KAPERSKY ANTI-VIRUS BUSINESS OPTIMAL User manual

KASPERSKY LAB
Kaspersky™ Anti-Virus
Business Optimal
ANTI-VIRUS
SOLUTION

KASPERSKY ANTI-VIRUS
BUSINESS OPTIMAL
Anti-Virus
Solution
KASPERSKY LAB LTD
Visit our WEB site : http://www.kaspersky.com/

Contents
1. KASPERSKY™ ANTI-VIRUS BUSINESS OPTIMAL....................5
1.1. MAIN FUNCTION OF THE SOFTWARE PACKAGE.........................................5
1.2. COMPONENTS .......................................................................................6
1.3. INFORMATION IN THIS BOOK .................................................................7
2. PROTECTING WORKSTATIONS.....................................................10
2.1. KASPERSKY™ ANTI-VIRUS FOR WORKSTATIONS RUNNING WINDOWS
95/98/ME AND WINDOWS 2000/NT/XP (WINTEL). MAIN FEATURES ............10
2.1.1. Real-time pro ectiont
t
..............................................................10
2.1.2. Filtering viruses out of email ................................................10
2.1.3. Comprehensive control over e-mail messages ...................11
2.1.4. Protecting against macro-viruses .........................................11
2.1.5. Protecting data storage locations .........................................11
2.1.6. Intercepting script-viruses ....................................................11
2.1.7. Centralized deployment and management .........................12
2.1.8. Automated updating ..............................................................12
2.1.9. Universal boot system ...........................................................12
2.2. KASPERSKY™ ANTI-VIRUS FOR OS/2. MAIN FEATURES......................13
2.2.1. Two-level anti-virus protection .............................................13
2.2.2. Compliant with the most popular OS/2 versions ...............13
2.2.3. User-friendly ............................................................................13
3. PROTECTING FILE SERVERS..........................................................14
3.1. KASPERSKY™ ANTI-VIRUS FOR WINDOWS 2000/NT SERVER. MAIN
FEATURES.......................................................................................................14
3.1.1. Real-time pro ection ..............................................................14
3.1.2. Centralized deployment and management .........................14
3.1.3. Protecting data storage locations .........................................15
3.1.4. Quarantine of dangerous and suspicious objects ..............15
3.1.5. Virus alerts broadcasting .......................................................15
3.1.6. Automated updating ..............................................................15
3.2. KASPERSKY™ ANTI-VIRUS FOR NOVELL NETWARE. MAIN FEATURES ...16
ii

3.2.1. Full-scale anti-virus protection
.............................................16
3.2.2. Integration into Novell Directory Service ............................16
3.2.3. Centralized deployment and management .........................16
3.2.4. Real-time configuration update ............................................17
3.2.5. Quarantine of dangerous and suspicious objects ..............17
3.2.6. Virus alerts broadcasting .......................................................17
3.2.7. Automatic disconnection of infected workstations ............17
3.2.8. Adjusting of CPU utilization ...................................................17
3.2.9. Automated retrieve of updates via the Internet
................18
3.2.10. Multithreaded virus scanning
................................................18
4. PROTECTING MAIL SYSTEMS........................................................19
4.1. KASPERSKY™ ANTI-VIRUS FOR MICROSOFT EXCHANGE SERVER. MAIN
FEATURES.......................................................................................................19
4.1.1. E-mail anti-virus security .......................................................19
4.1.2. Protection of client worksta ionst ..........................................19
4.1.3. Comprehensive control over e-mail messages ...................20
4.1.4. Flexible configuration for personal and public e-mail
accounts
20
4.1.5. Reliable quarantine of dangerous objects and alert
broadcasting
............................................................................................20
4.1.6. Real-time configuration update ............................................20
4.1.7. Centralized management ......................................................21
4.1.8. Support for an unlimited number of e-mail accounts .......21
4.1.9. User-friendly ............................................................................21
4.2. KASPERSKY™ ANTI-VIRUS FOR LOTUS NOTES/DOMINO. MAIN FEATURES
21
4.2.1. Constant protection of e-mail-traffic ...................................21
4.2.2. Comprehensive control over e-mail messages ...................22
4.2.3. Virus alerts broadcasting .......................................................22
4.2.4. Real-time virus neutralization ...............................................22
4.2.5. User-friendly ............................................................................22
4.2.6. Automated updating ..............................................................22
5. PROTECTING LINUX AND UNIX OPERATING SYSTEMS.......23
5.1. KASPERSKY™ ANTI-VIRUS FOR LINUX/UNIX OPERATING SYSTEMS.
MAIN FEATURES..............................................................................................23
5.1.1. Full-scale anti-virus protection .............................................23
3

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
5.1.2. Compliancy with the most popular Linux and UNIX
versions
24
5.1.3. Unique combination of the most advanced anti-virus tools
for Linux and UNIX
.................................................................................24
5.1.4. Centralized protection of your e-mail systems ...................25
5.1.5. Easy integration into third party applications- ....................25
5.1.6. Automated retrieve of updates via the Internet ................25
5.1.7. Interactive management system ..........................................25
6. MANAGEMENT OF ANTI-VIRUS PROTECTION........................26
6.1. KASPERSKY™ ADMINISTRATION KIT....................................................26
6.1.1. Remote management of the anti-virus tools ......................26
6.1.2. Alerts broadcasting ................................................................27
6.1.3. Cumulative reporting .............................................................28
6.1.4. Isolating infected and suspicious objects ...........................28
APPENDIX. KASPERSKY LAB LTD.......................................................29
4

Chapter
1
1. Kaspersky™ Anti-Virus
Business Optimal
1.1.Main function of the software package
Real protection for the virtual space. What is Kasper-
sky™ Anti-Virus Business Optimal?
Kaspersky™ Anti-Virus Business Optimal is one of the latest technological
achievements of Kaspersky Lab. The package is developed to provide the full-
scale data-protection for small and medium size corporate networks containing
up to 100 workstations and mostly using uniform operation systems.
Kaspersky™ Anti-Virus Business Optimal is an optimal set of anti-virus tools
that can be configured to meet your specific requirements. Depending on your
network configuration and the operating systems you use the package may be
supplied with various components. It means that with Kaspersky™ Anti-Virus
Business Optimal every customer may choose anti-virus solution that ideally
meets his (her) specific system requirements while at the same time signifi-
cantly decreases costs of implementation and use of the anti-virus system.
Anti-virus software products in the Business Optimal package provide the reli-
able control over all virus propagation sources in your system: they are used
5

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
on workstations (DOS, Windows 95/98/Me, Windows 2000/NT/XP Work-
station, OS/2, Linux, Solaris), file servers (Windows NT Server, Linux, Novell
NetWare, FreeBSD, OpenBSD, BSDi) and e-mail gateways (MS Exchange
Server, Lotus Notes, Sendmail, Qmail, Postfix, Exim). Powerful and easy-to-
use protection management tools allow for centralized deployment and ad-
ministration of your data-protection system.
Regardless of the components you choose, we provide you with round-the-
clock anti-virus technical support by phone and e-mail.
1.2.Components
What components the Kaspersky™ Anti-Virus Business
Optimal package includes?
Kaspersky™ Anti-Virus Business Optimal includes the following main compo-
nents1:
• Protection for workstations — Kaspersky™ Anti-Virus for Windows
95/98/Me, Windows 2000/NT/XP Workstation, OS/22
and Linux.
• Protection for file servers — Kaspersky™ Anti-Virus for Windows
2000/NT Server, Netware, UNIX (FreeBSD/OpenBSD/BSDi, Solaris)
and Linux.
• Protection for mail systems — Kaspersky™ Anti-Virus for Microsoft
Exchange, Lotus Notes, Postfix, Exim, Sendmail and Qmail.
• Centralized deployment and management of the package compo-
nents - Kaspersky™ Administration Kit
The customer is free to order any of the Kaspersky™ Anti-Virus Business Op-
timal components that will provide comprehensive anti-virus protection of all
main elements of his (her) network: workstations, file servers and mail sys-
tems.
1depending on the type of supplied package
2Kaspersky™ Anti-Virus for OS/2 is not included in the standard Business
Optimal package and may be supplied on additional customer request.
6

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
The supplied package may include separate components for the selected op-
erational environments as well as any combination of those three components
for different operating systems.
If later you decide to transfer your network to some other platforms or to add
new network elements, you may order (for an extra payment) corresponding
components that will be integrated (guaranteed) into your existing copy of
Kaspersky™ Anti-Virus Business Optimal3.
From our retail dealers you may buy the following standard packages of Kas-
persky™ Anti-Virus Business Optimal:
1) Kaspersky™ Anti-Virus Business Optimal: Protection for
workstations running Windows 95/98/Me, Windows
2000/NT/XP, 5 and 10 licenses.
2) Kaspersky™ Anti-Virus Business Optimal: Protection for file
servers running Windows 2000/NT, 1 license.
3) Kaspersky™ Anti-Virus Business Optimal: Protection for file
servers running Novell Netware, 1 license.
4) Kaspersky™ Anti-Virus Business Optimal: Protection for file
servers running FreeBSD/BSDi/OpenBSD/Solaris, 1 license.
5) Kaspersky™ Anti-Virus Business Optimal: Protection for file
servers running Linux, 1 license.
1.3.Information in this book
Issues that we discuss in this documentation.
This book is divided into the following chapters:
3For details about how to purchase new components for your existing copy of
Kaspersky™ Anti-Virus Business Optimal refer to the local partner of Kasper-
sky Lab or directly to our company.
7

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
Kaspersky™ Anti-Virus Busi-
ness Optimal General information about the product, its main function, main components and the
description of the book structure
Kaspersky™ Anti-Virus Busi-
ness Optimal: Protecting
Workstations
The list of Kaspersky™ Anti-Virus compo-
nents that are developed to protect from
viruses on workstations:
• Kaspersky™ Anti-Virus for work-
stations running Windows
95/98/Me and Windows
2000/NT/XP (Wintel)
• Kaspersky™ Anti-Virus for OS/2.
Main features and function.
Kaspersky™ Anti-Virus Busi-
ness Optimal: Protecting File
Servers
The list of Kaspersky™ Anti-Virus compo-
nents that are developed to protect from
viruses on file servers:
• Kaspersky™ Anti-Virus for Win-
dows 2000/NT Server,
• Kaspersky™ Anti-Virus for
Novell NetWare.
Main features and function.
Kaspersky™ Anti-Virus Busi-
ness Optimal: Protecting Mail
Systems
The list of Kaspersky™ Anti-Virus compo-
nents that are developed to protect from
viruses in mail systems:
• Kaspersky™ Anti-Virus for MS
Exchange Server,
• Kaspersky™ Anti-Virus™ for Lo-
tus Notes/Domino.
Main features and function.
8

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
Kaspersky™ Anti-Virus Busi-
ness Optimal: Protecting Linux
and UNIX Operating Systems
The list of the Kaspersky™ Anti-Virus com-
ponents that are developed to protect from
viruses in Linux and UNIX operating sys-
tems:
• Kaspersky™ Anti-Virus for Linux,
• Kaspersky™ Anti-Virus for
FreeBSD/BSDi/OpenBSD,
• Kaspersky™ Anti-Virus for
Sendmail/Qmail, Postfix, Exim.
Main features and function.
Appendix. Kaspersky Lab JSC About Kaspersky Lab. Contact information
9

Chapter
2
2. Protecting Workstations
2.1.Kaspersky™ Anti-Virus for workstations
running Windows 95/98/Me and Windows
2000/NT/XP (Wintel). Main features
2.1.1. Real-time protection
The background virus-interceptor - Monitor permanently resides in your Wintel
workstation’s memory, checking for viruses in files (including the archived)
while they are started, created or copied, and also in the memory of started
programs. The program comprehensively controls all the file operations pre-
venting virus attacks.
2.1.2. Filtering viruses out of email
Kaspersky™ Anti-Virus for Wintel workstations automatically and in real time
checks for viruses in all incoming and outgoing messages. Since the program
supports all the major e-mail database formats (MS Outlook, MS Outlook Ex-
10

PROTECTING WORKSTATIONS
press, MS Exchange Client, Eudora, MS Mail, Pegasus Mail, Netscape Mail,
JSMail, MIME, The BAT), it reliably protects against viruses in mail message
storage locations. The built-in Mail Checker efficiently deletes viruses from e-
mail messages in MS Outlook, MS Exchange Client, and completely recovers
the original contents.
2.1.3. Comprehensive control over e-mail messages
Kaspersky™ Anti-Virus for Wintel workstations automatically checks for vi-
ruses in all elements of incoming and outgoing messages: the message body,
embedded OLE objects, attached files (including archived or compressed files)
and other messages of any nesting level.
2.1.4. Protecting against macro-viruses
Kaspersky™ Anti-Virus for Wintel contains special modules controlling macro-
instructions that are executed. The unique macro control technology using the
concept of behavior blocker allows the program to prohibit macro-viruses from
being executed.
2.1.5. Protecting data storage locations
The anti-virus Kaspersky™ AV Scanner allows for the comprehensive check of
local and network drive contents on-demand. You may run your scanner
manually or schedule its start using Kaspersky™ AV Control Centre included
in the package.
2.1.6. Intercepting script-viruses
To protect the user from script-viruses the package uses the built-in Script
Checker module that completely solves this problem by integrating itself as a
filter in-between the script-virus and its handler. This enables you to check for
viruses in any script before it is executed.
11

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
2.1.7. Centralized deployment and management
Kaspersky™ Anti-Virus for Wintel is completely integrated in the unique sys-
tem of anti-virus protection management. KasperskyAdministration Kit (net-
work subsystem) enables you to centrally install and control Kaspersky™ Anti-
Virus for NT Server from any (including the remote) computer; to define a time-
table and an order in which the modules must be started; to automatically re-
trieve and enable anti-virus database updates via the Internet; to broadcast
notifications on virus attacks; to review virus-check logs on workstations; and
control access rights to change the program configuration.
2.1.8. Automated updating
The Kaspersky™ AV Updater module allows for automated updating of anti-virus
databases containing virus and remedy definitions, and of the software package
components.
2.1.9. Universal boot system
The product contains the built-in Rescue Disk Set module – a boot system that
allows you to restore your PC at work in case it has been completely disabled
as the result of a virus attack. Rescue Disk Set creates a set of Linux-based
bootable diskettes with pre-installed Kaspersky™ Anti-Virus for Linux. This
allows you to perform a "clean boot" and to restore infected hard disks with all
the commonly used file systems at once: FAT (DOS), FAT32 (Windows
95/98), NTFS (Windows NT/2000/XP), HPFS (OS/2), EXT (Linux).
12

PROTECTING WORKSTATIONS
2.2.Kaspersky™ Anti-Virus for OS/2.
Main features
2.2.1. Two-level anti-virus protection
Kaspersky™ Anti-Virus for OS/2 provides your computer with a two-level anti-
virus protection. The first level is an anti-virus scanner that may be started on
demand or from a third-party scheduler. On the second level, viruses are neu-
tralized with the world's first and only anti-virus monitor protecting all active
processes in OS/2 from viruses in real-time. Combined use of these tools al-
lows you full control over all virus propagation sources. The program success-
fully fights all types of malicious programs, including Internet-worms, Trojans,
and computer viruses including viruses that were specially developed for
OS/2.
2.2.2. Compliant with the most popular OS/2 versions
Kaspersky™ Anti-Virus for OS/2 may be used under the most popular versions
of this operating system, including Warp, Merlin and Aurora.
2.2.3. User-friendly
Kaspersky™ Anti-Virus for OS/2 contains the simple and user-friendly Presen-
tation Manager graphic interface. It utilizes the step-by-step method, offering a
user recommendations for the next step. Main functions of the program can be
activated by the touch of a single key.
13

Chapter
3
3. Protecting File Servers
3.1.Kaspersky™ Anti-Virus for Windows
2000/NT Server. Main features
3.1.1. Real-time protection
Kaspersky™ Anti-Virus for 2000/NT Server includes a background virus inter-
ceptor, Kaspersky™ AV Monitor that permanently resides in the computer
memory checking all used files (e.g. when these are opened or closed) in real-
time. The module also allows checking-in the memory of running programs
right after it is loaded, and also every time you update your anti-virus bases. If
the infected memory of a program cannot be disinfected, this program is
forced to abort the performance.
3.1.2. Centralized deployment and management
The product is completely integrated in the unique system of anti-virus protec-
tion control that was originally developed in Kaspersky Lab. Kaspersky™ AV
Control Centre (client subsystem) and Network Control Centre (network sub-
14

PROTECTING FILE SERVERS
system) enable you to centrally install and control Kaspersky™ Anti-Virus for
NT Server from any (including the remote) computer; to define a timetable and
an order in which the modules must be started; to automatically retrieve and
enable anti-virus database updates via the Internet; to broadcast notifications
on virus attacks and review virus-check logs.
3.1.3. Protecting data storage locations
The anti-virus Kaspersky™ AV Scanner allows for the comprehensive check of
local and network drive contents on-demand or as scheduled. Combined use of
Kaspersky™ AV Scanner and Kaspersky™ AV Monitor allows you full control over
all virus propagation sources on your network.
3.1.4. Quarantine of dangerous and suspicious objects
Kaspersky™ Anti-Virus for 2000/NT Server has a special quarantine feature
allowing to isolate infected and suspicious objects in a safe place and subse-
quently move the objects to a quarantine directory defined by a network ad-
ministrator.
3.1.5. Virus alerts broadcasting
If Kaspersky™ Anti-Virus detects a virus trying to enter the server, it informs the
system administrator and/or a group of users by sending a user-defined alert mes-
sage to the pre-set addresses.
3.1.6. Automated updating
The Kaspersky™ AV Updater module allows for automated updating of anti-virus
databases containing virus and remedy definitions, and of the software package
components.
15

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
3.2.Kaspersky™ Anti-Virus for Novell Net-
Ware. Main features
Kaspersky™ Anti-Virus for NetWare is a unique anti-virus solution with a net-
work management system, which is completely integrated in the Novell Direc-
tory Service (NDS). The program is a loadable module (NLM) for file and ap-
plication servers running Novell NetWare. It effectively controls all file opera-
tions on a server. If the program detects a virus attack, it is able to efficiently
repel it and quickly recover the system.
3.2.1. Full-scale anti-virus protection
Kaspersky™ Anti-Virus for NetWare includes a full set of anti-virus tools: an
anti-virus scanner that checks data storage locations and may be started on
demand or by schedule; and an anti-virus monitor checking all used files
(opened, copied, closed) in real-time. Combined use of these tools allows you
to perform full control over all the virus propagation sources on your network.
3.2.2. Integration into Novell Directory Service
Since all the main features of Kaspersky™ Anti-Virus for NetWare are com-
pletely integrated in NDS, it enables a network administrator to efficiently
manage the program directly from the administrator console (NWAdmin or
ConsoleOne).
3.2.3. Centralized deployment and management
The program may be installed on NetWare servers from any workstation run-
ning Microsoft Windows NT/2000 within the network. Due to deep integration
into the NWAdmin network management systems a network administrator is
able to remotely manage Kaspersky™ Anti-Virus for NetWare: to schedule
component starts, to change program settings, notification modes and the or-
der of infected files processing, to plan downloading of the anti-virus database
updates and etc.
16

PROTECTING FILE SERVERS
3.2.4. Real-time configuration update
To apply the changes you have made to the program settings, you do not
need to restart the server. They will be activated right after you have confirmed
them.
3.2.5. Quarantine of dangerous and suspicious objects
Kaspersky™ Anti-Virus for NetWare has a special quarantine feature allowing
to isolate infected and suspicious objects in a safe place and subsequently
move the objects to a quarantine directory defined by the system administra-
tor.
3.2.6. Virus alerts broadcasting
If Kaspersky™ Anti-Virus detects a virus trying to enter the server, it informs
the system administrator and/or a group of users by sending a user-defined
alert message to the pre-set addresses.
3.2.7. Automatic disconnection of infected
workstations
If a certain workstation sends infected files to the server, Kaspersky™ Anti-
Virus for NetWare may temporarily disable further access of this workstation to
the server in order to prevent any further distribution of viruses on the network.
3.2.8. Adjusting of CPU utilization
Kaspersky™ Anti-Virus for NetWare provides a comprehensive set of settings
allowing the network administrator to adjust the CPU resources dedicated to
program use.
17

KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL
3.2.9. Automated retrieve of updates via the Internet
Kaspersky™ Anti-Virus for NetWare supports the automatic downloading and
hookup of anti-virus database updates via the Internet. The procedure may be
performed on demand or scheduled by a network administrator.
3.2.10. Multithreaded virus scanning
Kaspersky™ Anti-Virus for NetWare now supports multithreaded virus scan-
ning that allows for an unlimited amount of files being scanned simultaneously
in real-time. This amount is limited only by the server's hardware configuration.
The multithreaded virus scanning essentially increases the overall efficiency of
the entire network by simultaneous processing of requests that arrived from
many workstations at the same time.
18

Chapter
4
4. Protecting Mail Systems
4.1.Kaspersky™ Anti-Virus for Microsoft Ex-
change Server. Main features
Kaspersky™ Anti-Virus for Exchange is a centralized anti-virus system for mail
servers running Microsoft Exchange Server 5.x and 2000. The program pro-
vides centralized anti-virus filtering for the entire local and external e-mail traf-
fic in real-time as well as on a user demand.
4.1.1. E-mail anti-virus security
Kaspersky™ Anti-Virus for Exchange integrates itself into the mail server as a
supplemental module and permanently checks for viruses in all e-mail mes-
sages in protected mailboxes and folders.
4.1.2. Protection of client workstations
Kaspersky™ Anti-Virus for Exchange prohibits infected e-mail from entering
the Internet-connected workstations within your corporate network. You may
19