NW Location of the central installation directory CID for the Sophos Anti Virus for Windows 95 98 Me installation files as seen from workstations p21 servername InterChk W95Inst m Windows NT 2000 XP update account username p26 SWEEPUPD m Windows NT 2000 XP update account password p26 If you write your password here store this installation guide securely 54 200208 h
15. Network access Do not allow anonymous enumeration of 5 Disabled lad Network access Do not allow storage of credentials or NET Disabled lau Network access Let Everyone permissions apply to anonym Disabled lau Network access Named Pipes that can be accessed anony COMNAP COM lad Network access Remotely accessible registry paths System Currer lau Network access Shares that can be accessed anonymously COMCFG DFS i Hii Network access Sharing and security model For local accounts Guest only lofa lad Network security Do not store LON Manager hash value on Disabled lau Network security Force logoff when logon hours expire Disabled lau Network security LON Manager authentication level Send LM amp MTL Rel Metwork security LDAP client signing requirements Megotiate sign i a IP Security Policies on Local Computer Unix server 6 Ja In the dialog box change the drop down list option to Classic local users authenticate as themselves Click OK Network access Sharing and security model for local Ed Local Security Setting CA Network access Sharing and securite model for local accounts ey 4 Close all windows Repeat this procedure on each Windows XP workstation that SAVAdmin Cannot access You should now be able to see that SAVAdmin has full access to the Windows XP workstations Now copy the installation of Sophos Anti Virus from the first workstation to the remai
16. Sophos Anti Virus on Windows 95 98 Me workstations on the network create the Windows 95 98 Me CID section 5 Otherwise download the latest virus identity files IDEs from the Sophos website section 6 Unix server 5 Creating the Windows 95 98 Me central installation directory 5 1 Create a shared directory on the server If you have not already done so create a shared directory called InterChk on the Unix server that is accessible to all the Windows workstations on the network E All workstations need at least read access to the InterChk directory E The Administrator user should have full access to the InterChk directory 5 2 Create the central installation directory for Windows 95 98 Me The central installation directory CID is the central copy of Sophos Anti Virus files from which Sophos Anti Virus is installed on the workstations Whenever you update the CID Sophos Anti Virus is updated on the workstations automatically Create the CID as follows 1 At any Administrator s workstation running Windows NT 2000 not XP or Windows 95 98 Me and having internet access if you have not already done so log on with Administrator rights to the server Write down the name of the workstation in appendix 4 If you have already downloaded and unzipped the Sophos Anti Virus for Windows 95 98 Me files from the Sophos website go to step 4 2 If you have not already done so insert the Sophos CD in the CD drive The CD s
17. Sophos Anti Virus on any Windows 95 98 Me workstations on the network go to section 9 35 Sophos Anti Virus installation guide 8 3 Install Sophos Anti Virus on the remaining workstations 36 This section describes how to copy the installation you made in section 8 1 onto the other Windows NT 2000 XP workstations on the network This procedure involves the following three steps E Install SAVAdmin section 8 3 1 E l necessary enable SAVAdmin to access any Windows XP workstations section 8 3 2 Copy Sophos Anti Virus to the remaining workstations section 8 3 3 8 3 1 Install SAVAdmin SS S AS If you have already downloaded the SAVAdmin files from the Sophos website go to step 5 At the same workstation you used in section 4 insert the Sophos CD The CD should auto run If auto run is disabled run D Launchcd where D is the CD drive In the Sophos CD window click Sophos Anti Virus At the next screen click SAVAdmin At the next screen start the SAVAdmin setup program In the WinZip Self Extractor message box click OK 544 4dmin Sophos Antivirus administration Version 2 20 April 2002 SAyAgent 2 21 Wi Sophos com c 1989 2002 Sophos Fle In the SAVAdmin for Windows NT 2000 Self Extractor dialog box click Unzip SA Admin for Windows NT 2000 Self Extractor To unzip all files in savadm exe to the specified folder press the Unzip button x Run WinZip Close
18. Virus installation guide 38 8 3 2 Enable SAVAdmin to access Windows XP workstations Complete this procedure on each Windows XP workstation that SAVAdmin Cannot access At the Windows XP workstation log on with Administrator rights At the taskbar click Start Control Panel In the Control Panel window on the left hand side click Switch to Classic View The options in the window are now displayed as icons Double click the Administrative Tools icon In the Administrative Tools window double click Local Security Policy In the Local Security Settings window in the left hand pane double click Local Policies then click Security Options In the right hand pane double click Network access Sharing and security model for local accounts E Local Security Settings File Action View Help x EY 8 Security Settings H Account Policies i it Local Policies ig Audit Policy 1 08 User Rights Assignment lad Microsoft network server Amount of idle time required befo 15 minutes ad Microsoft network server Digitally sign communications talw Disabled lad Microsoft network server Digitally sign communications iF cl Disabled ek ae Microsoft network server Disconnect clients when logon ho Enabled eee lad Network access Allow anonymous SID Mame translation Disabled J Software Restriction Policies 8g Network access Do mot allow anonymous enumeration of 5 Enabled Rd
19. available on the IDE FAQ page of the Sophos website www sophos com support faqs ide html If you need further help with downloading IDEs please contact Sophos technical support sophos Anti Virus is now installed and up to date on the Unix server If you installed InterCheck Server you now activate it appendix 2 2 NH Section 2 describes how to scan the server for viruses E Section 3 describes how to eliminate a virus NW Sections 4 to 9 describe how to install Sophos Anti Virus on Windows workstations connected to the Unix server Remember to update Sophos Anti Virus every month In addition you must update Sophos Anti Virus whenever there is a significant new virus threat Updating is described in the Sophos Anti Virus Unix server update guide Unix server 2 Scanning the server for viruses 2 1 Scanning the local computer To scan the local computer enter sweep 2 2 Scanning a particular directory or file To scan a particular item use the path to that item for example sweep usr mydirectory myfile 2 3 Scanning a filesystem To scan a filesystem use the name of the filesystem for example sweep home 2 4 Finding a virus After the scan you will see a message similar to that shown below If Sophos Anti Virus has found a virus it reports it in the line which starts with gt gt gt and is followed by either Virus or Virus fragment For information on disinfection see section 3 SWEEP virus detection
20. bsite for information about its possible side effects 3 2 To disinfect a Windows program 12 You can eliminate viruses in program files in two ways To disinfect a program file enter sweep program filename di This ensures that the virus cannot spread However the program file may be corrupted You should subsequently delete it and replace it from a backup To remove an infected program file enter sweep program filename remove Alternatively to remove all infected programs enter sweep remove In either case Sophos Anti Virus asks for confirmation before it removes the program s Creation of central installation directories Sophos Anti Virus installation guide 4 Creating the Windows NT 2000 XP central installation directory If you want to install Sophos Anti Virus on only Windows 95 98 Me workstations on the network go straight to section 5 4 1 Create a shared directory on the server Create a shared directory called InterChk on the Unix server that is accessible to all the Windows workstations on the network E All workstations need at least read access to the InterChk directory E The Administrator user should have full access to the InterChk directory 4 2 Create the central installation directory for Windows NT 2000 XP The central installation directory CID is the central copy of Sophos Anti Virus files from which Sophos Anti Virus is installed on the workstations Whenever you update the CI
21. e name of the Unix server on which you created the central installation directory CID In the Run dialog box type TAL a at the end of the path Click OK Run ax 7 Type the name of a program folder document or Interet resource and Windows will open it hor you Oper AsecunontlnterChkW395Ins Setup exe mba l Cancel Browse Unix server A message Is displayed stating that the workstation will reboot When Windows restarts the workstation is checked for viruses a Sophos Anti irus InterCheck InterCheck Installation Your PC will now be swept for viruses This may take a few minutes Please note this only occurs the first time you use InterCheck The next time InterCheck ts activated it will only check the critical portions of the PC and will load with a minimal delay Sweeping C A Executablez Once this check has finished installation is complete Remember to update Sophos Anti Virus every month In addition you must update Sophos Anti Virus whenever there is a significant new virus threat Updating is described in the Sophos Anti Virus Unix server update guide f you want to install Sophos Anti Virus on other Windows 95 98 Me workstations one at a time repeat this section section 9 1 at each workstation E f you want to test Sophos Anti Virus go to section 9 2 NW f you have installed the SAVAdmin administration tool and want to use it to monitor the Windows 95 98 Me workstat
22. erCheck Server recommended run the installation script with the ni option cd sav install install sh ni To install Sophos Anti Virus with InterCheck Server run the installation script without the ni option you must have already followed the instructions in appendix 2 1 cd sav 1nstalLl install sh For information on all the options with which you can run the installation script see appendix 3 You may now see a warning about the MANPATH environment variable However the installation will be made correctly The installation script places E binaries in usr local bin E shared library in usr local lib NW virus data in usr local sav E manual pages in usr local man If your installation included InterCheck Server the script also sets up NW a directory to which non Unix workstations can send virus reports at var spool intercheck Now check your system settings section 1 3 Unix server 1 3 Check the system settings In this section you ensure that the environment variables in your login script or profile include the directories that Sophos Anti Virus uses E PATH should include usr local bin NW MANPATH should include usr local man E 1D LIBRARY PATH should include usr local lib Q In AIX the library environment variable is LIBPATH and in HPUX it is SHLIB_ PATH On some systems such as FreeBSD and Linux you can enable Sophos Anti Virus to use the Sophos Anti Virus shared libraries by run
23. esent on target computer is selected Task settings Install SAW E Common Targets Options CID list Install paths Configurations Account details Enter an account name and password for the auto upgrade service NT 2000 Domain Target computer domain Target computer name Current login domain Other User name SWEEPU PD Password A Confirm password coca on 7 Click the CID list tab and ensure the correct path to the CID is shown see appendix 4 if you are not sure of the path Click Apply then click Create In the SAVAdmin message box click Yes to start the installation In the SAVAdmin window you can see the workstations updating Users see the files being copied onto their workstations When installation is complete SAVAdmin shows that the workstations have sophos Anti Virus installed They are protected by InterCheck which means all tiles are checked for viruses as they are accessed by the workstations If the installation is unsuccessful and you tried to install Sophos Anti Virus on more than one version of Windows e g NT and 2000 try repeating this procedure for only the workstations that use the same version of Windows as the workstation you used in section 8 1 Then repeat sections 8 1 8 3 for each of the other Windows versions as necessary 41 Sophos Anti Virus installation guide 42 You can use SAVAdmin to monitor workstation installations of Sophos
24. hould auto run If auto run is disabled run D Launchcd where D is the CD drive 3 In the Sophos CD window click Sophos Anti Virus At the next screen click Windows 95 98 Me and start the setup program 19 Sophos Anti Virus installation guide 4 In the SOPHOS Setup dialog box click Next to continue the installation SOPHOS Setup 5 In the SOPHOS Setup Installation Type dialog box click Central installation update Ensure that InterCheck for Windows 95 98 Me and InterCheck Monitor are selected Click Next 2 SOPHOS Setup Installation Type A loreal retell ation ipa ete 20 Unix server 6 In the SOPHOS Setup Folder Selection dialog box you tell Sophos Anti Virus to use the InterChk directory you created on the Unix server Click the lower Browse button In the Browse for Folder dialog box browse to the shared InterChk directory on the Unix server called Securion in the example below Highlight the directory and click OK At the end of the path to the InterChk directory type W95Inst Click Next J SOPHOS Setup Folder Selection Dana SSB SADA TA AS ecuron sl nterchk S45 net 21 Sophos Anti Virus installation guide Zed re 8 In the SOPHOS Setup Central Installation Options dialog box select Auto update and Prevent removal Click Next vl SOPHOS Setup Central Installation Options r pr L b m E b Bon
25. ions go to section 9 3 45 Sophos Anti Virus installation guide 9 2 Test Sophos Anti Virus 46 1 At one of the Windows 95 98 Me workstations on which you installed sophos Anti Virus in section 9 1 insert the Sophos CD The CD should auto run If auto run is disabled run D Launchcd where D Is the CD drive In the Sophos CD window click Sophos Anti Virus At the next screen click Utilities At the next screen click SAVTEST 3 Click Launch SAVTEST for Win32 platforms In the SavTest32 window on the File menu click On Access Test 2 SavTest32 File Dive Help On Demand Test Piel Es Cleanup Exit Savlest32 creates a file that simulates a virus Sophos Anti Virus reports a virus find on the workstation and confirms that on access detection prevention is working On access detection prevention is also known as InterCheck E Savlezt32 al al On accezz detection prevention functioning correctly If Savlest32 reports that on access detection prevention is not functioning correctly contact Sophos technical support When you exit from Savlest32 the test file is deleted You have tested Sophos Anti Virus E f you want to install Sophos Anti Virus on other Windows 95 98 Me workstations one at a time repeat section 9 1 at each workstation NW f you have installed the SAVAdmin administration tool and want to use it to monitor the Windows 95 98 Me workstations go to sectio
26. llation guide 5 In the SOPHOS Setup dialog box click Next to continue the installation JL SOPHOS Setup 6 In the SOPHOS Setup Folder Selection dialog box click Next to accept the default folders 32 SOPHOS Setup Folder Selection A 5ecunonlnterChkAN TI net 1366 CA Program Files Sophos SWEEF for NT 30 Unix server 7 si In the SOPHOS Setup InterCheck Support and Network Access dialog box select InterCheck Client Click Next S SOPHOS Setup InterCheck Support and Network Access In the SOPHOS Setup Installation Options dialog box ensure Auto update is selected Click Next 1 SOPHOS Setup Installation Options 31 Sophos Anti Virus installation guide 9 In the SOPHOS Setup Auto Update Account Details dialog box in the Domain text box type the computer name In the Account name text box using capital letters type SWEEPUPD In the Password text box type the case sensitive password you used in section 7 see appendix 4 In the Confirm password text box confirm the password Click Next Fe SOPHOS Setup Auto Update Account Details SWEEPUPD 10 In the SOPHOS Setup Auto Update Mode dialog box click Non interactive Deselect Allow users to postpone auto update and ensure the Auto update check frequency is set to 60 minutes Click Next Alawe tie deen lo reconigue Somos esti is an updates 32 Unix server 11 In the SOPHOS Setup Configura
27. n 8 28 Unix server 8 Installing Sophos Anti Virus on the Windows NT 2000 XP workstations This section describes how to install Sophos Anti Virus on the Windows NT 2000 XP workstations on the network There are two alternative methods E Install Sophos Anti Virus on each workstation one at a time by repeating the procedure described in section 8 1 or E Carry out the procedure described in sections 8 1 and 8 2 on one workstation then copy the installation to the other Windows NT 2000 XP workstations using a network administration tool called SAVAdmin as described in section 8 3 The second method is more complicated but saves time on larger networks 8 1 Install Sophos Anti Virus on one workstation To install Sophos Anti Virus on one workstation do the following 1 At the workstation that you used in section 4 if you have not already done so log on with Administrator rights 2 At the taskbar click Start Run 3 In the Run dialog box click Browse Locate and double click Setup exe in servername InterChk NTInst i386 where servername is the name of the server on which you created the central installation directory CID 4 In the Run dialog box click OK Run ki ES Type the name of a program folder or document and Windows will open it for you Oper Securion InterChkANTInst i3864S elup ere r Aunin Separate Memon Space i Cancel Browse 29 Sophos Anti Virus insta
28. n 9 3 Unix server 9 3 To enable SAVAdmin to monitor Windows 95 98 Me workstations If you have installed SAVAdmin on a Windows NT 2000 workstation and you want to monitor Windows 95 98 Me workstation installations of Sophos Anti Virus you can enable SAVAdmin to do this Copy the SAVAgent utility to the StartUp folder of each Windows 95 98 Me workstation where it is run whenever Windows starts Do as follows 1 At the workstation on which you installed SAVAdmin insert a floppy disk 2 Copy C Program Files Sophos SAVAdmin Ver 2 20 Savagent to the floppy disk 3 At any of the Windows 95 98 Me workstations that you would like to monitor using SAVAdmin insert the floppy disk 4 If the workstation is running Windows 95 copy Savagent to C Windows Start Menu Programs StartUp If the workstation is running Windows 98 Me copy Savagent to C Windows All Users Start Menu Programs StartUp The next time Windows starts the SAVAgent utility is run on the workstation enabling SAVAdmin to monitor the workstation Repeat steps 3 and 4 for any other Windows 95 98 Me workstations you would like to monitor using SAVAdmin For more information about SAVAdmin see the SAVAdmin installation guide or the SAVAdmin user manual 47 Sophos Anti Virus installation guide 48 Appendices Installing on multiple Unix computers Installing central reporting Options for non default installation Notes about the installation Sophos
29. ning Idconfig This may require editing of etc 1d so conf If any of these variables are not included add them to the environment variable s as shown in the examples below Do not alter any of the existing settings If you are running the sh ksh or bsh shell enter PATH SPATH usr local bin export PATH If you are running the csh or tsh shell enter setenv PATH values usr local bin where values are the existing settings You should make these variables system wide To do this amend etc login or etc profile Q you do not have a login script you will need to reset these values every time you restart the server Now add the latest virus identity files to the server section 1 4 Sophos Anti Virus installation guide 1 4 Download the latest virus identity files IDEs 10 O Or This section describes how to download IDEs from the Sophos website A virus identity file IDE enables Sophos Anti Virus to detect a specific virus You need IDEs to protect your server against viruses discovered since your version of Sophos Anti Virus was compiled Download the latest IDEs as follows Go to the IDE download page of the Sophos website www sophos com downloads ide Download the compressed IDEs file for your version of Sophos Anti Virus Extract the IDEs to usr local sav If you prefer scroll down the page and download the IDEs one by one to the location above Help with downloading IDEs is
30. ning workstations section 8 3 3 39 Sophos Anti Virus installation guide 8 3 3 Copy Sophos Anti Virus to the remaining workstations 1 In SAVAdmin right click the name of the workstation on which you installed Sophos Anti Virus to display a menu Select Copy SAV Config 2 In the SAVAdmin message box click Yes to save the configuration 5aYAdmin 3 In the Current Copy Paste SAV Config dialog box in the bottom right hand corner ensure the User name text box contains SWEEPUPD in capital letters If the workstations are connected to the server as a workgroup the Domain text box should contain the name of the workstation Click OK Current Copy Paste SAV Contig O SWEEPUPD 4 5ecunon lnterChAkANT Ins 1356 4 In the SAVAdmin window hold down the Ctrl key and click the names of all the Windows NT 2000 XP workstations on which you would like to install Sophos Anti Virus Q Ensure you click only Windows NT 2000 XP workstations 5 Right click one of the selected workstations to display a menu Select Paste SAV Config 40 Unix server 6 In the Task Settings Install SAV dialog box click the Account details tab Click Target computer name In the User name text box using capital letters type SWEEPUPD In the Password text box type the case sensitive password you used in section 7 see appendix 4 In the Confirm password text box confirm the password Ensure Create account if not pr
31. rus alerts sent from Windows Macintosh and OS 2 workstations To use it you need to set up a user and group for the daemon and set permissions on a common directory To install Sophos Anti Virus with InterCheck Server there are six steps Prepare for installation appendix 2 1 Extract the installation files section 1 1 E E E Install Sophos Anti Virus section 1 2 Check the system settings section 1 3 E Add the latest virus identity files section 1 4 El Activate central reporting appendix 2 2 Appendix 2 1 Prepare for installation Before the first installation you must mM create a user group called sweep N create a user called sweep The primary group of this user should be Sweep and the user should not be allowed to log in at a terminal You may want to set the shell to bin false Check your Unix documentation for details of how to do this Now extract the installation files section 1 1 Appendix 2 2 Activate central reporting To use InterCheck Server do as follows 1 Export the var spool intercheck directory so that it is visible to the non Unix workstations 2 Start InterCheck Server Enter icheckd For information on controlling and configuring central reporting refer to the Sophos Anti Virus Unix user manual 51 Sophos Anti Virus installation guide Appendix 3 Options for non default installation You can specify the Sophos Anti Virus files that are installed
32. ted on the Sophos CD at Tools Utils Readutil txt At the Windows NT 2000 XP workstation on which you installed Sophos Anti Virus in section 8 1 insert the Sophos CD The CD should auto run If auto run is disabled run D Launchcd where D is the CD drive Inthe Sophos CD window click Sophos Anti Virus At the next screen click Utilities At the next screen click SAVTEST Click Launch SAVTEST for Win32 platforms In the SavTest32 window on the File menu click On Access Test E SavTest32 lel x Drive Help On Demand Test Cleanup Exit Unix server Savlest32 creates a file that simulates a virus Sophos Anti Virus reports a virus find on the workstation and confirms that on access detection prevention is working On access detection prevention is also known as InterCheck Opening of an infected file was prevented EA Un access detection prevention functioning corectly If Savlest32 reports that on access detection prevention is not functioning correctly contact Sophos technical support When you exit from SavTest32 the test file is deleted You have tested Sophos Anti Virus E f you want to install Sophos Anti Virus on other Windows NT 2000 XP workstations one at a time repeat section 8 1 at each workstation m f you want to copy this installation of Sophos Anti Virus to other Windows NT 2000 XP workstations using SAVAdmin go to section 8 3 E f you want to install
33. test virus identity files IDEs 24 Installation on Windows NT 2000 XP workstations 7 Creating the auto update account 26 8 Installing Sophos Anti Virus on the Windows NT 2000 XP workstations 29 Installation on Windows 95 98 Me workstations 9 Installing Sophos Anti Virus on the Windows 95 98 Me workstations 44 Appendices Appendix 1 Installing on multiple Unix computers 50 Appendix 2 Installing central reporting 51 Appendix 3 Options for non default installation 52 Appendix 4 Notes about the installation 54 Sophos Anti Virus installation guide Installation on the Unix server Sophos Anti Virus installation guide 1 Installing Sophos Anti Virus on the server You must uninstall any other anti virus software before installing Sophos Anti Virus If you have multiple networked Unix computers and you want to install and update Sophos Anti Virus from a central directory rather than carrying out installation at each computer separately go to appendix 1 Before you begin make a note of the name of the Unix server in appendix 4 of this installation guide To check the name go to the server and enter hostname Q InterCheck Server is a daemon that runs on the Unix server and processes virus alerts sent from Windows Macintosh and OS 2 workstations It is not vital to the running and updating of Sophos Anti Virus To use it you need to set up a user and group for the daemon and set permissions on a common directory Refer
34. the instructions in the Windows NT 2000 XP auto update account supplement instead then continue to section 8 At the taskbar click Start Programs Administrative Tools Common User Manager In the User Manager window on the User menu click New User In the New User dialog box in the Username text box type SWEEPUPD in capital letters In the Description text box type SweepUpdateAccount In the Password text box type a password In the Confirm Password text box contirm the password It is case sensitive Deselect User Must Change Password at Next Logon and select User Cannot Change Password and Password Never Expires Click OK If this installation guide will be stored in a secure place make a note of the password in appendix 4 Username SWEEPUPD OO FulName Cancel Description EweepUpdate ccount 0000 Help Password pu Contra p Password M User Cannot Change Password IY Password Never Expires T Account Disabled Unix server 4 In the User Manager window click the SWEEPUPD account On the Policies menu click User Rights User Manager Ma ES User Policies Options Help Username Full Name Description 6 5C 5E Built in account for administering the compute LEN o o o Built in account for quest access to the comp E l a WWE E D z Wee E Administrator sLpdateAccount Groups Description Administrators Members can fully administer the computer domain a Backup
35. tion Details dialog box click Finish to complete the installation If you see a message about error number 1069 click Back and check you have entered the correct details in the SOPHOS Setup Auto Update Account Details dialog box wd e 12 In the SOPHOS Setup message box if you wish to view the Sophos Anti Virus window click Run Sophos Anti Virus Otherwise click Exit SOPHOS Setup I A J L y L E j t d z Remember to update Sophos Anti Virus every month In addition you must update Sophos Anti Virus whenever there is a significant new virus threat Updating is described in the Sophos Anti Virus Unix server update guide 33 Sophos Anti Virus installation guide You have installed Sophos Anti Virus on this workstation E f you want to install Sophos Anti Virus on other Windows NT 2000 XP workstations one at a time repeat this section section 8 1 at each workstation E f you want to test Sophos Anti Virus go to section 8 2 E f you want to copy this installation of Sophos Anti Virus to other Windows NT 2000 XP workstations using SAVAdmin test the installation first as explained in section 8 2 E f you want to install Sophos Anti Virus on any Windows 95 98 Me workstations on the network go to section 9 8 2 Test Sophos Anti Virus 34 Q f you would like to test Sophos Anti Virus on a Windows XP workstation you should first read the Savlest32 section of the utilities readme loca
36. to appendix 2 There are four steps in the Sophos Anti Virus for Unix installation process m Extract the installation files section 1 1 Install Sophos Anti Virus section 1 2 Check the system settings section 1 3 m Add the latest virus identity files section 1 4 Unix server 1 1 Extract the installation files To extract the installation files do as follows 1 Ensure you are logged on to the server with root privileges or are superuser If you have downloaded a Sophos Anti Virus archive file from the Sophos website go straight to step 5 2 Insert the Sophos CD Mount the CD and list the contents of the unix directory 3 Select the archive file that corresponds to your Unix platform 4 Copy the archive file to the tmp directory 5 Untar the archive file into tmp as follows cd tmp tar xvf dist tar where dist tar is the archive for your platform A directory called sav install Is created in the tmp directory and the installation files are extracted to It The sav install directory also contains readmes and man pages including the following Readunix txt Readme file including late news Install txt Installation instructions with details of all options sweep 1 man page for SWEEP the virus scanning program Now you are ready to install Sophos Anti Virus section 1 2 Sophos Anti Virus installation guide 1 2 Install Sophos Anti Virus To install Sophos Anti Virus without Int
Download Pdf Manuals
Related Search