Mac-Lab/CardioLab Anti-Virus Information Software version 6.9.6

Transcription

1 Mac-Lab/CardiLab Anti-Virus Infrmatin Sftware versin Prduct Grup: Prducts: Subject: Date: Interventinal Invasive Prducts Mac-Lab IT/XT/XTi, CardiLab IT/XT/XTi, SpecialsLab and CmbLab IT/XT/XTi Recrding Systems, Centricity Cardilgy Data Management Systems Anti-Virus Infrmatin 25-February-2015 Page 1 f 25

2 CONTENTS Mac-Lab/CardLab/INW Server v6.9.6 Anti-Virus Installatin... 4 Anti-Virus Requirements... 4 Validated Anti-Virus Sftware... 5 User Accunt Cntrl... 5 Custmer-Prvided Server Cnfiguratin... 5 Anti-Virus Installatin Instructins... 6 Anti-Virus Sftware Cmmn Installatin Prcedures... 6 Symantec EndPint Prtectin... 8 Installatin Overview... 8 Pre-Installatin Guidelines... 8 Symantec EndPint Prtectin Deplyment Steps (Preferred Push Installatin Methd)... 8 Symantec EndPint Prtectin Server Cnsle Cnfiguratins... 9 Symantec EndPint Prtectin Pst Installatin Guidelines McAfee VirusScan Enterprise Installatin Overview McAfee VirusScan Enterprise Installatin Prcedure McAfee VirusScan Enterprise Cnfiguratin McAfee eplicy Orchestratr Installatin Overview Pre-Installatin Guidelines McAfee eplicy Orchestratr Deplyment Steps (Preferred Push Installatin Methd) McAfee eplicy Orchestratr Server Cnsle Cnfiguratin McAfee eplicy Orchestratr Pst Installatin Trend Micr OfficeScan Client/Server Editin Installatin Overview Pre-Installatin Guidelines Trend Micr OfficeScan Deplyment Steps (Preferred Push Installatin Methd) Trend Micr OfficeScan Server Cnsle Cnfiguratin Trend Micr OfficeScan Pst Installatin Guidelines Page 2 f 25

3 Page 3 f 25 GE Healthcare

4 Mac-Lab/CardLab/INW Server v6.9.6 Anti-Virus Installatin Anti-virus sftware supprts facilities in cmplying with privacy regulatins, such as HIPAA. Anti-Virus Requirements WARNING: ANTI-VIRUS SOFTWARE INSTALLATION The System is delivered withut anti-virus prtectin. It is recmmended t have validated anti-virus sftware installed n the system befre cnnecting t any netwrk. Lack f validated virus prtectin culd lead t system instability r failure. Nte the fllwing requirements: Anti-virus sftware is nt prvided with the Mac-Lab/CardiLab system and is the custmer s respnsibility t acquire, install, and maintain. The custmer is respnsible fr updating anti-virus definitin files. If a virus is fund cntact the facility System Administratr and GE Technical Supprt. Install nly the anti-virus sftware packages listed in the listed in the Validated Anti-Virus Sftware sectin. Lg in as an Administratr r member f that grup t perfrm the activities in this dcument. Use a language versin f the validated anti-virus sftware that matches the perating system language if pssible. If there is n validated anti-virus sftware that matches the perating system language, install the English versin f the anti-virus sftware. Page 4 f 25

5 Validated Anti-Virus Sftware WARNING: NOTE: SYSTEM INSTABILITY D nt install r use unvalidated anti-virus sftware (including unvalidated versins). Ding s may result in system instability r failure. Use nly validated anti-virus sftware in the apprpriate language versin. If the language specific anti-virus sftware is nt available, install the English versin f anti-virus sftware. The Mac-Lab/CardiLab versin systems have been validated t run with the sftware listed in the fllwing table. Supprted Anti-Virus Sftware Supprted Languages Supprted Anti-Virus Sftware Versin McAfee VirusScan Enterprise English 8.8 Patch 3 McAfee eplicy Orchestratr (with McAfee VirusScan Enterprise 8.8 Patch 3) English v5.0 Symantec EndPint Prtectin English Trend Micr OfficeScan Client/Server Editin English 10.6 SP2 NOTE: Previusly supprted CA Ttal Defense Anti-Virus is n lnger a cmmercially available prduct. User Accunt Cntrl User Accunt Cntrl is a Windws feature that prevents unauthrized changes t a cmputer. During certain prcedures in this manual, a User Accunt Cntrl message is displayed. When this message is displayed as a result f fllwing the prcedures in this manual, elevate with the same administratr r member f that grup accunt that yu have lgged in as. Custmer-Prvided Server Cnfiguratin The anti-virus management cnsle is required t be installed n the Custmer-Prvided Server. The cmmunicatin between Custmer-Prvided Server and Mac-Lab/CardiLab devices can be accmplished in different ways including: 1. Adding t INW dmain. Page 5 f 25

6 2. Adding t Member Server dmain. 3. Crss dmain authenticatin. NOTE: The custmer-prvided server shuld have tw netwrk prts. One netwrk prt t cnnect t the Centricity Cardilgy INW netwrk and the secnd netwrk prt t cnnect t the hspital netwrk. Anti-Virus Installatin Instructins Anti-Virus Sftware Cmmn Installatin Prcedures Use the prcedures in this sectin when they are referenced in the anti-virus sftware installatin instructins. Disable Lpback Cnnectin On an Acquisitin system cnnected t the Mac-Lab/CardiLab envirnment, disable the Lpback Cnnectin t discver all client systems with the same subnet mask n the dmain. 1. Lg n as Administratr r a member f that grup. 2. Right-click Netwrk n the desktp and select Prperties. 3. Click Change adapter settings. 4. Right-click Lpback Cnnectin and select Disable. 5. Restart the Acquisitin system. NOTE: Disabling the Lpback cnnectin n the Acquisitin system is required t discver all client systems with same subnet mask n the dmain. Enable Lpback Cnnectin On an Acquisitin systems cnnected t the Mac-Lab/CardiLab envirnment, enable the Lpback Cnnectin using the steps belw. 1. Lg n as Administratr r member f that grup. 2. Right-click Netwrk n the desktp and select Prperties. 3. Click Change adapter settings. 4. Right-click Lpback Cnnectin and select Enable. 5. Restart the Acquisitin system. Cnfigure Cmputer Brwser Service Befre Anti-Virus Installatin Check the Cmputer Brwser service setting n netwrked Acquisitin and Review systems t make sure it is cnfigured crrectly. 1. Click Start > Cntrl Panel > Netwrk and Sharing Center. 2. Click Change advanced sharing settings. Page 6 f 25

7 3. Expand Hme r Wrk. 4. Click Turn n file and printer sharing. 5. Click Save changes. 6. Click Start > Run. 7. Type services.msc and press Enter. 8. Duble-click the Cmputer Brwser service. 9. Change the Startup type t Autmatic. 10. Click Start. 11. Click OK. 12. Clse the Services windw. Cnfigure Cmputer Brwser Service After Anti-Virus Installatin Check the Cmputer Brwser service setting n netwrked Acquisitin and Review systems t make sure it is cnfigured crrectly. 1. Click Start > Run. 2. Type services.msc and press Enter. 3. Duble-click the Cmputer Brwser service. 4. Change the Startup type t Manual. 5. Click OK. 6. Clse the Services windw. Page 7 f 25

8 Symantec EndPint Prtectin Installatin Overview Install Symantec EndPint Prtectin in a netwrked Mac-Lab/CardiLab envirnment nly. In a netwrked envirnment, the Symantec EndPint Prtectin must be installed n the custmer-prvided server and then deplyed t the Centricity Cardilgy INW server and Acquisitin/Review wrkstatin as clients. Use the fllwing instructins t install and cnfigure Symantec EndPint Prtectin fr English. Virus updates are the respnsibility f the facility. Update the definitins regularly t ensure that the latest virus prtectin is n the system. Pre-Installatin Guidelines 1. On the custmer-prvided server, make sure Symantec EndPint Prtectin Manager is installed befre cntinuing with these steps. 2. On the custmer-prvided server, pen inbund prt 8014 and name it IN_8014_Symantec and allw inbund cnnectins fr dmain, public, and private. 3. Lg n as Administratr r a member f that grup n all client systems (Acquisitin, Review, and INW Server) t install the anti-virus sftware. 4. Disable the Lpback Cnnectin. Refer t Disable Lpback Cnnectin n page 6 fr mre infrmatin. 5. Cnfigure the Cmputer Brwser service. Refer t Cnfigure Cmputer Brwser Service Befre Anti- Virus Installatin n page 6 fr mre infrmatin. Symantec EndPint Prtectin Deplyment Steps (Preferred Push Installatin Methd) 1. Click Start > All Prgrams > Symantec EndPint Prtectin Manager > Symantec Endpint Prtectin Manager. 2. Enter the apprpriate user name and passwrd t lg in t Symantec Endpint Prtectin Manager. (Click Yes if a security prmpt displays.) 3. Check D nt shw this Welcme Page again and click Clse t clse the welcme screen. 4. Click Hme in the Symantec Endpint Prtectin Manger windw. 5. Select Install prtectin client t cmputers frm the Cmmn Tasks drp-dwn list in the tp-right f the Hme windw. 6. Select New Package Deplyment and click Next. 7. Keep the default settings and click Next. 8. Select Remte push and click Next. Wait fr the Cmputer selectin screen t appear. 9. Expand <Dmain> (example: INW). Systems cnnected t the dmain are displayed in the Cmputer selectin windw. Page 8 f 25

9 NOTE: If all systems are nt being recgnized, click Search Netwrk and click Find Cmputers. Use the search by IP address detectin methd t identify the client systems (Acquisitin, Review, and INW Server). 10. Select all Mac-Lab/CardiLab client machines cnnected t the dmain and click >>. The Lgin Credentials screen appears. 11. Enter the apprpriate user name, passwrd and dmain name and click OK. 12. Make sure all selected machines appear under Install Prtectin Client and click Next. 13. Click Send and wait until the Symantec anti-virus sftware is deplyed n all client systems (Acquisitin, Review, and INW Server). When finished, the Deplyment Summary screen appears. 14. Click Next and then click Finish t cmplete the Client Deplyment Wizard. 15. Restart all the client machines (Acquisitin, Review, and INW Server). Lgin with Administratr r as a member f that grup n all client machines after the restart. Symantec EndPint Prtectin Server Cnsle Cnfiguratins 1. Select Start > All Prgrams > Symantec EndPint Prtectin Manager > Symantec EndPint Prtectin Manager. The Symantec EndPint Prtectin Manager lg n windw pens. 2. Enter the apprpriate Symantec Endpint Prtectin Manager Cnsle passwrd and click Lg On. 3. Select the Plicies tab and click Virus and Spyware Prtectin under Plicies. The Virus and Spyware Prtectin Plicies windw pens. 4. Click Add a Virus and Spyware Prtectin plicy under Tasks. The Virus and Spyware Prtectin windw pens. 5. Under Windws Settings > Scheduled Scans, click Administratr-Defined Scans. 6. Select Daily Scheduled Scan and click Edit. The Edit Scheduled Scan windw pens. 7. Change scan name and descriptin t Weekly Scheduled Scan and Weekly Scan at 00:00 respectively. 8. Select Scan type as Full Scan. 9. Select the Schedule tab. 10. Under Scanning Schedule, select Weekly and change the time t 00: Under Scan Duratin uncheck Randmize scan start time within this perid (recmmended in VMs) and select Scan until finished (recmmended t ptimize scan perfrmance). 12. Under Missed scheduled Scans uncheck Retry the scan within. 13. Select the Ntificatins tab. 14. Uncheck Display a ntificatin message n the infected cmputer and click OK. 15. Select the Advanced tab in the Administratr-Defined Scans windw. Page 9 f 25

10 16. Under Scheduled Scans uncheck Delay scheduled scans when running n batteries, Allw userdefined scheduled scans t run when scan authr is nt lgged n and Display Ntificatin abut detectins when the user lgs n. 17. Under Startup and Triggered Scans uncheck Run an Active Scan when new definitins arrive. 18. Under Windws Settings > Prtectin Technlgy, click Aut-Prtect. 19. Select the Scan Details tab and select and lck Enable Aut-Prtect. 20. Select the Ntificatins tab and uncheck and lck Display a ntificatin message n the infected cmputer and Display the Aut-Prtect results dialg n the infected Cmputer. 21. Select the Advanced tab and under Aut-Prtect Relading and Enablement, uncheck and lck the When Aut-Prtect is disabled, Enable after: ptin. 22. Under Additinal Optins click File Cache. The File Cache windw pens. 23. Uncheck Rescan cache when new definitins lad and click OK. 24. Under Windws Settings > Prtectin Technlgy, click Dwnlad Prtectin. 25. Select the Ntificatins tab and uncheck and lck Display a ntificatin message n the infected cmputer. 26. Under Windws Settings > Scans, click Internet Aut-Prtect. 27. Select the Ntificatins tab and uncheck and lck Display a ntificatin message n the infected cmputer, Display a prgress indicatr when is being sent, and Display a ntificatin area icn. 28. Under Windws Settings > Scans, click Micrsft Outlk Aut-Prtect. 29. Select the Ntificatins tab and uncheck and lck Display a ntificatin message n the infected cmputer. 30. Under Windws Settings > Scans, click Ltus Ntes Aut-Prtect. 31. Select the Ntificatins tab and uncheck and lck Display a ntificatin message n infected cmputer. 32. Under Windws Settings > Advanced Optins, click Quarantine. 33. Under When New Virus Definitins Arrive, select D nthing. 34. Under Windws Settings > Advanced Optins, click Miscellaneus. 35. Select the Ntificatins tab and uncheck Display a ntificatin message n the client cmputer when definitins are utdated, Display a ntificatin message n the client cmputer when Symantec Endpint Prtectin is running withut virus definitins and Display errr messages with a URL t a slutin. 36. Click OK t clse Virus and Spyware Prtectin plicy. 37. Click Yes at the Assign Plicies message bx. 38. Select My Cmpany and click Assign. Page 10 f 25

11 39. Click Yes at the message bx. 40. Under Plicies click LiveUpdate. 41. Select LiveUpdate Settings plicy and under Tasks, click Edit the plicy. 42. Under Overview > Windws Settings, click Server Settings. 43. Under Internal r External LiveUpdate Server, ensure Use the default management server is selected and uncheck Use a LiveUpdate server. 44. Click OK. 45. Click Clients frm left pane and select the Plicies tab. 46. Uncheck Inherit plicies and settings frm parent grup My Cmpany and click Cmmunicatins Settings under Lcatin-Independent Plicies and Settings. 47. Under Dwnlad, make sure Dwnlad plicies and cntent frm the management server is checked and Push mde is selected. 48. Click OK. 49. Click General Settings under Lcatin-independent Plicies and Settings. 50. Select the Tamper Prtectin tab and uncheck and lck Prtect Symantec security sftware frm being tampered with r shut dwn. 51. Click OK. 52. Click Admin and select Servers. 53. Under Servers, select Lcal Site (My Site). 54. Under Tasks, select Edit Site Prperties. The Site Prperties fr Lcate Site (My Site) windw pens. 55. Select LiveUpdate tab and under Dwnlad Schedule ensure the schedule is set t Every 4 hur(s). 56. Click OK. 57. Click Plicies and select Firewall. 58. Select Firewall plicy and under Tasks click Edit the plicy. The Firewall plicy windw pens. 59. Click Prtectin and Stealth and under Prtectin Settings uncheck Autmatically blck an attacker s IP address. 60. Click OK. 61. Click Lg Off and clse the Symantec EndPint Prtectin Manager Cnsle. Make sure Symantec Endpint Prtectin Plicies are pushed in client systems. Symantec EndPint Prtectin Pst Installatin Guidelines 1. Enable the Lpback Cnnectin. Refer t Enable Lpback Cnnectin n page 6 fr mre infrmatin. Page 11 f 25

12 2. Cnfigure the Cmputer Brwser service. Refer t Cnfigure Cmputer Brwser Service After Anti-Virus Installatin n page 7 fr mre infrmatin. Page 12 f 25

13 McAfee VirusScan Enterprise Installatin Overview McAfee VirusScan Enterprise shuld be installed n an individual Mac-Lab/CardiLab system and it shuld be managed individually. Use the fllwing instructins t install and cnfigure McAfee VirusScan Enterprise fr English. Virus updates are the respnsibility f the facility. Update the definitins regularly t ensure that the latest virus prtectin is n the system. McAfee VirusScan Enterprise Installatin Prcedure 1. Lg n as Administratr r as a member f that grup. 2. Insert the McAfee VirusScan Enterprise 8.8 Patch 3 CD int the CD drive. 3. Duble-click SetupVSE.Exe. The Windws Defender dialg appears. 4. Click Yes. The McAfee VirusScan Enterprise Setup screen appears. 5. Click Next. The McAfee End User License Agreement screen appears. 6. Read the license agreement and cmplete any necessary fields, click OK when finished. 7. Select Typical and click Next. 8. Select Standard Prtectin and click Next. 9. Click Install and wait fr the installatin t cmplete. After successful installatin f McAfee VirusScan Enterprise, the McAfee Virus Scan Enterprise Setup has cmpleted successfully screen appears. 10. Uncheck the Run On-Demand Scan checkbx and click Finish. 11. If the Update in Prgress windw appears, click Cancel. 12. If a message bx t restart the system appears, click OK. 13. Restart the system. 14. Lg n as Administratr r as a member f that grup. McAfee VirusScan Enterprise Cnfiguratin 1. Right-click McAfee in the system tray and select On-Access Scan Prperties. 2. Select the ScriptScan tab. The ScriptScan windw pens. 3. Clear the Enable scanning f scripts check bx. 4. Select the Messages tab. The Messages windw pens. 5. Uncheck the Shw the messages dialg when a threat is detected and display the specified text in the message check bx. 6. Click Apply. Page 13 f 25

14 7. Click OK t clse the On-Access Scan Prperties windw. 8. Select Start > All Prgrams > McAfee > VirusScan Cnsle. The VirusScan Cnsle windw pens. 9. Select Tls > Alerts. The Alert Prperties windw pens. 10. Uncheck the On-Access Scan, On-Demand Scan and scheduled scans, Scan and AutUpdate check bxes. 11. Click Destinatin. The Alert Manager Client Cnfiguratin windw pens. 12. Select the Disable alerting check bx. 13. Click OK. The Alert Prperties windw pens. 14. Select the Additinal Alerting Optins tab. 15. Select the Suppress all alerts (severities 0 t 4) ptin frm the Severity Filter drp-dwn list. 16. Select the Alert Manager Alerts tab. 17. Clear the Access Prtectin check bx. 18. Click Apply. 19. Click OK t clse the Alert Prperties windw. 20. Right-click AutUpdate n the VirusScan Cnsle. 21. Click Prperties. The McAfee AutUpdate Prperties AutUpdate windw pens. 22. Click Schedule. The Schedule Settings windw pens. 23. Clear the Enable (scheduled task runs at specified time) check bx. 24. Click Apply. 25. Click OK t clse the Schedule Settings windw. 26. Click OK t clse the McAfee AutUpdate Prperties AutUpdate windw. 27. Right-click Full Scan n the VirusScan Cnsle. 28. Click Prperties. The On Demand Scan Prperties windw pens. 29. Click Schedule. The Schedule Settings windw pens. 30. Check the Enable (scheduled task runs at specified time) check bx. 31. Select the Schedule tab. 32. Select Weekly frm Run Task, 12:00 AM frm Start Time. check Sunday frm Schedule Task Weekly. 33. Click OK. The On Demand Scan Prperties - Full Scan windw pens. 34. Select the Exclusins tab. 35. Click Exclusins. The Set Exclusins windw pens. Page 14 f 25

15 36. Click Add. 37. Click Brwse and navigate t C:\Prgram Files\GE Healthcare\MLCL and D:\GEData\Studies\ flders ne at a time and select the Als exclude subflders checkbx. 38. Click OK. 39. In the Set Exclusins windw, make sure the C:\Prgram Files\GE Healthcare\MLCL and D:\GEData\Studies\ flders display. 40. Click OK. 41. Click OK t clse the On Demand Scan Prperties Full Scan windw. 42. Clse the VirusScan Cnsle. Page 15 f 25

16 McAfee eplicy Orchestratr Installatin Overview Install McAfee eplicy Orchestratr n a netwrked Mac-Lab/CardiLab envirnment nly. McAfee eplicy Orchestratr must be installed n a custmer-prvided server and McAfee VirusScan Enterprise shuld be deplyed t the Centricity Cardilgy INW server and Acquisitin/Review wrkstatins as a client. Use the fllwing instructins t install and cnfigure McAfee eplicy Orchestratr fr English. Virus updates are the respnsibility f the facility. Update the definitins regularly t ensure that the latest virus prtectin is n the system. Pre-Installatin Guidelines 1. Make sure McAfee eplicy Orchestratr Cnsle is installed n the custmer prvided server befre cntinuing with these steps. 2. On the custmer-prvided server, pen inbund prt 443 and name it IN_443_McAfee and allw inbund cnnectins fr dmain, public, and private. 3. Lg n as Administratr r a member f that grup n all client systems (Acquisitin, Review, and INW Server) t install the anti-virus sftware. 4. Disable the Lpback Cnnectin. Refer t Disable Lpback Cnnectin n page 6 fr mre infrmatin. McAfee eplicy Orchestratr Deplyment Steps (Preferred Push Installatin Methd) 1. Select Start > All Prgrams > McAfee > eplicy Orchestratr > Launch McAfee eplicy Orchestratr Cnsle t lg n t the eplicy Orchestratr cnsle. NOTE: Click Cntinue with this website if the Security Alert message bx appears. 2. Enter the apprpriate username and passwrd and click Lg On. 3. Select Menu > Cnfiguratin > Server Settings > Prt. 4. Recrd the Agent-t-server cmmunicatin prt number. 5. On the custmer-prvided server, pen the Agent-t-server cmmunicatin prt as an inbund prt and name it IN_<prt number>_mcafee. 6. Select Start > All Prgrams > McAfee > eplicy Orchestratr > Launch McAfee eplicy Orchestratr Cnsle t lg n t the eplicy Orchestratr cnsle. NOTE: Click Cntinue with this website if the Security Alert message bx appears. 7. Enter the apprpriate username and passwrd and click Lg On. 8. Select Menu > Systems > Systems Tree. The System Tree windw pens. 9. Click My Organizatin and with the fcus n My Organizatin click System Tree Actins > New Systems frm the bttm left crner f the screen. Page 16 f 25

17 10. Select Push agents and add systems t the current grup (My Organizatin) and click Brwse. 11. Enter the dmain administratr username and passwrd and click OK. 12. Select the INW dmain frm the Dmain drp-dwn list. 13. Select the client machines (Acquisitin, Review, and INW Server) cnnected t the dmain and click OK. 14. Select Agent Versin as McAfee Agent fr Windws (Current). Enter apprpriate dmain administratr username and passwrd and click OK. 15. In client machines (Acquisitin, Review, and INW Server) make sure the C:\Prgram Files\McAfee\Cmmn Framewrk directry is present and McAfee Agent is installed in the same directry. NOTE: Fr the INW Server make sure the C:\Prgram Files (x86)\mcafee\cmmn Framewrk directry is present and McAfee Agent is installed in the same directry. 16. Restart the client machines (Acquisitin, Review, and INW Server). 17. Click Start > All Prgrams > McAfee > eplicy Orchestratr > Launch McAfee eplicy Orchestratr Cnsle. 18. Enter the apprpriate username and passwrd and click Lg On. 19. Click Menu > Systems > System Tree. 20. Click My Organizatin and with the fcus n My Organizatin click the Assigned Client Tasks tab. 21. Click Actins > New Client Task Assignment buttn at the bttm f the screen. The Client Task Assignment Builder screen appears. 22. Select the fllwing: a. Prduct: McAfee Agent b. Task Type: Prduct Deplyment c. Task name: Create New Task 23. On the Client Task Catalg: New Task- McAfee Agent: Prduct Deplyment screen, cmplete the fields as fllws: 24. Click Save. a. Task Name: Enter the apprpriate task name b. Target platfrms: Windws c. Prducts and cmpnents: VirusScan Enterprise d. Optins: Run at every plicy enfrcement (Windws nly) 25. In the 1 select Task screen, select the fllwing: a. Prduct: McAfee Agent b. Task Type: Prduct Deplyment Page 17 f 25

18 c. Task Name: Newly created task name 26. Click Next. The 2 Schedule screen appears. 27. Select Run immediately frm Schedule type drp-dwn list. 28. Click Next. The 3 Summary screen appears. 29. Click Save. The System Tree screen appears. 30. Select the Systems tab and then select all the client machines (Acquisitin, Review, and INW Server) which are cnnected t the dmain. 31. Click Wake up Agents at bttm f the windw. 32. Keep default settings and click OK. 33. Restart all the client machines (Acquisitin, Review, and INW Server) and lg in with Administratr r a member f that grup n all client machines. 34. Click the Lg Off link t clse the McAfee eplicy Orchestratr Cnsle. McAfee eplicy Orchestratr Server Cnsle Cnfiguratin 1. Select Start > All Prgrams > McAfee > eplicy Orchestratr > Launch McAfee eplicy Orchestratr Cnsle t lg n t the eplicy Orchestratr cnsle. NOTE: Click Cntinue with this website if the Security Alert message bx appears. 2. Enter the apprpriate Username and Passwrd. The epo Summary windw pens. 3. Select Menu > Systems > Systems Tree. The System Tree windw pens. 4. Click My Organizatin. 5. Select the Assigned Plicies tab. The Assigned Plicies screen pens. 6. Frm the Prduct drp-dwn list, select VirusScan Enterprise The Assigned Plicies windw fr VirusScan Enterprise pens. 7. Click My Default fr On-Access General Plicies. The General windw pens. 8. Select Wrkstatin frm the Settings fr drp-dwn list. Click ScriptScan and uncheck Enable scanning f scripts. 9. Click Messages. The Messages windw pens. 10. Uncheck Shw the messages dialg bx when a threat is detected and display the specified text in the message. 11. Select Server frm the Settings fr drp-dwn list. 12. Click ScriptScan and ensure Enable scanning f scripts is unchecked. 13. Click Messages. The Messages windw pens. Page 18 f 25

19 14. Uncheck the Shw the messages dialg bx when a threat is detected and display the specified text in the message. 15. Click Save. 16. Select My Default fr Buffer Overflw Prtectin Plicies. The Buffer Overflw Prtectin windw pens. 17. Select Wrkstatin frm the Settings fr drp-dwn list and uncheck Shw the messages dialg bx when a buffer verflw is detected. 18. Select Server frm the Settings fr drp-dwn list and uncheck Shw the messages dialg bx when a buffer verflw is detected. 19. Click Save. 20. Click My Default fr Alert Plicies. The Alert Manager Alerts windw pens. 21. Select Wrkstatin frm the Settings fr drp-dwn list and uncheck On-Access Scan, On- Demand Scan and scheduled scans, Scan and AutUpdate. 22. Check Disable alerting. 23. Click Additinal Alerting Optins. The Additinal Alerting Optins windw pens. 24. Frm the Severity Filters drp-dwn menu, select Suppress all alerts (severities 0 t 4). 25. Select Server frm the Settings fr drp-dwn list and select the Alert Manager Alerts tab. The Alert Manager Alerts windw pens. 26. Uncheck On-Access Scan, On-Demand Scan and scheduled scans, Scan and AutUpdate. 27. Check Disable alerting. 28. Click Additinal Alerting Optins. The Additinal Alerting Optins windw pens. 29. Frm the Severity Filters drp-dwn menu, select Suppress all alerts (severities 0 t 4). 30. Click Save. 31. Click My Default fr On-Access Default Prcesses Plicies. The Prcesses windw pens. 32. Select Wrkstatin frm the Settings fr drp-dwn list and ensure Cnfigure ne scanning plicy fr all prcesses is selected. 33. Click the Exclusins tab. The Exclusins windw pens. 34. Click Add and select By pattern. 35. Enter the C:\Prgram Files\GE Healthcare\MLCL and D:\GEData\Studies flder names and select Als exclude subflders. 36. Click OK. 37. Select Server frm Settings fr drp-dwn list and select the Prcesses tab. 38. Ensure Cnfigure ne scanning plicy fr all prcesses is selected. Page 19 f 25

20 39. Select the Exclusins tab. The Exclusins windw pens. 40. Click Add and select By pattern. 41. Enter C:\Prgram Files (x86)\ge Healthcare\MLCL and select Als exclude subflders. 42. Click OK. 43. Click Save. 44. Frm the Prduct drp-dwn menu, select McAfee Agent. The Plicies windw fr McAfee Agent pens. 45. Click My Default fr Repsitry. The Repsitries windw pens. NOTE: Click Clse fr Internet Explrer Security Message Bx. 46. Click Prxy. The Prxy windw pens. 47. Select Use Internet Explrer settings (Fr Windws)/System Preferences settings (Fr Mac OSX). 48. Click Save. 49. Click Systems. 50. Select all the client systems (Acquisitin, Review and Centricity Cardilgy INW server) int which the cnfigured plicies are t be deplyed. 51. Select Wake Up Agents. The Wake Up Agent windw pens. 52. Click OK. 53. Lg ff eplicy Orchestratr. McAfee eplicy Orchestratr Pst Installatin Enable the Lpback Cnnectin. Refer t Enable Lpback Cnnectin n page 6 fr mre infrmatin. Page 20 f 25

21 Trend Micr OfficeScan Client/Server Editin Installatin Overview Install Trend Micr OfficeScan Client/Server Editin n a netwrked Mac-Lab/CardiLab envirnment nly. Trend Micr OfficeScan must be installed n the custmer-prvided server and then deplyed t Centricity Cardilgy INW server and Acquisitin/Review wrkstatin as clients. Use the fllwing instructins t install Trend Micr OfficeScan Client/Server Editin fr English. Virus updates are the respnsibility f the facility. Update the definitins regularly t ensure that the latest virus prtectin is n the system. Pre-Installatin Guidelines 1. On the custmer-prvided server, make sure Office Scan Web Cnsle is installed befre cntinuing with these steps. 2. On the custmer-prvided server, pen inbund prt 8080 and name it IN_8080_OSCE and allw inbund cnnectins fr dmain, public, and private. 3. Lg n as Administratr r member f that grup n all client systems (Acquisitin, Review, and INW Server) t install the anti-virus sftware. 4. Disable the Lpback Cnnectin. Refer t Disable Lpback Cnnectin n page 6 fr mre infrmatin. 5. Cnfigure the Cmputer Brwser service. Refer t Cnfigure Cmputer Brwser Service Befre Anti- Virus Installatin n page 6 fr mre infrmatin. Trend Micr OfficeScan Deplyment Steps (Preferred Push Installatin Methd) 1. Click Start > All Prgrams > TrendMicr OfficeScan server - <server name> > Office Scan Web Cnsle. NOTE: Cntinue by selecting Cntinue t this website (nt recmmended). In the Security Alert windw, check In the future, d nt shw this warning and click OK. 2. If yu receive a certificate errr indicating that the site is nt trusted, manage yur certificates t include Trend Micr OfficeScan. 3. If prmpted, install the AtxEnc add-ns. The Security Warning screen will appear. 4. Click Install. 5. Enter apprpriate username and passwrd and click Lg On. 6. If prmpted, click Update Nw t install new widgets. Wait until the new widgets are updated. The update is cmpleted screen will appear. 7. Click OK. 8. Frm the left side menu bar, click Netwrked Cmputers > Client Installatin > Remte. 9. If prmpted, install the AtxCnsle add-ns. The Security Warning screen will appear. Page 21 f 25

22 10. Click Install. 11. Duble-click My Cmpany in the Remte Installatin windw. All dmains will be listed under My Cmpany. 12. Expand the apprpriate dmain (Example: INW) frm the list. All systems cnnected t the dmain appear. 13. If dmains r systems are nt listed in the Dmain and Cmputers windw, d the fllwing n each f the client systems (Acquisitin, Review, and INW Server): a. Click Start > Run. b. Enter \\<custmer_prvided_server_ip_address> and press Enter. c. Navigate t \\<custmer_prvided_server_ip _address>\fsscan and duble-click AutPcc.exe. d. Restart the client systems when the installatin is cmplete. e. Lg in as Administratr r a member f that grup n all client machines and wait until the Trend Micr OfficeScan icn in system tray changes t blue. f. Click the Lg Off link t clse the OfficeScan Web Cnsle. g. Skip the remaining steps in this prcedure and g t the Trend Micr OfficeScan Server Cnsle Cnfiguratin prcedure. 14. Select the client machines (Acquisitin, Review, and INW Server) and click Add. 15. Enter the apprpriate <dmain name>\username and passwrd and click Lg n. 16. Select the client machines (Acquisitin, Review, and INW Server) ne at a time frm the Selected Cmputers pane and click Install. 17. Click Yes at the cnfirmatin bx. 18. Click OK at the Number f clients t which ntificatins were sent message bx. 19. Restart all the client machines (Acquisitin, Review, and INW Server) and Lg in as Administratr r a member f that grup n all client machines and wait until the Trend Micr OfficeScan icn in system tray changes t blue with sin wave symbl. 20. Click the Lg Off link t clse the OfficeScan Web Cnsle. Trend Micr OfficeScan Server Cnsle Cnfiguratin 1. Select Start > All Prgrams > TrendMicr Office Scan server <servername> > Office Scan Web Cnsle. The Trend Micr OfficeScan Lgin windw appears. 2. Enter the apprpriate user name and passwrd and click Lgin. The Summary windw pens. 3. Frm the left side pane, select the Netwrked Cmputers > Client Management link. 4. On the right side, select OfficeScan Server. 5. Frm the Settings ptins, select Privileges and Other Settings. Page 22 f 25

23 6. Select nly the fllwing ptins in the Privileges tab and clear the remaining ptins: Scan Privileges > Cnfigure Manual Scan Settings. Scan Privileges > Cnfigure Real-time Scan Settings. Scan Privileges > Cnfigure Scheduled Scan Settings. Prxy Setting Privileges > Allw the client user t cnfigure prxy settings. Uninstallatin > Require a passwrd fr the user t uninstall the OfficeScan Client. Enter a suitable passwrd. Unlading > Require a passwrd fr the user t unlad the OfficeScan client. Enter a suitable passwrd. 7. Select the Other Settings tab. 8. Select Client Security Settings > Nrmal and clear the remaining ptins. 9. Click Apply t All Clients. 10. Click Clse t clse the Privileges and Other Settings windw. 11. Frm the left side pane, select the Client Management link. 12. On the right side, select OfficeScan Server. 13. Frm the Settings ptins, select Scan Settings > Scan Nw Settings. 14. Select nly the fllwing ptins in the Target tab and clear the remaining ptins: Files t Scan > File types scanned by IntelliScan. Scan Settings > Scan Cmpressed files. Scan Settings > Scan OLE bjects. Virus/Malware Scan Settings nly > Scan bt area. CPU Usage > Lw. Scan Exclusin > Enable scan exclusin. Scan Exclusin > Apply scan exclusin settings t all scan types. Scan Exclusin List (Directries) > Exclude directries where Trend Micr prducts are installed and select Add path t client Cmputers Exclusin list. Enter the C:\Prgram Files (x86)\ge Healthcare\MLCL, C:\Prgram Files\GE Healthcare\MLCL and D:\GEData\Studies flders ne at a time in the directry path fr Exclusin List and click Add. 15. Click Apply t All Clients. 16. The exclusin list n this screen will replace the exclusin list n the clients r dmains yu selected in the client tree earlier. D yu want t prceed? Message will appear. Click OK. 17. Click Clse t clse the Scan Nw Settings page. 18. Frm the left side pane, select the Client Management link. 19. On the right side, select OfficeScan Server. 20. Frm the Settings ptins, select Settings->Scan Settings->Real-time Scan Settings. 21. Select the Target tab. Select nly the fllwing ptins and clear the remaining ptins: Enable Virus/Malware scan. Page 23 f 25

24 User Activity n Files > created/mdified and retrieved. Files t Scan > File types scanned by IntelliScan. Virus/Malware Scan Settings Only > Enable IntelliTrap. Scan Exclusin > Enable scan exclusin. Scan Exclusin > Apply scan exclusin settings t all scan types. Scan Exclusin List (Directries) > Exclude directries where Trend Micr prducts are installed. Make sure the C:\Prgram Files (x86)\ge Healthcare\MLCL, C:\Prgram Files \GE Healthcare\MLCL and D:\GEData\Studies paths are present in the Exclusin List. 22. Click the Actin tab. 23. Keep the default settings and clear Virus/Malware > Display a ntificatin message n the client cmputer when Virus/Malware is detected ptin and Spyware/Grayware->Display a ntificatin message n the client cmputer when spyware/grayware is detected. 24. Click Apply t All Clients. 25. Click Clse t clse the Real-time Scan Settings page. 26. Frm the left side pane, select the Client Management link. 27. On the right side, select OfficeScan Server. 28. Frm the Settings ptins, select Scan settings-> Scheduled Scan Settings. 29. Select the Target tab. Select nly the fllwing ptins and clear the remaining ptins: Enable Virus/Malware scan. Schedule > Weekly, every (Sunday). Files t Scan > File types scanned by IntelliScan. Virus/Malware Scan settings nly > Scan bt area. CPU Usage > Lw. Scan Exclusin > Enable scan exclusin. Scan Exclusin > Apply scan exclusin settings t all scan types. Scan Exclusin List (Directries) > Exclude directries where Trend Micr prducts are installed. Make sure the C:\Prgram Files (x86)\ge Healthcare\MLCL, C:\Prgram Files \GE Healthcare\MLCL and D:\GEData\Studies paths are present in the Exclusin List. 30. Click the Actin tab. 31. Keep the default settings and uncheck the Virus/Malware > Display a ntificatin message n the client cmputer when Virus/Malware is detected and Spyware/Grayware-> Display a ntificatin message n the client cmputer when spyware/grayware is detected ptins. 32. Click Apply t All Clients. 33. Click Clse t clse the Scheduled Scan Settings page. 34. Frm the left side pane, select the Netwrked Cmputers > Glbal Client Settings link. 35. Select nly the fllwing ptins and clear the remaining ptins: Scan Settings > Cnfigure Scan settings fr large cmpressed files. Page 24 f 25

25 Scan Settings > D nt scan files in the cmpressed file if the size exceeds 2 MB. Scan Settings > In a cmpressed file scan nly the first 100 files. Scan Settings > Exclude the OfficeScan server database flder frm Real-time Scan. Scan Settings > Exclude Micrsft Exchange server flders and files frm scans. Reserved Disk Space > Reserve 60 MB f disk space fr updates. Prxy Cnfiguratin > Autmatically detect settings. NOTE: It is imprtant t clear the Alert Settings > Display a ntificatin message if the client cmputer needs t restart t lad a kernel driver. 36. Click Save. 37. Click Lg ff and clse the OfficeScan Web Cnsle. Trend Micr OfficeScan Pst Installatin Guidelines 1. Enable the Lpback Cnnectin. Refer t Enable Lpback Cnnectin n page 6 fr mre infrmatin. 2. Cnfigure the Cmputer Brwser service. Refer t Cnfigure Cmputer Brwser Service After Anti-Virus Installatin n page 7 fr mre infrmatin. Page 25 f 25