1.7.0 software mcafee virusscan enterprise for linux · pdf file• kernel-level scan cache...

Configuration Guide
McAfee VirusScan Enterprise for Linux1.7.0 SoftwareFor use with ePolicy Orchestrator 4.5.0 and 4.6.0

COPYRIGHTCopyright 2011 McAfee, Inc. All Rights Reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or byany means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.
TRADEMARK ATTRIBUTIONSAVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE),MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registeredtrademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive ofMcAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.
LICENSE INFORMATION
License AgreementNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETSFORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOUHAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOURSOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR AFILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SETFORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OFPURCHASE FOR A FULL REFUND.
2 McAfee VirusScan Enterprise for Linux 1.7.0 Software Configuration Guide For use with ePolicy Orchestrator 4.5.0 and 4.6.0

Contents
Preface 5About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5What's in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Finding product documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1 Introducing McAfee VirusScan Enterprise for Linux 7Product Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Whats new in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
2 Integrating with ePolicy Orchestrator 9Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Installing McAfee VirusScan Enterprise for Linux using ePolicy Orchestrator . . . . . . . . . . 10Upgrading to McAfee VirusScan Enterprise for Linux 1.7 using ePolicy Orchestrator . . . . . . . 12Sending an agent wake-up call . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13Setting policies within ePolicy Orchestrator . . . . . . . . . . . . . . . . . . . . . . . 14
Creating or editing policies . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Enforcing policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Scheduling tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Creating a Product Update task . . . . . . . . . . . . . . . . . . . . . . . . . 15Creating an on-demand scan task . . . . . . . . . . . . . . . . . . . . . . . . 16
Configuring reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Uninstallation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Removing McAfee VirusScan Enterprise for Linux from the client computer . . . . . . . 18Removing McAfee VirusScan Enterprise for Linux from ePolicy Orchestrator . . . . . . . 19
Index 21
McAfee VirusScan Enterprise for Linux 1.7.0 Software Configuration Guide For use with ePolicy Orchestrator 4.5.0 and 4.6.0 3

Contents

Preface
This guide provides the information you need to configure, use and maintain McAfee VirusScanEnterprise for Linux using McAfee ePolicy Orchestrator software. This guide provides detailedinformation on how you can deploy VirusScan Enterprise for Linux on client computers and managethe product using ePolicy Orchestrator.
For instructions on how to install McAfee VirusScan Enterprise for Linux software version 1.7 on astand-alone computer, see the McAfee VirusScan Enterprise for Linux 1.7 Installation Guide. Fordetailed information all phases of product use from configuration to troubleshooting, see the McAfeeVirusScan Enterprise for Linux 1.7 Product Guide.
Contents
About this guide Finding product documentation
About this guideThis information describes the guide's target audience, the typographical conventions and icons usedin this guide, and how the guide is organized.
AudienceMcAfee documentation is carefully researched and written for the target audience.
The information in this guide is intended primarily for:
Administrators People who implement and enforce the company's security program.
Users People who use the computer where the software is running and can access some or all ofits features.
ConventionsThis guide uses the following typographical conventions and icons.
Book title or Emphasis Title of a book, chapter, or topic; introduction of a new term; emphasis.
Bold Text that is strongly emphasized.
User input or Path Commands and other text that the user types; the path of a folder or program.
Code A code sample.
User interface Words in the user interface including options, menus, buttons, and dialogboxes.
Hypertext blue A live link to a topic or to a website.
Note: Additional information, like an alternate method of accessing an option.

Tip: Suggestions and recommendations.
Important/Caution: Valuable advice to protect your computer system,software installation, network, business, or data.
Warning: Critical advice to prevent bodily harm when using a hardwareproduct.
What's in this guide This guide is organized to help you find the information you need.
This guide provides you with an introduction to McAfee VirusScan Enterprise for Linux and how tointegrate it with ePolicy Orchestrator.
Topics include:
Deploying McAfee VirusScan Enterprise for Linux using ePolicy Orchestrator
Settings policies within ePolicy Orchestrator
Scheduling tasks such as product update and on-demand scan
Configuring reports
Removing the software
Finding product documentationMcAfee provides the information you need during each phase of product implementation, frominstallation to daily use and troubleshooting. After a product is released, information about the productis entered into the McAfee online KnowledgeBase.
Task
1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.
2 Under Self Service, access the type of information you need:
To access... Do this...
User documentation 1 Click Product Documentation.
2 Select a product, then select a version.
3 Select a product document.
KnowledgeBase Click Search the KnowledgeBase for answers to your product questions.
Click Browse the KnowledgeBase for articles listed by product and version.
PrefaceFinding product documentation
http://mysupport.mcafee.com

1 Introducing McAfee VirusScan Enterprisefor LinuxMcAfee VirusScan Enterprise for Linux (previously known as LinuxShield) detects and removes virusesand other potentially unwanted software on Linux-based systems.
This information is intended for network administrators who are responsible for their companysanti-virus and security program.
Contents
Product Features Whats new in this release
Product FeaturesThis section describes the product features for the McAfee VirusScan Enterprise for Linux software.
McAfee VirusScan Enterprise for Linux software has the following features:
Support for 64-bit AMD64/Intel EM64T operating systems.
The latest version (5400) of the McAfee anti-virus engine.
Incremental Virus Signature (DAT) updates.
Mod-versioning for automatic kernel support.
Regular expression based exclusions for On-access scan and On-demand scan from the user interface.
Scanning
Comprehensive on-access anti-virus scanning and cleaning using the McAfee scanning engine.
On-access scanning for local file systems, NFS and Samba/CIFS.
Kernel-level scan cache for improved performance.
Scheduling of on-demand scans.
Scheduling of updates for scanning engine and virus definition files.
Administration
Remote administration using browser-based interface.
Secure browser interface with authentication and HTTPS (SSL) support.
Remote administration and reporting using ePolicy Orchestrator 4.5 or 4.6.
1

Reporting
Real-time statistics.
Detailed database for detected items and system events.
Ability to query the database by date range or individual field va

1.7.0 software mcafee virusscan enterprise for linux · pdf file• kernel-level scan cache...

Documents