The Sybari Enterprise Manager - Center
Contents
1. weiseereeneoeeenesenenennenesneoeneneoenenne naene oneoeeeneseneene 22 Chapter 6 Reports SS TD 24 Trafic Dada tun Cotesia Pus ehe 24 Engine kuku rastad 24 Gonfigunns and Ronmins Reports tut kp R 25 SPM E 27 Chapter 7 Alert Management cscccccocessssssstssonsnstesesdscavevsnesevenssssseerssesnvesstesserecsosveusseseatoveestsener2 Configuring Alerts 5 3 4 0 isl BR aia hie BIA AAG SS ablated nate 28 Chapter Getting He pays L Chapter 1 Introduction The Sybari Enterprise Manager The Sybari Enterprise Manager SEM is a centralized management tool designed to provide IT Administrators a way to manage Sybari software solutions on all of the servers in their enterprise Through a web based management UI the SEM will provide administrators with centralized o Deployment o Reporting o Management Please Note Available in a future SEM release These tasks can currently be handled using templates that can be deployed using the SEM Centralized Deployment will allow administrators to deploy new products product upgrades hot fixes and patches templates files and signature files to all or selected servers in an enterprise The deployment2. Installation This release of the Sybari Enterprise Manager supports local installs on Windows 2000 and or 2003 Please Note The SEM cannot be installed on a server that is used as a Domain Controller SEM s setup wizards can be used to install the product to a local Windows 2000 2003 machine The following information should be gathered prior to installation Administrator Account and Password for the machine on which the SEM is being installed If you are installing SEM on a Windows 2000 server you will need the Windows 2000 server install CD available during the install process The install wizard will need this disk while installing the Windows server components if necessary To begin the installation procedure run SETUP EXE from the directory containing the SEM installation files Follow the steps below to complete the installation 1 The install wizard will first check for the required system components and then ask if you would like the SEM install wizard to install any that are missing Click Yes to have the install wizard install missing components or No if you prefer to install the components manually Please Note IIS is an install pre requisite however for security reasons this must be installed and patched manually by an administrator 2 On Windows 2000 you may be asked to reboot the machine after the required components are installed If so you will need to run SETUP EXE again after you log b
3. y a Delete 4 Rollback Server Groups Global Configuration St ent Jobs Job Management E Signature Redistribution Jobs Packages 090000 inf Redistribution Job 1 Jobs Reports Success Detections SMTP Traffic Engine Versions Alert Management Alerts Event Logs Alerts Deployment Redistribution EEN Y To configure the Signature Redistribution job follow the steps below 1 Highlight Signature Redistribution Jobs and click on the Create Job button 2 Name the job Example Engine Updates 3 Set the update schedule This setting controls when and how often the SEM will poll the Sybari website for new signature file updates To schedule the job you will need to deselect the Don t Schedule Deployment check box and then click on the button to the right of the Schedule field that will open the Schedule Dialogue Box shown below 15 3 Modify Schedule Microsoft Internet Explorer Enterprise Manag Occurs Daily Daily Every f day s C Weekly Monthly Daily Frequency Occurs once at 12 00 aM e Occurs every fi Hours gt starting at 12 04 AM v ending at 12 os 7 Duration Start Date 3 26 2004 B C End Date No End Date 12 31 3000 10 OK Cancel Select a daily weekly or monthly update schedule If you would like the SEM to check for updates ever
4. Click on Add Users 2 You may add local user accounts or domain accounts manually or use the Browse button to select and add users For domain accounts use the format domain username For local user accounts simply enter the user name Multiple user names must be separated by a semicolon 3 After you have entered or selected all of the users you would like to add click on the Insert Users button 4 The new user will be displayed in the main Manage Users screen Users can be deleted by selecting the check box next to the user s name and clicking on the Remove Selected Users button on the tool bar 11 Configuring Managed Servers Each server that will be managed must be configured using the SEM console To open the Manage Servers work panel click on the Servers button in the SEM area of the navigation bar The Manage Servers work panel will open as shown in the image below Z Sybari Enterprise Manager Microsoft Internet Explorer lol File Edit View Favorites Tools Help Back gt A search Favorites lt 4 B SP Address a http localhost semconsole ServerManagement aspx Links Si SYBARI _ Enterprise Manager At a glance Use this page to add and remove machines from the Sybari Enterprise Manager Additionally agents can be deployed or checked from this page SEM Administration Users Servers Serv
5. Event Logs Alerts Deployment OK Cancel Redistribution Help X gt 4 E Done KRSS EE Local intranet 2 To configure this report select the servers from which to collect version data and click the OK button Saving SEM Reports Reports generated by the SEM can be saved for later use SEM reports can be saved as HTM or MHT files Follow the directions below to save report files 1 Run the desired report 2 The report window that is displayed has a menu Choose File gt Save As 3 Give the file a name and a location then hit Save For Location we recommend creating a new folder for each report The report is now saved If you are saving the report as an HTM file the SEM will create a sub directory to store image files used in the report If you copy the report file to another location the SEM will automatically copy the associated image directory If you are saving the report as an MHT file the report will be saved as an individual HTML archive with all the graphics in line to the message This simplifies the e mailing and sending of reports as they are completely self contained 27 Chapter 7 Alert Management The Sybari Enterprise Manager can be configured to provide Alerts about a variety of events on the servers managed by the SEM Configuring Alerts The SEM can be configured to provide the Alerts described below Virus Alerts Used to notify administrators
6. Schedule the Install if desired If you don t schedule the install you will have to manually start the Deployment Job after you have completed the configuration 4 Enter the e mail address that should receive the success failure notification s following the deployment of the job 5 Click Next The Assign Job work panel will open 6 Assign the job by selecting the Target Server s or deployment group 7 Click Finish to complete the job configuration After you have completed configuring the Deployment Job it will be added to the Manage Jobs work panel under the Deployment Jobs section If you have not scheduled the job you can run the job by highlighting the job and clicking on the Run Now button You may also edit copy or delete the job from the Manage Jobs work panel 21 Deploying Antigen Template Files on Remote Servers To deploy Antigen Template files to remote servers you will need to configure the Template Package and create and run a Deployment Job for the target server s Each step is described below Creating the Template Package The Template Package consists of the Antigen Template Files template adb You will need to configure your template adb file using the Antigen Client UI on a local server See the Antigen for Exchange SMTP or SharePoint User Manual for more information about configuring Template files Click on the Packages button in the Job Management a
7. 19 2004 12 00 00 AM Server list processed ga vm greeceex1 ga vm greeceex2 viruses Messages Scanned Files Scanned Total Message Parts Dates 4 18 2004 12 00 00 AM 4 18 2004 2 00 00 AM 4913 2004 2 00 00 4 18 2004 4 00 00 AM 4913 2004 4 00 00 AM 4 18 2004 6 00 00 AM 4 13 2004 6 00 00 AM 4 18 2004 8 00 00 AM 4 13 2004 8 00 00 AM 4 18 2004 10 00 00 AM 4 13 2004 10 00 00 AM 4 18 2004 12 00 00 PM 4 18 2004 12 00 00 4 18 2004 2 00 00 PM 15 35 40 75 4 18 2004 2 00 00 PM 4 18 2004 4 00 00 PM 0 0 0 4 18 2004 4 00 00 PM 4 18 2004 6 00 00 0 0 0 4 18 2004 6 00 00 PM 4 18 2004 8 00 00 0 0 0 4 18 2004 8 00 00 PM 4 18 2004 10 00 00 0 0 0 4 18 2004 10 00 00 4 19 2004 12 00 00 0 0 0 26 Configuring and Running the Engine Versions Report The only report that is configured differently is the Engine Versions report When this job is selected the Report Parameters screen shown below will be displayed Enterprise Manager Report Parameters At a glance Use this page to specify report parameters SEM Administration Reports gt Engine Versions gt Engine versions Users Servers Server Groups Select Servers Selectall Select Global Configuration DEY ML EXCH2K Select servers to include in nt Job Manageme reports R DEV ML EXCH2K3 Packages Jobs Reports Detections SMTP Traffic Engine Versions Alert Management Alerts
8. 3 Mode Exchange 5 5 Mailbox Name Mailbox Server Profile Username amp Password Abort Upgrade Sybari recommends selecting Recycle Services so that no mail will be delivered unscanned Select ESE or VSAPI mode for the installation on the Target Server s Enter the Mailbox name that Antigen will use for e mail notifications Enter the Server name that Antigen will use for e mail notifications Enter the MAPI profile that Antigen will use for e mail notifications Enter the User Name and Password of a logon account that has Administrative Rights to MS Exchange on the Target Server s This is necessary to allow Antigen to register the Antigen Services Advanced Spam Manager Web Root Folder Sybari Junk Mail Folder Enter the file path to the Web Root folder on the Target Server s or use the default path provided Enter the folder name where the Sybari Junk Mail application will be installed or use the default provided After you have completed all of the information click on Finish to complete the Package Configuration The Deployment Package will be added to the Manage Packages screen under the Package Names field Packages can be Renamed or Deleted by selecting the package and clicking on the appropriate button above 20 Configuring the Install Deployment Job After the Deployment Package has been created click on Jobs in the Job Management area of the navigatio
9. 33 3018 Ext 16 9 am 6 pm Singapore Time Sydney Australia Support Office 61 2 9495 9700 9 am 6 pm Sydney Time 31
10. SEE E A EE SS 5 Chapter 3 Client OVEFVIGW cicisiccsisssseiscacosstnonivenensinsndesonsesedenadeenssvoessatnaseveonszsvonsbuceversenioscaovaceecese Chapter 4 Getting Started LO Configuring the Global dae aE aya aloha lathe nb EAA 10 Configuring SEM User Accounts eise oi e Eea VEEE E RE i TER Eia R EEE EE AN i EE EA 11 Configurins Managed Servers R EAE N R EATE EE E REAN RA 12 Configiirins Server Groups e KEEN ERE ER EEEE EER EAN E hata 13 Configuring Engine Signature Updates miteeeeteeneenenneoteenenenenneoneetenneoteeneoenenneeneeneeneeneeneoeneneeneene 14 Chapter 5 The Deployment Job cssccssssscsssscssssccssssccssssccssscsssseccssseccsssescsssascsssscsssscssssee LO Installing Antigen REMOte Servers svvseiss cose eveusesesseneelesyeaescees 18 Greatins the Deployment Package 18 Configuring the Install Deployment Jobi sristi eair a i naene E 21 Deploying Antigen Template Files on Remote Servers ccccesssccssesseesecseesecesseccssecseesecsevscenaeecesaecaeesecaesseenaeneeas 22 Creating the Template Package saidis 1055 5555541 Moines eks EEE E LE e E EEA 22 Configuring the Template Deployment JOob
11. Sybari A Microsoft Subsidiary USER GUIDE Sybari Enterprise Manager a a r SS SS Enterprise Manager COPYRIGHT AND TRADEMARK NOTICES Information in this document including URL and other Internet Web site references is subject to change without notice Unless otherwise noted the example companies organizations products domain names e mail addresses logos people places and events depicted herein are fictitious and no association with any real company organization product domain name e mail address logo person place or event is intended or should be inferred Complying with all applicable copyright laws is the responsibility of the user Without limiting the rights under copyright no part of this document may be reproduced stored in or introduced into a retrieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise or for any purpose without the express written permission of Sybari Software Inc a wholly owned subsidiary of Microsoft Corporation Sybari Software Inc a wholly owned subsidiary of Microsoft Corporation may have patents patent applications trademarks copyrights or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Sybari Software Inc a wholly owned subsidiary of Microsoft Corporation the furnishing of this docu
12. The Manage Server Groups work panel allows administrators to group servers into Server Groups to simplify the server management process The Global Configuration work panel is used to configure the SEM s global settings The Manage Packages work panel is used to create and configure SEM packages SEM packages are Antigen install images or template files that are configured for deployment by the SEM to the managed servers The Manage Jobs work panel is used to create modify delete or view SEM Deployment and Signature Distribution jobs Detection Reports provide overall statistics on virus spam and filter detections including information such as detection rates actions taken and filter efficiency SMTP Traffic Reports provide statistical information about SMTP traffic for both messages and bytes processed Engine Version Reports provide a quick view of the signatures file versions deployed throughout the environment allowing administrators to easily determine which servers are up to date and which still need updating Alert Management Alerts Event Logs Alerts Deployment Redistribution The SEM provides 5 different types of alerts that can be used to monitor when virus or spam activity exceeds certain thresholds All alerts are configured using the Configure Alerts Work Panel The Alerts Log provides a log of all Alert events The Deployment Log provides a log of all Deployment jobs The Redistributi
13. ack in to continue the installation 3 The License will be displayed Click 1 Accept the terms in the license agreement and then Click Next If you do not accept the terms of the license agreement the install will terminate User Information will be displayed Modify if necessary Click Next The install destination folder will be displayed Modify if necessary Click Next Click Install to begin the installation Install status is displayed Click Finish to complete the installation NOOR The installation is complete To run the Enterprise Manager open an internet browser and enter the server name followed by semconsole Example http servername semconsole If you are connecting to the local machine enter http localhost semconsole When connecting remotely to the SEM console you will be prompted to log in using the credentials used to originally install the SEM Uninstalling To uninstall SEM you may either use the Windows Add Remove Programs function or run setup exe and select the Remove option Follow the on screen instructions to complete the removal process When using either method to uninstall SEM you will be asked the following question Would you like to delete the SEM database information and revoke associated login rights Select Yes or No Sybari suggests deleting old SEM databases when removing the product If they are left in place any new SEM insta
14. d 12 password provided must have administrative rights either as a local admin to the machine s or a domain admin 2 The SEM will install the Agent on each selected server 3 Once the Agent has been installed the SEM will provide a status update through a pop up window to report if the installation was completed successfully To see the pop up window pop up blocking software must be disabled The Manage Servers screen may also be used to remove servers and to check Agent deployment status If you choose to deploy Agents to several hundred machines you can close the SEM console and check the Deployment Status at a later date by selecting each machine and pressing the deployment status button Configuring Server Groups Server Groups provide a way for Administrators to group servers for the purpose of deployment engine updates or configuration through template deployment By default any servers added to the SEM will be added to the Default folder unless the administrator specifies otherwise To manage Server Groups click on Server Groups in the SEM area of the navigation bar The Manage Server Groups work panel will open as shown in the image below Es Sybari Enterprise Manager Microsoft Internet Explorer gt iol x File Edit View Favorites Tools Help EI Back A A seach Gyravorites media 5 amp Address http LEE a aspx 7 60 Links 2 SYBARI enterpri
15. emove a machine from a group highlight a machine name and click on the Remove Machines button The Remove Machine work panel will open to allow you to confirm that you would like to remove the machine from the group Click on the Confirm button to save your changes Please Note Whena machine is removed the machine is not deleted from the SEM Configuring Engine Signature Updates The Signature Redistribution job is used to provide anti virus and anti spam signature updates to all of the servers in an environment by downloading the engine updates to a single staging server that is then used as the retrieval point for all other servers in the environment It is important to configure the Signature Redistribution before using the SEM to install Antigen in the environment because Antigen will attempt to retrieve updates from the SEM server immediately after install To open the Signature Redistribution job work panel click on Jobs in the Job Management area of the navigation bar The Manage Jobs work panel will open as shown in the image below 14 4 Sybari Enterprise Manager Microsoft Internet Explorer File Edit View Favorites Tools Help Back O A A Bsearch GijFavorites E4y SP Address E http k ekoti aspx 50 enterprise Manager Manage Jobs At a glance Use this view to Create Modify Delete or View jobs SEM Administration ae K Create Edit
16. er Groups Global Configuration Select Deselect All a Packages Jobs DEV ML EXCH2K Installed Reports DEV ML EXCH2K3 Installed Detections SMTP Traffic A Engine Versions Alert Management Alerts Event Logs Alerts Deployment Redistribution Fi http localhost semconsole PackageManagement aspx Local intranet 2 To configure servers follow the steps below 1 Click on Add Machines 2 Use the Browse button to select servers to add After each server is added you may click on the Verify button to insure that the server path has been entered correctly 3 You may also add the selected servers to Server Groups for the purpose of managing similar machines as a single unit See below for more information on Server Groups 4 After you have selected all of the servers to add click on the Insert Machines button 5 The new machines will be displayed in the main Manage Servers screen After the servers have been added to the SEM database you will need to install an Agent on each machine This can be accomplished by selecting each server and clicking the Deploy Agent button on the tool bar The Agent serves as the interface between the SEM and the managed server To deploy an Agent 1 Select a server or servers and click on the Deploy Agent button You will be asked to supply a User Name and Password to access the selected machine s The username an
17. ettings click the Save button 10 Configuring SEM User Accounts When the SEM is installed the User Account used to install the SEM Named Installation Administrator is automatically granted access to the SEM Additional users who wish to use the SEM must have their NT 2000 2003 user accounts granted access to the SEM to perform management tasks To open the Manage Users work panel click on Users in the SEM area of the navigation bar The Manage Users work panel will open as shown in the image below Z Sybari Enterprise Manager Microsoft Internet Explorer File Edit View Favorites Tools Help Back gt A A AQsearch Gyravorites lt 4 B SP Address http flocalhost semconsole UserManagement aspx gt Pao Ent rprise Manager Manage Users At a glance Use this page to add and remove user access from the Sybari Enterprise Manager All user accounts must map to a local windows account on the SEM server or a domain account SEM Administration Users Servers Server Groups Global Configuration Select All ee Add Users Remove Selected Users Job Management Packages Jobs installation Administrator QA MP VM2KSTART administrator Names User Name Reports Detections SMTP Traffic Engine Versions Alert Management Alerts Event Logs Alerts Deployment Redistribution To configure User Accounts follow the steps below
18. functionality will also include the ability to deploy to machines without pre existing software live Exchange server updates no restart necessary server driven signature file updates to centralize the update procedure and the ability to deploy templates for configuration management Reporting will provide a way for administrators to more closely monitor the servers in their enterprise and evaluate the effectiveness of their anti virus software The SEM will collect statistics from all the servers under its management and store them in a central repository for analysis The statistics will also be used by the SEM to alert administrators to potential problems by monitoring event thresholds and looking for statistical anomalies that may indicate a problem Reports will provide information about the trends in virus spam filter and update activity for each server or the entire enterprise System Requirements Minimum Server Requirements o Windows 2000 or Windows 2000 Server Advanced Server or Windows 2003 o 128 MB of available memory 183 MB of available disk space for pre requisites listed below 65 MB of available disk space for the SEM Pre requisites IIS 5 0 or higher net Runtime v 1 1 ASP net v 1 1 Microsoft Message Queue and MSMQ Triggers MSDE 8 0 0 9 9 Please Note The SEM cannot be installed on a server that has Antigen for Exchange Antigen for SMTP Gateways or Antigen for SharePoint installed Chapter 2
19. ge Jobs work panel The Rollback Button The Rollback Button on the Manage Jobs work panel serves two functions For Install Deployment jobs it will uninstall Antigen For Signature Redistribution Jobs it will rollback to the previous engine To use the Rollback Button highlight the job you would like to roll back and click the Rollback button 23 Chapter 6 Reports The Sybari Enterprise Manager can collect information from all of the managed servers and generate reports on a variety of Antigen related topics There are four main Report categories o Detection Reports o SMTP Traffic Reports o Engine Versions The reports available in each category are described below Detection Reports Detection Reports are used to collect and present data about the number of viruses filter matches and spam incidents detected during a certain period on selected or multiple Exchange servers running Antigen The report options include Virus Detection Report Virus Detection Summary Virus Action Report Virus Action Summary Top N Viruses Found Spam Detection Report Spam Detection Summary Spam Action Report Spam Action Summary Content Filter Report Content Filter Summary File Filter Report File Filter Report Summary Filter Action Report Filter Action Summary Filter Statistics Filter Statistics for all servers 2 0 09 0 0 0 0 0 O Or 0 00 05050 Traffic Reports Traffic Reports are used to collect and present data abo
20. gured and run following the same basic steps except for the Virus Signature Update Alert that will be described below Follow the steps below to configure the Alert 28 1 Click on the Virus Alerts button The Update Alerts work panel will open as shown in the image below SYBARI aj Enterprise Manager Update Alerts At a glance Use this page to update Virus alert settings SEM Administration Users Enable Alerts DP Send notification if no detections have been reported for Viruses Servers Server Groups Global Configuration Job Management Packages Jobs Reports Detections SMTP Traffic Engine Versions the past eo minutes M send notification if the number Bl setections reported for Infected Messages inthe past eo minutes exceeds i Select which alerts you wish SEM to monitor Consider an oubreak over ifthe detection counts are below the threshold for 30 minutes Outbreak Settings Configure when an outbreak ends This is the amount of Alert Management time that must pass with Alerts detection levels below that configured above for the Event Logs outbreak to be considered Alerts over Deployment Redistribution eMail Notification Help X 4 E Done RRI EB Local intranet 4 2 Complete the following information a Enable Alerts Choose what events should trigger a notification You can configure the SEM to a
21. is the first time you are scheduling the job highlight the job from the main screen and select Run Now This will force the SEM to do a download and update from the server Once you have configured a Signature Redistribution Job you can use the Manage Jobs panel to Run Edit or Delete the job If the Signature Redistribution job is scheduled it will start automatically at the scheduled time If it is not scheduled you must click on the Run Job button to start the selected job You can also copy jobs if you want to create multiple jobs that are similar For example if you want to create a Redistribution Job for each engine you can configure one and then copy and modify the job for each engine Please Note When using the Signature Redistribution job to update Antigen s scan engines you should disable the Scheduled Updates in Antigen so that Antigen is not updating the scan engines twice Scheduled Engine updates can be disabled using the Antigen UI or by using the ACM to deploy the File Scanner Template for each engine with the Scheduler field set to disabled See Chapters 11 and 18 in the Antigen for Exchange User Guide for more information about scheduled updates The Rollback Button The Rollback button can be used to rollback your engine signatures to the previous signature file in the event of a problem with a newly distributed signature package 17 Chapter 5 The Deployment Job The Deployment Job pro
22. istrators and others who should receive the Signature Update notifications SNMP Notification f you would like to receive SNMP Notifications enter the name of the server that should receive the notifications 5 Click on the Save button to finish Event Logs The Event Logs work panel is used to review the various logs maintained by the SEM These logs include Alerts Log Log of all Alerts sent by the SEM Deployment Log Log of all Deployment Job activity Redistribution Log Log of all Signature Redistribution activity To open a Log work panel click on appropriate log name in the Event Logs area of the navigation bar The Log work panel will open and display current log information 30 Chapter 8 Getting Help Sybari support technicians are available to answer questions and help solve problems you may be having with your software Please contact the support office nearest to your location Sybari Web Site Visit the support area at http www sybari com for FAQs support submission forms amp downloads E mail North America support sybari com Europe support eu sybari com Asia support APAC sybari com Australia and New Zealand support anz sybari com Phone East Northport NY Support Office 631 630 8500 option 2 8 am 8 pm EST San Jose CA Support Office 408 938 9050 option 3 8 am 6 pm PST Madrid Spain Support Office 34 91 296 2600 9 am 7 pm ECT Singapore Support Office 65 65
23. lert you if no viruses are detected during a specified period or if the number of viruses detected surpasses a certain threshold during a specified period b Outbreak Settings This setting is used to notify the administrator when a virus outbreak has ended Enter the length of time that the virus detection rate must be below the alert threshold after an alert has been triggered in order to consider the outbreak over c E mail Notification Enter the e mail addresses of administrators and others who should receive the Virus Alert notifications d SNMP Notification If you would like to receive SNMP Traps enter the name of the server that should receive the notifications 3 Click on the Save button to finish The Signature Update Alert The Signature Update Alert is designed to alert administrators upon the success or failure of an engine signature update To configure this alert follow the steps below 29 Click on Alerts in the Alert Management area of the navigation bar Select the server or server group for which you would like to configure the Alert Click on the Signature Update button on the Alerts work panel The Update Alerts work panel will open 4 Complete the following information Enable Alerts Check the appropriate checkboxes to configure the SEM to send alerts upon the success of a signature update or the failure of a signature update E mail Notification Enter the e mail addresses of admin
24. llations will attempt to connect to the old database but the administrator will be prompted before SEM connects to an old database because if the old database is corrupted or was created with a different version of SEM it may not function properly Chapter 3 Client Overview The Sybari Enterprise Manager User Interface provides administrators with an easy way to deploy Antigen disseminate engine updates and create reports about virus and spam activity on their network s The SEM console is used for all configuration and deployment tasks but the client console does not need to remain open when jobs are running The SEM runs constantly regardless of the status of the Console window Once a job has been initiated or scheduled the SEM console may be closed without affecting the operation of SEM components The UI is divided into two main areas as shown in the image below SYBARI gt Enterprise Manager _ Ata Glance At a glance Welcome to the Sybari Enterprise Manager Below is a summarized view of what has happened in your enterprise in the last 24 hours SEM Administration Users Traffic Summary Servers i Messages Processed 0 Files Processed 0 Server Groups Global Configuration Virus Statistics Spam Statistics Filter Statistics Job Management Skipped Packages Cleaned Jobs Deleted Identified Worms Purged Total Reports Total Detections SMTP Traffic Engine Yersion
25. low will queue Action Alerts i Recycling services offers maximum protection during Deployment during the upgrade process However in upgrades a some cases when this is not possible Redistribution please selectthe desired action The SEM recognizes the install image and will ask for information relevant to that package You will need to complete the following information to complete the Deployment Package Target Folders Install Folder Enter the path to the Install Folder to be used on the Target Server s or use the default folder provided Start Menu Folder Enter the path to the Start Menu Folder to be used on the Target Server s or use the default folder provided Install MDAC and Jet Click on the selection box if you would like the Antigen install wizard to install MDAC and Jet on the Target Server s Additional Utilities Select if you would like to install the Antigen Central Manager ACM and or the Antigen Quarantine Manager AQM as part of your install upgrade Hot Upgrade Action Sybari s Hot Upgrade technology allows the SEM and Antigen to perform most product upgrades without the need to stop or recycle the Exchange services During the upgrade mail is queued to prevent mail from being delivered unscanned When this is not possible you will need to select the action the SEM should take The options are Recycle Services Disable Scanning or 19 Exchange 2000 200
26. ment does not give you any license to these patents trademarks copyrights or other intellectual property 2005 Sybari Software Inc a wholly owned subsidiary of Microsoft Corporation All rights reserved ANTIGEN EVER VIGILANT PROTECTION LIVENOTES SYBARI ADVANCED SPAM DEFENSE ADVANCED SPAM MANAGER SECURITY ENTERPRISE MANAGER WORMPURGE ANTIGEN FILE FILTERING and ANTIGEN WORM PURGE are either registered trademarks or trademarks of Sybari Software Inc a wholly owned subsidiary of Microsoft Corporation in the United States and or other countries All other trademarks are property of their respective owners FEEDBACK Sybari appreciates your comments and reserves the right to use any information you supply in any way it believes appropriate without incurring any obligations whatsoever Please address your feedback to Sybari Software Inc 353 Larkfield Road East Northport NY 11731 or send email to info sybari com Issued April 2004 Sybari Enterprise Manager v 1 0 Table of Contents Chapter 1 Introduction ssesssecsseccsosecosscsoessocossocccossccoesosoesooossosccossessessoeossscccossessssssessssosssssesse The Sybari Enterprise a EEAS EEEE kk ska 4 System Requirements a Eara alpha elaks tlk E rE aE EEE EREE EESE 4 Chapter 2 Instala tioN e soa eaa OD Mpa SCAND Ge E EE ASE O EEA E E beset E E
27. n bar The Manage Jobs work panel will open Highlight Deployment Jobs and click on the Create button The Add Deployment Job work panel will open as shown below File Edit Favorites Tools Help EI Back gt 3 A Asearch jFavorites 4 5 amp Address a http localhost semconsole DepJobModify aspx Links gt Enterprise Manager Add Deployment Job At a glance Use this page to add deployment jobs to the Sybari Enterprise Manager SEM Administration Users Job Name install Job 1 Servers Server Groups Global Configuration Select Package Package Name Deployment Package 1 Job Management Packages Selectthe package you want Jobs to deploy or upload a new NS package for installation Reports Detections 9 Schedule Install Schedule Options 7 Dont Schedule Deployment Engine Versions Start Date E Alert Management Select the time you want the 5 14 2004 Alerts agent to begin installing the package on the target Event Logs machine Start Time 24 00 E am E Alerts Deployment Redistribution eMail Notification eMail Recipients Add Help Follow the steps below to configure the Deployment Job 1 Name the Deployment Job Select the Package Either select a Package that you have already configured from the drop down list or upload and configure a new Package 3
28. o the SEM database Please Note This may take several minutes since the file has to be uploaded to the SEM database through your local web browser The upload time will be increased if you are working from a remote machine Depending on network speed and server usage the time may vary Once the Install Package has been uploaded the Configure Package work panel will open as shown below 18 3 Sybari Enterprise Manager Microsoft Internet Explorer File Edit view Favorites Tools Help 101 gt A A Asearch GijFavorites media C4 Ye 2 Address http hala lS to li Sc ala aspx 50 Links gt gt Enterprise Manager E Configure Package At a glance Use this page to configure settings for the selected package s install SEM Administration Users Servers Server Groups Target Folders Install Folder C Program Files Sybari Software Antigen for Exchange Global Configuration Enter folders needed Start Menu Folder Antigen for Exchange i forinstallation Job Management Install MDAC and Jet Note May cause system reboot Packages Jobs Additional Utilities Reports Antigen Central Manager Detections SMTP Traffic Select additional Antigen components to Antigen Quarantine Manager Engine Versions install Alert Management Alerts Hot Upgrade Rec cle services 7 In most cases mail f
29. of possible virus outbreaks Spam Alerts Used to notify administrators of possible spam outbreaks attacks Filter Alerts Used to notify administrators of unusually high or low filtering activity File Filter Alerts Used to notify administrators of unusually high or low file filtering activity Signature Update Alerts Used to notify administrators of the success or failure of signature file updates To open the Alerts work panel click on Alerts in the Alert Management area of the navigation bar The Alerts work panel will open as shown below Enterprise Manager Alerts Filter Alerts Alerts Signature Update Manage Alerts At a glance Use this view to configure alerts for individual servers or groups of machines Select a group or machine and then choose the alert type you wish to configure SEM Administration Users M Servers aa Server Groups Global Configuration Alert Configurations iow 4 Default ob Management a DEV MLEXCH2K Jobs DEV ML EXCH2K3 Reports Detections SMTP Traffic Engine Versions Alert Management Alerts Event Logs Alerts Deployment Redistribution Help To configure an alert select the server or server group for which you would like to configure the Alert and click on the alert type button at the top of the panel The Virus Alert will be configured in the steps below as an example All reports are confi
30. on Log provides a log of all Signature Redistribution jobs Chapter 4 Getting Started After installing the Enterprise Manager administrators should configure the following settings in the order they are listed 1 Global Settings 2 User Accounts 3 Servers 4 Engine Signature Updates Once these settings have been configured administrators can deploy Antigen Installs Configuration Templates and License Files Configuring the Global Settings The SEM Global Configuration Settings include SMTP Server settings that are used for administrator notifications and the Statistics Polling settings that determine how often reporting data is collected from the managed servers SMTP Server Settings To configure the SMTP server settings that the SEM will use to send notifications about events alerts etc click on Global Configuration in the SEM area of the navigation bar The Global Configuration work panel will open You will need to enter the following information SMTP Server Enter the name of the SMTP server to use Enter the machine name in the format machinename domain com or the IP address From Address Enter a valid e mail address that will be used in the From field for notifications and alerts Polling Interval Set the polling interval in minutes that the SEM should use when gathering information from the managed servers for the purpose of reporting After you have configured all of the s
31. panel and click on the Rename Group button A new work panel will open to allow you to change the group name Click the Rename button when done to save the new group name Deleting Groups To delete a group highlight the group name in the Product Groups work panel and click on the Delete Group button A new work panel will open to confirm that you would like to delete the group Click the Confirm button to complete the group deletion Please Note When a server group is deleted the servers are not deleted from the SEM Moving Groups The Move Group button is used for re organizing your group structure This is important if you want to create a hierarchical group structure with top level groups and sub groups The Move Group function allows you to move groups into or out of sub groups or move groups that may not have been categorized correctly when created To move a group highlight the group name on the Product Groups page and click the Move Group button The Move Group work panel will open Select the target folder where you would like the group moved and click the Insert button to complete the move Assigning and Removing Machines To assign a machine to a group highlight a group name and click on the Assign Machine button A new work panel will open that will allow you to select machines that should be assigned to the group Click on the Insert button to save your changes To r
32. ptions V Dont Schedule Deployment Engine Versions Start Date Alert Management Select the time you want the Alerts agent to begin installing the package on the target Event Logs machine Start Time Alerts Deployment eMail Notification eMail Recipients Help 22 Follow the steps below to configure the Template Deployment Job 1 2 5 6 7 Name the Deployment Job Select the Package Either select a Package that you have already configured from the drop down list In this case the Template file that you uploaded previously or you can upload it now by clicking on the Add Package button Schedule the deployment if desired If you don t schedule the deployment you will have to manually start the Template Deployment Job after you have completed the configuration Enter the e mail address that should receive the success failure notification s following the deployment of the job Click Next The Assign Job work panel will open Assign the job by selecting the Target Server s or deployment group Click Finish to complete the job configuration After you have completed configuring the Template Deployment Job it will be added to the Manage Jobs work panel under the Deployment Jobs section If you have not scheduled the job you can run the job by highlighting the job and clicking on the Run Now button You may also edit copy or delete the job from the Mana
33. rea of the navigation bar to begin The Manage Packages work panel will open Follow the steps below to create the Template Package 1 Click on the Add Package button The Add Package screen will be displayed 2 Enter a name for the Package 3 Enter the path to the template adb file or use the Browse button to navigate to the file 4 Click on the Add Package button The Template file is uploaded to the SEM database Once the Template Package has been uploaded the new package will be added to the Package Names list in the Manage Packages work panel Configuring the Template Deployment Job After the Template Package has been created click on Jobs in the Job Management area of the navigation bar The Manage Jobs work panel will open Highlight Deployment Jobs and click on the Create button The Add Deployment Job work panel will open as shown below Enterprise Manager Add Deployment Job At a glance Use this page to add deployment jobs to the Enterprise Manager SEM Administration Users Job Name Template Deployrnent 1 Servers Server Groups Global Configuration Select Package Package Name Template Package 1 Job Management Packages Select the package you want Jobs to deploy or upload a new KOGUS package for installation Reports Detections SMTP Traffic Schedule Options Schedule Install
34. s Top 5 Viruses Most Active Servers Based on Detections Alert Management Virus Name Count Server Viruses Spam Filters Alerts Event Logs Alerts Deployment Redistribution AA t The left hand column is the navigation panel for access to the various SEM configuration components and the center area of the UI is the work panel Each navigator option is described briefly below At a Glance SEM Users Servers Server Groups Global Configuration Job Management Packages Jobs Reports Detections SMTP Traffic Engine Versions The At a Glance work panel provides information about the managed servers in your environment The panel provides the following information for the previous 24 hour period Traffic Summary Virus Statistics Spam Statistics Filter Statistics Top 5 Viruses Most Active Servers Based on Detections On OO 0 100 The information in the At a Glance screen is updated when the screen is opened or refreshed so as to always display information for the previous 24 hours The Manage Users work panel is used to create user accounts for people within your organization who will need access to the SEM console The Manage Servers work panel is used to add or remove servers to the SEM database and deploy the SEM Deploy Agent that must be installed on each target server to facilitate communication between the SEM and the servers it manages
35. se e Manager Manage Server Groups At a glance Use this view to group servers together for job deployment and configuration Select a group or machine and then choose the action you wish to perform from the buttons below SEM Administration oleate Add Grp Rename Grp Delete Grp Move Grp Assign Machine Remove Machines Servers Server Groups Global Configuration Product Deployment Groups Job Management 2 23 Default Packages B DEV ML EXCH2K Jobs 9 DEV ML EXCH2K3 Reports Detections SMTP Traffic Engine Versions Alert Management Alerts Event Logs Alerts Deployment Redistribution Ara enamel The work panel provides a way for Administrators to Add Rename Delete or Move Groups and Assign or Remove machines from groups The various processes are described below 13 Adding Groups To add a Server Group click on the Add Group button The Add Group work panel will be displayed 1 Name the new group and click on the Insert button 2 The new group will be added to the SEM and will be displayed on the Product Groups page Once a new Server Group has been added existing servers may be moved into the group using the Assign Machine button or new servers may be assigned to the group when they are added to the SEM Renaming Groups To rename a group highlight the group in the Product Groups work
36. ups Start Date and Time Start Date 5 18 2004 Global Configuration The Time be rounded to a the nearest interval Start Time 12 00 am Reports Detections Time Interval SMTP Traffic Engine Versions Please select the interval to CiHou 1Day 1Week A the report for Alert Management run ae C1Month 1 Year Event Logs Alerts Deployment Select Servers Selectall Selectnone Redistribution DEV ML EXCH2K Select servers to include in Help renorts re PVA MALL AOI 4 gt 3 Complete the following information Start Date and Time Enter the start date and time This date and time indicates the Starting point of the data collection Time Interval Enter the time period that the report should cover The options are 1 Hour 1 Day 1 Week 1 Month and 1 Year For example If you want to collect information for the past week you would a start date of one week previous and select 1 Week as the interval Select Servers Select the servers that should be included in the report After you have completed all fields click on the OK button to generate the report The report will be displayed in a separate window A sample report is shown below 25 4 Sybari Enterprise Manager Reports Microsoft Internet Explorer Edit View Favorites Tools Help SYBARI Enterprise Manage Virus Detection Report for the period from 4 18 2004 12 00 00 AM to 4
37. ut the amount of activity on selected SMTP servers running Antigen The report options include SMTP Messages Processed SMTP Messages Processed Summary SMTP Bytes Processed SMTP Bytes Processed Summary 0000 Engine Versions Engine Version Reports are used to collect and present data about the anti virus and anti spam engine versions on selected or multiple Exchange servers running Antigen The report options include o Engine Versions Report 24 Configuring and Running Reports To run any of the reports open the desired category by clicking on the category name in the Reports area of the navigation bar then click on the Report that you would like the SEM to generate Follow the steps below to configure and run the selected report The Virus Detection report will be configured in the steps below as an example All reports are configured and run following the same basic steps with the exception of Engine Version reports that are described later 1 Click on Detection Reports in the Reports area of the Navigation bar The Detection Reports work panel will open 2 Click on Virus Detection Reports in the reports list The Report Parameters work panel will open as shown in the image below A Enterprise Manager Report Parameters At a glance Use this page to specify report parameters SEM Administration Reports gt Traffic Reports gt Virus Report Users Servers Server Gro
38. vides a way for Administrators to o Remotely deploy full Antigen Installs or Hotfixes to managed servers o Deploy Antigen configuration templates to managed servers o Deploy Antigen license files to managed servers Creating these Deployment Jobs involves two major steps 1 Creating the Deployment Package and 2 Creating and running the Deployment Job Each Deployment Job is described below Installing Antigen on Remote Servers To deploy Antigen to remote servers you will need to configure the Install Package and create and run a Deployment Job for the target server s Each step is described below Creating the Deployment Package The Deployment Package consists of the Antigen Install Image files and the install parameters as configured by the SEM Click on the Packages button in the Job Management area of the navigation bar to begin The Manage Packages work panel will open Follow the steps below to create the Deployment Package 1 Click on the Add Package button The Add Package screen will be displayed Enter a name for the Package We usually suggest that you use a name that contains the build number as well such as Antigen for Exchange 8 0 1414 1 3 Enter the path where the exe or zip image downloaded from Sybari s web site can be found You can also browse to the folder on your local machine using the Browse button 4 Click on the Add Package button The Install files are uploaded t
39. y day click on the Daily radio button and enter 1 in the field to the right Set the daily frequency Polling for updates can occur as often as you like Set the Duration of updates Enter the start date and end date if desired or set No End Date to have the SEM check for updates as long as it is installed Click OK to save your settings gt Enter the Number of Retries if desired This setting enables the SEM to poll the Sybari site again if it encounters a problem during a download You will also need to set the Retry Delay which is the number of minutes the SEM will wait before attempting a download again Enter the Download Location information The Sybari FTP site is entered by default You may change this to the Sybari HTTP site or another site if desired Proxy Server Settings If your server accesses the internet through a Proxy Server enter the proxy server settings including a User Name and Password if necessary Enter an e mail address where update notifications can be sent by the SEM These will notify the administrator of the success or failure of an update job Click Next to continue Select the engine signature updates you wish to download You may update all of your licensed engines using one job or create individual jobs for each engine Click Finish The new job will be displayed in the main Manage Jobs panel under Signature Redistribution Jobs 16 11 Since this
Download Pdf Manuals
Related Search