KAPERSKY ANTI-VIRUS 5.6 - FOR MICROSOFT ISA SERVER 2004-2006 STANDARD... Service manual

KASPERSKY LAB
KasperskyAnti-Virus 5.6for
Microsoft ISAServer2004/2006
Standard Edition
ADMINISTRATOR'S
GUIDE

KASPERSKY ANTI -VIRUS 5.6 FOR MICROSOFT ISA
SERVER 2004/2006 STANDARD EDITION
Administrator's Guide
Kaspersky Lab
http://www.kaspersky.com
Revision date: December, 2008

Contents
CHAPTER 1. KASPERSKY ANTI-VIRUS® FOR MICROSOFT ISA SERVER.......... 5
1.1. Hardware and softwarerequirements............................................................... 6
1.2. Distribution kit................................................................................................... 7
1.2.1. License Agreement.................................................................................... 7
1.3. Services provided for registered users.............................................................. 8
CHAPTER 2. TYPICAL DEPLOYMENT SCENARIOS............................................... 9
CHAPTER 3. INSTALLING THE APPLICATION...................................................... 11
3.1. Configuring ISAServer settings beforeinstalling theapplication..................... 11
3.2. Installing Kaspersky Anti-Virus®...................................................................... 12
3.2.1. Firstinstallation........................................................................................ 13
3.2.2. Reinstalling............................................................................................... 18
3.3. Upgrading....................................................................................................... 19
CHAPTER 4. USING KASPERSKY ANTI-VIRUS®................................................... 20
4.1. Default scan settings....................................................................................... 20
4.2. Managingscans............................................................................................. 22
4.2.1. Configuring general settings of anti-virus scans........................................ 24
4.2.2. Managing client groups............................................................................ 34
4.2.3. Specifying policies for anti-virus scanning................................................. 38
4.3. Updatingtheanti-virus database..................................................................... 45
4.3.1. Scheduled updating of the anti-virusdatabase......................................... 48
4.3.2.On-demandupdating............................................................................... 48
4.4. Configuring notifications.................................................................................. 48
4.5. Testing Kaspersky Anti-Virus®operation......................................................... 49
4.6. Applicationstatistics anddiagnostics.............................................................. 50
4.6.1. Recording and viewing statistics............................................................... 50
4.6.2. Notifying the administrator usingISAServer Alerts................................... 52
4.6.3. Configuring diagnostics optionsfor theapplication................................... 53
4.7. Restrictions that applyto using Kaspersky Anti-Virus...................................... 55
4.8. Managinglicensekeys................................................................................... 56

4 Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Standard Edition
4.8.1.Installing anew licensekey...................................................................... 57
4.8.2. Renewing your license............................................................................. 59
4.8.3. Removing alicensekey........................................................................... 60
CHAPTER 5. FREQUENTLY ASKEDQUESTIONS................................................ 61
APPENDIX A. GLOSSARY...................................................................................... 65
APPENDIX B. KASPERSKYLAB............................................................................. 66
APPENDIX C. LICENSE AGREEMENT................................................................... 69

CHAPTER 1. KASPERSKY ANTI-
VIRUS® FOR MICROSOFT
ISA SERVER
Kaspersky Anti-Virus®for Microsoft ISA Server (hereafter, also Kaspersky
Anti-Virus®for ISA Server) is a system of anti-virus protection of files trans-
ferred using the HTTP and FTP protocols via the Microsoft Internet Security and
Acceleration Server. It ensures reliable protection of corporate networks from
penetration of malicious software.
Kaspersky Anti-Virus®for Microsoft ISA Server acts as a filter that intercepts
packets transferred via the HTTP and FTP protocols, isolates controlled objects
from this data, analyzes them for the presence of viruses, and prevents infected
files and Web documents from penetrating a corporate network.
The program includes data stream filters and the anti-virus kernel.
The filters are integrated into Microsoft ISA Server as plug-ins, and the anti-virus
kernel is installed into the system as a service.
The anti-virus protection settings are managed through a special interface, which
is a snap-in for Microsoft Management Console (hereafter referred to as MMC).
Note:
The interface for managing Kaspersky Anti-Virus for Microsoft ISA Server can be
installed on a separate administrator desktop.
The application performs the following functions:
Anti-virus protection and processing of data streams received from the In-
ternet.
Generation of data streams from disinfected files and the delivery of these
streams to the client upon request.
Blocking the download of data stream if disinfection fails.
Scheduled and manual updating of the anti-virus database via the Inter-
net, a local folder, or a shared folder.
Logging of statistics about program performance and displaying the re-
sults using standard Microsoft Windows tools.
Management of license keys.

6 Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Standard Edition
In addition, Kaspersky Anti-Virus®for Microsoft ISA Server allows the administra-
tor to:
Set parameters for anti-virus protection and for notifications about dan-
gerous events.
Create groups of clients in accordance with the adopted network policy.
For example, you can use the existing administration division to define
anti-virus policy settings for each of the groups created. This can signifi-
cantly speed up the scanning process.
Create a list of trusted servers for one or several groups of users; the traf-
fic from these servers will be excluded from scanning for viruses.
Create a list of types of object excluded from anti-virus protection.
Kaspersky Anti-Virus®supports the following data transfer protocols:
HTTP 1.0 and 1.1 (RFC 2616);
FTP (RFC 775, 959, 2389, Extensions to FTP);
FTP over HTTP.
Note:
Kaspersky Anti-Virus does not protect data transferred over the other transfer
protocols and VPN connections.
1.1. Hardware and software
requirements
Kaspersky Anti-Virus®for Microsoft ISA Server operates in integration with Mi-
crosoft® Internet Security and Acceleration Server 2004/2006 Standard Edition
installed on the Microsoft Windows 2000 with installed Service Pack 4 and Mi-
crosoft Windows Server 2003.
If Microsoft Internet Security and Acceleration Server 2006 Standard Edition
have been installed on your server than to use Kaspersky Anti-Virus®you need
Microsoft Windows Server 2003 platform with installed Service Pack 1.
Minimum requirements:
Pentium III processor of 550 MHz or higher.
At least 512 MB free RAM.
At least 50 MB hard disk space for installation of the program.

Kaspersky Anti-Virus® for Microsoft ISA Server 7
At least 200 Mb hard disk space for temporary storage of data copied
from the Internet before scanning for viruses.
Note:
The amount of free disk space required to temporarily store data downloaded
from the Internet before an anti-virus scan starts depends on the density of traffic
processed by Microsoft ISA Server. As a rule, 500 MB is enough but if traffic is
heavy and files downloaded are too large, more space can be required.
1.2. Distribution kit
You can purchase Kaspersky Anti-Virus®for Microsoft ISA Server either from our
distributors (retail box) or online at one of our Internet shops (for example,
www.kaspersky.com –select the E store link).
The retail box includes:
a sealed envelope with an installation CD containing files for the software
product;
administrator's guide;
a license key written on the floppy disk;
license agreement.
Note:
Before you unseal the envelope containing the CD, be sure to thoroughly review
the license agreement.
If you buy Kaspersky Anti-Virus®for Microsoft ISA Server online, you download
the installation file of the product from the Kaspersky Lab website. This installa-
tion file includes this Administrator’s Guide and the license key. The license key
can also be sent to you by e-mail after receiving your payment.
1.2.1. License Agreement
The License Agreement is a legal agreement between you and the manufacturer
(Kaspersky Lab) describing the terms on which you may employ the anti-virus
product which you have purchased.
Warning!
Make sure you read the License Agreement!

8 Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Standard Edition
If you do not agree to the terms of this LA, you can return the unused product to
your Kaspersky Anti-Virus®dealer for a full refund, making sure the envelope
containing the CD is sealed.
If you unseal the envelope or install the program, you are considered to have
agreed to all the terms of the LA.
1.3. Services provided for registered
users
Kaspersky Lab Ltd. offers to all legally registered users an extensive service
package enabling them to use Kaspersky Anti-Virus more efficiently.
After purchasing a subscription, you become a registered user and, during the
period of your subscription, you will be provided with the following services:
you will be receiving new versions of the purchased software product;
support on issues related to the installation, configuration and use of the
purchased software product. Services will be provided by phone or via
email;
information about new Kaspersky Lab products and about new viruses
appearing worldwide (this service is provided to users who subscribe to
the Kaspersky Lab's newsletter).
Note:
Support on issues related to the performance and the use of operating systems
or other technologies is not provided.

CHAPTER 2. TYPICAL
DEPLOYMENT SCENARIOS
A typical scenario for deploying ISA Server and most of its server applications
and filters is as follows: the administrator installs the application on the ISA Serv-
er computer, and the ISA administration tool on a remote computer (as a rule, an
administrator’s workstation).
In this deployment scenario, the Kaspersky Anti-Virus®application must be in-
stalled on the ISA Server computer, and the Kaspersky Anti-Virus®administra-
tion console, on the administrator’s workstation. The computer that runs the Kas-
persky Anti-Virus®for ISA Server administration console must only have the ISA
Server administration tools installed.
Note:
You can install separate components of Kaspersky Anti-Virus®by manually in-
stalling the application (see Chapter 3 on page 11).
The following Kaspersky Anti-Virus®filters can be integrated into the ISA Server
system:
Kaspersky Anti-Virus FTP Application Filter.
Kaspersky Anti-Virus Web Filter.
After Kaspersky Anti-Virus®is installed, you will be able to manage the above
filters through the ISA Server Administration interface.
Figure 1 shows a scheme of processing the initial data streams that are common
for all possible Kaspersky Anti-Virus®deployment scenarios.

Typical deployment scenarios 10
Figure 1. Processing of data streams by Kaspersky Anti-Virus for Microsoft ISA Server