FARONICS DEEP FREEZE ENTERPRISE - COMPUTER ASSOCIATES ETRUST ANTIVIRUS... User manual

B316<71/:E67B3>/>3@
:Oab[]RWTWSR(AS^bS[PS` & %
eeeTO`]\WQaQ][
''' %4O`]\WQa1]`^]`ObW]\/ZZ`WUVba`SaS`dSR
2SS^4`SShS/\bW3fSQcbOPZSO\RE7<ASZSQbO`Sb`ORS[O`Ya
O\R]``SUWabS`SRb`ORS[O`Ya]T4O`]\WQa1]`^]`ObW]\
/ZZ]bVS`Q][^O\gO\R^`]RcQb\O[SaO`Sb`ORS[O`Ya]TbVSW``Sa^SQbWdS]e\S`a
4O`]\WQa
B]ZZ4`SSBSZ(&'"!$" 
B]ZZ4`SS4Of(&'"!$"&&
7\bS`\ObW]\OZBSZ($"$!%!!!!
7\bS`\ObW]\OZ4Of($"$!%&&&
2SS^4`SShS3\bS`^`WaS1][^cbS`/aa]QWObSaSB`cab/\bWdW`ca


3<B3@>@7A3

Introduction
e process of updating virus denitions on workstations protected by Deep Freeze Enterprise involves
three fundamental steps:
1. Rebooting the workstations into a awed state so the updates are kept upon restart
2. Updating the virus denitions
3. Shutting down or restarting the workstation into a Frozen state
is white paper provides technical information on how to approach these steps with CA’s eTrust
Antivirus.
Deep Freeze is not marketed as an antivirus product. However, Deep Freeze will
protect workstations from any virus. Just restart the Frozen workstation and the virus
is gone. Many viruses require a fundamental change to be made to the core les and
only become active on restart. With Deep Freeze installed and activated, these viruses
will be deleted upon restart and therefore never become active.
Ensure the BIOS is set to boot directly to the C: drive and that the BIOS is protected
with a password; failure to do so can result in boot sector viruses being transferred to
the hard disk drives via infected oppy disks.
SettingtheWorkstationstoaThawedstate
In order to make any permanent changes, the workstations protected by Deep Freeze have to be set
into a awed state. ose permanent changes include antivirus updates; therefore, the workstations
must be rebooted into a awed state before applying these updates.
ere are three ways to remotely set workstations into a awed state:
• By manually using the Deep Freeze Enterprise Console
• By setting up an Scheduled Maintenance Period
• By using the Command Line Control

3<B3@>@7A3
 
ManuallyUsingtheDeepFreezeEnterpriseConsole
e Enterprise Console contains a toolbar at the top of the screen that allows quick access to the
functions of the Console.
To boot a workstation into the awed state, select the workstation and click the aw Workstation
icon on the toolbar.
Alternatively, right-click and select the Set Computer(s) to aw option in the context menu.
Click OK in the conrmation window.
e selected workstations now restart in the awed state.
Thaw Workstation
Thaw Workstation

3<B3@>@7A3

SettingupaScheduledMaintenancePeriod
ere are two ways to set up a Scheduled Maintenance Period. One is to set it up when conguring the
Deep Freeze Enterprise installation les with the Conguration Administrator (best method for new
deployments) and the other way is to create or update the Maintenance Period using the Enterprise
Console.
Assuming you have already deployed Deep Freeze throughout your network, the following instructions
elaborate on how to create/update the Maintenance Period with the Enterprise Console.
1. Open the Enterprise Console. Select any workstation and right-click on it.
2. Select Update Maintenance Period.
A toolbar appears at the bottom of the screen.
3. Click New. e Conguration Screen appears as shown. It only contains the Restart/Shutdown,
Maintenance and Advanced Maintenance options.

3<B3@>@7A3
 
4. Click on the Maintenance tab and place a check in the Enable awed Maintenance Schedule
check box. Also place a check beside each day you want the Maintenance Schedule to run.
5. Set the Maintenance start time for each day in the Start Time column, and the end time in the
Stop Time column.
6. It is recommended that the Disable keys option is checked so the keyboard and mouse are
disabled while the workstations are in the awed state.
It is also important to check the Shutdown box so Deep Freeze shuts the workstations down
at the end of the Maintenance Period. Otherwise the workstations are restarted aer the
Maintenance Period is complete.
7. Close the Conguration Screen. A pop-up message appears, requesting the administrator to
select the workstations to send the new conguration to.
8. Select the workstations to be updated and click Send. is action updates all the selected
workstations’ conguration on the y. is means the workstations don’t have to be in the
awed state for the conguration updates to take place.
ControllingDeepFreezeThroughtheCommandLineControl-DFC
e Deep Freeze Command Line Control (DFC) oers network administrators increased exibility
in managing Deep Freeze workstations. DFC works in combination with third-party enterprise
management tools and/or central management solutions. is combination allows administrators to
update workstations on the y and on demand.
It is important to note that DFC is not a stand-alone application. DFC integrates seamlessly with any
solution that can run script les, including standard run-once login scripts.
DFC commands require a password with command line rights. OTPs cannot be used.
List all commands by calling DFC without parameters.
e les are copied to C:\WINDOWS\system32\DFC.exe

3<B3@>@7A3

DFCBootControl
Syntax Description
DFC password /BOOTTHAWED Restarts workstation into a awed state. Only works on
Frozen workstations.
DFC password /THAWNEXTBOOT
Sets up workstation to restart awed the next time it
restarts. Only works on Frozen workstations. Does not
force workstation to restart.
DFC password /BOOTFROZEN Restarts workstation into a Frozen state. Only works on
awed workstations.
DFC password /FREEZENEXTBOOT
Sets up workstation to restart Frozen the next time it
restarts. Only works on awed workstations. Does not
force workstation to restart.
DFCStatusQuery
Syntax Description
DFC get /ISFROZEN Queries workstation if it is Frozen. Returns 0if awed.
Returns 1if Frozen.
CongurationUpdate
Syntax Description
DFC password /CFG=[path] depfrz.rdx
Replaces Deep Freeze conguration information.
Works on awed or Frozen workstations.
Password changes are eective immediately.
Other changes require restart.

3<B3@>@7A3
 
ExampleBatchFile
Below is a sample batch le that can be modied for use with any antivirus soware that supports
updating through a command line.
@ECHO OFF
\\SERVER\SHARE\FOLDER\DFC.EXE get /isfrozen
IF ERRORLEVEL 1 GOTO FROZEN
IF ERRORLEVEL 0 GOTO THAWED
ECHO Errors where encountered running the command line control on this workstation.
:FROZEN
\\SERVER\SHARE\FOLDER\DFC.EXE password /bootthawed
GOTO END
:THAWED
REM **********************************************************************
REM * Insert the command to update the antivirus software here. *
REM **********************************************************************
\\SERVER\SHARE\FOLDER\DFC.EXE password /freezenextboot
REM Send commands to reboot the system.
REM For Windows 95/98/ME
RUNDLL32 SHELL32.DLL,SHExitWindowsEx 2
REM For Windows 2000 (may need to be called 2x)
RUNDLL32 USER32.DLL,ExitWindowsEx 2
RUNDLL32 USER32.DLL,ExitWindowsEx 2
REM For Windows XP
SHUTDOWN -s -t 01
GOTO END
:END

3<B3@>@7A3

UpdatingtheVirusDenitions
is document provides three dierent ways to approach virus signature le updates for CA eTrust
Antivirus clients.
1)DoNothing
e virus signature le continues getting updated every time the workstations are restarted or whenever
the updates are pushed down, but the changes are lost upon reboots. On fast-switched networks this
has a negligible impact on the boot-up time.
e workstations have the latest denitions at all times. e only downside of this method is that,
with time, the signature le keep growing bigger. erefore, it is recommended to schedule a awed
Maintenance Period at least twice a year to make the updates permanent.
)ManuallyUpdatetheNewVirusDenitions
1. Using the Deep Freeze Enterprise Console, set the workstations to reboot into the awed
state.
2. When the computers are back on, right click the eTrust icon on the system tray to access the
menu.
3. Select Download Updates Now, this will automatically download and apply updates from the
distribution server as shown below.
is immediately updates the Virus Signatures.

3<B3@>@7A3
 
)SchedulingtheVirusUpdatesFromtheLocalComputer
1. Using the Deep Freeze Enterprise Console, schedule a Maintenance Period as per
instructions provided on p. 4-5.
2. Right click the eTrust icon on the system tray and choose About on the menu.
3. On the Summary page, click on Change your update settings here.
4. On the Update tab set the date and time that updates will be downloaded to correspond
with the date and time of the Maintenance period congured in step 1.

3<B3@>@7A3
10
)SchedulingtheVirusUpdatesfromeTrustThreatManagementConsole
1. Using the Deep Freeze Enterprise Console, schedule a Maintenance Period as per instructions
provided on p. 4-5.
2. Open the eTrust reat Management Console and click on the Policy Management tab
3. On the Policy Management tab select Common on the Applications drop down menu, and
then select Content Update on the Type menu and click on New to create a new policy. Enter a
description of the policy and assign the policy to the organization containing the computers
to be updated.

3<B3@>@7A3
 11
4. Click on the Update Scheduler tab and set the schedule to match the settings for the
Maintenance period specied in step one.
5. Click on the Components tab and select the eTrust components that you want to update.
When the appropriate settings have been selected click Apply to nish.