AVIRA SECURITY MANAGEMENT CENTER 2.5 - SUPPORT... User manual

Avira Security Management Center | HowTo
Status: March 2010 1
Avira Security Management Center 2.5
Support
März 2010
www.avira.com
Errors in design and contents cannot be excluded
© Avira GmbH

Contents
1. Installation of the SMC Server........................................................................................ 3
2. Installation of the SMC Frontend.................................................................................... 6
3. Starting the SMC and Logon .......................................................................................... 6
4. Licensing of the SMC...................................................................................................... 6
5. Installing the Software Repositories.............................................................................. 6
6. How to Install the Security Environment ....................................................................... 9
7. Configuration Settings of the SMC ...............................................................................10
8. Installation of the SMC Agents via the SMC Frontend.................................................10
9. Pull / Push Mode of the SMC Agent ..............................................................................13
10. Filtering groups............................................................................................................15
11. Windows Installation....................................................................................................18
11.1. “Unattended“ Installation of the SMC Agents .....................................................18
11.2. Installation of the Avira AntiVir Professional ......................................................18
11.3. Configuration of the Avira AntiVir Professional..................................................20
11.4. Planning and Executing of Updates and Scans ..................................................24
11.5. Installation of the Avira AntiVir Server.................................................................25
11.6. Configuration of Avira AntiVir Server ..................................................................25
11.7. Planning and Executing of Updates and Scans ..................................................28
11.8 To reset or to transfer the Configuration..............................................................29
11.9 Migration of the SMC 2.4 to 2.5 and AV8 to AV10.................................................30
12. Automatic Product Installation....................................................................................32
13. Automatic Synchronization with ADS/LDAP ..............................................................33
14. Administration of several IUMs via the SMC Frontend..............................................33
17. UNIX ..............................................................................................................................36
17.1. Manual Installation of the SMC Agents for UNIX.................................................36
17.2. Installation and configuration of the Avira AntiVir UNIX Professional/Server ..36
17.3 Installation and Configuration of the Avira AntiVir UNIX Updater (for SMC)......37
17.4. Installation and Configuration of Avira AntiVir UNIX WebGate..........................38
17.5. Installation and Configuration of Avira AntiVir UNIX MailGate ..........................38

Avira Security Management Center | HowTo
Status: March 2010 3
All installation files which are necessary for the installation and the manuals in
pdf format can be found on our website for being downloaded.
http: www.avira. com (http: www.avira.com en download index.html).
1. Installation of the SMC Server
After having downloaded the installation file of the SMC and unpacked it on your
windows server, please, start the installation of the AntiVir Security Management
Center Server: AntiVir_Security_Management_Center_Server_en.exe.
During the installation routine the following window will appear. Here you can
change the network configuration of the AntiVir Security Management Center
Server, if necessary.
Illustration 1 SMC – Installation Network settings
Make sure that the network ports „7000“, „7001“, „7010“, „7030“, “7050”,
7051”, “7080” and „7100“ are not yet used by any other application installed on
the server.
You can check this by means of the order „netstat –an“ which can be entered via
the command prompt.
During the installation the following window will appear. In order to install the
necessary services you have to enter an administrator account (as the case may
by the domain administrator account) with the corresponding password:

Avira Security Management Center | HowTo
Status: March 2010 4
Illustration 2 SMC – Installation
After you have clicked on “Next“, the following window appears:
Illustration 3 SMC – Installation user account

Avira Security Management Center | HowTo
Status: March 2010 5
The activated Option “Reuse account of SMC-Server service as SMC user
account” means that you can login to the SMC with this user as “administrator”
(same Login data as the formerly entered windows administrator.)
By deactivating the option you can also enter a special SMC user who will be
used for the login to the SMC.
After that, a window will appear which allows you to configure the scheduler of
the Internet Update Manager. According to the settings, it will load the product
updates, the virus definition file and engine updates.
Illustration 4 Configuration Scheduler

Avira Security Management Center | HowTo
Status: March 2010 6
2. Installation of the SMC Frontend
The SMC Frontend (Graphical User Interface) is necessary in order to configure
the SMC and has to be installed separately.
This can be done on the windows server or and on the administrator’s
workstation PC.
Execute the file „AntiVir_Security_Management_Center_Frontend_en.exe“ for the
installation of the AntiVir Security Management Center Frontend and confirm the
appearing window by “accept”. Finish the installation via the installation
assistant.
3. Starting the SMC and Logon
The SMC is started via the start menu „Start“ „Programs“ „AVIRA“ „AntiVir
Security Management Center“ „Management Center“
In order to log on to the AVIRA Security Management Center Console, click on
„AVIRA Security Management Center Frontend“.
Please, enter the user (default: administrator) and the password you have used
during the installation. After that, click on “ok” in order to logon to the SMC.
Please, take care to change the mark from local computer to computer in the
network in case the SMC Frontend should not be installed on the SMC Server. In
such a case enter the IP address hostname of the server on which the SMC
Server is installed. Alternatively you can choose it via “Browse”.
4. Licensing of the SMC
In case you should already have a valid license file „hbedv.key“ for the SMC, you
can implement it after the logon as follows:
Click on “AntiVir Security Management Center Frontend“ with the right mouse
button and then on “License”.
Via the now appearing window you have the possibility to import the SMC license
file.
5. Installing the Software Repositories
In order to be able to work with the SMC, the AVIRA products have to be
integrated into the SMC.
First download the necessary installation file(s) from our website.
www.avira.com (http: www.avira.com en download index.html).
In order to add the installation file(s) as software to the SMC, click on “Software”
in the SMC Frontend with the right mouse button and then chose “New” 
„Software“.

Avira Security Management Center | HowTo
Status: March 2010 7
Via the now appearing window you can directly select the already downloaded
installation files in the self unpacking “exe” format
The formats „zip“ or for linux software packages „gz“ and „tgz“ are also possible.
After the software has been inserted, it will appear with a faded icon as a point in
the menu of the SMC software.
After the license file has been integrated into the corresponding software (this is
possible in the right half of the window) the icon for the software will appear in
solid colours.
Illustration 5 Software Packages
Confusing the license or saving an invalid license for the software package is not
possible with the new SMC version. Before saving the license will be checked for
validity.
The license which is integrated into the software package is only used for the
first installation of the software on the clients.
In case this license has expired, it has to be renewed for the corresponding
software for possible new installations of the AVIRA products on the clients.

Avira Security Management Center | HowTo
Status: March 2010 8
The license on the already installed clients will not be renewed. This has
to be done separately via the copy function in the security environment
and the point “Installation”  “AntiVir Professional”  “Copy Files”
The installation files which were added via the software packages will be
automatically added to the Internet Update Manager which has been integrated
into the SMC.
The Internet Update Manager downloads the necessary updates for the software
packages and makes them available for the clients via http and the port which
was defined in the configuration of the Internet Update Manager (by default: port
7080). In order to proceed the updates automatically you should configure the
“planer” which is integrated in the Internet Update Manager (please, click with
the right mouse button on “Internet Update Manager” and choose “Plan
Update”).
The planer has to be activated first. The activation can be done via a right mouse
click on “Internet Update Manager”  choose “planer”  “Activate planer”.
Please, make sure that the Internet Update Manager has already proceeded the
first update before you update the clients. You can do that by a click with the
right mouse button on “Internet Update Manager”  “Update now”.
If the function “Update automatically” is activated in the configuration of the
Internet Update Manager, the updates which are downloaded by the Internet
Update Manager will be loaded automatically via a command which is sent to the
clients. The corresponding update source (f. ex. http: 10.50.11.91:7080 upd )
will be included automatically.
The clients can also be updated independently of the “automatic updates” of the
Internet Update Manager. Please, note the chapter 11.4 in which the planning
and proceeding of updates and scans is described.
For further information about the “automatic updates” of the Internet Update
Manager, please, read the corresponding chapter in the SMC manual.

Avira Security Management Center | HowTo
Status: March 2010 9
. How to Install the Security Environment
The security environment consists of clients which shall be managed via the SMC
and can be organized in groups and subgroups.
A new group can be a subgroup of the security environment or of an already
existing group.
A group can be created by clicking on the designated place in the security
environment with the right mouse button and choosing “New”  “Group“.
This example shows how the group “Server” and “Clients” are created.
You can drag the computers which are located in your network from the network
environment which is shown underneath the security environment into the
security environment or to created groups:
Illustration 6 Securit Environment
Computers which are not shown in the network, f. ex. linux clients, can be
manually added to a group
For this purpose click on the designated group with the right mouse button and
choose “New”  “Computer”.
Then the following window appears which allows to name the computer via the
host name or the IP address.

Avira Security Management Center | HowTo
Status: March 2010 10
Moreover a differing name can be given with which the computer will be shown
in the SMC:
Illustration 7 Securit Environment
7. Configuration Settings of the SMC
The configuration of the SMC is divided into the following sections:
•General
•Server
•Internet Update Manager
•Alert Manager
The configuration allows defining general settings of the SMC. If you should use a
proxy server it can be entered beneath “configuration settings”  “Internet
Update Manager” –> “Communication settings”. Further configuration settings
like f. ex. the configuration of the “Alert Manager” are explained in the SMC
manual.
8. Installation of the SMC Agents via the SMC Frontend
The SMC agent is responsible for the communication between the SMC Server
and the clients that have to be managed.
The agent has to be installed on the client in addition to the necessary virus
protection. This can be done directly via the SMC, manually or by means of a
script.
In order to enable the SMC Agent to communicate with the SMC Server the
following conditions have to be fulfilled:
− Firewall: If a firewall is used on the client, the following network ports (TCP)
have to be opened:
Out (TCP): 7000, 7001, 7010, 7020, 7021, 7030, 7050, 7051, 7080, 7100.
In (TCP): 7030
Moreover ICMP requests, PING (incoming echo demands) have to be enabled.
− Guest account: The user account “Guest“ has to be deactivated
− The simple Filesharing (“Explorer”  “Extras“ “Archive Options”  “View”
 “Use simple filesharing” (recommended)) should be deactivated.

Avira Security Management Center | HowTo
Status: March 2010 11
− The access from the SMC Server to the hidden filesharing “C$“ of the clients
has to be possible (\\<IP address Client\c$\).
− For a smooth installation via the SMC a network wide, standardised user
account is indispensable.
The installation of the SMC Agents via the SMC is done by clicking in the security
environment on the corresponding client group with the right mouse button and
choosing “Installation”  “AntiVir SMC Agent“ “Install”.
The computers on which the SMC Agent is installed have to be powered on and
Windows has to be activated!
The following authentication window appears:
Illustration 8: SMC Agent Installation
Enter an existing user with administrative rights on the client into the field “user
name” and a corresponding “password”. For linux clients f. ex. the user “root”.
In case the account of the SMC server service also exists on the clients
(standardised local administrator login, domain administrator, …) you can also
choose the option “Use the current account of the server”.
For the installation via SSH (linux clients) you can additionally use SSH key for
the authentication. For this purpose choose the option “Use SSH public private
key authentication” and enter the corresponding key.
After the successful installation of the SMC Agent the client will be shown with a
green icon in the security environment (communication is working):

Avira Security Management Center | HowTo
Status: March 2010 12
Illustration 9 Securit Environment; installed agent
In order to uninstall click with the right mouse button on the designated
client group and the choice of “Installation”  “AntiVir SMC Agent”  “Uninstall”.
The appearing pop-up window has to be confirmed with “Yes”.

Avira Security Management Center | HowTo
Status: March 2010 13
9. Pull / Push Mode of the SMC Agent
After the installation the SMC works in the “push mode” by default. That means,
the SMC Server sends planned commands like updates or scans or f. ex. changes
in the configuration to the SMC Agent, which proceeds them on the
corresponding client.
For PC’s which are not reachable for the SMC Server at that moment an
“outstanding action” will be generated which will be executed as soon as the
installed agent connects to the SMC Server.
In the “push mode” the SMC Server tries to reach all computers. This causes a
heavy system load for a short time.
For an update command with an interval of one hour the data is sent f. ex. to
500 computers and an update of 2 MB is loaded by the Internet Update Manager.
This will happen at the same time on 500 clients and cause a system load of
(500x2MB) 1 TB in the network.
In order to reduce this network load, the SMC can be switched to “pull mode”. So
the SMC Agent will check if there are new “tasks” for it and proceed them. As
never all clients are started at the same time the planned update intervals will
not take place at the same time. Using the pull mode the same amount of data is
copied for an update but the system load is dispersed over a longer period.
A further advantage of the pull mode in comparison to the push mode is that the
SMC Agent checks for changes according to the configured interval. If it shouldn’t
find changes or if it shouldn’t reach the SMC Server the previous configurations
or tasks are retained. Configured update tasks are proceeded independently of
the SMC Server.
The change from the push mode to the pull mode is done in the configuration of
the SMC Agent via the SMC Frontend. It is possible to choose pull or push mode
separately for individual pc’s or groups.
In order to set the whole security environment on the pull mode, please, click
with the right mouse button on the “security environment” and on
“configuration”  “Avira SMC Agent”  “configure”.
In the configuration of the SMC Agent you will find the push mode in the field
“Data retrieval from server”. You can change that to “Pull”. The corresponding
minute interval for the connection of the SMC Agent to the SMC Server (by
default 60 minutes) can be defined via “Pull interval”.

Avira Security Management Center | HowTo
Status: March 2010 14
Illustration 10: Configuration Agent 2.4
The configuration change of the SMC Agent is sent to the clients via the button
“Send now”.
The following functions can be proceeded via the pull mode:
•Product installation
•Product configuration
•Product commands
•Task management
•Progress bar of the clients
For technical reasons further functions like recalling the log files of the clients are
based on the push mode.

Avira Security Management Center | HowTo
Status: March 2010 15
10. Filtering groups
The filtering groups offer a better overview in large networks. You can choose
certain computers to be displayed in one or several virtual group.
The following filters can be chosen for virtual groups:
•Computers which report an error status
•Computers which reports product error status like an module out of date
or a general module error
•Computers on which a special product is not installed
all products which are integrated beneath “software packages” can be
chosen
A filtering group shows a special overview of all clients which correspond to the
chosen filter criteria. Tha means the shown computers are not switched into the
virtual group but remain in their previous group. All actions which are proceeded
on the clients in the virtual group will be proceeded directly on the real
computers
Example:
In order to create a “filtering group” which filters clients that have not install an
AntiVir Professional you click with the right mouse button on “Security
environment”. The following window appears where you can enter a name for the
new “filtering group”:
Illustration 11: Creation of filtering groups – step 1
After you’ve clicked on “Next” the following window appears where you can
choose one of the offered “filtering groups” (f. ex. “filter computers which have a
specific product not installed”):

Avira Security Management Center | HowTo
Status: March 2010 16
Illustration 12: Creation of filtering groups – step 2
After that you click on “Next” in order to get to the following options:
Illustration 13: Creation of filtering groups – step 3
Now you can choose one of the “Software packages”. In this example Avira
AntiVir Professional is chosen. After you have clicked on “Finish” a “filtering
group” named “missing virus protection” is created in the “Security
environment”.
In this group every computer is shown which has not installed the product AntiVir
Professional:

Avira Security Management Center | HowTo
Status: March 2010 17
Illustration 14: Securit Environment – Displa Filtering Groups
Now you can install AntiVir Professional on the “filtered” clients.
For further details about the “Filtering groups” reading the SMC manual is
recommended.

Avira Security Management Center | HowTo
Status: March 2010 18
11. Windows Installation
11.1. “Unattended“ Installation of the SMC Agents
Alternatively the agent can be installed manually with the setup file or
unattended (f. ex. integrated into the logon scripts).
On the SMC Server the following registry has been generated:
“C:\Documents and Settings\All Users\Application data\Avira\Avira Security
Management Center Server\Agent”
Please, enable this registry via the Windows enabling with writing access.
In case of an unattended installation it is not enough to start the file
“insallagent.bat” via the registry enabling. (\\<IP-address-SMC-
server>\<Enabling(agent)>\installagent.bat).
The “insallagent.bat” starts the installation (setup.exe) of the SMC Agent and
uses the SMC Server information which is saved in the file “installsmcagent.iss”.
By generating a corresponding batch file (f. ex. uninstallagent.bat) for the
uninstallation of the SMC Agent the “uninstallsmcagent.iss” can be used.
Clients which were not integrated into the security environment before the
unattended SMC Agent installation will be listed in the new group “new
computers” and can be moved afterwards via drag & drop.
You have also the possibility to add new computers to existing groups by means
of the IP address. Therefore you can define an IP address or IP address sectors
as a property of a group. As soon as an SMC Agent is logging on to the SMC
Server for the first time the SMC will integrate it into the corresponding group
according to its IP address.
11.2. Installation of the Avira AntiVir Professional
All AntiVir products that are integrated into the software repository can be
installed via the SMC.
This can be done via a click with the right mouse button
on the designated group and then via “Installation”  “Avira AntiVir
Professional”  “Install”.
This applies to an installation of the Avira AntiVir Professional Version 10. In the
Version 8 the path to the installation is called “Avira AntiVir Workstation”.
Afterward the window “Setup Configuration” opens and you can choose the
components which shall be installed and the target path:

Avira Security Management Center | HowTo
Status: March 2010 19
Illustration 15: Installation of AntiVir Professional 10
Here you can define an installation configuration for the whole security
environment or for special computer groups which is passed on to all computers
in that group via the check box. If you uncheck that box you can add or remove
individual components which differ from the standard configuration.
If clients which have already an installed agent are turned off an outstanding
action is generated. That means this action will be repeated as soon as the SMC
Agent logs on to the SMC Server.
Outstanding actions are shown with a red triangle on the left side of the client:
If clients are shown with a red exclamation mark (!) ( ), something is
wrong with the status of the installed product.
If clients are related to groups which are not shown with the possibility to
enlarge them the respectively shown red ! will not be recognized. In such a case
the red group icon will give a hint:
The error status (the cause of the red !) can be found out by clicking on the
client with the right mouse button and choosing “View”  „Product Status”.
In such a case you can see that the update status is out of date.
An error status (red !) can also be caused by a not activated “AntiVir Guard”
(real time protection), “AntiVir Mailguard” (POP3 SMTP-Scanner), the “AntiVir
Planer” or “AntiVir WebGuard”:

Avira Security Management Center | HowTo
Status: March 2010 20
Illustration 16: Modules
The reset of the status message that is shown by the red “!” can only be carried
out by removing the cause of the error message.
In our case it would be automatically reset after an update on the concerned
clients (a short waiting time up to a minute is possible).
“Module status” – “Not available” means that the update process has not a
module. So “Not available” is correct and not an error.
Deciding is the “Module error status”. Here you should have “ok” in the ideal
case.
In case of an error, f. ex. during the installation of the AntiVir SMC Agent or of
any other Avira products a red stop sign appears.
This error message can be seen via a click with the right mouse button on the
client and then via “Views“ “Error Messages”.
Just consider with which colour the stop icon is shown!
= Error Message
= Warning Hint
Stop messages are not automatically reset. They remain even if the cause of the
stop message has already been removed. They have to be reset by a mouse click
with the right mouse button  “Reset Error Status”
11.3. Configuration of the Avira AntiVir Professional
Via the SMC all functions are available that can be adjusted locally at the client.
In order to get to the configuration of the Avira AntiVir Professional click on the
group that has to be configured with the right mouse button and choose
“Configuration”  „AVIRA AntiVir Professional  “Configure”.
The configuration of the Avira AntiVir Professional opens. Here you can make
changes similar to the local configuration of the client.