INSTALLATION GUIDE. Desktop Firewall VERSION 7.5

Transcription

1 INSTALLATION GUIDE Desktop Firewall VERSION 7.5

2 COPYRIGHT 2002 Networks Associates Techology, Ic. All Rights Reserved. No part of this publicatio may be reproduced, trasmitted, trascribed, stored i a retrieval system, or traslated ito ay laguage i ay form or by ay meas without the writte permissio of Networks Associates Techology, Ic., or its suppliers or affiliate compaies. To obtai this permissio, write to the attetio of the Network Associates legal departmet at: 3965 Freedom Circle, Sata Clara, Califoria 95054, or call TRADEMARK ATTRIBUTIONS Active Security, Active Security (i Katakaa), ActiveHelp, ActiveShield, AtiVirus Ayware ad desig, Bomb Shelter, Certified Network Expert, Clea-Up, CleaUp Wizard, CNX, CNX Certificatio Certified Network Expert ad desig, CyberCop, CyberCop (i Katakaa), CyberMedia, CyberMedia UIstaller, Desig (stylized N), Disk Mider, Distributed Siffer System, Distributed Siffer System (i Katakaa), Dr Solomo s, Dr Solomo s label, Eterprise SecureCast, Eterprise SecureCast (i Katakaa), EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (i Katakaa), Guard Dog, HelpDesk, HomeGuard, Huter, ISDN TEL/SCOPE, LANGuru, LANGuru (i Katakaa), M ad desig, Magic Solutios, Magic Solutios (i Katakaa), Magic Uiversity, MagicSpy, MagicTree, McAfee, McAfee (i Katakaa), McAfee ad desig, MultiMedia Cloakig, Net Tools, Net Tools (i Katakaa), NetCrypto, NetOctupus, NetSca, NetShield, NetStalker, Network Associates, NetXray, NotesGuard, Nuts & Bolts, Oil Chage, PC Medic, PC Medic 97, PCNotary, PGP, PGP (Pretty Good Privacy), Pretty Good Privacy, PrimeSupport, Recoverkey, Recoverkey Iteratioal, Registry Wizard, ReportMagic, RigFece, Router PM, SalesMagic, SecureCast, Service Level Maager, ServiceMagic, SmartDesk, Siffer, Siffer (i Hagul), SiffMaster, SiffMaster (i Hagul), SiffMaster (i Katakaa), SiffNet, Stalker, SupportMagic, TIS, TMEG, TNV, TVD, TNS, Total Network Security, Total Network Visibility, Total Network Visibility (i Katakaa), Total Service Desk, Total Virus Defese, Trusted Mail, UIstaller, Virex, Virus Forum, ViruSca, VirusSca, WebSca, WebShield, WebShield (i Katakaa), WebSiffer, WebStalker, WebWall, Who s Watchig Your Network, WiGauge, Your E-Busiess Defeder, ZAC 2000, Zip Maager are registered trademarks of Network Associates, Ic. ad/or its affiliates i the US ad/or other coutries. All other registered ad uregistered trademarks i this documet are the sole property of their respective owers. LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND. Issued March 2002 / McAfee Desktop Firewall software versio 7.5

3 Cotets Preface Purpose Audiece Gettig more iformatio Cotactig McAfee ad Network Associates Istallig the software System requiremets Compatibility with PGP products Uistallig PGP products Istallig Desktop Firewall Startig Desktop Firewall Uistallig Desktop Firewall Istallig the software for use with epolicy Orchestrator Compatibility with PGP products Uistallig PGP products Before you begi Istallig Desktop Firewall for use with epolicy Orchestrator Updatig epolicy Orchestrator servers ad cosoles Deployig the aget Addig Desktop Firewall to the Repository Eablig Desktop Firewall for deploymet Startig epolicy Orchestrator Loggig o to epolicy Orchestrator servers Uistallig Desktop Firewall Uistallig Desktop Firewall from cliet computers Removig Desktop Firewall from the Repository Uistallig epolicy Orchestrator update Idex Istallatio Guide iii

4 Cotets iv McAfee Desktop Firewall software versio 7.5

5 Preface Purpose Audiece This Istallatio Guide provides the followig iformatio for McAfee Desktop Firewall software versio 7.5: system requiremets, detailed istructios for istallig the software separately ad for use with epolicy Orchestrator, ad where to fid other product documetatio. This iformatio is desiged for system ad etwork admiistrators who are resposible for their compay s firewall security program. Gettig more iformatio Product Guide Product itroductio ad features, detailed istructios for cofigurig the software, iformatio o deploymet, recurrig tasks, ad operatig procedures. Available i a Adobe Acrobat.PDF file from either the product CD or the McAfee dowload site. Help Product iformatio i the Help system that is accessed from withi the applicatio. The Help system provides high-level ad detailed iformatio. Access from either a Help meu optio or Help butto i the applicatio. Cotext-sesitive (What s This?) Help provides brief descriptios of the selectios i the applicatio. Access by right-clickig o a optio or draggig the questio ico to a optio. Istallatio Guide 5

6 Preface Release Notes README file. Product iformatio, system requiremets, resolved issues, ay kow issues, ad last-miute additios or chages to the product or its documetatio. Available as a.txt file from either the product CD or the McAfee dowload site. Cotact A list of phoe umbers, street addresses, web addresses, ad fax umbers for Network Associates offices i the Uited States ad aroud the world. Also icludes cotact iformatio for services ad resources, icludig: Related Documets Techical Support Customer Service Dowload Support AVERT Ati-Virus Research Site McAfee Beta Site O-Site Traiig Network Associates Offices Worldwide Desktop Firewall 7.5 Product Guide Desktop Firewall 7.5 Help If you are usig epolicy Orchestrator to deploy Desktop Firewall, refer to these documets as well. epolicy Orchestrator 2.0 Istallatio Guide epolicy Orchestrator 2.0 Product Guide epolicy Orchestrator 2.0 Release Notes epolicy Orchestrator 2.5 Help epolicy Orchestrator 2.5 Release Notes If you have a curret grat umber, you ca dowload the earlier documetatio from this web site: e/logi.asp If you do ot have, or caot fid a curret grat umber, cotact McAfee Customer Service. 6 McAfee Desktop Firewall software versio 7.5

7 Preface Cotactig McAfee ad Network Associates Techical Support McAfee Beta Site AVERT Ati-Virus Research Site Dowload Site DAT File Updates Product Upgrades Valid grat umber required. Cotact Network Associates Customer Service. O-Site Traiig Network Associates Customer Service: Web US, Caada, ad Lati America toll-free: Phoe VIRUS NO or Moday Friday, 8 a.m. 8 p.m., Cetral Time For additioal iformatio o cotactig Network Associates ad McAfee icludig toll-free umbers for other geographic areas see the Cotact file that accompaied this product release. Istallatio Guide 7

8 Preface 8 McAfee Desktop Firewall software versio 7.5

9 Istallig the software 1 If you wat to deploy Desktop Firewall via epolicy Orchestrator, use the istallatio istructios i Istallig the software for use with epolicy Orchestrator o page 13. System requiremets Before you begi the istallatio, be sure to verify that the miimum system requiremets are met o computers o which you wat to istall Desktop Firewall. Itel Petium 166 MHz processor or better. 800 X 600 miimum display resolutio, 1024 X 768 recommeded. 32 MB RAM for Widows 98 SE ad Widows Me 64 MB RAM for Widows NT, Widows 2000, ad Widows XP 32 MB free disk space. 64 MB free disk space whe istallig via epolicy Orchestrator. Ay of the followig Microsoft operatig systems: w Widows 98 Secod Editio (SE). w Widows NT Workstatio 4.0 with Service Pack 6 or 6a. w Widows NT Server 4.0 with Service Pack 6 or 6a. w Widows 2000 Advaced Server with Service Pack 2. w Widows 2000 Professioal with Service Pack 2. w Widows 2000 Server with Service Pack 2. w Widows Milleium Editio (Me). w Widows XP Home. w Widows XP Professioal. Istallatio Guide 9

10 Istallig the software Compatibility with PGP products Desktop Firewall is ot compatible with PGPadmi. Desktop Firewall is ot compatible with PGPvp. These two applicatios caot reside o the same computer. Your existig security policies will ot be copied to Desktop Firewall. Uistallig PGP products If you are usig versios of PGP products that are older tha those listed i Compatibility with PGP products above, you eed to remove the PGPfire ad PGPvp compoets maually. NOTE If you remove PGP Corporate Desktop, all of the istalled compoet applicatios (PGPfire, PGPvp, PGPdisk, ad PGPmail) are removed. 1 O the taskbar, click the Start butto, the select Settigs, Cotrol Pael. 2 Select Add/Remove Programs. The Add/Remove Programs Properties dialog box appears. 3 Select the desired applicatio, the click Add/Remove. The Welcome dialog box appears. 4 Select Remove, the click Next. 5 Click Yes whe asked whether or ot you wat to remove the applicatio. 6 Click Fiish to restart the computer ad complete the uistallatio of the software. 10 McAfee Desktop Firewall software versio 7.5

11 Istallig Desktop Firewall Istallig the software Now that you have met the miimum system requiremets o all applicable computers, you ca istall Desktop Firewall. WARNING Whe you istall Desktop Firewall o computers with the followig applicatios already istalled, PGPfire ad PGPvp are automatically removed before Desktop Firewall is istalled: PGP for Desktop Security 7.0 or later. PGP Corporate Desktop 7.1 or later. PGPfire Persoal Firewall/IDS 7.1 or later. 1 If istallig from the product CD, isert it ito the CD-ROM drive of the computer. If dowloadig the files from the McAfee web site ( follow the steps o how to dowload the files provided there, the cotiue with Step 2. Note that you must eter a valid customer grat umber to dowload product upgrades. 2 O the taskbar, click the Start butto, the select Ru. The Ru dialog box appears. 3 I Ope, eter the path where the Setup program (SETUP.EXE) is located, the click OK to start Setup. The default locatio is E:\PRODUCTS\DESKTOP FIREWALL\SETUP.EXE. 4 Click Next. 5 Click Yes to idicate that you agree to the terms of the licese. 6 Click Next after you have reviewed the Release Notes. 7 Accept the default istallatio directory or click Browse to select aother locatio, the click Next. The default locatio is C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE DESKTOP FIREWALL FOR <Operatig System>; for example, C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE DESKTOP FIREWALL FOR WINDOWS NT. 8 Review the istallatio settigs, the click Next to cotiue the istallatio. Istallatio Guide 11

12 Istallig the software 9 I the Adapter Security dialog box, select the checkbox that correspods to the etwork adapters you wat to secure. You ca also click Select All to select all of the etwork adapters that were foud o the computer. To secure modem commuicatios, select the dial-up or WAN adapter. To secure Etheret commuicatios, select the LAN adapter. O Widows 2000 ad Widows XP, select All Network ad Dial-up Adapters i the Adapter Security dialog box to select all of the etwork adapters that were foud o the computer. 10 Click Fiish to restart the computer ad complete the istallatio. Note that if you clear the Yes, I wat to restart my computer ow checkbox, you will be required to restart the computer before you ca secure commuicatios via Desktop Firewall. NOTE You ca chage the selected etwork adapters at ay time after istallatio. I Desktop Firewall, select Adapter Security from the File meu, the select the desired etwork adapters. Startig Desktop Firewall O the taskbar, click the Start butto, select Programs, McAfee Desktop Firewall, the select McAfee Desktop Firewall agai. Uistallig Desktop Firewall 1 O the taskbar, click the Start butto, the select Settigs, Cotrol Pael. 2 Select Add/Remove Programs. The Add/Remove Programs Properties dialog box appears. 3 Select McAfee Desktop Firewall 7.5, the click Add/Remove. The Welcome dialog box appears. 4 Select Remove, the click Next. 5 Click Yes whe asked whether or ot you wat to remove the applicatio. 6 Click Fiish to restart the computer ad complete the uistallatio of the software. Note that if you select No, I will restart my computer later, you will be required to restart the computer before you ca istall Desktop Firewall agai. 12 McAfee Desktop Firewall software versio 7.5

13 Istallig the software for use with epolicy Orchestrator 2 Compatibility with PGP products Desktop Firewall is ot compatible with PGPadmi. Desktop Firewall is ot compatible with PGPvp. These two applicatios caot reside o the same computer. Your existig security policies will ot be copied to Desktop Firewall. Uistallig PGP products If you are usig versios of PGP products that are older tha those listed i Compatibility with PGP products above, you eed to remove the PGPfire ad PGPvp compoets maually. NOTE If you remove PGP Corporate Desktop, all of the istalled compoet applicatios (PGPfire, PGPvp, PGPdisk, ad PGPmail) are removed. 1 O the taskbar, click the Start butto, the select Settigs, Cotrol Pael. 2 Select Add/Remove Programs. The Add/Remove Programs Properties dialog box appears. 3 Select the desired applicatio, the click Add/Remove. The Welcome dialog box appears. 4 Select Remove, the click Next. 5 Click Yes whe asked whether or ot you wat to remove the applicatio. 6 Click Fiish to restart the computer ad complete the uistallatio of the software. Before you begi You must istall epolicy Orchestrator 2.5 before you ca istall Desktop Firewall. For detailed steps, see the epolicy Orchestrator 2.0 Istallatio Guide ad the epolicy Orchestrator 2.5 Release Guide. Istallatio Guide 13

14 Istallig the software for use with epolicy Orchestrator Istallig Desktop Firewall for use with epolicy Orchestrator Now that you ve istalled epolicy Orchestrator 2.5, you re ready to istall Desktop Firewall for use with epolicy Orchestrator. To do so, you must complete the followig tasks: 1 Updatig epolicy Orchestrator servers ad cosoles. 2 Deployig the aget. 3 Addig Desktop Firewall to the Repository. 4 Eablig Desktop Firewall for deploymet. Updatig epolicy Orchestrator servers ad cosoles NOTE Be sure to istall the epolicy Orchestrator update o every epolicy Orchestrator server, cosole, ad remote cosole. 1 If istallig from the product CD, isert it ito the CD-ROM drive of the computer. If dowloadig the files from the McAfee web site ( follow the steps o how to dowload the files provided there, the cotiue with Step 2. Note that you must eter a valid customer grat umber to dowload product upgrades. 2 O the taskbar, click the Start butto, the select Ru. The Ru dialog box appears. 3 I Ope, eter the path where the Setup program (MCAFEEFIREEPOUPDATE750.EXE) is located, the click OK to start Setup. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\MCAFEEFIREEPOUPDATE Click Next. 5 Click Yes to idicate that you agree to the terms of the licese. 6 Review the istallatio settigs, the click Next to cotiue the istallatio. 7 If you are updatig the server the epo Server Update dialog box appears; otherwise, go to Step 9 o page McAfee Desktop Firewall software versio 7.5

15 Istallig the software for use with epolicy Orchestrator 8 I the epo Server Update dialog box, provide the followig, the click OK. SQL Server Details w SQL Server Name Eter or select the ame of the database server to which you wat to coect. To select the local server, eter or select (local). epo Database Details w w w w epo DB Name Eter the ame of the epolicy Orchestrator database. User Name Eter the user ame associated with the logo accout you used whe you istalled epolicy Orchestrator. Password Eter the password associated with the logo accout you used whe you istalled epolicy Orchestrator. Domai Name Eter the Widows NT or Widows 2000 domai ame that correspods to the logo iformatio. SQL Server Accout Details w w w w Use Widows autheticatio... Select this optio to use the logo iformatio you provided i epo Database Details. Be sure that the accout is trusted ad has database admiistratio privileges. Use SQL autheticatio... Select this optio to use the logo iformatio that correspods to the SQL server. User Name Eter the user ame associated with the logo accout you used whe you log o to the SQL server. This box is available oly whe you select Use SQL autheticatio... Password Eter the password associated with the logo accout you used whe you log o to the SQL server. This box is available oly whe you select Use SQL autheticatio... 9 Click Fiish to restart the computer ad complete the istallatio. Note that if you clear the Yes, I wat to restart my computer ow checkbox, you will be required to restart the computer before you ca start epolicy Orchestrator. Istallatio Guide 15

16 Istallig the software for use with epolicy Orchestrator Deployig the aget A aget must reside o every computer o which you wat to deploy Desktop Firewall. You must add sites, groups, ad computers to the Directory o the cosole tree, cofigure the aget policy, the deploy the aget. For detailed steps, see Populatig the Directory ad Deployig the aget i the epolicy Orchestrator 2.0 Product Guide. NOTE If you maually istall the aget o Widows 98 SE computers, those computers must be restarted to complete the istallatio. Addig Desktop Firewall to the Repository 1 Log o to the epolicy Orchestrator server. For detailed steps, see Loggig o to epolicy Orchestrator servers o page I the cosole tree uder epolicy Orchestrator, right-click Repository, the select Cofigure Repository. The Cofigure Software Repository dialog box appears. 3 Select Add ew software to be maaged. 4 Click Cotiue to ope the Select a Software Package dialog box. 5 Select the Maagemet Package (MCAFEEFIRE750EN.NAP) file, the click Ope to add Desktop Firewall to the Repository. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\MCAFEEFIRE750EN.NAP. 6 If the correspodig Package (INSTALL_ENGLISH.PKG) file is i the same locatio as the Maagemet Package file, click Yes whe asked if you would like to eable software deploymet. Otherwise, you will eed to complete Eablig Desktop Firewall for deploymet o page 17. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\INSTALL_ENGLISH.PKG. 7 If you are otified the that software cofiguratio completed successfully, click OK to automatically eable the software for deploymet. If the correspodig Setup (biary) file is ot i the same locatio, the Browse for Folder dialog box appears. Use this dialog box to select these files ad eable the software for deploymet or complete Eablig Desktop Firewall for deploymet o page 17. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\MCAFEEFIRE.EXE. 16 McAfee Desktop Firewall software versio 7.5

17 Istallig the software for use with epolicy Orchestrator Eablig Desktop Firewall for deploymet 1 Log o to the epolicy Orchestrator server. For detailed steps, see Loggig o to epolicy Orchestrator servers o page I the cosole tree uder epolicy Orchestrator, right-click Repository, the select Cofigure Repository. The Cofigure Software Repository dialog box appears. 3 Select Eable software deploymet. 4 Click Cotiue to ope the Select a Software Package dialog box. 5 Select the Package (INSTALL_ENGLISH.PKG) file, the click Ope to ope the Browse for Folder dialog box. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\INSTALL_ENGLISH.PKG. 6 Select the Setup (biary) files, the click Ope to eable the software for deploymet. The default locatio is E:\PRODUCTS\EPO UPDATE FOR FIREWALL\MCAFEEFIRE.EXE. Startig epolicy Orchestrator O the taskbar, click the Start butto, select Programs, McAfee, epolicy Orchestrator 2.5 Cosole. The epolicy Orchestrator cosole appears. Loggig o to epolicy Orchestrator servers 1 Start epolicy Orchestrator. For detailed steps, see Startig epolicy Orchestrator o page Select Logi. The epolicy Orchestrator Logi dialog box appears. 3 Accept the default Server ame or eter the ame of aother epolicy Orchestrator server to which you wat to coect. 4 Type the User ame ad Password of the correspodig epolicy Orchestrator accout. 5 Eter the HTTP Port umber that correspods to the Server ame you etered i Step 3. This is the HTTP port (etered durig the istallatio of epolicy Orchestrator) that the epolicy Orchestrator cosole uses to commuicate with the server. 6 Click OK to coect to the specified server. Istallatio Guide 17

18 Istallig the software for use with epolicy Orchestrator Uistallig Desktop Firewall Uistallig Desktop Firewall is accomplished i three steps: 1 Uistallig Desktop Firewall from cliet computers. 2 Removig Desktop Firewall from the Repository. 3 Uistallig epolicy Orchestrator update. Uistallig Desktop Firewall from cliet computers 1 Log o to the epolicy Orchestrator server. For detailed steps, see Startig epolicy Orchestrator o page I the cosole tree uder epolicy Orchestrator, Directory, select the desired site, group, or computer. The Policies, Properties, ad Tasks tabs appear i the upper details pae. 3 Click the Policies tab. 4 Select Desktop Firewall 7.5 for Widows. The Istall Optios page appears i the lower details pae. 5 Deselect Iherit. 6 Select Eforce Policies for McAfee Desktop Firewall 7.5 for Widows. 7 Select Force Uistall Desktop Firewall 7.5 for Widows. 8 Click Apply. Desktop Firewall is deployed durig the ext aget-to-server commuicatio iterval. To deploy the software immediately, sed a aget wakeup call. For detailed steps, see Aget wakeup call uder Aget characteristics ad fuctios i the epolicy Orchestrator 2.0 Product Guide. Removig Desktop Firewall from the Repository 1 Log o to the epolicy Orchestrator server. For detailed steps, see Startig epolicy Orchestrator o page I the cosole tree uder epolicy Orchestrator, Repository, Products, Widows, Desktop Firewall, right-click Select Remove. 4 Click Yes whe asked whether or ot you wat to remove the software. 5 Click OK to complete the uistallatio. 18 McAfee Desktop Firewall software versio 7.5

19 Istallig the software for use with epolicy Orchestrator Uistallig epolicy Orchestrator update 1 O the taskbar, click the Start butto, the select Settigs, Cotrol Pael. 2 Select Add/Remove Programs. The Add/Remove Programs Properties dialog box appears. 3 Select McAfee Desktop Firewall epo Update, the click Add/Remove. 4 Click OK whe asked whether or ot you wat to remove the applicatio. 5 Click Fiish to restart the computer ad complete the istallatio. Istallatio Guide 19

20 Istallig the software for use with epolicy Orchestrator 20 McAfee Desktop Firewall software versio 7.5

21 Idex A addig Desktop Firewall to the Repository, 16 B before you begi (for use with epolicy Orchestrator), 13 C compatibility with PGP products, 10, 13 cotactig McAfee CONTACT file, 6 list of resources, 7 D deployig aget, 16 documets, related, 6 E eablig Desktop Firewall for deploymet, 17 epolicy Orchestrator istallig Desktop Firewall, 14 H HELP, applicatio, 5 M miimum system requiremets (see system requiremets) P product iformatio, 5 to 6 R README file, 6 related documets, 6 S startig Desktop Firewall, 12 epolicy Orchestrator, 17 system requiremets, 9 U uistallig Desktop Firewall, 12 epolicy Orchestrator update, 19 from cliet computers, 18 from the Repository, 18 PGP products, 10, 13 updatig epolicy Orchestrator servers, 14 I istallig Desktop Firewall, 11 istallig the software for use with epolicy Orchestrator, 14 addig Desktop Firewall to the Repository, 16 deployig the aget, 16 eablig Desktop Firewall for deploymet, 17 updatig servers, 14 L loggig o to epolicy Orchestrator servers, 17 Istallatio Guide 21

22 22 McAfee Desktop Firewall software versio 7.5