Avira Server Security Product Updates. Best Practice

Transcription

1 Avira Server Security Product Updates Best Practice

2 Table of Contents 1. What is Avira Server Security? Where else can Avira Server Security be found? What is the difference between updates and product updates Update options Why do we need two different update types? Best practices regarding product update configurations Standalone installation Using Avira Management Console (AMC) Using Avira Update Manager (AUM) Test mode for critical environments...6 Avira Server Security Best Practice (Status 2012/11/26) 2

3 1. What is Avira Server Security? The Avira Server Security protection package is a product which protects your Windows file server in real-time from malware. It includes the Avira Server Security service and the Avira Server Security Console. The Avira Server Security service is the local protection component which guards your Windows Server. The Avira Server Security Console is used for management, control and monitoring of the Avira Server Security service on the servers to be protected. You can access any number of servers via the Avira Server Security Console. The latest System Requirements can be found in the manual delivered with the product (press F1 in the configuration console). Avira Server Security Best Practice (Status 2012/11/26) 3

4 2. Where else can Avira Server Security be found? Avira Server Security is also part of the following product bundles: Avira Business Security Suite Avira Small Business Security Suite Avira Endpoint Security Avira Endpoint & Security 3. What is the difference between updates and product updates? 3.1 Update options Avira Server Security has two update possibilities: Detection Updates (visualized in the UI as Update ) This includes the engine binaries and the virus definition files updates, but no product binaries updates Product and Detection Updates (visualized in the UI as Product Updates ) This includes product binaries as well as engine and virus definition files updates 3.2 Why do we need two different update types? We need two different update types because in some cases of product updates it is mandatory to perform a reboot of the machine in order to use the updated files. This behavior is explained in details in the documentation under Avira Server Security > Avira Server console > Settings > Update > Start product update. The default installation of the product sets by default an update job for engine and virus definition files with a frequency of 1h (one hour). There will be no product updates installed automatically. Avira Server Security Best Practice (Status 2012/11/26) 4

5 An update of the virus definition file and of the search engine is performed during every update process independent of the settings for the product update. In the Configuration Console, under the settings of your server, an administrator can create additional update jobs that are performed by Updater at the specified intervals. 4. Best practices regarding product update configurations We recommend to always enable product updates, because this ensures that your product receives always the latest improvements and patches. Because files servers are very sensitive resources in any company, it is advisable to plan the rollout of product updates in advance in such a way that the activity of the company is not affected negatively. The configuration of these settings is dependent on the method of installing and controlling the Avira Server Security product: standalone or in managed mode. 4.1 Standalone installation In a standalone installation, it is possible to configure the product via the Console. There is already a predefined update task, which by default updates the engine and virus definition files every hour. In order to enable product updates, go to Settings > Update and select Product update. Avira Server Security Best Practice (Status 2012/11/26) 5

6 The recommended option is to Download and install product updates automatically because this allows an administrator to set and forget the product. In this option it is possible to set when the product updates should be installed. Important Note In some cases it is required to update important files and this needs an automatic reboot of the machine. Although this is rarely the case, it might happen when, for example, the kernel modules required for the malware filtering are updated. This is why it is recommended to perform this update out of the business hours. Setting this option in business hours has the consequence that a reboot is performed when potentially many users are accessing the server. It is not recommended to set the product updates when not even the administrator is available or when important background jobs like backups are scheduled. Avira Server Security has the possibility to send alerts before an update happens and after. For more details, please check the documentation. 4.2 Using Avira Management Console (AMC) Using AMC it is possible to set up almost the same settings for the product updates and the alerts as in the standalone product. 4.3 Using Avira Update Manager (AUM) Test mode for critical environments Using the AUM Test mode allows the customer to check every update (VDF, engine and product) to an assigned test group / test host(s) before applying it to productive hosts. If the test is successful, it is possible to release the updates to the production group (all other hosts) or do it automatically at a configurable time after the last update. Avira Server Security Best Practice (Status 2012/11/26) 6

7 Avira Server Security Best Practice (Status 2012/11/26) 7

8 Avira Server Security Best Practice (Status 2012/11/26) 8

9 Avira Server Security Best Practice (Status 2012/11/26) 9

10 This manual was created with great care. However, errors in design and contents cannot be excluded. The reproduction of this publication or parts thereof in any form is prohibited without previous written consent from Avira Operations GmbH & Co. KG. Issued Q Brand and product names are trademarks or registered trademarks of their respective owners. Protected trademarks are not marked as such in this manual. However, this does not mean that they may be used freely Avira Operations GmbH & Co. KG. All rights reserved. Errors and omissions excluded. Avira Operations GmbH & Co. KG Kaplaneiweg Tettnang Germany Telephone: Facsimile