Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version Copyright (C) 2014 McAfee, Inc. All Rights Reserved.

Transcription

1 Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version Copyright (C) 2014 McAfee, Inc. All Rights Reserved. Release date: August 28, 2014 This build was developed and tested on: - VirusScan Enterprise for Linux: DAT Version: Engine Version: CONTENTS - ABOUT THIS DOCUMENT - ABOUT THIS RELEASE - NEW FEATURES - FILES INCLUDED WITH THIS RELEASE - SYSTEM REQUIREMENTS - INSTALLATION INSTRUCTIONS - PREREQUISITES - STANDARD INSTALLATION (RED HAT, CENTOS, and SUSE) - SILENT INSTALLATION (RED HAT, CENTOS, and SUSE) - INTEGRATING USING EPOLICY ORCHESTRATOR 4.6/5.0/5.1.x - UPGRADING FROM PREVIOUS VERSIONS - RUNNING VIRUSSCAN ENTERPRISE FOR LINUX - UNINSTALLATION - KNOWN ISSUES ABOUT THIS DOCUMENT This document contains important information about the current release. We strongly recommend that you read the entire document. IMPORTANT: We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. ABOUT THIS RELEASE This release includes extended support for managing McAfee VirusScan Enterprise for Linux clients from an epolicy Orchestrator server.

2 For more information, refer to the "New Features" section. NEW FEATURES These new features are available in this build that could be used from McAfee epolicy Orchestrator to manage McAfee VirusScan Enterprise for Linux client systems. General Policies: - Enable or disable Web GUI Apache services - Enable or disable SMTP notifications - Enable or disable Syslogging with different levels - Enable logging from epolicy Orchestrator On-Access Policy: - Specify primary and secondary actions for "Programs and Jokes" On-Demand Scan Task: - Specify primary and secondary actions for "Programs and Jokes" - Specify custom "Maximum scan time" for each on-demand scan task Product Deployment Task: - Deploy the product successfully without PAM libraries Password Change Task: - Set the McAfee VirusScan Enterprise for Linux administrator password from epolicy Orchestrator System Properties: - Scanning summary information on "Files Scanned" and "Number of Infections" for the selected Linux client - Threat information is available now Events: - On-demand scan task status events - Password change task status events Queries and Reports: - Threat report - Compliance report

3 Help Content: - New epo Help extension for McAfee VirusScan Enterprise for Linux FILES INCLUDED WITH THIS RELEASE This release consists of a package "McAfeeVSEForLinux ZIP", which contains these files: McAfeeVSEForLinux release-full.noarch.tar.gz = McAfee VirusScan Enterprise for Linux software package. Readme.txt = This text file. SYSTEM REQUIREMENTS Supported Operating Systems (32-bit/64-bit): - SuSE Linux Enterprise Server/Desktop 10.x and 11.x - Red Hat Enterprise 5.x (Advanced Platform/Desktop) - Red Hat Enterprise 6.x (Server/Workstation/Client) - Oracle Enterprise Linux 5.x and 6.x (Generic and UEK) - Novell Open Enterprise Server 2.x and 11.x - CentOS 5.x and 6.x - Red Hat Enterprise for Linux 6.x on Amazon Elastic Compute Cloud (EC2) - CentOS 6.x on Amazon Elastic Compute Cloud (EC2) To view complete list of supported distributions see "KB72999" in the McAfee Support online KnowledgeBase: The Ubuntu and the SuSE Linux Enterprise Server (SLES) on Amazon Web services are supported by VirusScan Enterprise for Linux 2.0 and later versions. IMPORTANT: This release is designed specifically for Amazon web services. Therefore, after installing the software, the VSEL services are not started by default in the supported operating systems. You must install the mandatory list of hotfix mentioned in the McAfee KnowledgeBase article to update the system and start the service.

4 On RHEL 6.x or CentOS 6.x instances on Amazon EC2, if VSEL services are started without the hotfix, then kernel panic might happen and the machine might not start. For all other supported operating systems, the services can be started manually. However, McAfee strongly recommends that you install the hotfix, then start the services. Supported Processors: - Intel x86 architecture-based processor - Intel x86_64 architecture-based processor that supports Intel Extended Memory 64 Technology (Intel EM64T) - AMD x86_64 architecture-based processor with AMD 64-bit technology Memory: - Minimum: 2 GB RAM - Recommended: 4 GB RAM Free Disk space: - Minimum: 1 GB Supported McAfee Management software: - McAfee epolicy Orchestrator McAfee epolicy Orchestrator McAfee epolicy Orchestrator 5.1.x Supported McAfee Agent software: - McAfee Agent McAfee Agent 4.8 INSTALLATION INSTRUCTIONS PRE-REQUISITES - Ensure that there is no user named as "nails" or group named as "nailsgroup" on the computer. - Ensure that you have root privileges to install McAfee VirusScan Enterprise for Linux, version If you are installing VirusScan Enterprise for Linux on a 64-bit OEL 6.x system, ensure that 32-bit OEL 6.x PAM libraries are also installed. IMPORTANT: During installation, you are prompted to supply a password and other information. For most of

5 the questions, you can accept the default value that is offered. To set up notification for alerts (if required), you need the Mail Transfer Agent (MTA) configured and the following information: - address of the VirusScan administrator - IP Address of the SMTP host - TCP/IP port number of the SMTP host STANDARD INSTALLATION (RED HAT, SUSE, and CENTOS) 1. Download "McAfeeVSEForLinux ZIP" to a temporary directory and execute these commands in sequence: # unzip McAfeeVSEForLinux ZIP # cd McAfeeVSEForLinux # tar -zxvf McAfeeVSEForLinux release-full.noarch.tar.gz # tar -zxvf McAfeeVSEForLinux release.tar.gz # tar -zxvf McAfeeVSEForLinux others.tar.gz 2. Install McAfee Runtime by typing the following command: rpm -ivh MFErt.i686.rpm 3. Install McAfee Agent (MA) by typing the following command: rpm -ivh MFEcma.i686.rpm 4. To confirm that McAfee agent is running correctly, type the following: /etc/init.d/cma status 5. Install McAfee VirusScan Enterprise for Linux by typing the following command: bash McAfeeVSEForLinux installer 6. Answer the questions when prompted, accept the default values or type custom values. 7. When prompted to start the VirusScan services, select the default option, "n" Note: After the successful installation, VirusScan services are not started by default, because you have selected the default option [n] to start the VirusScan services.

6 SILENT INSTALLATION (RED HAT, SUSE, and CENTOS) NOTE: Before installing McAfee VirusScan Enterprise for Linux, you must have McAfee Runtime and McAfee Agent already installed on the computer. 1. Create a file "nails.options" in the root home directory. For example: SILENT_ACCEPTED_EULA="yes" SILENT_INSTALLDIR="/opt/NAI/LinuxShield" SILENT_RUNTIMEDIR="/var/opt/NAI/LinuxShield" SILENT_ADMIN="admin@example.com" SILENT_HTTPHOST=" " SILENT_HTTPPORT="55443" SILENT_MONITORPORT="65443" SILENT_SMTPHOST=" " SILENT_SMTPPORT="25" SILENT_NAILS_USER="nails" SILENT_NAILS_GROUP="nailsgroup" SILENT_CREATE_USER="yes" SILENT_CREATE_GROUP="yes" SILENT_RUN_WITH_MONITOR="yes" SILENT_QUARANTINEDIR="/quarantine" SILENT_START_PROCESSES="no" SILENT_CONTINUE_INSTALL_ON_PAM_ERROR="no" NOTE: Use SILENT_CONTINUE_INSTALL_ON_PAM_ERROR only when 32-bit PAM libraries are not present. If you set this flag to "Yes" and continue without Pluggable Authentication Module (PAM) libraries, the installation of VirusScan Enterprise for Linux monitor component is skipped, and the web interface will not be available. However, you can still manage the VirusScan Enterprise for Linux host using epolicy Orchestrator. 2. Type the following at the command prompt: bash McAfeeVSEForLinux installer 3. After performing the installation, use the command "passwd" to assign a password to the user "nails".

7 INTEGRATING USING EPOLICY ORCHESTRATOR 4.6/5.0/5.1.x BEFORE YOU BEGIN: If you have any VirusScan Enterprise for Linux or hotfix checked in to the Master Repository's Current branch, move the hotfix to previous branch or delete it. 1. Extract the McAfee VirusScan Enterprise for Linux v1.9.0 package (McAfeeVSEForLinux ZIP) on to a temporary directory. 2. From the temporary directory, extract these files in sequence: McAfeeVSEForLinux release-full.noarch.tar.gz McAfeeVSEForLinux release.tar.gz McAfeeVSEForLinux others.tar.gz 3. Check in the McAfee Agent (MSA-LNX_4.8.0_Package.zip) bundled with this package on to the epolicy Orchestrator "Master Repository". 4. Check in "McAfeeVSEForLinux release-EPO.zip" on to the epolicy Orchestrator "Master Repository". 5. Check in the following extensions on to the epolicy Orchestrator "Extensions": - EPOAGENTMETA.ZIP - LYNXSHLD1900.ZIP - LYNXSHLD1900PARSER.ZIP - HELP_VSEL_190.ZIP 6. Deploy McAfee Agent 4.6 or 4.8 on the client computer. 7. Create a Product Deployment Task on epolicy Orchestrator to deploy McAfee VirusScan Enterprise for Linux, version Note: After the successful deployment, no VirusScan services are started by default. For detailed information on how to integrate and configure McAfee VirusScan Enterprise for Linux using epolicy Orchestrator, see the McAfee VirusScan Enterprise for Linux Configuration Guide for your product version. UPGRADING FROM PREVIOUS VERSIONS Use this task to upgrade your previous McAfee VirusScan

8 Enterprise for Linux version 1.6, 1.7 or to version on the Linux server. 1. To upgrade McAfee Agent (MA), type this command in the terminal window: rpm -Uvh MFEcma.i686.rpm 2. To confirm that the McAfee Agent is running correctly, type this command in the terminal window: /etc/init.d/cma status 3. To upgrade McAfee VirusScan Enterprise for Linux, type this command in the terminal window: bash McAfeeVSEForLinux installer 4. Restart the client computer using the command: reboot RUNNING VIRUSSCAN ENTERPRISE FOR LINUX 1. From a supported web-browser, go to: or IP address>:<port number> Specify the hostname or IP address of the computer, on which VirusScan Enterprise for Linux is installed. By default, the port number is "55443". For example: (or) 2. On the log on page, type the user name "nails" and type the password that you specified during installation, then click Log on. UNINSTALLATION 1. To uninstall VirusScan Enterprise for Linux, type these commands: rpm -e McAfeeVSEForLinux

9 rpm -e MFEcma rpm -e MFErt 2. Reboot the computer to remove the LinuxShield kernel modules. NOTE: You do not have to reboot the computer immediately, because the VirusScan Enterprise for Linux kernel modules does not interrupt functioning of any other running service. UNINSTALLATION USING EPOLICY ORCHESTRATOR 4.6/5.0/5.1.x - Create a Product Deployment Task on epolicy Orchestrator to remove McAfee VirusScan Enterprise for Linux version For detailed information on how to uninstall the software using epolicy Orchestrator, see the "McAfee VirusScan Enterprise for Linux Configuration Guide" for your product version. KNOWN ISSUES To view an updated list of issues associated with this release, see "KB78126" in the McAfee Support online KnowledgeBase: FINDING PRODUCT DOCUMENTATION: McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1. Go to the McAfee Technical Support ServicePortal at 2. Under Self Service, access the type of information you need: For user documentation: 1. Click Product Documentation. 2. Select a Product, then select a Version. 3. Select a product document. For the KnowledgeBase:

10 1. Click Search the KnowledgeBase for answers to your product questions. 2. Click Browse the KnowledgeBase for articles listed by product and version. Copyright (C) 2014 McAfee, Inc. Do not copy without permission. McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. 00-A