F-SECURE POLICY MANAGER PROXY - Service manual

F-Secure Policy
Manager Proxy
Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure
product names and symbols/logos are either trademarks or registered trademarks of F-Secure
Corporation. All product names referenced herein are trademarks or registered trademarks of their
respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of
others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,
F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure
Corporation reserves the right to modify specifications cited in this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of
this document may be reproduced or transmitted in any form or by any means, electronic or
mechanical, for any purpose, without the express written permission of F-Secure Corporation.
This product may be covered by one or more F-Secure patents, including the following:
Copyright © 2007 F-Secure Corporation. All rights reserved. 12000076-7A11
GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233
GB2374260

iii
Contents
About This Guide 5
How This Guide Is Organized .............................................................................................. 6
Who Should Use This Guide................................................................................................ 7
Conventions Used in F-Secure Guides................................................................................ 8
Symbols ...................................................................................................................... 8
Chapter 1 Introduction 10
1.1 An Up-To-Date System is a Secure System..............................................................11
1.2 When Should You Use F-Secure Policy Manager Proxy?.........................................12
1.3 How are F-Secure Policy Manager Proxy and F-Secure Anti-Virus Proxy Different? 14
Chapter 2 Installation 15
2.1 System Requirements................................................................................................16
2.2 Installing F-Secure Policy Manager Proxy.................................................................16
2.2.1 Local Installation.............................................................................................16
Chapter 3 Configuration 22
3.1 Overview ....................................................................................................................23
3.2 Remote Configuration ................................................................................................23
3.2.1 Chained Proxy Configuration..........................................................................24
Chapter 4 F-Secure Policy Manager Proxy on Linux 26
4.1 Introduction ................................................................................................................27

iv
4.2 System Requirements................................................................................................27
4.3 Installation..................................................................................................................27
4.4 Configuration..............................................................................................................28
4.4.1 Chained Proxy Configuration..........................................................................28
4.5 Upgrading...................................................................................................................29
4.6 Uninstallation..............................................................................................................30
4.7 Frequently Asked Questions......................................................................................30
Chapter 5 Troubleshooting 32
5.1 Overview ....................................................................................................................33
5.2 The Error Log.............................................................................................................33
5.3 Reading the Error Log................................................................................................33
5.3.1 Message Structure .........................................................................................33
5.3.2 Message Levels..............................................................................................35
5.4 Error Numbers............................................................................................................36
5.4.1 Internal Error Numbers...................................................................................36
5.4.2 External Error Numbers..................................................................................36
5.5 Troubleshooting with the Error Log............................................................................36
5.5.1 Some Example Error Messages.....................................................................37
5.6 The Status Report Log...............................................................................................37
Technical Support 39
Overview ............................................................................................................................ 40
Web Club ...........................................................................................................................40
Virus Descriptions on the Web.................................................................................. 40
Advanced Technical Support .............................................................................................40
F-Secure Technical Product Training .................................................................................41
Training Program ...................................................................................................... 41
Contact Information................................................................................................... 42
About F-Secure Corporation

5
ABOUT THIS GUIDE
How This Guide Is Organized...................................................... 6
Who Should Use This Guide....................................................... 7
Conventions Used in F-Secure Guides....................................... 8

About This Guide 6
How This Guide Is Organized
The F-Secure Policy Manager Proxy Administrator’s Guide provides an
overview of F-Secure Policy Manager Proxy concepts, a step-by-step
guide to installation and all the information you need to set up and
manage your F-Secure Policy Manager Proxy.
F-Secure Policy Manager Proxy Administrator’s Guide is divided into the
following chapters:
Chapter 1. Introduction provides general information about F-Secure
Policy Manager Proxy and how it works.
Chapter 2. Installation contains a step-by-step guide to installing
F-Secure Policy Manager Proxy.
Chapter 3. Configuration describes how F-Secure Policy Manager Proxy
is configured.
Chapter 4. F-Secure Policy Manager Proxy on Linux describes how to
install, configure and troubleshoot F-Secure Policy Manager Proxy for
Linux.
Chapter 5. Troubleshooting describes how the diagnostic log files are
read.
Technical Support provides contact information for assistance and details
about the Web Club.
About F-Secure Corporation describes the company background and
products

7
Who Should Use This Guide
This guide is intended for system administrators. It is assumed that the
reader has:
Working knowledge of Microsoft Windows Server operating
systems.
A basic understanding of the Internet and TCP/IP protocols.

8
Conventions Used in F-Secure Guides
This section describes the symbols, fonts, and terminology used in this
manual.
Symbols
⇒An arrow indicates a one-step procedure.
Fonts
Arial bold (blue) is used to refer to menu names and commands, to
buttons and other items in a dialog box.
Arial Italics (blue) is used to refer to other chapters in the manual, book
titles, and titles of other manuals.
Arial Italics (black) is used for file and folder names, for figure and table
captions, and for directory tree names.
Courier New is used for messages on your computer screen.
WARNING: The warning symbol indicates a situation with a
risk of irreversible destruction to data.
IMPORTANT: An exclamation mark provides important
information that you need to consider.
REFERENCE - A book refers you to related information on the
topic available in another document.
l
NOTE - A note provides additional information that you should
consider.
TIP - A tip provides information that can help you perform a task
more quickly or easily.

9
Courier New bold is used for information that you must type.
SMALL CAPS (BLACK)is used for a key or key combination on your
keyboard.
Arial underlined (blue) is used for user interface links.
Arial italics is used for window and dialog box names.
PDF Document
This manual is provided in PDF (Portable Document Format). The PDF
document can be used for online viewing and printing using Adobe®
Acrobat® Reader. When printing the manual, please print the entire
manual, including the copyright and disclaimer statements.
For More Information
Visit F-Secure at http://www.f-secure.com for documentation, training
courses, downloads, and service and support contacts.
In our constant attempts to improve our documentation, we would
welcome your feedback. If you have any questions, comments, or
suggestions about this or any other F-Secure document, please contact
us at [e-mail].

10
1INTRODUCTION
An Up-To-Date System is a SecureSystem............................... 11
When Should You Use F-Secure Policy Manager Proxy?.......... 12
How are F-Secure Policy Manager Proxy and F-Secure Anti-Virus
Proxy Different?.......................................................................... 14

11
1.1 An Up-To-Date System is a Secure System
To be protected, a workstation must have the latest defence against
viruses and other malware that exist in the internet.
What Is The Virus Definition Database?
Information against known viruses, worms and other malware are
compiled into the virus definition database.
This virus definition database is regularly made available to all the
workstations with F-Secure Client Security installed. It is this virus
definition database that enables F-Secure Client Security to protect a
workstation from viruses and malware.
How Do the Virus Definition Databases Get To F-Secure Client
Security?
Figure 1-1 A typical virus definition database delivery chain.
The virus definition database travels through the steps shown in Figure
1-1.
)6HFXUH9LUXV
'HILQLWLRQ'DWDEDVH
)6HFXUH
8SGDWH
6HUYHU
)6HFXUH
3ROLF\
0DQDJHU
)6HFXUH
3ROLF\
0DQDJHU
\
)6HFXUH
&OLHQW
6HFXULW\
Figure 1-1 is the primary path; there are fallback paths if one or
more of the links is unavailable (for example if the machine running
F-Secure Policy Manager has a power cut).

CHAPTER1 12
Introduction
What Does F-Secure Policy Manager Do?
F-Secure Policy Manager allows you to centrally manage all the F-Secure
products in your network. It is the central monitoring and configuration
point for your network.
What Does F-Secure Policy Manager Proxy Do?
F-Secure Policy Manager Proxy helps deliver the virus definition
databases quickly and efficiently.
1.2 When Should You Use F-Secure Policy Manager
Proxy?
The effects of F-Secure Policy Manager Proxy are most obvious in large,
vastly spread networks; for example a large corporation with remote
offices in different parts of the globe. An example of one situation where
F-Secure Policy Manager Proxy is useful is shown in Figure 1-2.
See F-Secure Policy Manager Administrator’s Guide for more
information.

13
Figure 1-2 On the right, with F-Secure Policy Manager Proxy, the number of slow
connections is dramatically reduced.
There are three reasons to use F-Secure Policy Manager Proxy:
To Decrease Network Bandwidth Usage
You should use F-Secure Policy Manager Proxy when you have a group
of workstations far away from you F-Secure Policy Manager Server; for
example a “remote office” scenario like in Figure 1-2.
To Decrease Virus Definition Database Delivery Time
You should use F-Secure Policy Manager Proxy when you have a group
of workstations separated from the F-Secure Policy Manager Server by a
slow connection (for example a dialup connection), for example in a
situation like in Figure 1-2
)6HFXUH
$QWL9LUXV
&OLHQW
6HFXULW\
)6HFXUH )6HFXUH
)6HFXUH
3ROLF\
0DQDJHU
6ORZ
&RQQHFWLRQ
)6HFXUH
8SGDWH
6HUYHU
)6HFXUH
3ROLF\
0DQDJHU
3UR[\
)6HFXUH
3ROLF\
0DQDJHU
)6HFXUH
8SGDWH
6HUYHU
)6HFXUH9LUXV
'HILQLWLRQ'DWDEDVH )6HFXUH9LUXV
'HILQLWLRQ'DWDEDVH
:LWKRXW
)6HFXUH3ROLF\0DQDJHU3UR[\
:LWK
)6HFXUH3ROLF\0DQDJHU3UR[\
0DQ\6ORZ
&RQQHFWLRQV
&RUSRUDWH
+HDGTXDUWHUV
5HJLRQDO2IILFH
&RUSRUDWH
+HDGTXDUWHUV
5HJLRQDO2IILFH
)6HFXUH
$QWL9LUXV
&OLHQW
6HFXULW\
)6HFXUH
&OLHQW
6HFXULW\
)6HFXUH
&OLHQW
6HFXULW\

CHAPTER1 14
Introduction
To Decrease F-Secure Policy Manager Hardware Load
You should use F-Secure Policy Manager Proxy, if the server hardware
running the F-Secure Policy Manager is unable to cope with the number
of virus definition database requests it receives.
1.3 How are F-Secure Policy Manager Proxy and
F-Secure Anti-Virus Proxy Different?
They are designed to work with different F-Secure products.
Both can function in the same network.
F-Secure Policy
Manager Proxy F-Secure Anti-Virus Proxy
Works with F-Secure Client Security
versions 6.0 and later Earlier than 6.0
Works with F-Secure Policy Manager
versions 6.0 and later Earlier than 6.0
Can deliver virus definition databases
without an upstream connection? no yes

15
2INSTALLATION
System Requirements................................................................ 16
Installing F-Secure Policy Manager Proxy.................................. 16

CHAPTER2 16
Installation
2.1 System Requirements
To install F-Secure Policy Manager Proxy, your system must meet the
following minimum requirements:
2.2 Installing F-Secure Policy Manager Proxy
There are two possible methods of installing F-Secure Policy Manager
Proxy:
Locally; see further instructions in the “Local Installation”
Remotely; see further instructions in the F-Secure Policy
Manager Administrator’s Guide.
2.2.1 Local Installation
Installing F-Secure Policy Manager Proxy is a two-step process:
1. Install F-Secure Policy Manager Proxy
2. Configure F-Secure Client Security to use F-Secure Policy Manager
Proxy.
Processor: Intel Pentium III 450MHz processor or faster
Memory: 256 MB RAM
Disk Space: 300 MB; 500 MB or more is recommended. The disk space
required depends on the size of the installation.
Network: 10 Mbit; 100Mbit is recommended.
Operating
System: Windows Server 2000
Windows Server 2003
F-Secure
Software: F-Secure Client Security 6 or later
F-Secure Policy Manager 6 or later

17
Step 1. 1. Run the setup.exe file.
2. Click the Next button on the first screen of the installer.
3. Read through the license agreement and click the I accept this
agreement option. Click Next.
4. Select the Custom option and click Next to continue.
Figure 2-1 Custom installation

CHAPTER2 18
Installation
5. Make sure the box next to F-Secure Policy Manager Proxy is checked
and click Next.
Figure 2-2 Components

19
6. Select where to install F-Secure Policy Manager Proxy in the dialog
by clicking the Browse button. Click Next.
Figure 2-3 Installation folder
7. If a previous installation of an F-Secure product is detected, you will
be asked if you would like to use the same settings as the previous
installed product. If you select Yes the dialogs in steps 8–10 will be
skipped. If you select No, you can continue through steps 8–10 and
select new settings.
If a previous installation of an F-Secure product was detected
on the computer, this dialog is not displayed and the previous
installation directory is used.

CHAPTER2 20
Installation
8. Select the Central management with F-Secure Policy Manager option
and click Next.
Figure 2-4 Central management
9. Copy the public key file, admin.pub from the F-Secure Policy
Manager Server to the local file system. Click Browse and select this
key file. Click Next
Figure 2-5 Public key installation