Sophos Anti-Virus for NetApp Storage Systems startup guide. Runs on Windows 2000 and later

Sophos Anti-Virus for NetApp Storage Systems startup guide Runs on Windows 2000 and later Document date: July 2007

Contents About this guide...4 About Sophos Anti-Virus for NetApp Storage Systems...5 1 System requirements...6 2 Before you install Sophos Anti-Virus for NetApp Storage Systems...7 3 Installing Sophos Anti-Virus for NetApp Storage Systems...16 4 Managing Sophos Anti Virus from MMC...23 Technical support...31

About this guide This guide tells you how to install Sophos Anti Virus for NetApp Storage Systems manage Sophos Anti Virus for NetApp Storage Systems from a Microsoft Management Console (MMC) snap-in. 4

About Sophos Anti-Virus for NetApp Storage Systems What is Sophos Anti-Virus for NetApp Storage Systems for? Sophos Anti-Virus for NetApp Storage Systems provides on-access scanning of files held on a Network Appliance filer. How does it work? You install and run Sophos Anti-Virus on a Windows computer that will provide virus scanning (an anti-virus server). When a workstation attempts to access a file held on the Network Appliance filer, Sophos Anti-Virus intercepts the file and scans it. If the file is found to be clean, access can go ahead. If the file is infected, access is denied. How is it controlled? You control Sophos Anti-Virus from an MMC snap-in, which can be on the anti-virus server itself, or on a different computer. 5

1 System requirements NetApp enterprise filer Data ONTAP 6.x (6.1 required, 6.4 recommended) Data ONTAP 7.x Computer to provide virus scanning Windows 2000/XP/2003/Vista (server version recommended) 120 MB disk space 256 MB memory Windows Installer 2.0 or later Computer to manage virus scanning Windows 2000/XP/2003/Vista (server version recommended) 25 MB disk space 45 MB memory Windows Installer 2.0 or later Microsoft Management Console 1.2 or later You can use the same computer to provide and manage virus scanning, or you can use different computers. 6

2 Before you install Sophos Anti-Virus for NetApp Storage Systems Before you install Sophos Anti-Virus for NetApp Storage Systems, you must make a virus scanner available on each computer that you want to use as an anti-virus server. To do this, you ensure that Sophos Anti-Virus for Windows has been installed on the computer (section 2.1) configure Sophos Anti-Virus for Windows to update itself (section 2.2) configure Sophos Anti-Virus for Windows for use with a Network Appliance filer (section 2.3). If Sophos Anti-Virus has already been installed on the computer, and is automatically updated, go straight to section 2.3. 2.1 Install Sophos Anti-Virus for Windows Important You must uninstall any other vendor s anti-virus software before installing Sophos Anti-Virus. Important Sophos recommends that you use Sophos Enterprise Console to automatically install and update Sophos Anti Virus for Windows 2000/XP/2003/Vista, version 6 or 7 (without Sophos Client Firewall). To find out how to do this, refer to the Sophos Endpoint Security and Control network startup guide, which is available on the Sophos website and the Sophos Network Install CD. Alternatively, you can follow the procedure below to install Sophos Anti Virus manually. 1. 2. Go to the Sophos website product downloads page (www.sophos.com/support/updates). Save Sophos Anti Virus for Windows 2000/XP/2003/Vista, version 6 or 7 to your computer. At the Windows computer you want to use as an anti-virus server, log on as an administrator. 7

. 4. 5. 6. 7. Extract the downloaded Sophos Anti Virus files to this computer to start the installation wizard. In the Welcome dialog box, click Next to continue the installation. In the License Agreement dialog box, click I accept the terms in the license agreement if you agree to the terms and want to continue. Click Next. In the Destination folder dialog box, if necessary change the folder to which Sophos Anti Virus will be installed. Click Next. In the Update source dialog box, you enter the location from which the computer will get updates. You can do this now or specify that you want to enter these details later. To enter the update source now, you can either select Sophos and type the username and password for downloading direct from Sophos, or type the address, username and password for downloading from a location on your company s website or intranet. If you access the internet via a proxy, select Access the update source via a proxy, click Next and go to step 8. Otherwise, click Next and go to step 9. To enter the update source later, select I will enter these details later. Sophos Anti Virus will not update itself until you enter these details. Click Next and go to step 9.

. In the Proxy details dialog box, type the proxy server address and port number. Type a username and password that give access to the proxy server. If the username needs to be qualified to indicate the domain, use the form domain\username. Click Next. 9. In the Ready to install Sophos Anti Virus dialog box, click Next. You should see Sophos Anti-Virus being installed on your computer. 10. In the successfully installed dialog box, click Finish. Windows 2000 or later computers must be restarted to scan files accessed by DFS (Windows 2000 or later) or via non-microsoft file systems (Windows 2000). If in doubt, restart your computer. Installation is complete when the Sophos Anti-Virus system tray icon is blue. Note If the icon is gray, your computer is not protected by Sophos Anti-Virus. For help, contact Sophos technical support. 9

If you didn t specify an update source from which Sophos Anti Virus can update itself, go to section 2.2. Otherwise, Sophos Anti-Virus will update itself automatically from the update source that you specified, as long as it is connected to it. By default, it will do this every 60 minutes. Note If a red circle with a white cross in it appears over the Sophos Anti Virus system tray icon, Sophos Anti-Virus failed to update itself. For help, contact Sophos technical support. Now go to section 2.3 to configure Sophos Anti Virus for use with a Network Appliance filer. 2.2 Configure Sophos Anti-Virus to update itself You only need to follow the instructions in this section if you didn t specify an update source during installation. 1. Log on as an administrator. In the system tray, right-click the Sophos Anti Virus icon to display a menu. Select Configure updating. 10

2. In the Properties for Sophos AutoUpdate dialog box, click the Primary server tab. You can either select Sophos and type the username and password for downloading direct from Sophos, or type the address, username and password for downloading from a location on your company s website or intranet. If you access the internet via a proxy, click Apply, and then click Proxy Details and go to step 3. Otherwise, go to step 4.. In the Proxy details dialog box, select Access the server via a proxy. Then type the proxy server address and port number. If necessary, type a username and password that give access to the proxy server. If the username needs to be qualified to indicate the domain, use the form domain\username. Click OK. 11

4. In the Properties for Sophos AutoUpdate dialog box, click OK. Sophos Anti-Virus will update itself automatically from the update source that you specified, as long as it is connected to it. By default, it will do this every 60 minutes. Note If a red circle with a white cross in it appears over the Sophos Anti Virus system tray icon, Sophos Anti-Virus failed to update itself. For help, contact Sophos technical support. Now configure Sophos Anti Virus for use with a Network Appliance filer (section 2.3). 2.3 Configure Sophos Anti Virus for use with a Network Appliance filer This section describes how to configure Sophos Anti Virus for use with a Network Appliance filer. Sophos Anti Virus must be configured to scan all files with an unknown file extension to move all infected files to a quarantine folder not to display messages on the screen when scanning files. 1. 2. In the system tray, right-click the Sophos Anti Virus icon to display a menu. Select Open Sophos Anti Virus. In the Sophos Anti Virus window, on the Configure menu, click On-access scanning. 12

. In the On-access scan settings for this computer dialog box, click the Extensions tab. Click Add. In the extensions list box, type??? and press the Enter/Return key. Sophos recommends that you next configure Sophos Anti Virus to move all infected files to a quarantine folder. 13

4. In the On-access scan settings for this computer dialog box, click the Cleanup tab. Click Move to. Using the Browse button, specify the path of the folder to which infected files should be moved. The folder must be on this computer, and should preferably be accessible to anti virus administrators only. Click OK. 5. On the Configure menu, click Messaging. 14

6. In the Messaging dialog box, click the Desktop messaging tab. Deselect Enable desktop messaging. Click OK. You have configured Sophos Anti Virus for Windows for use with a filer. Now install Sophos Anti Virus for NetApp Storage Systems (section 3). Note If you want to configure Sophos Anti Virus for Windows further, refer to the Sophos Anti Virus Help. 15

3 Installing Sophos Anti-Virus for NetApp Storage Systems This section describes how to install Sophos Anti-Virus for NetApp Storage Systems. Sophos Anti-Virus for NetApp Storage Systems has two components: The Sophos Anti-Virus for NetApp service. An MMC snap-in, which is used to control Sophos Anti-Virus for NetApp Storage Systems. You can install the components on the same computer, or on separate computers. If you are installing the Sophos Anti-Virus for NetApp service (i.e. if this computer will be an anti-virus server), this section assumes you have installed and configured Sophos Anti Virus for Windows (section 2). If you are installing the MMC snap-in, this section assumes that this computer is running MMC version 1.2. Note The following procedure explains how to install Sophos Anti- Virus for NetApp Storage Systems from the Sophos website. If you want to install it from a Sophos Anti Virus Supplementary CD, at the Windows computer on which you want to install it, log on as an administrator and insert the CD. Start the installation wizard and go to step 4. 1. 2.. Go to the Sophos website product downloads page (www.sophos.com/support/updates). Save Sophos Anti Virus for NetApp Storage Systems to your computer. At the Windows computer on which you want to install Sophos Anti Virus for NetApp Storage Systems, log on as an administrator. Extract the downloaded Sophos Anti Virus files to this computer to start the installation wizard. 16

4. In the Welcome dialog box, click Next to continue the installation. 5. In the End user licence agreement dialog box, read the licence agreement. If you accept it, click I accept the terms of the licence agreement, and click Next. 17

6. In the Custom setup dialog box, you select the features to install. The selection depends on the use you want to make of this computer. To use the computer as an anti-virus server and to manage Sophos Anti Virus from MMC: Click Next and continue to step 7. To use the computer ONLY as an anti-virus server: Click the down arrow next to MMC snap-in. Select Entire feature will be unavailable. Click Next and continue to step 7. To use the computer ONLY to manage Sophos Anti Virus from MMC: Click the down arrow next to Anti virus service. Select Entire feature will be unavailable. Click Next and go straight to step 9. 18

7. In the Filer name dialog box, type the name of the filer. You can specify only one filer for this computer to perform scanning for. Click Next. 19

. In the Account information dialog box, enter the details of an account in the domain containing the filer that this computer is serving. The account must have Administrator or Backup Operator level rights. Click Next. Note On Windows XP/2003/Vista, if the installation wizard then displays a warning that the account details are invalid, ensure that the local security setting Network access: Sharing and security model for local accounts is set to Classic - local users authenticate as themselves. 20

9. In the Ready to install dialog box, click Install to begin the installation. 10. In the completed dialog box, click Finish. You have installed Sophos Anti-Virus for NetApp Storage Systems. Note If you want to ensure that anti-virus scanning can be carried out when you update Sophos Anti-Virus, install it on another computer as well. On the filer, define that computer as a secondary server. (To 21

find out how to do this, refer to the Data ONTAP documentation.) Then, the secondary server can handle scanning requests if the primary server is unavailable (e.g. being updated). If you want to install the Sophos Anti-Virus for NetApp service and/or the MMC snap-in on another computer, repeat section 3. You must ensure that the filer has been configured to send files for virus scanning. To find out how to do this, refer to the Data ONTAP documentation. To manage Sophos Anti-Virus from MMC, continue to section 4. 22

4 Managing Sophos Anti Virus from MMC This section explains how to manage Sophos Anti Virus from Microsoft Management Console (MMC). It tells you how to snap in Sophos Anti Virus to MMC (section 4.1) add an anti virus server to MMC (section 4.2) stop the Sophos Anti Virus for NetApp service on an anti-virus server (section 4.3) start the Sophos Anti Virus for NetApp service on an anti-virus server (section 4.4). This section assumes you installed the MMC snap in for Sophos Anti Virus during the installation procedure described in section 3. 4.1 Snap in Sophos Anti Virus to MMC 1. At the computer where you installed the MMC snap-in, at the taskbar, click Start Run. In the Run dialog box, type mmc. Click OK. 23

2. In the Console1 console, on the File menu (Console menu for MMC versions earlier than 2.0), click Add/Remove Snap in.. In the Add/Remove Snap in dialog box, in the Standalone tabbed page, click Add. 24

4. In the Add Standalone Snap in dialog box, in the Available Standalone Snap ins list box, select Sophos Anti Virus for NetApp Storage Systems. Click Add, then Close. 5. In the Add/Remove Snap in dialog box, click OK to return to the Console1 console. On the File menu (Console menu for MMC versions earlier than 2.0), click Save. In the Save As dialog box, choose a location and type a filename for the console settings. Click Save. 25

You have snapped in Sophos Anti Virus to MMC. Now add an antivirus server to MMC (section 4.2). 4.2 Add an anti-virus server to MMC If you have installed the Sophos Anti Virus for NetApp service on this computer or other computers, you must add these to MMC to enable it to manage Sophos Anti Virus on these computers. 1. In the console tree, double-click Sophos Anti Virus for NetApp. Click the AV Machines folder. On the Action menu, click Administer AV Machine. In the Add Sophos Anti Virus server dialog box, click Browse. 2. In the Browse for Computer dialog box, locate the anti-virus server and click OK. 26

. In the Add Sophos Anti Virus server dialog box, type a location and description for the anti-virus server if you wish, and click OK. The anti-virus server is shown in the right-hand pane of the AV Machines console, with the Sophos Anti Virus for NetApp service running. You have added an anti-virus server to MMC. 27

4.3 To stop the Sophos Anti Virus for NetApp service on an anti-virus server 1. In the right-hand pane of the console, right-click the name of the anti-virus server to display a menu. Select Properties. 2. In the Properties dialog box, in the General tabbed page, click Stop. Click OK. 28

In the right-hand pane of the console, you should see that the service is not running on the selected anti-virus server. 4.4 To start the Sophos Anti Virus for NetApp service on an anti-virus server 1. In the right-hand pane of the console, right-click the name of the anti-virus server to display a menu. Select Properties. 29

2. In the Properties dialog box, in the General tabbed page, click Start. Click OK. In the right-hand pane of the console, you should see that the service is running on the selected anti-virus server. 30

Technical support For technical support, visit www.sophos.com/support. If you contact technical support, provide as much information as possible, including the following: Sophos software version number(s) Operating system(s) and patch level(s) The exact text of any error messages Copyright 2006, 2007 Sophos Group. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the licence terms or you otherwise have the prior permission in writing of the copyright owner. Sophos and Sophos Anti-Virus are registered trademarks of Sophos Plc and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners. 31