Symantec AntiVirus for Network Attached Storage 5.1

Transcription

1 Getting Started Symantec AntiVirus for Network Attached Storage 5.1 This chapter includes the following topics: About Symantec AntiVirus for Network Attached Storage 5.1 About documentation What s new in version 5.1 Supported storage devices About implementing Symantec AntiVirus for Network Attached Storage 5.1 About preparing for installation Where to get more information Copyright 2007 Symantec Corporation. All rights reserved. Printed in the U.S.A. 08/07 PN: Symantec and the Symantec logo are U.S. registered trademarks of Symantec Corporation. Symantec AntiVirus is a trademark of Symantec Corporation. Other brands and products are trademarks of their respective holder/s.

2 2 Symantec AntiVirus for Network Attached Storage 5.1 About Symantec AntiVirus for Network Attached Storage 5.1 About Symantec AntiVirus for Network Attached Storage 5.1 About software components Symantec AntiVirus for Network Attached Storage 5.1 provides virus scanning and repair services for a number of network-attached storage (NAS) devices. Symantec AntiVirus for Network Attached Storage 5.1 features the Symantec Scan Engine version 5.1, a carrier-class virus scanning and repair engine. The Symantec Scan Engine features all of the virus-scanning technologies that are available in Symantec antivirus products, making the Symantec Scan Engine one of the most effective virus solutions available for detecting and preventing virus attacks. You can scan files for viruses automatically as they are accessed from storage before the requesting user gains access to it. Based on a configurable virus scan policy, when a virus is found in a file, the file is repaired. The clean file is stored on the NAS device and only then is the requesting user granted access. Symantec Scan Engine uses the following protocols to interface with networkattached storage devices: The Internet Content Adaptation Protocol (ICAP), version 1.0, as presented in RFC 3507 (April 2003) A proprietary implementation of remote procedure call (RPC) The scan engine native protocol Each NAS device maintains a connection with Symantec Scan Engine to request scanning and repairing of files. In most cases, adding virus scanning to a supported NAS device requires installation and configuration of the following components: Symantec Scan Engine, which provides the virus scanning and repair services Connector, which lets the NAS device communicate with Symantec Scan Engine The connector handles the communication between the scan engine and the NAS device and interprets the results that are returned from the scan engine after scanning. The manufacturer of the NAS device develops and provides support to the connector. The connector typically is installed and configured on the NAS device. (In some cases, the manufacturer pre-installs the connector.)

3 Symantec AntiVirus for Network Attached Storage 5.1 About documentation 3 Figure 1-1 shows a typical integration of a network attached storage device with Symantec Scan Engine. Figure 1-1 Integration of a network attached storage device with the Symantec Scan Engine 1. The client tries to access a file on the network attached storage device. 2. The network attached storage device, by means of a connector, sends the file to the Symantec Scan Engine for scanning. 3. Symantec Scan Engine scans the file, repairs it if it is infected, and returns the clean file to the network attached storage device. 4. The network attached storage device writes the cleaned file to disk, caches the fact that the file has been cleaned, and sends the file to the client. About documentation To configure Symantec AntiVirus for Network Attached Storage 5.1 to work with one of the supported NAS devices, you need the documentation that is included in the Symantec AntiVirus for Network Attached Storage 5.1 distribution package. You need the documentation that is provided by the manufacturer of the NAS device as well. The Symantec AntiVirus for Network Attached Storage 5.1 distribution package includes the following documents: Symantec Scan Engine Implementation Guide Symantec AntiVirus for Network Attached Storage 5.1 Integration Guide The manufacturer of the NAS device develops the connector to integrate with Symantec Scan Engine. The manufacturer of the NAS device also prepares and distributes supporting documentation for the connector. Obtain the connector

4 4 Symantec AntiVirus for Network Attached Storage 5.1 What s new in version 5.1 and any supporting documentation from the manufacturer if you do not receive it with the NAS device. What s new in version 5.1 Table 1-1 lists the new and enhanced product features in Symantec Scan Engine. Table 1-1 Feature Scanning for security risks New Features Description Symantec Scan Engine can detect security risks for clients that use ICAP. Security risks include, but are not limited to, adware, dialers, hack tools, joke programs, remote access programs, spyware, and trackware. Additional operating system support Ability to perform silent upgrades Certificate Import Utility Support for SESA 2.5 Logging and alerting functionality enhancements Symantec Scan Engine supports Solaris 10 (with a SPARC processor only.) You can perform silent upgrades for the supported operating systems. This is useful when you are installing or upgrading multiple Symantec Scan Engines that have identical input values. Symantec Scan Engine secures the HTTPS and SSL servers with public and private keys, which it creates when you install the product. The scan engine can also import keys from third-party certificates thus ensuring enhanced security. Symantec Scan Engine supports logging events to the Symantec Enterprise Security Architecture (SESA) version 2.5. SESA and Symantec Incident Manager provide an open, standards-based foundation for managing security events from Symantec clients, gateways, servers, and Web servers. You can configure the scan engine to send alerts when specific thresholds are met or exceeded. For example, you can configure the scan engine to send an SMTP alert if 20 viruses of the same type are detected in a 10-minute interval.

5 Symantec AntiVirus for Network Attached Storage 5.1 Supported storage devices 5 Supported storage devices Symantec AntiVirus for Network Attached Storage 5.1 supports a number of storage devices. Table 1-2 gives the list of storage devices, its supported versions, and the protocol that Symantec Scan Engine uses to interface with these storage devices. Table 1-2 Supported storage devices and protocols Storage device Protocol used Supported version Network Appliance (NetApp) Filer RPC Data ONTAP version 6.1.3R2 or later Hitachi USP/NSC NAS Blade ICAP Hitachi AMS/WMS with NAS Option ICAP Sun StorageTek 5000 NAS Appliance ICAP Sun NAS Firmware Sun StorageTek 9990 NAS/9985 NAS ICAP BlueArc Titan NAS Server RPC 4.0+ Hitachi High-performance NAS Platform RPC 4.0+ EMC Celerra Network Server ICAP CAVA 3.6.x Note: If the scan engine uses the RPC protocol to interface with your network attached storage device, Symantec Scan Engine can only be installed on a Windows 2000 Server/Server 2003 computer. About implementing Symantec AntiVirus for Network Attached Storage 5.1 Implementation of Symantec AntiVirus for Network Attached Storage 5.1 involves the following steps: Ensure that each NAS device in the group or cluster is functional and installed in accordance with the accompanying product documentation. If applicable, install the connector on the NAS device. (In some cases, the manufacturer pre-installs the connector.)

6 6 Symantec AntiVirus for Network Attached Storage 5.1 About preparing for installation For more information about the required components for your network attached storage device, see the Symantec AntiVirus for Network Attached Storage 5.1 Integration Guide on the CD. For more information about installing and configuring your NAS device and its connector, see the appropriate NAS device documentation. Install Symantec Scan Engine on a separate computer. See About preparing for installation on page 6. Symantec Scan Engine is included in the Symantec AntiVirus for Network Attached Storage 5.1 CD. For more information about installing and configuring the scan engine, see the Symantec Scan Engine Implementation Guide. Configure Symantec Scan Engine. Change the communication protocol in accordance with your NAS device and configure protocol-specific options through the administrative interface of the scan engine. For more information about configuring Symantec Scan Engine, see the Symantec AntiVirus for Network Attached Storage 5.1 Integration Guide or the Symantec Scan Engine Implementation Guide. Configure the virus scanning functionality on each NAS device. For more information on configuring the virus scanning functionality on the NAS device, see the Symantec AntiVirus for Network Attached Storage 5.1 Integration Guide and the appropriate NAS device documentation. About preparing for installation Before you install Symantec Antivirus for Network Attached Storage 5.1, you should ensure that your computer meets the system requirements for installing the scan engine. The scan engine is included on the Symantec AntiVirus for Network Attached Storage 5.1 CD. If the scan engine uses the RPC protocol to interface with your network attached storage device, Symantec Scan Engine can only be installed on a Windows 2000 Server/Server 2003 computer. For more information about installing the scan engine, see the Symantec Scan Engine Implementation Guide on the product CD.

7 Symantec AntiVirus for Network Attached Storage 5.1 About preparing for installation 7 Windows 2000 Server/Server 2003 system requirements The following are the system requirements for installing Symantec AntiVirus for Network Attached Storage 5.1 on a Windows 2000 Server/Server 2003: Operating system Windows 2000 Server with the most current service pack Windows Server 2003 (32-bit) Processor Memory Disk space Pentium 4 processor 1 GHz or higher 512 MB of RAM or higher 500 MB of hard disk space Hardware 1 network interface card (NIC) running TCP/IP with a static IP address Internet connection to update definitions Software J2SE Runtime Environment (JRE) 5.0 Update 6 or later (within the version 5 platform) installed JRE 5.0 Update 6 is provided on the product CD in the following folder: Java\Win2K Microsoft Internet Explorer 6.0 (with the most recent service pack that is available) Internet Explorer is only required for Web-based administration. Internet Explorer must be installed on a computer from which you want to access the Symantec Scan Engine console. The computer must have access to the server on which Symantec Scan Engine runs. Solaris system requirements The following are the system requirements for installing Symantec AntiVirus for Network Attached Storage 5.1 on a Sun Solaris system: Operating system Solaris 9 and 10 (primary) Ensure that your operating system has the most recent patches that are available. Processor Memory Disk space SPARC 400 MHz or higher 512 MB of RAM or higher 500 MB of hard disk space Hardware 1 network interface card (NIC) running TCP/IP with a static IP address Internet connection to update definitions

8 8 Symantec AntiVirus for Network Attached Storage 5.1 About preparing for installation Software J2SE Runtime Environment (JRE) 5.0 Update 6 or later (within the version 5 platform) installed JRE 5.0 Update 6 (self-extracting) is provided on the product CD in the following folder: Java\Solaris If you install the self-extracting JRE, ensure that you note the installation location. You must provide the location of the JRE if the installer is unable to detect it. Microsoft Internet Explorer 6.0 (with the most recent service pack that is available) Internet Explorer is only required for Web-based administration. Internet Explorer must be installed on a computer from which you want to access the Symantec Scan Engine console. The computer must have access to the server on which Symantec Scan Engine runs. Linux system requirements The following are the system requirements for installing Symantec AntiVirus for Network Attached Storage 5.1 on a Linux system: Operating system Red Hat Enterprise Linux 3.0 Red Hat Linux Advanced Server 2.1 SuSE Linux Enterprise Server 9 Processor Memory Disk space Pentium 4 processor 1 GHZ or higher 512 MB of RAM or higher 500 MB of hard disk space Hardware 1 network interface card (NIC) running TCP/IP with a static IP address Internet connection to update definitions

9 Symantec AntiVirus for Network Attached Storage 5.1 Where to get more information 9 Software J2SE Runtime Environment (JRE) 5.0 Update 6 or later (within the version 5 platform) installed JRE 5.0 Update 6 for Red Hat is provided on the product CD in the following folder: Java\Red Hat Install the JRE using Red Hat Package Manager (RPM). Ensure that you note the installation location. You must provide the location of the JRE if the installer is unable to detect it. Microsoft Internet Explorer 6.0 (with the most recent service pack that is available) Internet Explorer is only required for Web-based administration. Internet Explorer must be installed on a computer from which you want to access the Symantec Scan Engine console. The computer must have access to the server on which Symantec Scan Engine runs. Where to get more information For more information about using this product, the following resources are available on the Symantec AntiVirus for Network Attached Storage 5.1 CD at the following locations: Symantec AntiVirus for Network Attached Storage 5.1 Integration Guide Symantec Scan Engine Implementation Guide SAV_NAS\Docs\ Scan_Engine\Docs\ You can visit the Symantec Web site for more information about your product. The following online resources for Symantec Scan Engine and its supported network attached storage devices are available: Provides access to the technical support Knowledge Base, news groups, contact information, downloads, and mailing list subscriptions Provides product news and updates support/index.jsp Provides access to the Virus Encyclopedia, which contains information about all known threats; information about hoaxes; and access to white papers about threats security_response/index.jsp

10 10 Symantec AntiVirus for Network Attached Storage 5.1 Where to get more information Contacting NetApp Contacting Sun Contacting Hitachi Contacting BlueArc Contacting EMC Sales enquiries: company/contact.cgi AntiVirus Scanning Best Practices Guide is available at: library/tr/3107.pdf Sales enquiries: index.jsp Sales enquiries: corporate/contacts/index.html For more information on integrating Hitachi NAS Products with Symantec Scan Engine: wp_nas_products_symantec_ pdf Sales inquiries: html/company/contact-us.shtml Sales enquiries: howtobuy/ For more information on integrating EMC Celerra Network Server with Symantec Scan Engine, ask for the document titled Using Celerra AntiVirus Agent from EMC.