F-SECURE POLICY MANAGER 8.0 Service manual

F-Secure Policy
Manager 8.0
Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-
Secure product names and symbols/logos are either trademarks or registered trademarks of F-
Secure Corporation. All product names referenced herein are trademarks or registered
trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in
the marks and names of others. Although F-Secure Corporation makes every effort to ensure that
this information is accurate, F-Secure Corporation will not be liable for any errors or omission of
facts contained herein. F-Secure Corporation reserves the right to modify specifications cited in
this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No
part of this document may be reproduced or transmitted in any form or by any means, electronic or
mechanical, for any purpose, without the express written permission of F-Secure Corporation.
This product may be covered by one or more F-Secure patents, including the following:
Copyright © 2008 F-Secure Corporation. All rights reserved.12000013-7A12
GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233
GB2374260

iii
Contents
About This Guide 9
Overview ............................................................................................................................ 10
How This Guide is Organized ............................................................................................ 11
Conventions Used in F-Secure Guides.............................................................................. 13
Symbols .................................................................................................................... 13
Chapter 1 Introduction 15
1.1 Overview ....................................................................................................................16
1.2 Installation Order........................................................................................................17
1.3 Features .....................................................................................................................18
1.4 Policy-Based Management ........................................................................................ 19
1.4.1 Management Information Base ............................................................ 21
Chapter 2 System Requirements 23
2.1 F-Secure Policy Manager Server ...............................................................................24
2.2 F-Secure Policy Manager Console ............................................................................25
Chapter 3 Installing F-Secure Policy Manager Server 26
3.1 Overview ....................................................................................................................27
3.2 Security Issues...........................................................................................................28
3.2.1 Installing F-Secure Policy Manager in High Security Environments ...... 28
3.3 Installation Steps........................................................................................................34
3.4 Configuring F-Secure Policy Manager Server............................................................ 47

iv
3.4.1 Changing the Communication Directory Path ....................................... 47
3.4.2 Changing the Ports Where the Server Listens for Requests ................. 48
3.4.3 F-Secure Policy Manager Server Configuration Settings ...................... 49
3.5 Uninstalling F-Secure Policy Manager Server ...........................................................54
Chapter 4 Installing F-Secure Policy Manager Console 56
4.1 Overview ....................................................................................................................57
4.2 Installation Steps........................................................................................................57
4.3 Uninstalling F-Secure Policy Manager Console......................................................... 73
Chapter 5 Using F-Secure Policy Manager Console 74
5.1 Overview ....................................................................................................................75
5.2 F-Secure Policy Manager Console Basics.................................................................76
5.2.1 Logging In ........................................................................................... 77
5.2.2 F-Secure Client Security Management ................................................. 80
5.2.3 The Advanced Mode User Interface ..................................................... 81
5.2.4 Policy Domain Pane ............................................................................ 82
5.2.5 Properties Pane................................................................................... 82
5.2.6 Product View Pane .............................................................................. 83
5.2.7 Messages Pane................................................................................... 90
5.2.8 The Toolbar......................................................................................... 90
5.2.9 Menu Commands ................................................................................ 92
5.3 Managing Domains and Hosts ...................................................................................94
5.3.1 Adding Policy Domains ........................................................................ 96
5.3.2 Adding Hosts ....................................................................................... 97
5.3.3 Host Properties ................................................................................. 102
5.4 Software Distribution ................................................................................................ 104
5.4.1 F-Secure Push Installations ............................................................... 106
5.4.2 Policy-Based Installation ................................................................... 112
5.4.3 Local Installation and Updates with Pre-Configured Packages ........... 116
5.4.4 Information Delivery .......................................................................... 120
5.5 Managing Policies ....................................................................................................120
5.5.1 Settings............................................................................................. 121
5.5.2 Restrictions ....................................................................................... 121
5.5.3 Saving the Current Policy Data .......................................................... 123
5.5.4 Distributing Policy Files ..................................................................... 123

v
5.5.5 Policy Inheritance .............................................................................. 123
5.6 Managing Operations and Tasks .............................................................................126
5.7 Alerting .....................................................................................................................126
5.7.1 Viewing Alerts and Reports................................................................ 126
5.7.2 Configuring Alert Forwarding ............................................................. 128
5.8 Reporting Tool.......................................................................................................... 129
5.8.1 Policy Domain / Host Selector Pane................................................... 130
5.8.2 Report Type Selector Pane................................................................ 131
5.8.3 Report Pane ...................................................................................... 132
5.8.4 Bottom Pane ..................................................................................... 133
5.9 Preferences.............................................................................................................. 133
5.9.1 Connection-Specific Preferences ....................................................... 134
5.9.2 Shared Preferences........................................................................... 137
Chapter 6 Maintaining F-Secure Policy Manager Server 139
6.1 Overview ..................................................................................................................140
6.2 Backing Up & Restoring F-Secure Policy Manager Console Data...........................140
6.3 Replicating Software Using Image Files ..................................................................143
Chapter 7 Updating F-Secure Virus Definition Databases 145
7.1 Automatic Updates with F-Secure Automatic Update Agent....................................146
7.2 Using the Automatic Update Agent ..........................................................................148
7.2.1 Configuration..................................................................................... 148
7.2.2 How to Read the Log File .................................................................. 149
7.3 Forcing the Update Agent to Check for New Updates Immediately.........................153
7.4 Updating the Databases Manually ...........................................................................153
7.5 Troubleshooting .......................................................................................................154
Chapter 8 F-Secure Policy Manager on Linux 155
8.1 Overview ..................................................................................................................156
8.1.1 Differences Between Windows and Linux........................................... 156
8.1.2 Supported Distributions ..................................................................... 156
8.2 Installation ................................................................................................................157
8.2.1 Installing F-Secure Automatic Update Agent ...................................... 157

vi
8.2.2 Installing F-Secure Policy Manager Server ........................................ 158
8.2.3 Installing F-Secure Policy Manager Console ...................................... 159
8.2.4 Installing F-Secure Policy Manager Web Reporting............................ 160
8.3 Configuration............................................................................................................161
8.4 Uninstallation............................................................................................................161
8.4.1 Uninstalling F-Secure Policy Manager Web Reporting........................ 161
8.4.2 Uninstalling F-Secure Policy Manager Console .................................. 162
8.4.3 Uninstalling F-Secure Policy Manager Server .................................... 162
8.4.4 Uninstalling F-Secure Automatic Update Agent .................................. 163
8.5 Frequently Asked Questions ....................................................................................163
Chapter 9 Web Reporting 168
9.1 Overview ..................................................................................................................169
9.2 Introduction .............................................................................................................. 169
9.3 Web Reporting Client System Requirements........................................................... 170
9.4 Generating and Viewing Reports .............................................................................170
9.4.1 Required Browser Settings for Viewing Web Reports ......................... 170
9.4.2 Generating a Report .......................................................................... 171
9.4.3 Creating a Printable Report ............................................................... 173
9.4.4 Generating a Specific URL for Automated Report Generation ............ 173
9.5 Maintaining Web Reporting......................................................................................174
9.5.1 Disabling Web Reporting ................................................................... 174
9.5.2 Enabling Web Reporting .................................................................... 174
9.5.3 Restricting or Allowing Wider Access to Web Reports ........................ 175
9.5.4 Changing the Web Reporting Port...................................................... 176
9.5.5 Creating a Backup Copy of the Web Reporting Database................... 177
9.5.6 Restoring the Web Reporting Database from a Backup Copy ............. 177
9.5.7 Changing the Maximum Data Storage Time in the Web Reporting
Database .......................................................................................... 178
9.6 Web Reporting Error Messages and Troubleshooting .............................................179
9.6.1 Error Messages ................................................................................. 179
9.6.2 Troubleshooting................................................................................. 180
Chapter 10 F-Secure Policy Manager Proxy 182
10.1 Overview ..................................................................................................................183

vii
Chapter 11 Troubleshooting 184
11.1 Overview ..................................................................................................................185
11.2 F-Secure Policy Manager Server and Console........................................................ 185
11.3 F-Secure Policy Manager Web Reporting................................................................190
11.4 Policy Distribution.....................................................................................................191
Appendix A SNMP Support 193
A.1 Overview ................................................................................................................. 194
A.1.1 SNMP Support for F-Secure Management Agent ........................................194
A.2 Installing F-Secure Management Agent with SNMP Support ..................................195
A.2.1 F-Secure SNMP Management Extension Installation ..................................195
A.3 Configuring The SNMP Master Agent......................................................................196
A.4 Management Information Base ................................................................................197
Appendix B Ilaunchr Error Codes 198
B.1 Overview ................................................................................................................. 199
B.2 Error Codes..............................................................................................................200
Appendix C FSII Remote Installation Error Codes 203
C.1 Overview ................................................................................................................. 204
C.2 Windows Error Codes ..............................................................................................204
C.3 Error Messages........................................................................................................205
Appendix D NSC Notation for Netmasks 207
D.1 Overview ................................................................................................................. 208
Technical Support 210
Overview .......................................................................................................................... 211
Web Club .........................................................................................................................211
Virus Descriptions on the Web................................................................................ 211
Advanced Technical Support ........................................................................................... 211
F-Secure Technical Product Training ...............................................................................212
Training Program .................................................................................................... 212

viii
Contact Information................................................................................................. 213
Glossary 214
About F-Secure Corporation

9
ABOUT THIS GUIDE
Overview.................................................................................... 10
How This Guide is Organized..................................................... 11

10
Overview
F-Secure Policy Manager provides tools for administering the following
F-Secure software products:
F-Secure Client Security
F-Secure Internet Gatekeeper for Windows
F-Secure Anti-Virus for
Windows Workstations
Windows Servers
Citrix Servers
Microsoft Exchange
MIMEsweeper
F-Secure Linux Security
F-Secure Linux Client Security
F-Secure Linux Server Security
F-Secure Policy Manager Proxy.