User manual AVIRA ANTIVIR NETWORK BUNDLE 10

[. . . ] About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 2 Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 3 Signs and Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 4 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] You can later add new servers to the IUM node (as described under Adding update servers in Avira IUM ­ Page 33). To set the configuration of each IUM server in your Security Environment, expand the node Avira Internet Update Manager, then expand the server node and use the configuration options under Server Settings and Frontend Settings. 47 Avira Security Management Center Avira GmbH Configuration IUM Server - General Settings Directories To set the target directory in which updated files and program packages are to be stored: under Root directory for update files, enter the target directory on the server. Shares are not possible. NOTE: If the target directory is on a computer in the Intranet, you must enter the path manually in the form of a UNC path. The Avira IUM Service must not be logged in as a local system account, because a login on the target computer would not possible. Example: \\Target computer\Activation\Updates\AntiVir\ UNC Authentication Updates If authentication is necessary on the selected server, activate the option Use authentication for root directory, then fill in the User and Password. In test mode, new files are downloaded to a test directory (hosted by a second HTTP server) for approval. When validated, they can be committed to the default HTTP server and deployed over the Security Environment. If you want the IUM servers to notify you about which products were updated in automatic mode, activate the option Automatically inform attached SMC about new updates. Configure Avira IUM updates Under Configure Avira Internet Update Manager updates, activate the option Install IUM service updates automatically, if you want the update of the Avira IUM to be installed on the update servers immediately after a successful download (Does not apply for the Updater integrated in SMC). Avira GmbH Avira Security Management Center 48 Configuration If you are in test mode and want to update via IUM, please commit the files before update. Otherwise you will not be able to update the SMC Server and Frontend afterwards. Log level To set the level of events to be logged in the IUM logfile, use the Log level dropdown and select: Info, Warning, Error, Trace or Debug. IUM Server - Network Settings Web server To change the default download server, activate the option Use own server list, and enter the address (IP address or computer name) of the required download server in the Update server list field. In the HTTP server area, change the values for Address of server, Port of server 7080, and Port of test server 7100, if they are already used by another application on the computer. If you access the Internet via a proxy server, activate the option Use server in the Proxy server area, then enter the data for the proxy server (Use authentication is optional, if required by the proxy server). HTTP server Proxy server 49 Avira Security Management Center Avira GmbH Configuration IUM Server - Email Settings How to set the notifications sent by Avira Internet Update Manager: Email messages In the Email messages area, activate the option Activate email notification and fill in the following fields: · SMTP Server: Name of the mail server. Example: 192. 168. 1. 100 or mail. testcompany. com Return address: Email address of the sender (optional). Example: sendername@testcompany. com Recipient(s): Email-address of the recipient. Example: recipientname@testcompany. com · · Authentication If an authentication on the mail server is necessary, activate the option Use authentication in the Authentication area and enter the login data for the mail server. In the area Email notification for the following events, select when the Avira IUM should send emails: Error, Warning or Information. You can use the Send test email button, to test the notification settings. The Simple Message Transfer Protocol (SMTP) is used for sending emails. Encrypted transmission of TLS (Transport Layer Security) or SSL (Secure Socket Layer) is not currently possible. Avira GmbH Avira Security Management Center 50 Configuration IUM Frontend Settings Activation of SSL server authentication: Avira SMC supports signed SSL certificates for all its server applications, including Avira IUM Server. Avira IUM Frontend, as client application, supports SSL server authentication (more details on the SSL feature below). 5. 7 SSL Certificates Management SSL provides secure communication using data encryption and server/ client authentication. This means that before any information is exchanged, the client has to verify the true identity of the server and the server has to verify the true identity of the client. Then the communication peers can start exchanging encrypted information. Avira SMC supports signed SSL certificates for all its server applications (Event Manager, IUM Server, SMC Server). SMC Server comes with a new tool that supports SSL certificate creation and deployment. [. . . ] The Simple file sharing should be deactivated: in Windows Explorer, Tools/ Folder Options/ View/ Use simple file sharing (recommended). The SMC Server must have access to the client's hidden drive C$ (\\<client's IP address>\c$\). To ease the installation of SMC Agents over the network, you should use an administrative user account, common to all computers. 8. 2 Prerequisites for ADS synchronization Domain names must be DNS-resolved. In case you use a firewall, you must open all Active Directory ports, such as: - 389 (LDAP) - 88 (Kerberos) - 636 (LDAP over SSL) - 3268 (Global Catalog LDAP) - 3269 (Global Catalog LDAP over SSL) The user account for SMC Server must have access rights to the Active Directory. [. . . ]