Symantec Client Security 2.0 for PC
Contents
1. on page 8 m Ifyou will not use the Symantec System Center for installation rollout start with Installing Symantec Client Security locally from the CD on page 9 m After completing the installation review the post installation tasks Symantec Client Security components Symantec Client Security lets you install only the components that you need to implement security at your site Although you can install and manage the Symantec Client Security server and client programs without the Symantec System Center a centrally managed implementation works best for most businesses The Symantec System Center is required if you want to manage Symantec Client Security servers and clients including legacy antivirus clients from a central console The following management components are installed by default when you install the Symantec System Center m Alert Management System AMS2 console Required if you want to use the enhanced alerting that is provided by AMS m Symantec AntiVirus snap in Required if you want to centrally manage antivirus protection m Symantec Client Firewall snap in Required for firewall client administration m AV Server Rollout tool Required to push the antivirus server installation to remote computers This tool is available on the Symantec Client Security CD m NT Client Install tool Required to push the Symantec Client Security antivirus client installation to remote computers running supp2. m 15MBRAM above the standard NetWare RAM requirements for Symantec AntiVirus NLMs m 116 MB disk space 70 MB disk space for antivirus server files and 46 MB disk space for the antivirus client disk image Note Symantec Client Security is not supported on NetWare servers that are running SFT III Quarantine Server requirements Quarantine Servers have the following requirements m Windows NT 4 0 Workstation Server with Service Pack 6a Windows 2000 Professional Server Advanced Server Windows XP Professional Windows Server 2003 Web Standard Enterprise Datacenter 64 MB RAM m 40 MB disk space for Quarantine Server 500 MB to 4 GB disk space recommended for quarantined items Internet Explorer 5 5 with Service Pack 2 Minimum swap file size of 250 MB Note If you are running Windows Me XP system disk space usage is increased if the System Restore functionality is enabled For information on System Restore see the Microsoft documentation Symantec Client Security client installation requirements Requirements vary based on the type of protection installed to the computer Disk space requirements are based on the installation of all features Symantec Client Security client antivirus and firewall protection for 32 bit computers Symantec Client Security clients have the following requirements m Windows 98 98 SE Me Windows 2000 Professional Windows XP Home Professional Note Windows NT 4 0 Works
3. Server 2003 Web Standard Enterprise Datacenter m 64MBRAM m 80 MB disk space Symantec Client Security server installation requirements Symantec Client Security server runs under several operating systems each with unique installation requirements You should assign a static IP address to Symantec Client Security servers If a client is unavailable when its parent server s address changes it will not be able to locate the parent server when it attempts to check in Microsoft Windows operating systems Symantec Client Security server has the following Windows requirements m Windows NT 4 0 Workstation Server Terminal Server with Service Pack 6a Windows 2000 Professional Server Advanced Server Windows XP Professional Windows Server 2003 Web Standard Enterprise Datacenter m 64MBRAM m 111 MB disk space m 15 MB disk space for AMS server files if you choose to install the AMS server Internet Explorer 4 01 or later Static IP address recommended Note Symantec Client Security does not support scanning for Macintosh viruses on Windows servers with Macintosh volumes Novell NetWare operating systems You should run the Novell Client for NetWare on the computer from which Symantec Client Security will be rolled out to NetWare servers Symantec Client Security server has the following NetWare requirements m NetWare 5 1 with Support Pack 3 or higher NetWare 6 0 with Support Pack 1 or higher NetWare 6 5
4. To run the server setup program 1 Inthe welcome panel do one of the following m To install the server to computers that have never had Symantec Client Security installed click Install and then click Next Toinstall the server to computers that have had Symantec Client Security previously installed click Update and then click Next 2 Inthe License Agreement panel click I agree and then click Next 3 Inthe Select Items panel ensure that Server program is checked If you plan to use Alert Management System AMS2 ensure that it is checked Click Next 5 To continue the installation do one of the following m Manually select Windows computers See To manually select Windows computers on page 6 m Import a list of Windows NT 2000 XP 2003 computers If you are installing in a non WINS environment you must select computers by importing a text file that contains the IP addresses of the computers to which you want to install You can use the same import method in a WINS environment This method is not intended for use with NetWare For instructions on how to import a list of Windows NT based computers see the Symantec Client Security Installation Guide To manually select Windows computers 1 Inthe Select Computers panel under Network expand Microsoft windows network Select a server on which to install and then click Add 3 Repeat step 2 until all of the servers to which you are installing are ad
5. on page 6 Continue the installation See To complete the server installation on page 7 To complete the server installation 1 2 In the Select Computers panel click Finish In the Server Summary panel do one of the following m To accept the default Symantec Client Security installation path click Next m To change the path select a computer and then click Change Destination In the Change Destination dialog box select a destination click OK and then click Next If you are installing to a NetWare server the new folder name is limited to 8 characters In the Select Symantec AntiVirus Server Group panel do one of the following m Under Symantec AntiVirus Server Group type a name for a new server group and then click Next You will be prompted to confirm the creation of the new server group and to specify a password for the server group m Inthe list select an existing server group to join click Next and then type the server group password when you are prompted Select one of the following m Automatic startup On a NetWare server you must manually load Vpstart nlm after you install Symantec Client Security server but Vpstart nlm will load automatically thereafter You must either create or join a server group during the installation process before this takes effect On a Windows NT based computer Symantec Client Security services and AMS services if you installed AMS start automatic
6. the following m Click System Hierarchy m Under System Hierarchy select any object 2 Onthe Tools menu click NT Client Install NT Client Install is available only if you selected the NT Client Install tool when you installed the Symantec System Center This component is selected for installation by default 3 Continue the installation See To run the client setup program on page 8 To run the client setup program 1 Inthe welcome panel click Next 2 Inthe Select Install Source Location panel select the location from which you are deploying the client installation files 3 After you have selected the location click Next In the Select Computers panel under AntiVirus Servers select a computer to act as a parent server 5 Under Available Computers expand Microsoft windows network and then select a computer Click Add Repeat steps 5 and 6 until all of the clients that you want to manage are added You can reinstall to computers that are already running Symantec Client Security You can also import a text file to add Windows NT based clients 8 Doone of the following m Ifyou created a text file that contains IP addresses to import computers that are in non WINS environments continue to step 9 m Ifyou did not create a text file that contains IP addresses to import computers in non WINS environments continue to step 11 9 Toimport the list of computers click Import 10 Locate and double click the te
7. to connect is compliant with the corporate security policy Log forwarding Lets you select the events that clients forward to their parent servers and that secondary servers forward to primary servers POP3 and SMTP Internet email scanning Lets you configure Symantec Client Security clients to scan email body text and attachments that are transported using the POP3 or SMTP protocols The ports scanned for POP3 and SMTP traffic are configurable Outbound email heuristics scanning Lets you enable outbound email heuristics scanning which uses Bloodhound Virus Detection to identify potential threats contained in outgoing messages This feature helps prevent the spread of threats such as worms that use email clients to replicate and distribute themselves across a network Alert Assistant Helps you understand firewall alerts and potential security issues Log Viewer Improved viewer helps you see all of the actions that Symantec Client Security firewall client takes to protect your computer Privacy Control Enhanced version blocks private information in Web browsers email messages and instant messages Location Awareness Lets you implement specific sets of firewall rules and zones based on the network access point used to connect to the Internet Secure Port Secures the ports defined in Trojan horse rules so completely that traffic destined for these ports both inbound and ou
8. to select components m Select Server Group panel Type the name of an existing server group and the password for that group or type the name of a new server group and create a password m Install Options panel Check Auto Protect if you want to enable Auto Protect Check LiveUpdate if you want LiveUpdate to run at the end of the installation If you chose to run LiveUpdate after installation follow the instructions in the LiveUpdate Wizard Installing the client locally The client program protects the computers on which it runs To install the client locally 1 From the Symantec Client Security CD do one of the following m For installation on a 32 bit computer in the root of the CD run Setup exe m For installation on a 64 bit computer run Setup exe from the SAVWIN64 folder Continue with step 3 Warning If the 32 bit version of Setup exe is run on a 64 bit computer the installation may fail without notification For 64 bit installations users must run Setup exe from the SAVWIN64 folder in the root of the CD 2 Inthe Symantec Client Security panel click Install Symantec Client Security gt Install Symantec Client Security 3 Inthe welcome panel click Next Follow the on screen instructions During the installation you will be offered the following choices m Setup Type panel Click Complete to install all of the components that are included with the default installation or Custom to select component
9. 3 Follow the on screen instructions For more information see the LiveUpdate Administrator s Guide PDF on the Symantec Client Security CD Installing Symantec Client Security locally from the CD You can install Symantec Client Security directly from the Symantec Client Security CD To determine whether you need to install the server program or client program do the following m Ifyou want a server to manage virus definitions updates policy settings and configurations for other networked Symantec Client Security servers and clients install the server program m Ifyou want to protect computers that do not manage Symantec Client Security clients or if you want to protect either managed or unmanaged client computers install the client program When you install the client program you specify whether the client is managed or unmanaged Managed clients must specify the name of the parent server Installing the server locally The server program allows you to manage other computers running Symantec Client Security To install the server locally 1 From the Symantec Client Security CD in the SAV folder run Setup exe In the welcome panel click Next Follow the on screen instructions During the installation you will be offered the following choices m Client Server Options panel Click Server m Setup Type panel Click Complete to install all of the components that are included with the default installation or Custom
10. Getting Started 9 symantec About Symantec Client Security Symantec Client Security provides scalable cross platform firewall intrusion detection and antivirus protection for workstations and antivirus protection for network servers You can establish and enforce antivirus and firewall security policies retrieve content updates such virus definitions and intrusion detection signatures control live viruses and analyze logged events Symantec Client Security Symantec Client Security provides a variety of management tools You can use a centralized management console the Symantec System Center running on an administrator computer to manage security on your network connected computers and remotely deploy Symantec Client Security software Additional tools allow you to set up internal distribution of content updates and automate responses to new or unrecognized viruses Computers that are not connected to your network can also be protected with Symantec Client Security Content license files must be distributed to each computer Where to find information Sources of information on using Symantec Client Security include the following m Readme file Contains late breaking information about installing and using Symantec Client Security m Symantec Client Security Installation Guide Provides the information that you need to plan and execute the installation of Symantec Client Security on your network m Symantec Client
11. Security Administrator s Guide Provides the information that you need to manage Symantec Client Security using the Symantec System Center m Symantec Client Security Reference Guide Contains technical product information including information on tools that are on the Symantec Client Security CD Copyright 2004 Symantec Corporation All rights reserved m Symantec Client Security Client Guide Provides the information oa in the U S A that you need to use Symantec Client Security on a client Symantec and the Symantec logo are U S registered computer trademarks of Symantec Corporation Symantec AntiVirus is a trademark of Symantec Corporation Other brands and products are trademarks of their respective holder s m LiveUpdate Administrator s Guide Provides the information that you need to configure and manage the LiveUpdate Administration Utility m Online Help Contains all of the content found in the above guides and more All of the documentation is available in the Docs folder on the Symantec Client Security CD Updates to the documentation are available from the Symantec Technical Support and Platinum Support Web sites Additional information is available from the Symantec Web sites that are listed in the following table Table 1 1 Public Knowledge Base _http www symantec com Releases and updates techsupp enterprise Manuals and documentation Contact options Virus information and http updates
12. Symantec Client Security Installation Guide Symantec System Center and snap in requirements The Symantec System Center requires the following m Windows NT 4 0 Workstation Server with Service Pack 6a Windows 2000 Professional Server Advanced Server Windows XP Professional Windows Server 2003 Web Standard Enterprise Datacenter m 32MBRAM m 36 MB disk space plus additional disk space for the snap ins which are listed separately m Internet Explorer 5 5 with Service Pack 2 m Microsoft Management Console version 1 2 If MMC is not already installed you will need 3 MB free disk space 10 MB during installation Note If Microsoft Management Console version 1 2 is not on the computer to which you are installing the installation program will install it The following snap ins and installation tools have disk space requirements in addition to the Symantec System Center requirements Symantec AntiVirus snap in 6 MB disk space Symantec Client Firewall snap in 1 MB disk space Quarantine Console snap in 35 MB disk space Alert Management System snap in 24 MB disk space AV Server Rollout tool 130 MB disk space NT Client Install tool 2 MB disk space Symantec Client Firewall Administrator requirements The Symantec Client Firewall Administrator has the following requirements m Windows NT 4 0 Workstation Server with Service Pack 6a Windows 2000 Professional Server Advanced Server Windows XP Professional Windows
13. ally every time that the computer restarts m Manual startup On a NetWare server you must manually load Vpstart nlm after you install Symantec Client Security server and every time that the server restarts Selecting this option will have no effect on Windows NT based computers Click Next In the Using the Symantec System Center Program panel click Next 7 Inthe Setup Summary panel read the message that reminds you that you will need your password to unlock the server group in the Symantec System Center and then click Finish 8 Inthe Setup Progress panel view the status of the server installations 9 Finish the installation When Symantec Client Security server is installed to all of the computers that you specified you can check to see if any errors were reported See To check for errors on page 7 To check for errors 1 Inthe Setup Progress panel select a server and then click View Errors 2 When you are done click Close Note When installing to a Windows NT computer you must restart the computer after installation completes If you ve installed to any NetWare computers you need to load the appropriate NLMs See the Symantec Client Security Installation Guide Installing the client program Install the client program to all clients that you want to be managed from the Symantec System Center To start the client installation 1 Inthe Symantec System Center in the left pane do one of
14. consider several factors Windows Installer msi considerations Symantec Client Security uses Windows Installer technology for all client and server installations You can use the standard Microsoft Windows Installer options with the Symantec Client Security settings to configure the installation of Symantec Client Security specific features In addition to the standard installation methods you can deploy client or server installations using msi supported third party tools such Active Directory and Tivoli See the Symantec Client Security Installation Guide Server considerations The following are server considerations m When you are installing to NetWare log on to all of the NetWare servers before you start the installation To install to NetWare Directory Services NDS or bindery you need administrator or supervisor rights m When you install to NDS the computer that is performing the installation must use the Novell Client for NetWare If you encounter problems installing to a bindery server with the Microsoft Client for NetWare install the Novell Client for NetWare and try again m Symantec recommends that you run the Novell Client for NetWare on the computer from which Symantec Client Security server will be rolled out to NetWare servers Client considerations The Symantec Client Security client installation program triggers the uninstallation of the following firewall products m Symantec Client Securit
15. ded under Destination computers 4 Select any NetWare computers to which you want to install See To manually select Novell NetWare computers on page 6 5 Continue the installation See To complete the server installation on page 7 To manually select Novell NetWare computers 1 Inthe Select Computers panel under Available Computers double click NetWare Services 2 Doone of the following m To install to a bindery server double click NetWare Servers and then select a server indicated by a server icon To install to NDS double click Novell Directory Services and then select the SYS volume object in which you want to install Symantec Client Security To locate a SYS volume object double click the tree object and continue expanding the objects until you reach the organizational unit that contains the SYS volume object 3 Click Add If you are installing to NDS you are prompted to type a container user name and password If you type an incorrect user name or password the installation continues normally However when you attempt to start Symantec Client Security on the NetWare server you receive an authentication error and are prompted for the correct user name and password Repeat steps 1 through 4 until the volumes for all of the servers that you are installing to are added under AntiVirus Servers Select any Windows computers to which to install See To manually select Windows computers
16. ministrator Elevated Privileges rather than rights on the granting administrative privileges to target computer the user on the target computer Auto Protect Replaces and scans faster than Realtime File Protection Auto Protect can be loaded on system startup and then unloaded on system shutdown to help protect against viruses such as Fun Love In memory threat scanning Lets you scan running processes to identify and handle threats that are loaded into memory 10 Threat Tracer Lets you identify by IP address and NetBIOS name the source of network share based virus infections on computers that are running Windows NT based operating systems Forced LiveUpdate for Symantec Client Security clients Provides a way to update virus definitions files when clients on which LiveUpdate is installed are using outdated files Expanded threat detection Scans for new threats in the following categories Spyware Adware Dialers Joke Programs Remote Access programs Hack Tools and Trackware Other threats that do not meet these category requirements are included in the Security Risks category Moving clients between servers Lets you move clients from one parent server to another using a drag and drop operation Symantec VPN Sentry Prevents users with nonsecure computers from connecting to a corporate network through a VPN connection and ensures that a computer that is attempting
17. o deploy the installation of managed servers and clients The installation of the Symantec System Center includes installation of all of its management components by default You can deselect any component that you do not want to install If you do not want to use the Symantec System Center continue with Installing Symantec Client Security locally from the CD on page 9 Installing the Symantec System Center Install the Symantec System Center to the computer from which you want to manage antivirus and firewall protection To install the Symantec System Center 1 Insert the Symantec Client Security CD into the CD ROM drive 2 Inthe Symantec Client Security panel click Install Administrator Tools gt Install Symantec System Center 3 Follow the on screen instructions Installing the server program Install the server program to any computer that will manage clients You must designate at least one server as a primary server To start the server installation 1 Inthe Symantec System Center in the left pane do one of the following m Click System Hierarchy m Under System Hierarchy select any object 2 Onthe Tools menu click AV Server Rollout AV Server Rollout is available only if you selected the Server Rollout component when you installed the Symantec System Center This component is selected for installation by default 3 Continue the installation See To run the server setup program on page 6
18. orted Microsoft Windows operating systems This tool is available on the Symantec Client Security CD m Symantec Client Security server Required to manage networked computers running the Symantec Client Security client program It also provides antivirus protection to the computers on which it runs The server program lets you push antivirus and firewall security policies and content updates to managed clients To protect a network server that does not manage Symantec Client Security clients install the Symantec Client Security client program m Symantec Client Security client Required for antivirus firewall and intrusion protection for networked and non networked computers m Symantec Central Quarantine Required if you want automated responses to heuristically detected new or unrecognized viruses Central Quarantine works with Symantec Security Response to automatically repair infected files submitted from Symantec Client Security clients and servers m Symantec Client Firewall Administrator Required if you want to create and modify firewall rules and intrusion detection signatures m LiveUpdate Administration Utility Required if you want to set up an internal LiveUpdate server as a single download point for virus definitions and updates to Symantec products System requirements This section includes system requirements for the main Symantec Client Security components For system requirements for other components see the
19. s m Network Setup Type panel Click Managed to have the client managed by a parent server or Unmanaged to run without a parent server If you select Managed you must know the name of the Symantec Client Security server to which the client will connect m Install Options panel Check Auto Protect if you want to enable Auto Protect Check LiveUpdate if you want LiveUpdate to run at the end of the installation If you chose to run LiveUpdate after installation follow the instructions in the LiveUpdate Wizard Post installation tasks After installation you should do the following m Create a primary server for each server group m Perform a content update using the method of your choice such as LiveUpdate m Set up and distribute your security policies m Run a virus scan on all protected computers For information on how to perform management tasks see the Symantec Client Security Administrator s Guide What s new in this release Symantec Client Security includes new and improved features The following table lists and describes what s new in this release Windows Installer Lets you install Symantec Client msi client and server Security clients and servers using Windows Installer technology to installations support msi based installation and deployment Deployment of Lets you install Symantec Client installations Security from the Microsoft without granting Management Console MMC using ad
20. securityresponse symantec com Product news and http updates enterprisesecurity symantec com Platinum support Web https www access secure symantec com platinum How to get started This card describes the main methods for installing Symantec Client Security and provides the information that you need to run the product For a description of all of the methods that you can use to install Symantec Client Security including Windows Installer msi technology the Web Installer third party tools and logon scripts see the Symantec Client Security Installation Guide If you are upgrading from an earlier version of Symantec Client Security see Migrating to the current version of Symantec Client Security in the Symantec Client Security Installation Guide To use this card to get started do the following m Read about the Symantec Client Security components and determine the components that you want to install m Review the system requirements for the selected components m Review all preinstallation information and perform any required tasks m Select an implementation strategy as follows m Ifyou plan to use the Symantec System Center to manage Symantec Client Security and to deploy installations to managed computers start with Installing Symantec Client Security from the Symantec System Center on page 5 If you plan to use the administration tools continue with Installing administration tools
21. tation is supported only for Symantec Client Security antivirus clients installed from the Symantec System Center which does not install firewall protection mg 128MBRAM minimum m 80 MB disk space m Internet Explorer 5 01 Service Pack 2 or later Symantec Client Security antivirus client for 32 bit computers Symantec Client Security antivirus clients for 32 bit computers have the following requirements m Windows 98 98 SE Me Windows NT 4 0 Workstation Server Terminal Server with Service Pack 6a Windows 2000 Professional Server Advanced Server Windows XP Home Professional Tablet PC for Windows XP Tablet PC antivirus client only Windows Server 2003 Web Standard Enterprise Datacenter m 32MBRAM minimum m 55 MB disk space m Root Certificate Update Windows 98 98 SE Terminal Server clients connecting to a computer with antivirus protection have the following additional requirements m Microsoft Terminal Server RDP Remote Desktop Protocol client m Citrix Metaframe ICA client 1 8 or later Symantec Client Security antivirus client for 64 bit computers Symantec Client Security antivirus clients for 64 bit computers have the following requirements m Windows XP 64 bit Edition Version 2003 Windows Server 2003 Enterprise Datacenter 64 bit 32 MB RAM minimum 70 MB disk space Internet Explorer 4 01 or later Itanium 2 processor Before you install Before you begin any installation procedure you need to
22. tbound never triggers firewall rulebase inspection Settings Manager Lets you export and import firewall policy files to provide backup and restore functionality Ad Blocking Enhanced version lets you tailor firewall settings for specific Web sites and HTML strings 11
23. ust manually run Setup exe 2 Inthe Symantec Client Security panel click Install Administrator Tools gt Install Quarantine Console 3 Follow the on screen instructions To install the Quarantine Server 1 On the computer on which you want to install the Quarantine Server insert the Symantec Client Security CD into the CD ROM drive 2 Inthe Symantec Client Security panel click Install Administrator Tools gt Install Central Quarantine Server 3 Follow the on screen instructions For more information see the Symantec Central Quarantine Administrator s Guide PDF on the Symantec Client Security CD Installing Symantec Client Firewall Administrator Symantec Client Firewall Administrator is installed directly from the CD To install Symantec Client Firewall Administrator 1 Insert the Symantec Client Security CD into the CD ROM drive 2 Inthe Symantec Client Security panel click Install Administrator Tools gt Install Symantec Client Firewall Administrator 3 Follow the on screen instructions Installing the LiveUpdate Administration Utility Install the LiveUpdate Administration Utility on a Windows NT computer that is running the antivirus server program and then configure it To install the LiveUpdate Administration Utility 1 Insert the Symantec Client Security CD into the CD ROM drive 2 Inthe Symantec Client Security panel click Install Administrator Tools gt Install LiveUpdate Administrator
24. xt file that contains the computer names Asummary list of computers to be added under Available Computers appears During the authentication process you may need to provide a user name and password for computers that require authentication 11 Inthe Selection Summary dialog box click OK During the authentication process Setup checks for error conditions You are prompted to view this information interactively on an individual computer basis or to write the information to a log file for later viewing 12 When you are prompted to view the error information select one of the following m Yes Display the information on an individual computer basis m No Write it to a log file If you create a log file it is located under C Winnt Savceclin txt 13 Inthe Select Computers panel click Finish 14 Inthe Status of Remote Client Installations window click Done Installing administration tools Install the administration tools that you want to use to manage security at your site Installing Central Quarantine The Quarantine Console snap in must be installed to a computer running the Symantec System Center Install the Quarantine Server to a computer that you want to use to store infected files To install the Quarantine Console snap in 1 On the computer on which the Symantec System Center is installed insert the Symantec Client Security CD into the CD ROM drive If your computer is not set to automatically run a CD you m
25. y all versions m Symantec Client Firewall 5 0 5 1 m Norton Personal Firewall 2003 m Symantec Desktop Firewall 2003 You must manually uninstall all other versions before installing Symantec Client Security firewall client including Norton Personal Firewall version 2004 Quit all other Windows programs before installing Symantec Client Security firewall client Other active programs may interfere with the installation Note Installing Symantec Client Security firewall client without Symantec Client Security antivirus client is not supported Disabling the Windows XP firewall Windows XP includes a firewall that can interfere with Symantec Client Security firewall client protection features You must disable the Windows XP firewall before installing Symantec Client Security firewall client To disable the Windows XP firewall 1 On the Windows XP taskbar click Start gt Settings gt Control Panel 2 Inthe Control Panel window double click Network Connections 3 Inthe Network Connections window right click the active connection and then click Properties 4 Onthe Advanced tab in the Internet Connection Firewall section uncheck Protect my computer and network by limiting or preventing access to this computer from the Internet 5 To close the settings window click OK Installing Symantec Client Security from the Symantec System Center You can install the Symantec System Center and use the management console t
Download Pdf Manuals
Related Search