McAfee MANAGEMENT EDITION 2.5 User manual

Management Edition
Getting Started Guide
Version 2.5

COPYRIGHT
Copyright © 1998–1999 Networks Associates Technology, Inc. All Rights Reserved. No part of
this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language in any form or by any means without the written permission of
Networks Associates Technology, Inc., or its suppliers or affiliate companies.
TRADEMARK ATTRIBUTIONS
* ActiveHelp, Bomb Shelter, Building a World of Trust, CipherLink, Clean-Up, Cloaking, CNX,
Compass 7, CyberCop, CyberMedia, Data Security Letter, Discover, Distributed Sniffer System, Dr
Solomon’s, Enterprise Secure Cast, First Aid, ForceField, Gauntlet, GMT, GroupShield, HelpDesk,
Hunter, ISDN Tel/Scope, LM 1, LANGuru, Leading Help Desk Technology, Magic Solutions,
MagicSpy, MagicTree, Magic University, MagicWin, MagicWord, McAfee, McAfee Associates,
MoneyMagic, More Power To You, Multimedia Cloaking, NetCrypto, NetOctopus, NetRoom,
NetScan, Net Shield, NetShield, NetStalker, Net Tools, Network Associates, Network General, Network
Uptime!, NetXRay, Nuts & Bolts, PC Medic, PCNotary, PGP, PGP (Pretty Good Privacy),
PocketScope, Pop-Up, PowerTelnet, Pretty Good Privacy, PrimeSupport, RecoverKey,
RecoverKey-International, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic,
SecureCast, Service Level Manager, ServiceMagic, Site Meter, Sniffer, SniffMaster, SniffNet, Stalker,
Statistical Information Retrieval (SIR), SupportMagic, Switch PM, TeleSniffer, TIS, TMach, TMeg,
Total Network Security, Total Network Visibility, Total Service Desk, Total Virus Defense, T-POD,
Trusted Mach, Trusted Mail, Uninstaller, Virex, Virex-PC, Virus Forum, ViruScan, VirusScan,
VShield, WebScan, WebShield, WebSniffer, WebStalker WebWall, and ZAC 2000 are registered
trademarks of Network Associates and/or its affiliates in the US and/or other countries. All
other registered and unregistered trademarks in this document are the sole property of their
respective owners.
LICENSE AGREEMENT
NOTICE TO ALL USERS: FOR THE SPECIFIC TERMS OF YOUR LICENSE TO USE THE
SOFTWARE THAT THIS DOCUMENTATION DESCRIBES, CONSULT THE README.1ST,
LICENSE.TXT, OR OTHER LICENSE DOCUMENT THAT ACCOMPANIES YOUR
SOFTWARE, EITHER AS A TEXT FILE OR AS PART OF THE SOFTWARE PACKAGING. IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH THEREIN, DO NOT INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO THE PLACE OF
PURCHASE FOR A FULL REFUND.
Issued September 1999/Management Edition v2.5.0

Getting Started Guide iii
Table of Contents
Chapter 1. Introducing the Management Edition Program . . . . . . . . . . . 5
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
What is the Management Edition program? . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
How does the Management Edition program work? . . . . . . . . . . . . . . . . . . . . .5
Management Edition program features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
New functionality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Seamlessly interactive management tools . . . . . . . . . . . . . . . . . . . . . . . .7
Automated software distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Real-time virus detection and notification . . . . . . . . . . . . . . . . . . . . . . . . .8
Conventions used in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
How to contact Network Associates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Customer service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Technical support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Network Associates training . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Comments and feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Reporting new items for anti-virus data file updates . . . . . . . . . . . . . . .11
International contact information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Chapter 2. Installing the Management Edition Program . . . . . . . . . . . . 15
System requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Hardware recommended . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Software supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Defining anti-virus domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Installing the Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Installation scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Option 1: Local machine/server – one anti-virus domain manager . . . . . 17
Option 2: Server/server – more than one anti-virus domain manager . . . 18
Option 3: Local machine/local machine – ten machines or fewer . . . . . . 18
Option 4: Local machine/server – ten machines or fewer . . . . . . . . . . . . . 19
Installation steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Table of Contents
iv Management Edition
Running the Management Console (initial use) . . . . . . . . . . . . . . . . . . . . . . . .26
Installing the master repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Installing anti-virus components in the Repository . . . . . . . . . . . . . . . .32
Understanding the Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Menu bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Font bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Left pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Right pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Status bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Upgrading the Management Edition program . . . . . . . . . . . . . . . . . . . . . . . . .44
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

1
Getting Started Guide 5
1Introducing the Management
Edition Program
Introduction
As a network administrator, your time is valuable. You’re responsible for
maintaining your corporate network at its optimum. The Management Edition
program solves your need for timely, efficient, and cost-effective
enterprise-wide anti-virus software distribution. With it, you can seamlessly
install, configure, and manage anti-virus software for remote networked
machines within anti-virus domains that you create.
What is the Management Edition program?
The Management Edition program is Network Associates* real-time software
distribution system, which installs, configures, upgrades, and removes
anti-virus software for remote machines on a network. The Management
Edition software helps protect your network from attacks by enabling
centralized upgrading of your network’s anti-virus software, as well as
centralized alerting of detected attacks. It reduces the time you must spend
installing and managing anti-virus software, particularly on large networks,
ensuring uninterrupted network security.
The Management Edition software helps you safeguard one of your most
important assets—your data—by delivering timely upgrades of VirusScan*
(forWindows95,Windows98,WindowsNT,andWindows3.1x) and
NetShield* for Windows NT. Anti-virus software distribution is an important
element in a comprehensive security program that includes a variety of safety
measures, such as regular use of encryption and intrusion detection software,
backups, meaningful password protection, training, and security awareness.
Network Associates urges you to set up and comply with such a security
program.
How does the Management Edition program work?
The Management Edition program installs software to member machines in
the anti-virus domains that you create, from software repositories (master,
mirror, and linked) that you create. You control these activities from the
Management Console, a drag-and-drop application that runs on Microsoft
Windows NT.

Introducing the Management Edition Program
6 Management Edition
You can install the Management Edition program on the local hard disk drive
of the administrator’s workstation. You will need a Microsoft Windows NT
Domain Administrator account.

NOTE: You must install the Management Console and the Management
Server only on a Windows NT system. (The Management Console runs
only on Windows NT 4.0, and the Management Server runs on Windows
NT 3.51 or later.) Both applications, however, handle all tasks in the same
way across all Management Agent workstation platforms (Windows NT,
Windows 95, Windows 98, Windows 3.x, and Novell NetWare 3.12 or
later), which means less time spent learning new systems.
Most of the program’s functionality is built into these integrated services:
•Management Console. Use the Management Console to configure and
install anti-virus software on any machines in the anti-virus domain. For
details, see Chapter 3, “Creating Anti-virus Domains”and Chapter 5,
“Updating Your Anti-virus Software,”in your online Administrator’s
Guide.
• Management Server. Use the Management Server to coordinate the
scheduling of scans, receive alerts, and generate reports for the entire
anti-virus domain. For details, see Chapter 4, “Creating Schedules,”in
your online Administrator’s Guide.
• Management Agent. Use the Management Agent to initiate on-demand
scans via the Scheduler, and to send virus alerts from on-demand and
on-access scans back to the Management Server. For details, see Chapter
4, “Creating Schedules,”in your online Administrator’s Guide.
•Alert Manager. Use the Alert Manager to configure alert notification
settings. When the anti-virus software managed by the Management
Edition program detects malicious activity on your servers, you can be
notified immediately by one or more of a wide variety of notification
methods. For details, see Chapter 6, “Using the Alert Manager,”in your
online Administrator’s Guide.
These services work together to provide easy management of machines in
your anti-virus domain. Each service is configurable through a console. To
access the Alert Manager settings from the Management Console, click
Anti-Virus Domain(s), an individual domain, a members group, or an
individual machine, and then click the Component Configuration
toolbar button.

Getting Started Guide 7
Introducing the Management Edition Program
Management Edition program features
This version of the Management Edition program builds on the strengths of
previous versions, extending the established functionality and providing new
features to help you manage your network anti-virus solutions. See the
WHATSNEW.TXT file included with the software for a full list of new features
and information on the latest changes.
New functionality
•The Management Edition program now supports NetShield for NetWare
v4.1.1 anti-virus software.
•Forced updates of invalid external mirrors give you more control over how
and when mirror repositories are updated.
•This release includes the ability to configure custom tools—such as the
additional console required to configure remote NetShield for NetWare
servers—that can be launched from the Tools menu in the Management
Console.
•You can now use the Repository’s Products page to update product files
such as SETUP.EXE or SETUP.ISS in addition to script (MCSCRIPT.INI)
and extension .DLL files.
•You can now define custom messages that can be appear immediately
before or after a client update.
•This release features enhanced control over Name Provider-installed
machines.
Seamlessly interactive management tools
•The Management Console lets you configure and install anti-virus
software on any machines in the anti-virus domain from any Windows NT
machine on which it is installed.
•The Management Server coordinates the scheduling of scans, receives
alerts, and generates reports for the entire anti-virus domain from the
Windows NT machine on which it is installed.
•The Management Agent provides client installers for Windows 95 and
Windows NT machines that have peer networking disabled or removed, so
that you can add them to the network without need for file sharing.
•The diagnostics wizard gathers information in an e-mailable format and
helps our technical support staff solve your problems faster.

Introducing the Management Edition Program
8 Management Edition
Automated software distribution
•The Management Console enables enhanced distribution speeds to a large
number of machines and efficiently stores domain and machine
information as registry entries (not .INI files).
•An enhanced Batch Install method lets desktop and laptop users initiate an
update upon login for fast installation of anti-virus software and updates.
•Linked repositories reduce WAN traffic by allowing you to distribute
software between repositories without having to install software from
separate CD-ROM discs.
•Different language versions of the same anti-virus software can co-exist in
a single repository. You specify the language version to be distributed for
each machine, group, or domain.
•Software installation reports show which anti-virus software is installed on
which machines, which machines are in which anti-virus domain, and
which machines have a non-standard configuration.
Real-time virus detection and notification
•On-access (inbound and outbound) anti-virus scanning provides real-time
identification of both known and unknown viruses upon file access, create,
copy, rename, and run; disk access; system startup; and system shutdown.
•On-demand anti-virus scanning offers user-initiated detection of known
boot, file, macro, multi-partite, stealth, encrypted, and polymorphic
viruses located within files, drives (local and network), and diskettes.
•The Alert Manager offers centralized virus notification via alphanumeric
pager, SMTP e-mail, SNMP messaging, DMI alerting, audible alerting,
network broadcast, program execution, and Windows NT event logging.
(For details, see Chapter 6, “Using the Alert Manager,”in your online
Administrator’s Guide.)
•At-a-glance scan status via the anti-virus domain view reveals whether a
machine is all clear, infected, or overdue for a scan.
•Scans can be scheduled for entire member groups, as well as individual
machines or the whole domain.
•Virus-scan reports display how many virus alerts have occurred over a
specified period of time on specified machines.

Getting Started Guide 9
Introducing the Management Edition Program
Conventions used in this guide
The following describes the typeface conventions used in this guide:
How to contact Network Associates
Customer service
To order products or obtain product information, contact the Network
Associates Customer Care department at [phone] or write to the
following address:
Network Associates, Inc.
McCandless Towers
3965 Freedom Circle
Santa Clara, CA 95054-1203
U.S.A.
Technical support
Network Associates is famous for its dedication to customer satisfaction. We
have continued this tradition by making our site on the World Wide Web a
valuable resource for answers to technical support issues. We encourage you
to make this your first stop for answers to frequently asked questions, for
updates to Network Associates software, and for access to Network Associates
news and virus information.
If you do not find what you need or do not have web access, try one of our
automated services.
Bold Menu names, commands, buttons, and dialog box options
are shown in a bold sans-serif font.
Sans-serif font Folder, icon, and computer key names, as well as screen text
on the software, are shown in a sans-serif font.
Keystrokes Text that the user must type in as a command or as a text
box entry (e.g., a pathname) is shown in a monospaced font.
Variables
Command-line text for which you must supply a value is
shown in an italic sans-serif font.
World Wide Web http://support.nai.com
Internet [e-mail]
CompuServe GO NAI
America Online keyword MCAFEE

Introducing the Management Edition Program
10 Management Edition
If the automated services do not have the answers you need, contact Network
Associates at one of the following numbers Monday through Friday between
6:00 A.M. and 6:00 P.M. Pacific time.
For corporate-licensed customers:
For retail-licensed customers:
To provide the answers you need quickly and efficiently, the Network
Associates technical support staff needs some information about your
computer and your software. Please have this information ready before you
call:
•Product name and version number
•Computer brand and model
•Any additional hardware or peripherals connected to your computer
•Operating system type and version numbers
•Network type and version, if applicable
•Contents of your AUTOEXEC.BAT, CONFIG.SYS, and system LOGIN
script
•Specific steps to reproduce the problem
Network Associates training
For information about scheduling on-site training for any Network Associates
product, call [phone].
Comments and feedback
Network Associates appreciates your comments and reserves the right to use
any information you supply in any way it believes appropriate without
incurring any obligation whatsoever. Please address your comments about
Network Associates anti-virus product documentation to: Network
Associates, Inc., 15220 NW Greenbrier Parkway, Suite 100, Beaverton, OR
97006-5762, U.S.A. You can also send faxed comments to [phone] or
e-mail to tvd_documentatio[email protected].
Phone [phone]
Fax [phone]
Phone [phone]
Fax [phone]