Avira Security Management Center

User Manual

Contents
1. About this manual... 4
1.1 Introduction.... 1.2 Structure of the manual... 1.3 Characters and symbols.... 1.4 Abbreviations..... 5 6
2. Product information.. 7
2.1 Functionality.... 8 2.2 Features.... 9 2.3 Licensing.... 10 2.4 System requirements.... 10

3. Installation... 11

3.1 Important information on installation.... 11 3.2 Carrying out the installation.... 11 3.2.1 Installing the SMC Server...11 3.2.2 Installing the SMC Frontend...16
4. Avira SMC Frontend... 17
4.1 Starting the SMC Frontend and logging in to the SMC Server.. 17 4.2 Licensing the Avira SMC.... 20 4.3 SMC Frontend user interface... 21

5. Configuration... 25

5.1 Overview.... 25 5.2 Configuring network and SMC Server connections... 26 5.3 Setting up the Security Environment... 27 5.4 Adding update servers to the Avira IUM... 36 5.5 Installing SMC Agents in the Security Environment... 37 5.5.1 Installing the SMC Agent via the SMC Frontend (Windows 2000/XP Professional/Vista/Windows 7/UNIX)..38 5.5.2 Manually installing the SMC Agent (Win XP Home Edition, optional: Windows 2000/XP Professional/Vista/Windows 7)..40 5.5.3 Silent agent setup in Windows...43 5.5.4 Manually installing the SMC Agent (optional for UNIX systems)..43 5.5.5 Uninstalling the SMC Agent....45 5.6 Configuring Avira SMC... 45 5.6.1 Changing the SMC Agent configuration...46 5.6.2 Changing SMC Server and Event Manager configurations...48 5.6.3 Configuration of the Avira Internet Update Manager..53 5.7 SSL certificate administration... 58 5.8 Updating the Avira SMC.... 60 5.8.1 Updating SMC Server and SMC Frontend..61 5.8.2 Displaying and changing update tasks for the SMC Server..62 5.8.3 Updating SMC Agents....62 5.9 User Management.... 63

6. Operation... 69

6.1 Overview.... 69 6.2 Managing software packages... 70 6.2.1 Adding and deleting software packages...70 6.2.2 Installing and uninstalling software packages...72 6.2.3 Changing the configuration of an Avira product..75

Avira GmbH

6.3 Creating filtered computer groups.... 77 6.4 Displaying information on a computer or group.. 81 6.4.1 Displaying information on a node or computer...81 6.4.2 Displaying information in the details panel...82 6.5 Displaying events.... 88 6.6 Executing commands and scheduling tasks... 90 6.7 Creating and displaying reports.... 94 6.8 Sharing files, licenses and programs in the Security Environment.. 99 6.9 Log files.... 101
7. Updating the Software Repository and installed products. 104
7.1 Using the Internet Update Manager... 105 7.1.1 Using the IUM Scheduler....105 7.1.2 Using the IUM in test mode....107 7.2 Updating packages in the Software Repository node... 108 7.3 Updating installed Avira products... 109 7.4 Update overview.... 110 7.4.1 Update using IUM in automatic mode...110 7.4.2 Update using IUM without automatic mode...111
8. Troubleshooting... 113
8.1 Requirements for communication between the SMC Agent and SMC Server. 113 8.2 Requirements for ADS synchronization... 113 8.3 Backup for SMC Server files... 114 8.4 Error during installation of the SMC Agent... 114
9. Products supported by Avira SMC.. 115
9.1 Supported Avira products.... 115 9.2 Product-specific configuration windows... 115

10. Service... 116

10.1 Support 10.2 Contact.... 116.... 116

About this manual

This chapter contains an overview of the structure and content of this manual. Structure of the manual Page 4 Characters and symbols Page 5

Introduction

This manual contains all the information you will need to use the Avira Security Management Center. Additional help and information is available from our website, our Technical Support hotline and our regular newsletter (see Service Page 116). Your Avira Team

Structure of the manual

The manual for your Avira software consists of several chapters containing the following information:

Chapter Contents

Structure of the manual, signs and symbols Overview of software features Important information on installation of the SMC Server and SMC Frontend Overview of the Avira SMC Frontend - Configuration of the network and server connections. - Configuration of the Security Environment. - Configuration and updating of SMC services. - Installation of SMC Agents.
1 About this manual 2 Product information 3 Installation 4 Avira SMC Frontend 5 Configuration

Control of Avira security products via the network
Central administration of product-specific actions (scan, update, etc.) via configurable commands and tasks Sharing files/licenses and Remote execution of programs from the share directory of the SMC Server Pull mechanism to reduce the network load on very large networks Saving of pending operations and tasks (installation, configuration, commands) for computers to which access is temporarily unavailable, and for pull Agents
Updating of Avira software via the network
Central and automatic updating of supported software packages and of Avira SMC components with Avira Internet Update Manager Monitoring products status Central control of the update function for installed Avira products with Internet Update Manager or via a scheduled task Testing the updates before they are committed to the share directory
Monitoring the activity of Avira products via the network
Event Manager to send network warnings and email notifications for specific events Configurable reports for Avira products on the network Central view for all events and reports issued by Avira products on the network

Licensing

Licensing involves two stages: the purchase of the license and activation of the license after installation of the Avira SMC. Normally you receive a license file by email after purchasing Avira products and acquiring the Avira SMC. The license is checked when computers are added to the Security Environment. If, for example, you have acquired a license for 500 clients, you can include a maximum of 500 computers in the Security Environment. Licensing is carried out after installation of the Avira SMC (see Licensing the Avira SMC Page 20).

Evaluation mode

If the product is not licensed, every time the SMC Frontend starts, a notification is displayed that Avira SMC can be used in evaluation mode for a period of 30 days. In evaluation mode, a maximum of 100 computers can be managed in the Security Environment.

Where necessary, change the Network Interface setting.
For Network interface you can either select the IP address of the network adapter you want to use for the SMC communication, or choose the SMC Servers hostname in order to use the primary network adapter that is linked to the hostname. Then click Next.
After the wizard has checked the network configuration, the dialog box IUMServer Network Configuration appears.
Confirm the specified configuration by clicking Next. Or: If necessary, change
the predefined ports accordingly. The selected ports are opened automatically during installation and then remain open.
If required, use Change. to select a different root directory. You can also use a
UNC path as the HTTP root directory and enter the UNC authentication here. However, locally connected networks are not supported.

Press Next.

After the wizard has checked the network configuration fro the IUM Server, a dialog for entering the login data for the SMC Server opens.
Enter the name and password for the administrator account on this computer

and click Next.

In the next window, enter the user name and the password for logging in to the SMC.
If you want to use a different account for the SMC login via the SMC Frontend,
disable the option Reuse account of SMC-Server service as SMC user account and enter the required settings for SMC-User and SMC/ IUMAvira Security Management Center Avira GmbH
Password. Otherwise keep the option enabled and click Next.
Should you wish to change the settings of the administrative or user account, you can do so after installation is complete. Right-click on Avira Security Management Frontend, then select Settings in the context menu. Choose the tab Administrator Account. Here you can change all the account settings which you have specified at installation. Continue with the configuration of the update scheduler.
Enter the required settings and click Next.
If the Windows Firewall is active, you will now be asked whether you want SMC Server services to be dealt with as an exception to the Microsoft Windows Firewall. If you confirm by selecting Yes, the firewall will be configured automatically; If you choose No, you have to configure the firewall manually at a later stage.
The program is ready for installation.

Click Install.

The application is installed.

Click Finish.

The SMC Server and related components are now installed.
Installation 3.2.2 Installing the SMC Frontend
You require administrator rights to install the SMC Frontend.
AntiVir_Security_Management_Center_Frontend_en.exe

Software Repository Security Environment
The central database of the SMC Server for storing Avira products. A freely configurable, hierarchical structure of so-called virtual groups with assigned computers. The groups can, for example, represent the business structure or the user groups on the network. The following nodes are displayed in the Security Environment: The group nodes with all computers assigned to the respective group. The computer nodes and the New computers node with sub-nodes for all Avira products and SMC Agents.

Network neighborhood

The Filtered security environment node, when filtered groups are created.
Work groups and computers on the MS Windows network. You can choose whether computers on the network display their name or IP address (right-click, Display IP Address). A sorted or filtered list of events which have occurred on the computers. The report templates and generated reports for the computers. General configuration dialog box for the Avira SMC components. A list of managed users. Here you can create, delete or edit SMC users. A website with the latest information on your product. Settings for mirroring Avira webservers and scheduling SMC and product updates.

Events Reports

Configuration
User Management Info Center Avira Internet Update Manager

Details panel

The Details panel contains detailed information on the selected nodes.
In the context menu select View > Large/Small Icons to display large or small
icons for computers, products, tasks and events in the Details panel.
In the context menu, select View > List or View > Detail to display the
elements or element details in table form. The Add/Remove columns option in the View menu lets you customize the display in the Details panel. The results can be sorted by clicking on the column headings.
Software Repository Security Environment Group node
Information on saved software packages: name, installation file, info- and license file. Detailed information, e.g. on the status of groups or computers. At group level (e.g. departments), information on sub-groups or integrated computers is displayed: computer name and status symbols, version, status, operating system, Agent availability, etc. The following information is displayed for every computer, via the Views menu options (Action/Views in the menu bar or Views in the context menu) or via the Toolbar:

Computer node

Product status: Displays the name, icon, status and details of products
Product version: Displays the name and version number of products Error messages: Displays errors detected by Avira products on a computer (with the product name, error status and error message). Events: Displays events detected by Avira products on the computer. Tasks: Displays tasks scheduled to be performed by Avira products on computers. Pending operations: Displays scheduled tasks for computers in offline mode and for pull Agents. These tasks are executed when the clients revert to online mode or when Agents perform synchronization.

Events

Further details on the events displayed. The event list can be filtered (e.g. by Level or Product) to display specific events. Information on report templates and the issued reports. No details are displayed in the results window for this node. Clicking on a configuration node (General, Server, etc.) opens the corresponding configuration window. For further information, refer to Configuring Avira SMC Page 45. Detailed information on users: User name, Complete name, Description, Email Address and Last login to the SMC Frontend. Information about known issues, tips and tricks, new application options and product updates. Update status for all software packages, including SMC components: Product name and Time of last update. When in test mode (see Configuration of the Avira Internet Update Manager Page 53), the Internet Update Manager has two nodes: Released products and Test products.

Reports Configuration

User Management Info Center
Avira Internet Update Manager

Overview

The main application, SMC Server, and the associated services are configured with the aid of the graphical user interface, SMC Frontend. The following steps should be performed after installation:
Configuring network and SMC Server connections Page 26 Setting up the Security Environment Page 27 Installing SMC Agents in the Security Environment Page 37
The settings for the SMC Server services can be customized if necessary:
Configuring Avira SMC Page 45 SSL certificate administration Page 58
In addition you can easily update Avira SMC via the Internet when updates are available.
Updating the Avira SMC Page 60 Creating a task for the Server update Page 62 Displaying and changing update tasks for the SMC Server Page 62
You can adapt SMC user rights to the demands of your IT environment:

User Management Page 63

Carry out the steps described in Starting the SMC Frontend and logging in to

the SMC Server Page 17.

Configuring network and SMC Server connections

Click New computers in the Security Environment.
Computers on which the SMC Agent is installed and which are newly available on the network are displayed.
Add the required computers to other groups in the Security Environment. To
do this, follow the steps described above.
Importing computers into the Security Environment
Computers can also be imported into the Security Environment via the Synchronize option in the Security Environment context menu. The following sub-options are available:
Network neighborhood Comma separated file Active directory
To import computers from the network neighborhood:
Right-click on the Security Environment node and select Synchronize -

Synchronize.

Select the Network neighborhood as the import source and click Next.
The computer list from the Network neighborhood is displayed.
Select the computers to be added and the computers to be removed as appropriate.
You can import/remove the entire list, or first select several computers and use the Remove selected computers from list button.
Click Next to import the required computers.

Commaseparated file

To import a computer list:
Create the computer list using a text editor and save it in the system. You can give
the text file (*.txt) any name you want. The list must have the following structure: group, name, IP or network name First floor\Marketing,Computer01,mkpc1 Ground floor,Reception,192.168.146.1 Group: Name of the group in the Security Environment, with the relative path to the Security Environment, e.g. First floor\Marketing Name: Display name of the computer in the Security Environment IP: IP address or name of the computer on the network
Right-click on the Security Environment node, and select Synchronize -
Select Comma separated file as the import source. Enter the path of the file [pclist.txt] and click Next.
The computer list from the imported file is displayed.
Select the computers to be added and the computers to be removed and click Remove
selected computers from list as appropriate (as described above) and click Next.
The computer list is imported. The names of the computers are displayed in the Security Environment.

Active directory

To import computers from Active directory:
Select Active directory as the import source. Select one of the options below.
The computer list from the ADS is displayed.
The computer list is imported from ADS according to the defined settings. The names of the computers are displayed in the Security Environment. The ADS communication port must be open to enable the import to be carried out (see Requirements for ADS synchronization Page 113).

5.5.1 Installing the SMC Agent via the SMC Frontend (Windows 2000/XP Professional/Vista/Windows 7/UNIX)
Computers/groups must be integrated into the Security Environment and have the following status: Monitor light blue, arrow red.
In the navigation area, click on the Security Environment node and then on
the groups/computers on which the SMC Agent is to be installed. The computers or groups are displayed with status icons in the results window.
Right-click on the group and select Installation/Avira SMC Agent/Install.
The Administrator Account window is opened:
Enter the user name and the password for the administrator account, if you
are using a different administrator account on the client computer, than on the SMC Server; On UNIX - type the root user and password, unless using SSH. -OREnable the option Use the server's current account. Installing the SMC Agent via the option Use the servers current account works only on Windows clients.
If you are accessing client computers via SSH (e.g. Linux workstations), you can
enable the Use SSH public/private key authentication option and select the Key file in putty format with the aid of the search button [.].
The SMC Agent is installed on the selected computers and groups.
You may need to restart the client computer.
A green icon is displayed in the frontend for the client computer (e.g. WIN7X64). The agent status Ok appears in the results window:
5.5.2 Manually installing the SMC Agent (Win XP Home Edition, optional: Windows 2000/XP Professional/Vista/Windows 7)
To install the SMC Agent on a computer with the Windows XP Home Edition operating system, you require the file AntiVir_Security_Management_Center_Agent_en.exe. This file can be found in the local directory in which you extracted the.zip file (see Carrying out the installation Page 11).
Computers/groups must be included in the Security Environment and have the following status: Monitor light blue, arrow red.
Copy the file AntiVir_Security_Management_Center_Agent_en.exe to the local
computer on which you want to install the SMC Agent.
Double-click on the file.
A window for extracting the installation file and starting the installation is displayed
The installation file is extracted. The window for the InstallShield wizard is displayed.
The License Agreement is displayed.
Select I accept the terms of the license agreement, and click Next.
The SMC-Server Configuration window is displayed.

General Settings

SMTP Server Sender email address Use login data
The name of the mailserver from which SMC sends email notifications. The email address from which SMC sends email notifications. If a login is required for the mailserver, enable this option and enter the user and password. The user name and password for logging in to the mailserver.
SMPT Login/ SMPT Password

Server configuration

Display agent synchronization command
If this option is enabled, the Commands context menu of the Security Environment and of computer groups contains the additional command Force agent synchronization, used for pull Agents. For further information, refer to Push and pull mechanism Page 90.

Minimize GUI refresh

If you are managing lots of clients via the SMC, you can enable this option to limit Frontend refresh instances and considerably improve SMC performance. The Frontend now only updates status icons to take account of error messages or pending operations.

Reset error states.

To ensure the error status display is always up-to-date, the SMC can be configured to automatically reset the error status after a specific number of hours. Enable the option Reset error states older than. and enter the required number of hours.
Synchronize client node hostname or IP address with client values
If you have enabled the option Synchronize client node hostname or IP address with client values, you can specify if the hostname or the IP address is to be used for updating the client node name. If this option is enabled, the SMC always retrieves the computer name or IP address of the client computer from the Agent. Enable this option if you want to display the computer name of the client in the Security Environment.
Synchronize client node display name

Event Settings

Events sent by Avira products to the Event Manager (e.g. virus alerts) can be sent to an email address. In this way, the administrator is directly informed about the events displayed in the SMC Frontend, e.g. critical events.

Email address

Email address of the recipient, e.g. the administrator or the collective address of the administration system, so that multiple team members receive the notification. This applies to the SMTP server settings from the General settings node. Enable this option if you want to be notified of warnings by email. Then set the number of events which must occur, for a notification to be sent. Enable this option if you want to be notified of critical events by email. Then set the number of events which must occur, for a notification to be sent. This option can be used to set the number of days after which event entries are automatically deleted from the database, to ensure that not too much memory space is used unnecessarily and database limits are not exceeded.

Send after count of. warning event(s) Send after count of. critical event(s) Delete events in database.
Configuration 5.6.3 Configuration of the Avira Internet Update Manager
The Avira Internet Update Manager (Avira IUM) is integrated into the SMC Frontend and is responsible for updates to Avira software packages and installed products. Clients on the network no longer have to download the updates themselves from the Internet; instead you can update the products via your intranet, reducing Internet data traffic. The Internet Update Manager service runs on one or more servers on your network and manages product update downloads on these servers. You can configure and control the Internet Update Manager service remotely, using the SMC Frontend. If you install the Avira SMC Server, an Avira IUM service is automatically installed on the same server. You can add new servers to the IUM node at a later time (as described under Adding update servers to the Avira IUM Page 36).
If the automatic update mode is enabled (enabled by default, see Updating the Software Repository and installed products Page 104), update tasks no longer have to be scheduled; moreover, the update server also does not have to be configured for each product, because updates are automatically triggered and downloaded by the integrated Update Manager (IUM). The automatic update mode also ensures that available updates are distributed to all client computers as quickly as possible. You can use the Configuration settings (Configuration - Update - Default IUM for all updates) to select a default IUM server for all updates: SMC Frontend,
Software Repository, SMC Server (including installed Agents and Avira products on the client computers, if set to automatic mode).

Synchronization

You can separately enable the repositories synchronization option: Automatically synchronize software repositories between SMC and IUM servers. If this option is enabled, SMC automatically synchronizes all IUM instances in order to mirror all products contained in the Software Repository. If you delete or add a software package in the Repository, the SMC Server deletes/ adds this product from/to all IUM servers. In order to configure the individual IUM Servers in your Security Environment, expand the Avira Internet Update Manager node and then the server node (for example vm-win2k3:7050) and use the configuration options under Server Settings and Frontend Settings.
IUM Server - General settings

Select the required product and click Finish.

wildcard search criteria

Select the fourth filter type if you want to include in a sub-group all computers
with name or hostname matching a specific search criterion. Then click Next. The Text filter window is opened.
Enter the hostname or the IP address you search for (* and ? wildcards
supported). Click Finish. The sub-group is displayed under the Filtered security environment node.
Agent last registration date
Select the fifth filter type if you want to include computers in a sub-group on
the basis of the last Avira SMC Agent registration. Then click Next. The Last registration filter window is opened.
Enter a time period in which the last interaction is to have taken place,
e.g. 14 days. Click Finish. The sub-group is displayed under the Filtered security environment node.
Displaying information on a computer or group
6.4.1 Displaying information on a node or computer
Basic information on each node or computer can be displayed via the Properties context menu. Information on a virtual group:
Properties of virtual groups
Computer amount in group: The number of computers in the group. Available: The number of computers currently connected to the Avira SMC. Product and Count: The name and number of products installed in the group. Display name: The name of the computer in the Security Environment. Hostname/IP: The hostname or IP address on the network.
Information on a computer:
Right-click on a virtual group under the Security Environment node and
select Properties. The Properties window is displayed:

Computer properties

Right-click on a computer under the Security Environment node and select

Properties.

The Computer properties window is opened:
Operation 6.4.2 Displaying information in the details panel
Avira SMC saves information on each computer and group in the Security Environment, which you can display and if necessary sort in the details panel. When selecting a computer, various Views are available via the context menu or toolbar:
For a group: Status, Error messages, Tasks and Pending operations For a computer: Product status, Product version, Error messages, Events, Tasks and Pending operations
Selecting and sorting the information displayed
Right-click on the computer or group you want to display information on and
select the required view from the Views option (alternately you can use the relevant toolbar button): Product status, Product version, Error messages, Events, Tasks or Pending operations. The relevant information is displayed in the details panel.
icons for computers, products, tasks and events in the results window.

Using the Internet Update Manager
The Internet Update Manager service is preconfigured, i.e. no further user actions are required after installation of the SMC Server. Internet Update Manager distributes the updated files across the entire network so that client computers do not require Internet access to perform updates. The automatic update mode is enabled by default: all IUM servers automatically mirror all packages contained in the SMC Software Repository.
7.1.1 Using the IUM Scheduler
To configure the interval at which Avira Internet Update Manager scans for available product updates and downloads them to the corresponding IUM server:
In the navigation area, click on the node of the IUM server being configured.

Click Scheduler:

In the Scheduling area, activate the Enable scheduling function and then the
required update interval (Once, Hourly, Daily, Weekly, Monthly or Every x days/hours/minutes).
If you have enabled Every x days/hours/minutes enter an update
interval. The minimum interval is 15 minutes.
Specify the start date and time for the first update in the Start time/ Start date
fields. The scheduler has been configured. When you exit the dialog box you will automatically receive a prompt to save all changes. The service performs product updates at the specified date and time and at the appropriate intervals. The selected interval must be at least 5 minutes longer than the interval set for the automatic copying of files in test mode.
Updating the Software Repository and installed products 7.1.2 Using the IUM in test mode
The Internet Update Manager can also be used in Test mode. This mode can be enabled in the Update Manager configuration window:
Enable the Activate test mode option under Server Settings - General.
In test mode, new files are loaded into a special test directory (Test products) on a second HTTP server. The files remain in this location until they are committed.
You can assign the test repository of an IUM Server to a group, to test the updates:
Right-click the group and select Automatic update - Use update test server.
After validation, the test files can be committed (Released products), to serve as update source to the other groups.
Right-click on Test products, and select Commit products.
The test files can also be committed automatically:
Under Server Settings - General, enable the option Commit test files
automatically and enter the required time (in minutes).
The selected interval must be at least 5 minutes less than the interval set for updating the products. The files will be moved after this period of time has elapsed.

Click Yes to confirm the change. The IUM servers are first reinitialized
If the server was offline at the time of the planned commit operation, the test files are released as soon as the server booted up again. This is to say that if the automatic commit is scheduled for 9:30 p.m. and the server is offline at that time, but will be booted up again at 10 p.m., the automatic commit will take place at 10 p.m. If problems occur during the test, the moving of the test files can be terminated. Right-click on the Test products node and select Drop upcoming commit. Alternately, you can enter

--drop_automatic_commit

in the command line. This means that automatic commit command remains active, but currently queued files are deleted. New files are not saved in the queue until the next update. Manual commit, which allows files to be committed individually at any time is still available via the context menu of the Test products node. If you want to perform an update via the IUM in test mode, you first have to click on Released products in the context menu. Otherwise you will not be able to update the SMC Server and Frontend at a later time.
Updating packages in the Software Repository node
It is recommended to update the Software Repository via the integrated IUM Server using the automatic update mode (enabled by default).
Manually updating software packages
If the automatic mode is disabled (Server Settings - General - Activate automatic mode for SMC updates under the relevant IUM server node), you can update the Software Repository manually:
Right-click the Software Repository node and select Update Software

Repository/Start update.

OR Right-click on a software package in the Software Repository and select Update/Execute update. Avira SMC creates a connection to the specified update server, downloads the available software updates and saves them in the Software Repository node.
Scheduling regular updates of software packages
You can update software packages in the SMC Server at regular intervals by creating an update task. You can update all software packages or only specific software packages.
Right-click the Software Repository node and select Update software
packages/Schedule update.

OR Right-click on a specific software package in Software Repository and select Update/Schedule update. The Create a Task window is displayed.
Enter a name for the task, select the frequency of recurrence, and click Next.
In the next window, you will be asked to enter start date and start time details.
Select the start date and start time and click Finish.
The task is saved. You can edit the task at any time using the options in the context menu (see Displaying tasks for software packages and SMC Server components Page 93).
Updating installed Avira products
It is recommended to update the Software Repository via the integrated IUM Server using the automatic update mode (enabled by default). In case you added more IUM servers to SMC, you can select an update server which you can use to update Avira products on specific computers or in specific groups:
Right-click on the computer or group in the Security Environment and select

Automatic update.

Click Inherit settings from parent node to disable this option if it is still

enabled.

Click the option Use <server> for updating.
Manually updating installed Avira products
If you want to execute update commands and tasks manually via the Internet Update Manager, you must disable the Automatic update option in the context menu of the Security Environment, group or computer node (Right-click the node: Automatic update Disabled).
Right-click on the group or computer, and select Commands/[Avira product]/

Start update.

The update routine for the Avira product is started and the new program files are installed. You can schedule update tasks for Avira products installed on the computers in the Security Environment. For further information, refer to Executing commands and scheduling tasks Page 90.

Update overview

You update all Avira products via the IUM, by selecting the Update mirrored products option under Released products or Products - Test products. Alternately you can also update the IUM using the IUM scheduler.
7.4.1 Update using IUM in automatic mode
The IUM has an automatic update mode for updates in the SMC. You can enable this function under:
Server Settings - General - Activate automatic mode for SMC updates under the relevant IUM server node Automatic update - Use <server> for updating in the context menu of the Security Environment, group or computer node, for the Avira installed products
Automatic mode is enabled by default. The following table contains a list of updatable program modules and indicates which can be automatically updated.
Program module Can be automatically updated?
IUM packages Software Repository

Yes Yes

Program module
Can be automatically updated?
SMC Agent Installed products SMC Server SMC Frontend IUM service
Yes Yes No (You are only notified that new updates are

Avira Security Management Center | HowTo
Avira Security Management Center 2.6

Support

April 2011

www.avira.com

Errors in design and contents cannot be excluded Avira GmbH Status: March 2010 1
Contents 1. Installation of the SMC Server... 3 2. Installation of the SMC Frontend... 6 3. Starting the SMC and Logon... 6 4. Licensing of the SMC... 6 5. Installing the Software Repositories... 6 6. How to Install the Security Environment.... 9 7. Configuration Settings of the SMC... 10 8. Installation of the SMC Agents via the SMC Frontend... 10 9. Pull / Push Mode of the SMC Agent.... 13 10. Filtering groups..... 15 11. Windows Installation.... 19
11.1. Unattended Installation of the SMC Agents... 19 11.2. Installation of the Avira AntiVir Professional... 19 11.3. Configuration of the Avira AntiVir Professional... 21 11.4. Planning and Executing of Updates and Scans.. 25 11.5. Installation of the Avira AntiVir Server... 26 11.6. Configuration of Avira AntiVir Server... 26 11.8 To reset or to transfer the Configuration.... 30 11.9 Migration of the SMC 2.5 to 2.6.... 31
12. Automatic Product Installation.... 33 13. Automatic Synchronization with ADS/LDAP... 34 14. Administration of several IUMs via the SMC Frontend.. 34 15. General Hints / Information... 35 16. UNIX..... 37
16.1. Manual Installation of the SMC Agents for UNIX... 37 16.2. Installation and configuration of the Avira AntiVir UNIX Professional/Server. 37 16.3. Installation and Configuration of Avira AntiVir UNIX WebGate. 38 16.4. Installation and Configuration of Avira AntiVir UNIX MailGate. 39
All installation files which are necessary for the installation and the manuals in pdf format can be found on our website for being downloaded. http://www.avira.com (http://www.avira.com/en/download/index.html).
1. Installation of the SMC Server
After having downloaded the installation file of the SMC and unpacked it on your windows server, please, start the installation of the AntiVir Security Management Center Server: AntiVir_Security_Management_Center_Server_en.exe. During the installation routine the following window will appear. Here you can change the network configuration of the AntiVir Security Management Center Server, if necessary.
Illustration 1 SMC Installation Network settings
Make sure that the network ports 7000, 7001, 7010, 7030, 7050, 7051, 7080 and 7100 are not yet used by any other application installed on the server. You can check this by means of the order netstat an which can be entered via the command prompt. During the installation the following window will appear. In order to install the necessary services you have to enter an administrator account (as the case may by the domain administrator account) with the corresponding password:

Status: March 2010

Illustration 2 SMC Installation
After you have clicked on Next, the following window appears:
Illustration 3 SMC Installation user account

Status: April 2011

The activated Option Reuse account of SMC-Server service as SMC user account means that you can login to the SMC with this user as administrator (same Login data as the formerly entered windows administrator.) By deactivating the option you can also enter a special SMC user who will be used for the login to the SMC. After that, a window will appear which allows you to configure the scheduler of the Internet Update Manager. According to the settings, it will load the product updates, the virus definition file and engine updates.
Illustration 4 Configuration Scheduler
2. Installation of the SMC Frontend
The SMC Frontend (Graphical User Interface) is necessary in order to configure the SMC and has to be installed separately. This can be done on the windows server or/and on the administrators workstation PC. Execute the file AntiVir_Security_Management_Center_Frontend_en.exe for the installation of the AntiVir Security Management Center Frontend and confirm the appearing window by accept. Finish the installation via the installation assistant.
3. Starting the SMC and Logon
The SMC is started via the start menu Start Programs AVIRA AntiVir Security Management Center Management Center In order to log on to the AVIRA Security Management Center Console, click on AVIRA Security Management Center Frontend. Please, enter the user (default: administrator) and the password you have used during the installation. After that, click on ok in order to logon to the SMC. Please, take care to change the mark from local computer to computer in the network in case the SMC Frontend should not be installed on the SMC Server. In such a case enter the IP address/hostname of the server on which the SMC Server is installed. Alternatively you can choose it via Browse.

4. Licensing of the SMC

In case you should already have a valid license file hbedv.key for the SMC, you can implement it after the logon as follows: Click on AntiVir Security Management Center Frontend with the right mouse button and then on License. Via the now appearing window you have the possibility to import the SMC license file.
5. Installing the Software Repositories
In order to be able to work with the SMC, the AVIRA products have to be integrated into the SMC. First download the necessary installation file(s) from our website. www.avira.com (http://www.avira.com/en/download/index.html). In order to add the installation file(s) as software to the SMC, click on Software in the SMC Frontend with the right mouse button and then chose New Software. Via the now appearing window you can directly select the already downloaded installation files in the self unpacking exe format. The formats zip or for linux software packages gz and tgz are also possible. After the software has been inserted, it will appear with a faded icon as a point in the menu of the SMC software.

Status: April 2011 6

After the license file has been integrated into the corresponding software (this is possible in the right half of the window) the icon for the software will appear in solid colours.

Illustration 5 Software Packages
Confusing the license or saving an invalid license for the software package is not possible with the new SMC version. Before saving the license will be checked for validity. The license which is integrated into the software package is only used for the first installation of the software on the clients. In case this license has expired, it has to be renewed for the corresponding software for possible new installations of the AVIRA products on the clients. The license on the already installed clients will not be renewed. This has to be done separately via the copy function in the security environment and the option Installation AntiVir Professional Copy Files The installation files which were added via the software packages will be automatically added to the Internet Update Manager which has been integrated into the SMC. The Internet Update Manager downloads the necessary updates for the software packages and makes them available for the clients via http and the port which was defined in the configuration of the Internet Update Manager (by default: port 7080). In order to proceed the updates automatically you should configure the planer which is integrated in the Internet

Status: April 2011 7

Update Manager (please, click with the right mouse button on Internet Update Manager and choose Plan Update). The planer has to be activated first. The activation can be done via a right mouse click on Internet Update Manager choose planer Activate planer. Please, make sure that the Internet Update Manager has already proceeded the first update before you update the clients. You can do that by a click with the right mouse button on Internet Update Manager Update now. If the function Update automatically is activated in the configuration of the Internet Update Manager, the updates which are downloaded by the Internet Update Manager will be loaded automatically via a command which is sent to the clients. The corresponding update source (f. ex. http://10.50.11.91:7080/upd/) will be included automatically. The clients can also be updated independently of the automatic updates of the Internet Update Manager. Please, note the chapter 11.4 in which the planning and proceeding of updates and scans is described. For further information about the automatic updates of the Internet Update Manager, please, read the corresponding chapter in the SMC manual.
6. How to Install the Security Environment
The security environment consists of clients which shall be managed via the SMC and can be organized in groups and subgroups. A new group can be a subgroup of the security environment or of an already existing group. A group can be created by clicking on the designated place in the security environment with the right mouse button and choosing New Group. This example shows how the group Server and Clients are created. You can drag the computers which are located in your network from the network environment which is shown underneath the security environment into the security environment or to created groups:

Illustration 6 Security Environment
Computers which are not shown in the network, f. ex. linux clients, can be manually added to a group For this purpose click on the designated group with the right mouse button and choose New Computer. Then the following window appears which allows to name the computer via the host name or the IP address. Moreover, a differing name can be given with which the computer will be shown in the SMC:

Status: April 2011 9

Illustration 7 Security Environment
7. Configuration Settings of the SMC
The configuration of the SMC is divided into the following sections: General Server Internet Update Manager Alert Manager
The configuration allows defining general settings of the SMC. If you should use a proxy server it can be entered beneath configuration settings Internet Update Manager Communication settings. Further configuration settings like f. ex. the configuration of the Alert Manager are explained in the SMC manual.
8. Installation of the SMC Agents via the SMC Frontend
The SMC agent is responsible for the communication between the SMC Server and the clients that have to be managed. The agent has to be installed on the client in addition to the necessary virus protection. This can be done directly via the SMC, manually or by means of a script. In order to enable the SMC Agent to communicate with the SMC Server the following conditions have to be fulfilled:
Firewall: If a firewall is used on the client, the following network ports (TCP) have to be opened: Out (TCP): 7000, 7001, 7010, 7020, 7021, 7030, 7050, 7051, 7080, 7100. In (TCP): 7030 Moreover ICMP requests, PING (incoming echo demands) have to be enabled. Guest account: The user account Guest has to be deactivated The simple Filesharing (Explorer Extras Archive Options View Use simple filesharing (recommended)) should be deactivated. The access from the SMC Server to the hidden filesharing C$ of the clients has to be possible (\\<IP address Client\c$\). For a smooth installation via the SMC a network wide, standardised user account is indispensable. The installation of the SMC Agents via the SMC is done by clicking in the security environment on the corresponding client/group with the right mouse button and choosing Installation AntiVir SMC Agent Install. The computers on which the SMC Agent is installed have to be powered on and Windows has to be activated!

Status: April 2011 10

The following authentication window appears:
Illustration 8: SMC Agent Installation
Enter an existing user with administrative rights on the client into the field user name and a corresponding password. For linux clients f. ex. the user root. In case the account of the SMC server service also exists on the clients (standardised local administrator login, domain administrator, ) you can also choose the option Use the current account of the server. For the installation via SSH (linux clients) you can additionally use SSH key for the authentication. For this purpose choose the option Use SSH public/private key authentication and enter the corresponding key. After the successful installation of the SMC Agent the client will be shown with a green icon in the security environment (communication is working):
Illustration 9 Security Environment; installed agent
In order to uninstall click with the right mouse button on the designated client/group and the choice of Installation AntiVir SMC Agent Uninstall. The appearing pop-up window has to be confirmed with Yes.
9. Pull / Push Mode of the SMC Agent
After the installation the SMC works in the push mode by default. That means, the SMC Server sends planned commands like updates or scans or f. ex. changes in the configuration to the SMC Agent, which proceeds them on the corresponding client. For PCs which are not reachable for the SMC Server at that moment an outstanding action will be generated which will be executed as soon as the installed agent connects to the SMC Server. In the push mode the SMC Server tries to reach all computers. This causes a heavy system load for a short time. For an update command with an interval of one hour the data is sent f. ex. to 500 computers and an update of 2 MB is loaded by the Internet Update Manager. This will happen at the same time on 500 clients and cause a system load of (500x2MB) 1 TB in the network. In order to reduce this network load, the SMC can be switched to pull mode. So the SMC Agent will check if there are new tasks for it and proceed them. As never all clients are started at the same time the planned update intervals will not take place at the same time. Using the pull mode the same amount of data is copied for an update but the system load is dispersed over a longer period. A further advantage of the pull mode in comparison to the push mode is that the SMC Agent checks for changes according to the configured interval. If it shouldnt find changes or if it shouldnt reach the SMC Server the previous configurations or tasks are retained. Configured update tasks are proceeded independently of the SMC Server. The change from the push mode to the pull mode is done in the configuration of the SMC Agent via the SMC Frontend. It is possible to choose pull or push mode separately for individual pcs or groups. In order to set the whole security environment on the pull mode, please, click with the right mouse button on the security environment and on configuration Avira SMC Agent configure. In the configuration of the SMC Agent you will find the push mode in the field Data retrieval from server. You can change that to Pull. The corresponding minute interval for the connection of the SMC Agent to the SMC Server (by default 60 minutes) can be defined via Pull interval.

Illustration 10: Configuration Agent 2.4
The configuration change of the SMC Agent is sent to the clients via the button Send now. The following functions can be proceeded via the pull mode: Product installation Product configuration Product commands Task management Progress bar of the clients
For technical reasons further functions like recalling the log files of the clients are based on the push mode.

10. Filtering groups

You have the option to filter according to certain criterias to get a quick overview in a SMC that manages a large number of PCs requiring the attention of the administrator. The result is then shown in one or more special virtual groups (filtered groups). The following filters can be used to create virtual groups within the SMC 2.6: 1. 2. Computers that report an error status Computers that report a product-error status 2.1. Module outdated 2.2 General module error 3. Computers that have a certain product installed or not installed. 3.1. All products that are integrated in "software packages" can be selected 4. Search using a text filter 4.1. It can be searched for computers, groups, and host name / IP addresses 4.2. Last message from the SMC agent to the SMC Server
In the SMC 2.6, the following filter options have been added:
having a product installed or not installed (Previously you could only filter for a not installed product) whose name or hostname matches a wildcard search criteria by agent last registration date
A "filtering group" provides a particular view of all clients that match the selected filter criterion. This means that the clients will not be permanently moved into this group, but rather remain in their original group. All actions that are performed for that client in the filtered group are actually running on the real client. Example: Click with the right button on "Security Environment" to create a "filtering group" which filters clients in the "Security Environment" that have e.g. AntiVir Professional not installed. Then select New Filtering Group. The next window opens, allowing you to specify a name for the new "filtering group":

After youve clicked on Next the following window appears where you can choose one of the offered filtering groups (e.g. filter computers which have a specific product not installed):
Once you clicked on Next, another window will open. Here you will have the choice to select one of the products that have been placed at the "Software Repository".
In this example, the product "Avira AntiVir Professional 10 (Windows), EN has been selected. Once you have clicked on Finish the "filtered group" will be created with the tag "Clients without AntiVir Professional". Every computer of the security environment that has "Avira AntVir Professional 10 (Windows), EN" not installed, will now appear in this group:
Now those "filtered" clients can be targeted for an installation of e.g. Avira AntiVir Professional 10. For more details about the "filtering groups" we recommend for further reading the manual of the SMC.

11. Windows Installation

11.1. Unattended Installation of the SMC Agents
Alternatively the agent can be installed manually with the setup file or unattended (f. ex. integrated into the logon scripts). On the SMC Server the following registry has been generated: C:\Documents and Settings\All Users\Application data\Avira\Avira Security Management Center Server\Agent Please, enable this registry via the Windows enabling with writing access. In case of an unattended installation it is not enough to start the file insallagent.bat via the registry enabling. (\\<IP-address-SMC-server>\<Enabling(agent)>\installagent.bat). The insallagent.bat starts the installation (setup.exe) of the SMC Agent and uses the SMC Server information which is saved in the file installsmcagent.iss. By generating a corresponding batch file (f. ex. uninstallagent.bat) for the uninstallation of the SMC Agent the uninstallsmcagent.iss can be used. Clients which were not integrated into the security environment before the unattended SMC Agent installation will be listed in the new group new computers and can be moved afterwards via drag & drop. You have also the possibility to add new computers to existing groups by means of the IP address. Therefore you can define an IP address or IP address sectors as a property of a group. As soon as an SMC Agent is logging on to the SMC Server for the first time the SMC will integrate it into the corresponding group according to its IP address.

The configuration of the update via webserver can look as follows using the Avira AntiVir Professional 10:

Status: April 2011 23

Illustration 19: Configuration of the AntiVir Professional 10
The configuration of the updates via filesharing in the AV10 can look as follows:
Illustration 20: Configuration AntiVir Professional 10 Update via file server
Using the update option via filesharing you should not forget to enable the destination directory httproot (root directory for the updated files) of the Internet Update Manager via the file system (read access is sufficient).

Status: April 2011 24

This directory is normally located in: C:\Documents and settings\All Users\Application data\Avira\Avira Internet Update Manager\HttpRoot\ Also the Server Login Name and the Server Login Password should be configured, so that the updater can load the updates even if the user login on the client has not yet taken place. After you have chosen and configured an update possibility, it can be sent via a click on Send Now to the clients. For clients that are deactivated when the configurations are transmitted an outstanding action will be generated. The outstanding action will be carried out as soon as the client will be activated and the SMC Agent will have registered to the SMC Server.
11.4. Planning and Executing of Updates and Scans
An update or scan order can be executed by clicking with the right mouse button on the designated group in the SMC and after that click on Command AVIRA AntiVir Workstation Start Update / Scan. Via the window which opens now you can choose Schedule this command. This command executes updates or scans automatically at particular times and after specified periods. If the button Schedule this command is not activated, an update or scan is executed at once (depending on the command). The execution of commands Update or Scan are nearly the same. The only difference consists in the different possibilities of execution. This is why a detailed description of the command Scan is left out. Further details can be found in the manual.
11.5. Installation of the Avira AntiVir Server
The Avira AntiVir Server has to be integrated into the software packages just like the Avira AntiVir Professional in order to be installed and configured via the SMC. The installation procedure is similar to the Avira AntiVir Professional and therefore is not described here. For further information of the AntiVir Server installation, please, read the manual.
11.6. Configuration of Avira AntiVir Server

Via the SMC all functions and configurations are available which can be adjusted locally at the Avira AntiVir Server. You get to the configuration of the Avira AntiVir Server via the SMC with a right mouse click on the group you want to configure. Choose Configuration AntiVir Server Configure. The configuration of Avira AntiVir Server opens. Here you can make changes similar to the local configuration at the Avira AntiVir Server. The update configuration is located in the menu of the register Updates. Change the configuration here in order to be able to execute f. ex. central updates. You can choose here the update procedure via a webserver (intranet) or via fileserver / share. Depending on the kind of update you have chosen, the update path has to be configured.
Illustration 21 Update scheduler AntiVir Server 10
If the update shall be loaded via Fileserver/Share the target folder of the Internet Update Manager HttpRoot has to be enabled via the file system (reading rights are enough). The configuration of the update can be seen in the screenshot above. The Server Login Name and the Server Login Password are important to be configured, so that the Updater can load updates even if the user login to the Windows Server has not yet taken place or if the user who is signed in has no access rights to the update registry.
Illustration 22 Configuration AntiVir Server 10 Update via file server
An update via the webserver which is offered by the Internet Update Manager is also possible. The internet update will be changed, so that dl.antivir.de/update isnt used as the update source but the webserver of the internet updater is called. The example for the configuration via webserver (intranet) is shown in the following screenshot.
Illustration 23: Configuration AntiVir Server 10 download server
11.7. Planning and Executing of Updates and Scans
In order to execute an update or a scan command via the SMC you have to click with the right mouse button on the designated group and then on Commands AntiVir Server Start Update/Scan:
Illustration 24: Start update / scan task
As the planning of the updates or scans is similar to the procedure regarding the Avira AntiVir Professional it will not be described here. Further information can be found in the manual.
11.8 To reset or to transfer the Configuration
If a configuration about the security environment is modified for one product it will be transferred to all pcs in the security environment respectively in the subgroups. Exception: In case a subgroup/pc has been separately configured in a special way by deactivating the option Transfer configuration this group/pc will keep its configuration and will not accept the superior configuration. In order to make sure that the special configured subgroup/pc accepts the superior configuration the special configuration of the subgroup/pc has to be reset (Configuration Avira AntiVir Professional Reset all). Example: The function Transfer configuration has been deactivated for the subgroup clients and it has been configured in a way that the expert mode is not shown. Via the superior group security environment a configuration has been chosen which shows the expert mode. The group clients will not accept this configuration as a special configuration has been made here. If the configuration of the security environment shall be accepted the configuration of the group clients has to be reset. Click with the right mouse button on the group clients and choose Configuration Avira AntiVir Professional Reset all. In order to see which groups or pcs have a transferred or a special configuration click on the corresponding superior group (f. ex. security environment) In the right half of the Security Management Center Frontend you can see if the configuration is special or transferred.

Illustration 25: Security Environment transferred or specific configuration
11.9 Migration of the SMC 2.5 to 2.6
Direct update: 1. Click with the right mouse button on "Avira Security Management Center Frontend" and select Update. Select Server Start update to update the server.
Select Frontend to update the frontend. The following message appears if you update the SMC-server:
When updating the SMC Frontend:
Click Yes to confirm and close the SMC Frontend if necessary. The connection to the SMC-server will be interrupted. Avira SMC will connect to the Internet Update Manager, which provides the updates of the product. Restart the SMC Frontend, and log back on to the SMCServer.
Updating SMC-agents It is recommended to update SMC-agents automatically via the Avira Internet Update Manager (Default).
How to update SMC-agents across the network or in a specific group: Click with the right mouse button on the node "security environment" or on the nodes of the group and select Commands Avira SMC Agent Start Update.
How to update SMC-agents on a specific computer: Click with the right mouse button in the security environment on the node of the computer at "Avira SMC Agent" and select Commands Start Update. You can schedule updates of SMC agents also chronologically. Click within the window "Commands" on the button Schedule this command.
12. Automatic Product Installation
The SMC Version 2.5 offers the possibility to define an automatic product installation. This function installs the defined product automatically on all computers which are moved into a certain groups. Click with the right mouse button on a group, Installation Products. After that you can select the software packages.
Illustration 26: Automatic product installation
13. Automatic Synchronization with ADS/LDAP
The already given possibility to synchronize the SMC Security Environment with ADS or LDAP has been extended. Now you can proceed that via the scheduler. Click with the right mouse button on security environment and select Plan synchronization. You can select how to proceed the synchronization as usual. Finally you insert a task which automatically proceeds the synchronization in the future.
14. Administration of several IUMs via the SMC Frontend
In case of several standalone IUMS (e.g. for several subsidiaries), you had to administer them via separate IUM frontends. The SMC 2.5 allows you to administer several IUM servers via the SMC frontend. You can add a new IUM as follows: Right mouse button on Avira Internet Update Manager New Add IUM Server. After the IUM Server or several IUM servers have been added into the SMC-Frontend, a product synchronization is proceeded automatically.

Illustration 27: Administration of several IUMs via the SMC Frontend
15. General Hints / Information
INFO Bubbles: When you slide over the configuration icons in the SMC with the mouse curser, yellow information windows will appear which give you helpful hints. ICONS of the SMC: There are several icons which can appear in the SMC. They are described in the following:
Error message Warning / Hint The client is activated; the Agent is installed and the communication works
Check product status The Client is deactivated/cannot be reached; Agent is not installed
The Client is deactivated/cannot be reached; Agent is installed
The Client is deactivated/cannot be reached; Agent is installed; outstanding action
Client is activated, Agent is not installed PC is activated; Agent is installed but cannot be reached Sandglass, the client is connecting to the SMC Server or is occupied with the commands of the SMC
Symbol of the agent which is installed on the client Valid software package without integrated license file hbedv.key
Valid software package with integrated license file hbedv.key
Software package is installed on the client
ID of the Software Packages: In case you should get the message Missing software package with ID XX the software package is not integrated or it is integrated with an old and defective version: Software ID = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = Software package SMC-Agent AntiVir Server 7 DE AntiVir Server 7 EN UNIX Server UNIX Workstation/Professional UNIX MailGate UNIX WebGate UNIX Updater AntiVir Professional 8 German AntiVir Professional 8 English AntiVir Professional 8 Russian AntiVir Professional 8 Spanish AntiVir Professional 8 Italian AntiVir Professional 8 French AntiVir Server 8 German AntiVir Server 8 English AntiVir Server 8 Russian AntiVir Server 8 Spanish AntiVir Server 8 Italian AntiVir Server 8 French AntiVir Professional 10 German AntiVir Professional 10 English AntiVir Professional 10 Russian AntiVir Professional 10 Spanish AntiVir Professional 10 Italian AntiVir Professional 10 French AntiVir Server 10 German AntiVir Server 10 English AntiVir Server 10 Russian AntiVir Server 10 Spanish AntiVir Server 10 Italian AntiVir Server 10 French

16. UNIX

16.1. Manual Installation of the SMC Agents for UNIX
You can install the SMC agent also in a manual way. The needed product package is called: AntiVir_Security_Management_Center_UNIX_Agent.tgz and can be downloaded from the internet. The package is called AntiVir_Security_Management_Center_en.zip and the file AntiVir_Security_Management_Center_UNIX_Agent.tgz can be extracted with the command unzip AntiVir_Security_Management_Center_en.zip AntiVir_Security_Management.tgz in an unix environment. Save the file in a directory of your choice on you computer on which the SMC Agent shall work, f. ex. in \tmp. Unpack the package: tar xzvf AntiVir_Security_Management_Center_UNIX_Agent.tgz Change to the installation directory: cd AntiVir_Security_Management_Center_UNIX_Agent Install the SMC Agent:./install --server=HOST[:PORT] --display-name=<SMC display name> The IP address of the server and the SMC display name have to be given. The name of the server port can be given optionally. This is only necessary if the SMC Server does not use the default ports for the communication with the SMC Agent.

16.2. Installation and configuration of the Avira AntiVir UNIX Professional/Server
The AV Guard can only be used via the SMC if the dazuko module can be loaded automatically by means of the command modprobe or has already been loaded. Details about the translation and installation of dazuko can be found in the HowTo on the website http://www.dazuko.org. Before you can start with the installation the product package for Avira AntiVir UNIX Professional and Avira AntiVir UNIX server has to be added to the product packages of the SMC and a license has to be entered. The package is called antivir-workstation-prof-<version>.tar.gz or antivir-server-prof<version>.tar.gz. The packages can also be downloaded from the website http://www.avira.com. In order to start the installation of Avira AntiVir UNIX Professional/Server click on the knot security environment and as the case may be on the group or the computer where the AntiVir Unix Professional/Server shall be installed. Click with the right mouse button on the group/the computer and choose Installation/Avira AntiVir Professional/Server (UNIX)/Install. The dialogue window Installation appears and has to be confirmed with OK. The AV Guard is started automatically during the booting but it is not started after the installation. This is shown in the SMC with the icons Check product status. In order to start

Status: April 2011 37

the AV Guard click with the right mouse button on the group/the computer and choose Avira AntiVir Professional Server (UNIX) Start. If the Guard cannot be started and the error status remains it is possible that dazuko (file access control) is missing on the server or has not yet been loaded. All directories are supervised by the guard during an installation via the SMC. Which directories shall be controlled can be changed in the registry Basic Settings of the configuration. Click with the right mouse button on the group/the computer and choose Configuration Avira AntiVir Professional Server (UNIX) configure. We recommend to supervise only a few important directories (f. ex. enable share). Details about the configuration of Avira AntiVir UNIX Professional/Server can be found in the manual for Avira AntiVir UNIX Server (chapter 4 configuration).

16.3. Installation and Configuration of Avira AntiVir UNIX WebGate
Before you can start with the Installation, the product package for Avira AntiVir UNIX WebGate has to be added to the software packages of the SMC and a license has to be entered. The package is called antivir-webgate-prof-<version>.tar.gz. The package can be downloaded from the website http://www.avira.com. In order to start the installation of Avira AntiVir UNIX WebGate, click on the knot security environment and as the case may be on the group / the computer where Avira AntiVir WebGate shall be installed. Click with the right mouse button on the group/the computer and choose Installation Avira AntiVir WebGate (UNIX) Install. The dialogue window installation appears and has to be confirmed by OK. WebGate is started automatically after the booting but it will not be started after the installation. This is shown here: Views Product Status. In order to start WebGate click with the right mouse button on the group/the computer and choose commands Avira AntiVir WebGate (UNIX) Start. In order to make changes about the configuration, click with the right mouse button on the group/the computer and choose Configuration Avira AntiVir WebGate (UNIX) configure. You will find all the details about the configuration in the manual Avira AntiVir UNIX WebGate (Chapter 4 Configuration).
16.4. Installation and Configuration of Avira AntiVir UNIX MailGate
Before the installation the product package for Avira AntiVir UNIX MailGate has to be added to the software packages of the SMC and a license has to be entered. The package is called antivir-mailgate-prof-<version>.tar.gz. The package can be downloaded from the website http//:www.avira.com. In case of an installation via the SMC only the configuration of MailGate can be done. The configuration of the MTA (f. ex. postfix) cannot be proceeded via the SMC. In order to start the Installation of Avira AntiVir UNIX MailGate, click on the knot security environment and as the case may be on the group/the computer where Avira AntiVir UNIX MailGate shall be installed. Click with the right mouse button on the group/the computer and choose Installation Avira AntiVir MailGate (UNIX) Install. The dialogue window Installation appears and has to be confirmed by OK. MailGate and the used MTA have to be configured now. Please, note the necessary configuration settings in the manual Avira AntiVir MailGate UNIX (chapter 4.4 Further installation passes dependent on the MTA). In order to make the described changes in the configuration, click with the right mouse button on the group/the computer and choose Configuration Avira AntiVir Mailate (UNIX) configure. Further Details about the configuration can be found in the manual for Avira AntiVir UNIX MailGate (chapter 6 configuration). MailGate is started automatically after the booting but is not started after the installation. In order to start MailGate, click with the right mouse button on the group/the computer and choose commands AntiVir WebGate (UNIX) Start.