Step-by-step configuration of the enterprise Symantec Norton Anti-Virus Server

 

• ConfigurationEnterprise Symantec NortonNT operating system,IIS has been installed
   

InstallSymantec Norton 10

1. Install System Center

Figure 1 install the Administrator tool

Figure 2 install Symantec System Center

Figure 3 install Symantec System Center according to the wizard

Figure 4 select the installation path

Figure 5 is configured and installation starts.

Figure 6 restart the computer after installation

1. Install the central isolation zone ---Purpose: To send an unknown virus directly to Symantec through the central isolation zoneVirus Information Center. (Optional)

Figure 7 if you select Internet-based, you also need to configure gateway and other information

Chart 8 does not need to be restarted

1. Install the Quarantine Console--Purpose:
2. Install Liveupdate

Figure 9 select the installation path

2. Install Symantec Norton 10 Server

Chart 10 select update for upgrade

Figure 11 multiple servers can be installed simultaneously when installing server components

Figure 12 create a antivirus server group

 

1. 1.  

Figure 13 custom Password

1. 6.  

Figure 14 Restart the server after installing the server

1. Configure Symantec Norton 10
   1.  
   2.  

Chart 15 start Symantec System Center

Figure 16 select an anti-virus server as the primary server

2. Install and configure the Anti-Virus Client
   1. Remote Installation Client installation via CD

Figure 17 Add the client to the corresponding server to receive the management of this anti-virus server

1. 1. Install on the console (remote)

In Figure 18, select tool> NT Client installation to install the client remotely.

1. 2. Install a client on a webpage
      1. Copy the WebInst directory under the CD directory to the relevant directory
         3. Note: Use the webside method to install clientand modify the sart.htm file.
            1. For details, see the following documents:
               1. How to use IIS 4.x or 5.x to install Symantec AntiVirus Enterprise Edition 8.x for Web-based Deployment
               2.  
               3. Situation
               4. This document explains how to use Internet Service Manager (IIS) 4.x or 5.x to install Symantec AntiVirus Enterprise Edition 8.x (Symantec AV) for Web-based deployment ).
               5.  
               6. Explanation
               7. Install Symantec AV for Web-based Deployment
               8.  
               9. Perform one of the following operations to start the Internet Service Manager:
               10. If you are running IIS 4.0, click Start> program> Windows NT 4.0 Option Pack> Microsoft Internet Information Server> Internet Service Manager.
               11. If you are running IIS 5.0, click Start> program> Administrative Tools> Internet Service Manager ".
               12. Double-click the Web Server icon.
               13. Right-click "Default Web site" and choose "New"> "virtual directory"> "Next ".
               14. In the "alias" text box, type the directory name (for example, clientinstall) and click "Next ".
               15. Select the installation location of Symantec AntiVirus on the server, and then select the \ Program Files \ SAV \ clt-inst \ WEBINST folder (C: \ Program Files \ SAV \ is the default installation path ).
               16. Click "Next ".
               17. Only the read permission is assigned.
               18. Right-click the Web-based installation of the corresponding new virtual directory, and select "properties ".
               19. Under the "virtual directory" tab, change "execution permission" to "NONE", and then click "OK ".
               20. Perform one of the following operations:
               21. For IIS 4.0, click Finish ".
               22. For IIS 5.0, click "Next"> "finish ".
               23. For Windows installation, use a text editor (such as NotePad) to edit Start.htm in the \ Program Files \ SAV \ clt-inst \ WEBINST folder on the server. The method is as follows:
               24. Replace ENTER_SERVER_NAME with the Web server name or IP address.
               25. Replace ENTER_VIRTUAL_HOMEDIRECTORY_NAME with the name of the created virtual home directory (for example, clientinstall.
               26. <Param name = "ServerName" value = "computer name or ip address">
               27. <Param name = "VirtualHomeDirectory" value = "clientinstall">
               28.  
               29. Modify Files. ini in the \ SAV \ Clt-inst \ webinst \ folder.
               30. In the [General] section, perform the following operations:
               31. Change the value of FileCount = to 2 and delete the semicolon.
               32. Add “setup.exe to LaunchApplication =.
               33. Add "InstallOption =/qb" or "InstallOption =/qn" to the row after launch launchapplication=setup.exe ".
               34. In the [Files] section, perform the following operations:
               35. Add “setup.exe to File1 = line.
               36. Add "grc. dat" to Files2 =, and delete the semicolon.
               37.  
               38. Files. ini should be similar:
               39.  
               40. [General]
               41. FileCount = 2
               42. LaunchApplication=setup.exe
               43. InstallOption =/qb
               44. [Files]
               45. File1=setup.exe
               46. File2 = grc. dat
               47.  
               48. --------------------------------------------------------------------------------
               49. Note:
               50. -To use the following installation conversion Parameter options, add InstallOptions = and one or more of the following conversion parameters to the [General] section.
               51.  
               52. Silent:/qn
               53. Passive:/qb
               54. Enable Logging:/l: <log file>
               55. Log record details:/v: <0, 1, or 2>
               56.  
               57. For example:
               58. InstallOptions =/qn/l: <Log File Name and path>/v: 2
               59.  
               60. -Some IIS configurations require renaming the. ini file to the. txt extension. For more information, see the document: Error: "An error occurred while downloading http: // <servername>/<virtual_directory_name>/files. ini. Terminating the file download process. Please report this issue to your system administrator ." (English)
               61. --------------------------------------------------------------------------------
               62.  
               63. Install the Setup.exe file from the \ Program Files \ SAV \ Clt-inst \ Win32 folder (for Symantec AV clients that are managed) copy to \ Program Files \ SAV \ Clt-inst \ WEBINST \ webinst \ folder.
               64. Copy the grc. dat file from the \ Program Files \ SAV \ Clt-inst \ Win32 folder to the \ Program Files \ SAV \ Clt-inst \ WEBINST \ webinst \ folder.
               65. Notify users to download Symantec AntiVirus Enterprise Edition:
               66. To notify users, send an email to download the Web-based Deployment Guide of the Symantec AV client. In the mail message, include the URL pointing to the Client installation, as shown below:
               67.  
               68. Http: // <SERVER_NAME>/clientinstall/
               69.  
               70. Description of each element in the URL:
               71. "Http: // SERVER_NAME/VIRTUAL_HOME_DIRECTORY /"
               72. SERVER_NAME is the name of a Web-based server.
               73. VIRTUAL_HOME_DIRECTORY is the name of the alias you created, such as clientinstall.
               74. Precautions for client users
               75. To download the client installer, you must install Internet Explorer 4.0 or later on your computer. You must set the security level of Internet Explorer on the local Intranet to "intermediate" to be able to download the Symantec ActiveX control to the client. After the installation is complete, you can restore the security level to its original settings.
               76. Make sure that you have local administrator permissions for the product to be installed. For example, to install the Symantec AntiVirus Enterprise Edition 8.x client, users installed on Windows NT/2000/XP must log on as local administrators.
               77. If your installation package restarts the client at the end of installation, you should notify the user to save their work and close their applications before the installation starts. For example, the installation of a silent client on Windows 98 may automatically restart the computer at the end of installation Based on the package created using Symantec Packager.
            2. Use the shared directory to install the client
               1. Shared path: \ servername \ vphome \ CLT-INST \ win32 \ setup.exe
               3. Install the client as prompted
            3. Create a Silent Installation Package
         4. Configure Symantec Norton 10
            2. You can configure the following information (common options) in the system center ):
               1. View related logs and export reports using logs
               2. "Scheduling scan"
                  1. Server force scan time
                  2. Client forced scan time
               3. Automatic client protection options
               4. Dedicated client administrator options
         5. Configuration management client
            1. After the installation is complete, the client flag is configured by default and does not appear

Figure 19 click "display Symantec Antivirus icon on the desktop"

1. 1. 1. 1. 1. Manage client Anti-Virus
               2. File System-Anti-Virus
                  Suggestion: "macro virus" ----- "Operation --- clear virus in file"
                  "Non-macro virus" ------ "operations-delete files"
               3. Other configurations are similar to "File System" settings.
               4. In the "Internet E-mail" configuration, "heuristic combat worm monitoring"
         2. Precautions after completing all configurations
            1. During communication between the Symantec Norton server and the client, the server and the client need to enable the default shared "C $"/"Admin $"
            2. Both parties can Ping the host name. If the host name cannot be pinged, modify the Hosts record.
            3. If the client operating system is Windows XP Home, the client cannot be installed in the receiving and management mode.
            4. If you install the client in the "do not receive management" mode and then want to receive management, you need to manage the GRC. DAT file on the server.
               Copy the GRC. DAT file to Documents and Settings \ All Users \ Symantec AntiVirus illegal ate Edition \ 7.5 and restart the client.
               GRC. DAT file: \ servername \ vphome \ cli-inst \ win32
               1. If the client cannot find the server or the server name (IP) address is changed, you must copy the GRC. DAT file to the relevant path of the client.
               2. When the client and server are installed, the default share cannot be disabled on the client. If the firewall is installed, disable it first.

 

From: Li chenguang blog