Home

Safend Protector User Guide

1. aj Management and Monitoring Tools O ma Message Queuing h l SK Fenner Description Includes Web and FTP support along with support for FrontPage transactions Active Server Pages and database connections Total disk space required 69 4 ME Details Space available on disk 60457 1 MB lt Back Next gt Cancel 3 Click Next The Insert Disk window opens asking for the utility disc or location that holds the relevant Microsoft Windows installation components Insert Disk Please insert the Compact Disc labeled Windows XP Professional Service Pack 2 CD into pour CD ROM drive D and then click OF Tou can aleo click OF if you want files to be copied from an alternate location such as a floppy disk or a network server 4 Insert the disc and click OK The installation may take a few moments When the wizard notifies you that the installation is complete as shown in the following figure click Finish to close the wizard Microsoft IIS is now installed 14 Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide hetta rn DATA PROTECTION SUITE Windows Components Wizard 25 Completing the Windows Components Wizard Tou have successtully completed the Windows Components Wizard To close this wizard click Finish lt Back Before Installing Safend Data Protection Suite Management Server Before installi
2. 3 safend Installation Guide hent bra sne DATA PROTECTION SUITE Safend Protector Database Already Exists xj According to your backup files a Safend Protector external database is or was previously used Tf you want to go on working with this database go back and select Connect to an existing database option in the Restore windows of this wizard If you continue and select to connect to your existing database the information in it will be overwritten with the data in backup Files re you sure you want to continue In this window click Yes in order to overwrite the existing database If you wish to use the existing database click No and skip to Restoring an Existing Management Server on page 28 15 The Destination Folder step opens Safend Data Protection Suite Management Server i i Destination Folder Please select the destination folder 7 Install Safend Data Protection Suite Management Server ir C Program Files S atendi S atend Data Protection Suite Charge 16 Click Next to select the default installation folder C Program Files Safend Safend Data Protection Suite or click Change to select a different installation folder then click Next The Domain Credentials window opens 21 lt Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide avin atime AE DATA PROTECTION SUITE Safend Data Protection Suite Management Ser
3. O amp Wave systems company DATA PROTECTION SUITE ig Safend Data Protection Suite Management Console Contirm Installation 48 safend The installer is ready to install Safend Data Protection Suite Management Console on your computer Click Nest to start the installation 9 Inthe Confirm Installation window click Next to perform the installation 10 Once the installation completes the following window opens ig Safend Data Protection Suite Management Console Installation Complete qsafend Safend Data Protection Suite Management Console has been successfully installed Click Close to exit Please use Windows Update to check for any critical updates to the NET Framework Close 11 Click Close to exit 12 Open the Management Console application by clicking the 3 icon on your desktop or from Start gt Programs gt Safend Data Protection Suite gt Management Console 13 Depending on the browser you are using the following message may appear 45 Copyright 2011 safend a wave systems company www safend com www wave com a wave systems company DATA PROTECTION SUITE s Cannot Find Server Safend Data Protection Suite Management Console could not connect to server Either your server is temporarily unavailble or change has occured in server name port Please specify server properties server Name localhost Fill in the Server Name and Port as it appears in the i
4. e The OS cannot boot anymore due to a problem with the agent s installation Solution run spec exe on PE and then use Support Assisted Uninstall Refer to Safend Data Protection Suite Client Cleanup Utility for more information Support Assisted Uninstall When the uninstall process is initiated from Control Panel Add or Remove Programs the uninstall process is the same as using the uninstall password In order to use Support Assisted Uninstall you must initiate the uninstall process from a command line with the parameter SAU 1 The command should be Msiexec i path to product msi ProductCode SAU 1 After running this command the following window is displayed ie Support Assisted Uninstall Support Assisted Uninstall Z safend Your uninstall token is 3746 5626 Uninstall key received From Safend Ltd Support Cancel Click Next to validate the uninstall key If the key is correct the uninstall process continues as if the correct password was entered and removes the corrupted installation NOTE For an encrypted machine when using the interactive uninstall from the GUI the flow is exactly the same as when performing an uninstall using an uninstall password The machine will be decrypted prior to uninstalling the agent If you are not checked into the machine you can use the command line to run a support assisted uninstall process without decrypting the HD prior to removing the agent from the mach
5. 3 Enter your User Name and Email Address In order to obtain a license key contact Safend or your local reseller and provide the Server machine fingerprint as it appears in the screen For example the fingerprint in the window above is IXP8UV JJKDD8 Using this fingerprint a license key will be generated for you and can only be used on this specific machine You also have the option to export license information or to import a license file Click Update You will now be asked to enter information in order to perform automatic system backup 34 Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide herself Annen DATA PROTECTION SUITE Safend Data Protection Suite Management Server o l Scheduled System Backup Please configure the schedule for automatic system backup To prevent a single point of failure only network paths are allowed Perform backups Daily vi at 01 00 Next backup 9 29 2010 1 00 00 AM Network backup path password is required to protect the system configuration backup file Password The password must be at least 7 characters long and must contain the following At least one digit At least one upper case character a Cancel Enter the day and time Click Browse to select a network backup path Enter a password and confirm it Click Next after entering the information 10 The Installation Progress window
6. 1 09MB 24 41MB 10 30MB 12 70MB 3 93MB 5 45MB 6 44MB 2 04ME 8safend Installation Guide vase alana Gene DATA PROTECTION SUITE ig Data Protection pent Setup See Welcome to the Data Protection Agent Setup Wizard The Setup Wizard allows you to change the way Data Protection Agent features are installed on your computer or to remove it From your computer Click Next to continue or Cancel to exit the Setup Wizard dr safend 3 Click Next to continue uninstalling The Change repair or remove installation window opens i Data Protection Agent Setup Change repair or remove installation safend Data Protection Agent has no independently selectable Features Repair Data Protection Agent cannot be repaired REMOVE Removes Data Protection Agent From your computer Cancel 4 Click Remove to remove the Data Protection Agent from your computer 63 lt Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide viene alana Gene DATA PROTECTION SUITE Te Uninstall Password Uninstall Password Z safend In order to remove Data Protection Agent From your computer please provide the uninstall password Uninstall Password Cancel 5 Enter the uninstall password that you defined in the Policies World in the Safend Data Protection Suite Management Console and click Next The following window opens JD
7. 3 safend Installation Guide Aase sk colieary DATA PROTECTION SUITE Automatic Client Installation Generic In order to install using a third party corporate software management solution follow the procedure below gt To perform generic automatic client installation 1 Locate the shared folder in which you have selected the Client installation files to be created This folder should contain both the DataProtectionAgent msi and ClientConfig scc files The DataProtectionAgent_x64 msi file is also present for machines running 64 bits Date modified DataProtection amp gent x64 msi 752010 8 22 AM Windows Installer Package 26 910 KB Installer M Ing DataProtection gent msi 752010 7 35 AM Windows Installer Package 28 176 KB Installer M ClientContig sec 7118 2010 11 17 SOC File 396 KB 2 Create a batch file containing the following command that installs the Safend Data Protection Suite Client silently msiexec i DriveName InstallationPath DataProtectionAgent msi qn 3 A restart will be required on the endpoint computer A message requiring reboot will be displayed to the end user To prevent the reboot request from being displayed add the parameter norestart REBOOT ReallySuppress at the end of the command above Manual Client Installation You can manually install the Safend Data Protection Suite Client on each computer in your organization that needs to be protected gt To manually install the Saf
8. 3 safend Installation Guide permer lt Boone DATA PROTECTION SUITE Uninstalling Safend Data Protection Suite Management Server Here is the procedure for uninstalling the Management Server gt To uninstall the Management Server 1 Open Add or Remove Programs from Control Panel 2 Select the Safend Data Protection Suite Management Server from the list and click Remove as shown here B Add or Remove Programs JO amp Currently installed programs IT Show updates Sort by Name v Change or Remove 630 LiveUpdate 3 3 Symantec Corporation Size 15 98MB P wie aade 5 Microsoft NET Framework 2 0 Size 88 28MB 5 MySQL Query Browser 1 1 Size 10 04MB Add New amp Safend Data Protection Suite Management Console Size 27 26MB Programs OG Safend Data Protection Suite Management Server Size 168 00MB ae m Click here for support information Add Remove To remove this program From your computer click Remove Windows muis Symantec Endpoint Protection Size 451 00MB VMware Tools Size 9 56MB 3 Windows Server 2003 Service Pack 2 NOTE Uninstalling Safend Data Protection Suite Management Server will delete the Safend Data Protection Suite database therefore if you wish to install the latest Server version it is recommended to upgrade your Server rather than to perform an uninstall install process Changing your Database If you wish to change from using a Safend Data Protecti
9. Preparing an Endpoint for Automatic Installation In order to install the Safend Data Protection Suite Client the target computers are required to have access to the shared network folder when the system is rebooted If the target computers are running Windows XP you must turn on the Always wait for the network at computer startup and logon GPO which can be found under Computer Configuration Administrative Templates System Logon 15 x File Action View Help e m RE Ey Logon Optimization safedc Safend E Computer Configuration H Software Settings Always wait for the network at Settin State p dos eng computer startup and logon i Don t display the Getting Started welcome screen at logon Not configured J Administrative Templates i oe Always use classic logon Not configured ji a s Components Display Properties Se Run these programs at user logon Not configured Gia User Profiles Requirements fi Do not process the run once list Not configured 5 Scripts oe a Oe Do not process the legacy run list Not configured 53 Logon Family Always wait for the network at computer startup and logon Enabled C Disk Quotas H Net Logon Description fa G Poli Determines whether Windows xP ee ee waits for the network during J Remote Assistance computer startup and user logon By C System Restore default Windows XP does not wait Error Reporting for the network
10. Programs gt Safend Data Protection Suite gt Management Console The application opens for the first time SAFEND Server localhost User administrator Domain SAFEND QA 2 Enter your User name Password and Domain The following window opens 47 lt Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide Aae atime AEs DATA PROTECTION SUITE Cy Management Console Updater Deploying updates Each time the Management Console connects to the Server it automatically downloads the latest version of the Management Console if an update exists Once the updated files are downloaded the window closes and the following window opens 06 License Alert Expiry Warning X Your Protector Port and Device Control license will expire In 30 days Your Reporter license will expire in 30 days Your Removable Media Encryption license will expire In 30 days Your Encryptor Hard Disk Encryption license will expire in 30 days Your Inspector Endpoint Channels license will expire in 30 days Your Inspector Network Channels license will expire in 30 days Your Discoverer Endpoint Data Discovery license will expire in 30 days Please contact your local reseller or sales safend com to purchase a license for this product Website wsyw safend com Support supportesafend com View License SE Enter License Key Remind Me Later 3 If you are eva
11. cluster 8 Select one of the following options e For anew installation select the New radio button and proceed to step 9 below 17 lt Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide bariin Era E DATA PROTECTION SUITE e For instructions regarding the Restore option refer to Restoring an Existing Management Server on page 28 e To join a server cluster select the Join a Cluster radio button A server cluster enables the installation of several Safend Data Protection Suite Management Servers connected to a single external database so that they seamlessly share the load of traffic from the endpoints as well as provide redundancy and high availability The following window opens Safend Data Protection Suite Management Server Database credentals Please supply the database connection details for Safend Data Protection Suite Server to create the database tables and access it Database Server For non detault instance use the format serversnstance Database authentication mode 8 MS SOL Security Microsoft Windows Security Database validation will be performed on clicking Nest Cancel Select the external database to which to connect Proceed to step 12 below 9 Click Next The Database window opens 18 lt Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Instal
12. Data Protection Suite Management Console for the First Time page 47 describes how to launch Safend Data Protection Suite Management Console v Uninstalling Safend Data Protection Suite Management Console Page 48 describes how to uninstall Safend Data Protection Suite Management Console 40 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide vas sk colieary DATA PROTECTION SUITE Prerequisites NOTE Refer to the What s New document for the most up to date system requirements Installing Prerequisite Software Installing Microsoft NET Framework 2 0 gt To install NET Framework Refer to Installing Prerequisite Software on page 13 Installing Safend Data Protection Suite Management Console Safend Data Protection Suite Management Console can be installed and run from any computer on your network The first console is installed on the same machine that hosts the Management Server as part of the Server installation and additional consoles can be installed on any machine in your domain that meets the prerequisites Additional consoles can be installed on your domain either through Safend s Management Console Installation web page recommended or by running the ManagementConsole msi file from an external source such as a CD NOTE Access to the Management Consoles is restricted by default to the local administrators group of the machine hosting the
13. GPO name it then right click that GPO Users Properties General Managed By COM Group Policy Management Console GPMC EE Current Group Policy Object Links for Users Group Policy Object Links Mo Der Group Policy Objects higher in the list have the highest priority This list obtained from safenet 5 atend com Edit Up Properties Down Block Policy inheritance Apply and select Edit Go to Step 9 below 6 Ifthe Group Policy Management console is installed click Open in the Group Policy tab to display the Group Policy Management window as shown below J Group Policy Management Tol Se File Action View Window Help e MAP 8 OA a separator GregoryOU g3 Domain Controllers TETEN GEE eer I Linked Group Policy Objects Group Policy Inheritance Delegation ll Safend Link Order 4 GPO Enforced Link Enabled GPO State Pose 2 gt 1 Py Gregory No Yes Enabled EA AvnerOu 3 GregoryOU EA OmriTestOU GA ShaharOU E YonaOU EA YudasinOU AuditorTests l Computers l DeploymentServerTe l Groups Z PavelTest 4 ProTest 5 ProtestLab l SafendIT l SafendProtector J Sales l ServerTest E E rn a E a a S W W W D S A er T 3 D eden 8 Testou a 8 UserPolicy hal Ull gt Ji Copyright 2011 53 safend a w
14. Wizard Click the Finish button to exit the Setup Wizard r safend 8 Click Finish Safend Data Protection Suite Client is uninstalled and is no longer protecting the computer NOTE After uninstalling you must reboot the computer before you can reinstall Safend Data Protection Suite 65 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE Uninstalling Safend Data Protection Suite via GPO Since the Safend Data Protection Suite uninstall procedure is password protected it is not possible to use the automatic uninstall feature in the GPO software installation package Therefore to uninstall the Safend Data Protection Suite a startup script must be used There are two ways to uninstall Safend Data Protection Suite Client The first and recommended option is to unlink the Safend Data Protection Suite Install GPO from the OU containing the client computers and to apply a new GPO containing an uninstall script as shown in steps 6 11 below The second option is to edit the Safend Data Protection Suite Deployment GPO gt To uninstall a Safend Data Protection Suite GPO 1 Edit the relevant Group Policy applied to the client computers from which the Safend Data Protection Suite is to be uninstalled Navigate to Computer Configuration gt Software Settings gt Software Installation Right click the Safend Data Protection Su
15. administrative rights on the computer hosting the Server as shown below 22 Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide permer Aron DATA PROTECTION SUITE Safend Data Protection Suite Management Server p l Access Pmaleges Access to Safend Data Protection Suite Management Server is controlled using existing groups In Active Directory By default access i given to users who have Local Administrator privileges on the computer hosting the server Group BUILTIN Administrators IF You wish to access the Management Server from remote console change to user group already defined in your Active Directory Tou may change this configuration following installation in the Management Console gt Administration 19 Click Next The Communication Port window opens Safend Data Protection Suite Management Server communicates with the Safend Data Protection Suite Management Consoles and Clients through SSL ports Safend Data Protection Suite uses two different ports to communicate with Safend Data Protection Suite Clients and with the Management Server Safend Data Protection Suite Management Server Communication Port Safend Data Protection Suite uses SSL port for communication between the server clents and consoles Protector Clients Communication port 55L Management Console Communication port SSL 4443 Make sure this port is al
16. atime AE DATA PROTECTION SUITE 8 You must now restart your computer in order for the Safend Data Protection Suite Client to begin protecting the endpoint When the following window is displayed click Yes i Data Protection Agent Setup You must restart your system For the configuration changes made to Data Protection Agent to take effect Click Yes bo restart now or Mo iF you plan to manually restart later Upgrading Safend Data Protection Suite Client Here is a description of how to upgrade Safend Data Protection Suite clients NOTE Please read Considerations Before Performing Client Upgrade before upgrading Clients Considerations Before Performing Client Upgrade v In case your main objective in performing an upgrade is installing new agents on 64 bit workstations it is recommended to upgrade the Safend Management Server and install new agents on 64 bit platforms while keeping the current Safend Agents installed on 32 bit workstations The new version does not include major changes in the Safend Protector and Safend Encryptor components of the Safend Data Protection Suite making the agent upgrade in this case redundant v In this version upgrade and backward computability are supported from Safend Data Protection Suite 3 3 SP7 and up If you are currently using an older version of Safend Data Protection Suite or have legacy agents in your environment which were not upgraded yet it is recommended that you don t
17. click Install to install the Server Installation begins and the Installation Progress window opens Safend Data Protection Suite Management Server Installation Frogress Please wait while installation wizard installs Safend Data Protection Suite Management Server This may take several minutes Progress UU Cancel Mest gt 25 Once installation has been completed the following window opens 26 lt Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide ari tngo afa rn DATA PROTECTION SUITE Safend Data Protection Suite Management Server SAFEND Installation Completed Launch Management Console 26 The Safend Data Protection Suite Management Server has been installed Check Launch Management Console at the bottom of the screen if you wish to launch the Safend Data Protection Suite Management Console and click Finish The installation process installs the Safend Data Protection Suite Management Console as well 27 If you ve chosen to launch the Safend Data Protection Suite Management Console the Login window opens Server localhost Password Domain SAFEND QA Enter your User Name Password and Domain and click Login The application opens displaying the main window 28 Take the time to define preliminary settings in the Administration and Global Policy Settings windows Please refer to the Post Installation Sett
18. details 2 Ifthe machine on which you wish to install an additional Console does not have NET framework installed enter the link and install it before proceeding with the Management Console installation 3 Click the link to the Management Console installation package The following window opens 42 lt Copyright 2011 safend a wave systems company www safend com www wave com niotioncis 0 O a wave systems company DATA PROTECTION SUITE F File Download Security Warning Do you want to run or save this file Mame ManagementConsole msi Type Windows Installer Package 1 89 MB From betaserver Fun Dave Cancel While files from the Internet can be useful this file type can potentially harm your computer IF you do not trust the source do not ran or save this software Whats the risk 4 Click Run The Management Console installation wizard opens ig Safend Data Protection Suite Management Console See Welcome to the Safend Data Protection Suite Management Console Setup Wizard gsafend The installer will guide you through the steps required to install Safend Data Protection Suite Management Console on your computer WARNING This computer program Is protected by copyright lav and international treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe Civil ar criminal penalties and will be prosecuted to the maximum extent possible under the
19. document for the most up to date system requirements Preparing the Installation Package Prior to installation you must place the ClientConfig scc in the appropriate subfolder of the installation package This file is generated in Administration gt Clients For more information refer to Before Deploying Safend Data Protection Suite Client gt To prepare the Mac Client installation package The full path is DLPSuite mpkg Contents Resources SDPAgent pkg Contents Resources 1 Open the context menu for DLPSuite mpkg Choose Show Package Contents Double click Contents and then Resources Open the context menu for SDPAgent pkg Choose Show Package Contents Double click Contents and then Resources 7 e O N Copy the ClientConfig scc file to here Installing a Safend Data Protection Suite Mac Client Here is how you manually install the Safend Data Protection Suite Mac Client on each computer in your organization that needs to be protected gt To manually install the Safend Data Protection Suite Mac Client 1 Run DLPSuite mpkg 71 lt Copyright 2011 safend a wave systems company www safend com www wave com Installation Guide DATA PROTECTION SUITE Y DEVICES G Untitled 1 El iDisk Y SHARED ll danielf safend com El vadimgmac GA Y PLACES Desktop ON administrator A Applications Bi Documents V SEARCH FOR 5 Today Yesterday Past Week 5 All Images 2 Click Continue Int
20. extracted to a local folder The installation will not run from a network path 4 Click Install 5 Following extraction you will be asked to select the Safend Data Protection Suite Server language 6 Select the required language and click OK The first step of the Safend Management Server Upgrade wizard is displayed Safend Data Protection Suite Management Server SAFEND Management Server Upgrade This wizard will upgrade Safend Data Protection Suite Management Server on your computer Note it is highly recommended to manually backup your logs before upgrading as these will be lost if the upgrade fails Other data is automatically backed up and will not be lost Warning This program is protected by copyright law and international treaties Click Next to continue with the upgrade or Cancel to exit Cancel 7 Click Next 8 Inthe following window provide your license update information 33 Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide avin sen Gene DATA PROTECTION SUITE 9 Update License JA xi To update your Safend Data Protection Suite license please provide the following details Safend Data Protection Suite version 3 4 2108 60694 Server machine fingerprint IXxP8UYJJKDDS License Details User Name Email Address License p Export License Information Import License File Confirm
21. few minutes Once cleanup is complete the following window appears Safend Protector Cleanup Utility Cai 1 Cleanup completed successfully Please restart 6 Restart the endpoint by booting up the OS 7 Run the Support Assisted Uninstall process to completely remove the agent from the machine NOTE If the internal hard disk was encrypted after using the Client Cleanup Utility use the Safend Recovery utility to decrypt the encrypted data For more information on how to use the Recovery tool see the Safend Data Protection Suite User Guide Appendix A Safend Recovery Tool for Encrypted Hard Disk Emergency Agent Uninstall A procedure is available to remove the Safend Data Protection Suite Agent when a regular uninstall procedure using an uninstall password is not possible This may be necessary in the following instances e The agent is properly installed on the machine but the administrator has forgotten the uninstall password and the server and all backup files were lost so a new password cannot be set Solution use Support Assisted Uninstall e The administrator has the correct uninstall password but the agent cannot access the policy in order to verify it so a regular uninstall cannot be performed Solution use Support Assisted Uninstall 67 lt Copyright 2011 safend a wave systems company www safend com www wave com amp safend a wave systems company Installation Guide DATA PROTECTION SUITE
22. for Installation About This Chapter This chapter first describes the Safend Data Protection Suite architecture and the Safend Data Protection Suite installation workflow It then specifies the system requirements and prerequisites for installing the different components of the Safend Data Protection Suite followed by instructions on how to prepare the network for installation It contains the following sections v System Requirements page 10 describes the system requirements for each one of the Safend Data Protection Suite components v Preparing your Network page 10 describes the preparations that need to be made on your network in order to allow the different Safend Data Protection Suite components to communicate without interruptions v Tips on Preparing Your Endpoints page 11 describes the preparation that needs to be made on your endpoints before installing Safend Data Protection Suite in order to optimize the security of your network O Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide avian atime Sun DATA PROTECTION SUITE System Requirements NOTE Refer to the What s New document for the most up to date system requirements Preparing your Network Before installing the system be sure to enable the following communications in your network and personal firewalls gt To prepare your network 1 In order to communicate freely between
23. installation Click Back to review or change any of your installation settings Click Cancel to exit the wizard In this window click Back to review or modify your installation settings or click Cancel to cancel and exit the installation process 6 Click Install to begin the installation The following window opens 59 Copyright 2011 safend a wave systems company www safend com www wave com 8safend Installation Guide hetta Sun DATA PROTECTION SUITE ig Data Protection Agent Setup Ses Installing Data Protection Agent safend Please wait while the Setup Wizard installs Data Protection Agent Status CO E Cancel This window contains a Status bar that displays the progress of the installation process Installation may take several minutes NOTE During this installation some of the devices attached to your computer may temporarily stop functioning The devices will resume functioning once the installation has completed When the installation is complete the following window opens i Data Protection Agent Setup Completed the Data Protection Agent Setup Wizard Click the Finish button to exit the Setup Wizard r safend Finish 7 Click Finish to exit the installation wizard Safend Data Protection Suite Client is now installed on the endpoint 60 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide avin
24. law 5 Click Next The Select Installation Folder window opens 43 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide hester ro DATA PROTECTION SUITE ig Safend Data Protection Suite Management Console Select Installation Folder 8 safend The installer will install Safend Data Protection Suite Management Console to the following folder To install in this folder click Next To install to a different folder enter it below or click Browse Folder C Program Files S afend S afend Data Protection Suite Install Satend Data Protection Suite Management Console for yourself or for anyone who uses this computer 8 Everyone Just me 6 Inthe Select Installation Folder window select the folder in which the Safend Data Protection Suite Management console will be installed The default folder is C Program Files Safend Safend Data Protection Suite If you wish to install the Management Console in a different folder click the Browse button and select the desired folder 7 Select one of the following options by clicking its radio button Everyone allows access to the application to all users who use the computer Just me allows access to the application to the logged on user only 8 Click Next The following window opens 44 Copyright 2011 safend a wave systems company www safend com www wave com bstolsionsie 0
25. the Safend Data Protection Suite Management Server and the Safend Data Protection Suite Clients make sure that the SSL port is open in your network firewall Safend typically uses port 443 SSL standard for this If you have chosen otherwise make sure to allow this port in your firewall 2 In order for the Safend Data Protection Suite Management Console to be able to control clients send control commands to clients to send their logs and update their policy it needs WMI ports to be open on the personal firewalls of each endpoint WMI uses port 135 and a series of random ports Opening WMI ports on Windows XP SP2 Firewall If you are using Windows XP SP2 firewall as the personal firewall on your endpoints you can use the GPO mechanism to configure endpoints to accept incoming WMI communications The following section is a quote from the Microsoft documentation Without configured exceptions Windows Firewall will drop traffic for server peer or listener applications and services Therefore it is likely you will want to configure Windows Firewall for exceptions to ensure that the Windows Firewall works appropriately for your environment Windows Firewall settings are available for Computer Configuration only They are located in Computer Configuration Administrative Templates Network Network Connections Windows Firewall Identical sets of policy settings are available for two profiles v Domain profile Used when computers
26. will now be displayed Safend Data Protection Suite Management Server l Installation Progress Please wait while upgrading Safend Data Protection Suite Management Server This may take several minutes Progress FER lt Back 11 The following screen will be displayed when the process is completed Click Finish 35 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide buntet rn DATA PROTECTION SUITE Safend Data Protection Suite Management Server SAFEND Installation Completed Blanch tlanagement Console Finish 12 You will now be asked to restart your system It is highly recommended that you restart your system in order for the changes to take effect Safend Data Protection Suite Management Server ES R You must restart your system For the configuration J changes made to Safend Data Protection Suite Management Server to take effect Click Yes to restart now or No if you plan to manually restart later Upgrading a Clustered Server Environment Here is the procedure to follow when upgrading a clustered server environment gt To upgrade a Server Cluster 1 Uninstall cluster nodes and leave one primary server active We recommend leaving the server that has the most resources out of all the nodes in the cluster 2 Upgrade the primary server that was left active to the latest Safend Data Protection server version 3 Install addit
27. you are deploying clients to a 64 bit machine make sure you are using the _ x64 installer The installation wizard opens i Data Protection Agent Setup Welcome to the Data Protection Agent Setup Wizard The Setup Wizard will install Data Protection Agent on your computer Click Next to continue or Cancel to exit the Setup Wizard 8 safend Cancel 58 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide avin aetna Gene DATA PROTECTION SUITE 3 Click Next to continue The End User License Agreement window opens i Data Protection Agent Setup End User License Agreement Please read the Following license agreement carefully Z safend End User License Agreement PLEASE READ THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT CAREFULLY BEFORE OPENING THE PACKAGE CONTAINING SAPEND LIDS THE LICENSOR PROPRIETARY SAFEND PROTECTOR SOFTWARE THE SOFTWARE AND OR BEFORE DOWNLOADING INSTALLINGUSING THE SOFTWARE AND INDICATE YOUR ACCEPTANCE BY CHOOSING I es ee i rT TT TN TSI TT AT TT T AT TT I accept the terms in the License Agreement 4 Inthe License Agreement window select the I accept the terms in the License Agreement radio button and click Next 5 The Ready to Install Data Protection Agent window opens ig Data Protection Agent Setup EEK Ready to install Data Protection Agent r safend Click Install to begin the
28. Directory 2 Automatically using any corporate software deployment tool such as SMS and Tivoli See Automatic Client Installation Generic 3 Manually by running the installation wizard on each computer See Manual Client Installation Automatic Client Installation Active Directory Automatic Safend Data Protection Suite Client installation is performed using Active Directory s Group Policy Management if installed and Active Directory s Users and Computers These options enable you to define a GPO that will distribute the Safend Data Protection Suite Client to the OUs computer or user groups of your choice When this option is used the clients are installed in Silent mode gt To automatically install the Safend Data Protection Suite Client 1 Open the Active Directory Users and Computers window 2 Right click the OU to which to install the Safend Data Protection Suite Client and select Properties The User Properties window opens 3 Inthe User Properties window select the Group Policy tab This tab looks different depending on whether the Group Policy Management Console is installed or not 4 Ifthe Group Policy Management Console is not installed the following window is displayed 52 Copyright 2011 safend a wave systems company www safend com www wave com Installation Guide safend a Wave systems company DATA PROTECTION SUITE 5 Click New to add the Safend Data Protection Suite deployment
29. Enter the database authentication credentials User Name and Password If you selected Microsoft Windows Security you must also enter a Domain name 10 Click Next The installation program validates access to the database NOTE If validation fails re enter the correct information or click Cancel to exit the installation wizard 11 Follow the instructions in steps 15 26 in Installing the Management Server 30 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vase sk Gene DATA PROTECTION SUITE Upgrading the Management Server From time to time it may be necessary to upgrade the Safend Data Protection Suite Management Server There is a wizard which enables you to easily upgrade the Management Server on your computer The Safend Upgrade Procedure is performed in two steps In the first step the server is upgraded to the new version while the agents installed on the endpoints in the organization are still of the older version The old agents are fully managed by the new server In the second step the existing agents are upgraded to the new version using the agent installation files created by the new server Considerations Before Performing Management Server Upgrade e In this version upgrade and backward computability are supported from Safend Data Protection Suite 3 3 SP7 and up If you are currently using an older version of Safend Data Protection Suite o
30. Ready to remove Data Protection Agent g safend Click Remove to remove Data Protection Agent From your computer Click Back to review or change any of your installation settings Click Cancel to exit the wizard Back cancel 6 In order to review or change any settings before continuing click Back or click Cancel to exit the uninstall wizard Once you have uninstalled it Safend Data Protection Suite Client will no longer be available to protect the endpoint Otherwise continue to the next step 7 Click Remove to remove the Safend Data Protection Suite Client e When the client has Safend Encryptor add on enabled and the hard disk encryption policy is set to encrypt then an alternate window will appear 64 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vase sk AE DATA PROTECTION SUITE 4 Safend Protector Chent InstallShield Wizard Remove Hard Disk Encryption The InstallShield wizard will now be interrupted and an uninstall process will start removing the Hard Disk Encryption Once the Hard Disk encryption is removed the Safend Protector will be automatically uninstalled The process might take several hours Installshield e Click Remove to continue The process may take several minutes When it is completed the following window appears i Data Protection Agent Setup Completed the Data Protection Agent Setup
31. Suite Client Cleanup Utility aannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 67 Emergency Agent Uninstall wissssitscecevassebecieerraeevedsentebaes ceetvadecnecvederercvedesnewiseerewivedeskecvees 67 Chapter 6 Installing a MAC Client nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuuuuuuuuunuun 270 PrEFCQUISIUGS iatacooriacaserecarssandtadstendecsseanatadueradearntanseadaewateataeoraiacascadeecssanaaacecena 71 Preparing the Installation Package aruuvvnnnnnnnnennnnnnnnnnennnnnnnnnnennnnnnnnnnnnnnnnnunnnneeer 71 Installing a Safend Data Protection Suite Mac Client xuuavannnnnnnnennnnnnnnnnennnnnnnnnr 71 Uninstalling a Safend Data Protection Suite Mac Client xuuuuunnnnnnnnnennnnnnnnnnennnnnn 76 5 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide herdet rs DATA PROTECTION SUITE Chapter 1 Installation Workflow About This Chapter Before installing Safend Data Protection Suite V3 4 it is important to understand fully the implementation process of the Data Protection Suite solution This chapter suggests a workflow for using the Safend Data Protection Suite solution to protect your organization s data It contains the following section v Safend Data Protection Suite Implementation Workflow page 7 describes the workflow for implementing and using the Safend Data Protection Suite 6 lt Copyright 2011 safend a wave systems company www sa
32. The Group Policy window is displayed An example is shown below e Group Policy Jolbi File Action View Help e H 2 3 TETTE 3 Protector Deployment safedc Safend com Policy Software Settings H Windows Settings Select an item to view its description mme p Administrative Templates E Computer Configuration 7 User Configuration A User Configuration Software Settings 2 Windows Settings E Administrative Templates AT 2 N Extended Askar il 54 Copyright 2011 safend a wave systems company www safend com www wave com amp safend a wave systems company Installation Guide DATA PROTECTION SUITE 10 Under Computer Configuration in the tree on the left right click Software Settings and select New Then select Package as shown below the right pane may display names of other software to be installed if any have been defined Group Policy BAX File Action view Help ae 2 Protector Deployment safedc Safend S Computer Configuration Software Settings _ Name windows Settings Jj Administrative Templates en TT AG User Configuration 1 Software Settings Software installation Package J Software Settings Windows Settings 2 Administrative Templates lt Paste Refresh Properties Help gt Extended Adds package A file selection window is displayed 11 Locate the shared folder in which you have select
33. a bootable medium that can directly access the hard disk drive and reset the administrator password in seconds Physical seal chassis protection Make sure that the hardware is sealed and that the hard disk drive cannot be simply disconnected Setting a password to protect the BIOS This prevents users from entering the BIOS and re enabling the boot access through devices other than the internal hard disk drive Internal Hard Disk Encryption Safend Data Protection Suite includes the internal hard disk encryption feature the Safend Encryptor The Encryptor client encrypts all internal hard drives protecting data stored on them and makes sure that the data can be accessed only with the proper credentials Trying to circumvent the normal booting sequence by booting from any external boot device will prove unsuccessful since data can be decrypted only with the Safend Encryptor Client 11 lt Copyright 2011 safend a wave systems company www safend com www wave com 8safend Installation Guide vised alana coligary DATA PROTECTION SUITE Chapter 3 Installing Safend Data Protection Suite Management Server About This Chapter This chapter describes how to install the Safend Data Protection Suite Management Server and contains the following sections v Prerequisites page 13 describes the requirements for installing the Management Server v Installing Prerequisite Software page 13 describes how to install Micros
34. a Protection Suite Management Server Scheduled System Backup Please configure the schedule for automatic system backup To prevent a single point of failure only network paths are allowed Perform backups Mest backup 9 29 2010 1 00 00 AM password is required to protect the system configuration backup file The password must be at least 7 characters long and must contain the following At least one digit At least one upper case character Select the day and time when automatic system backup will occur To backup the system click Browse to select a path Enter a Password and Confirm it NOTE The password should be at least 7 characters long and should contain at least one digit and one upper case character 23 Click Next The Summary window opens 25 lt Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide hur henge Bsa aA Annen DATA PROTECTION SUITE Safend Data Protection Suite Management Server Summary Please review your selections before starting the installation Restore Encryption Keys From CA Key Backupialphabackup syb Destination Folder C Program Files SafendiSafend Data Protection Suite Database Internal Domain Credentials satendga satend comadministrator Access To BUILTIN WAadministrators Protector Clients port SSL 443 Management Console port SSL 4443 24 Confirm the installation summary and
35. a wave systems company SAFEND Data Protection Suite Installation Guide Version 3 4 5 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE Important Notice This guide is delivered subject to the following conditions and restrictions v This guide contains proprietary information belonging to Safend Ltd Such information is supplied solely for the purpose of assisting explicitly and properly authorized Safend Data Protection Suite users v No part of its contents may be used for any other purpose disclosed to any person or firm or reproduced by any means electronic or mechanical without the expressed prior written permission of Safend Ltd v The text and graphics are for the purpose of illustration and reference only The specifications on which they are based are subject to change without notice v The software described in this guide is furnished under a license The software may be used or copied only in accordance with the terms of that agreement v Information in this guide is subject to change without notice Corporate and individual names and data used in examples herein are fictitious unless otherwise noted v The information in this document is provided in good faith but without any representation or warranty whatsoever whether it is accurate or complete or otherwise and with the expressed understanding that Safe
36. age opens 2 Management Console Installation Windows Internet Explorer eT https inspector safendga safend com 4443 Sarend ve lig Certificate Error 4 xX luivesearch Pie File Edit Viem Favorites Tools Help we dr management Console Installation i A A Ber Tools SAFEND p amp safend Management Console Installation Banuring Your Endpoints 4 Safend Data Protection Suite Management Console Installation Click the below link to install the Safend Data Protection Suite Management Console software on your computer Once you have installed the software you will not need to visit this page again Link to Management Console installation e Managementconsole en Prerequisite Microsoft NET Framework 2 0 Safend Data Protection Suite Management Console requires Microsoft NET Framework 2 0 to be installed on your computer If you do not have it installed please download and install it before continuing with Safend Data Protection Suite Management Console installation Link NET framework 2 0 installation package ds details aspx FamilyvID 0856eacb 4362 4b0d Sedd abi15cse04lskDisplayt ang en Server Details If you are prompted to enter server connection details when running the Management Console please Internet 100 FIK l This page contains the following A link to the Microsoft NET framework 2 0 installation package A link to the Management Console installation package Server
37. are connected to a network that contains your organization s Active Directory domain v Standard profile Used when computers are not connected to a network that contains your organization s Active Directory domain such as a home network or the Internet The relevant policy setting for WMI is 10 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vase ashame AE DATA PROTECTION SUITE Windows Firewall Allow remote administration exception This allows remote administration of this computer using administrative tools such as the Microsoft Management Console MMC and Windows Management Instrumentation WMI To do this Windows Firewall opens TCP ports 135 and 445 Services typically use these ports to communicate using RPC and DCOM The default is Not Configured Tips on Preparing Your Endpoints i Booting via an external boot device floppy CD etc will circumvent any security software However there are a few ways to either prevent this scenario from happening or make it impossible to be able to read the data outside the Safend protected operating system Changing the boot sequence Change the boot sequence so that the machine does not boot first from the floppy then the CD DVD ROM and finally the hard disk drive The hard disk drive should always be the first boot device If the floppy or the CD DVD ROM is the initial boot device anyone can use
38. ave systems company www safend com www wave com Installation Guide DATA PROTECTION SUITE 8safend a Wave systems company 7 Inthe OU tree displayed in the left pane select the OU to which to install the Safend Data Protection Suite Client The right pane displays the GPO s that are already assigned to this OU 8 Adda GPO that installs software to this OU Right click on the OU and select Create and Link a GPO Here then name the GPO E Group Policy Management Jolbi S Fie Action View Window Help amex 2 a Sales an ee Linked Group Policy Objects Group Policy Inheritance Delegation EA Safend Link Order GPO Enforced Link Enabled GPO Stat ii _ SFI Leen ren a Office 2003 Installati No Yes Enabled H E Compi Link an Existing GPO a New Group Policy 0 No Yes Enabled Deplo Block Inheritance 12 Group Group Policy Modeling Wizard ji A dets New Organizational Unit E Protes New Window from Here lg f said Delete Sales Rename H E Serve Refresh ste Properties 4 GA UserP Help 3 Users Vm Machines 3 viftach Group Policy Objects S WMI Filters CA Sites A Group Policy Modeling v lt m EI Create a GPO in this domain and link it to this container 9 Right click the Safend Data Protection Suite deployment GPO and select Edit
39. ed for free from the Microsoft website for Windows XP The link to the NET framework 2 0 installation package http www microsoft com downloads details aspx FamilyID 0856eacb 4362 4b0d 8edd aab15c5e04f5 amp DisplayLang en _Download_ Quick Details File Name dotnetfx exe Version 2 0 Date Published 1 22 2006 Language English Download Size 22 4 MB Estimated Download Time Dial up 56K vi 55 min Change Language English v Installing Microsoft IIS gt To install Microsoft IIS 1 Inthe Control Panel on your computer double click Add or Remove Programs The Add or Remove Programs window opens 2 Click Add Remove Windows Components The Windows Components Wizard window opens If you are installing the application on a machine running Windows 2003 check the Application Server checkbox If you are installing IIS on a machine running Window XP check the Internet Information Services IIS checkbox as shown below 13 Copyright 2011 safend a wave systems company www safend com www wave com amp safend a wave systems company Installation Guide DATA PROTECTION SUITE Windows Components Wizard Windows Components Tou can add or remove components of Windows P To add of remove a component click the checkbox shaded bos means that only part of the component will be installed To see what s Included in a component click Details Components amp Internet Explorer
40. ed the Client installation files to be created This folder should contain both the DataProtectionAgent msi and ClientConfig scc files 12 Browse to the full UNC path of the Safend Data Protection Suite Client installation file named DataProtectionAgent msi select it and click Open Make sure this path includes the ClientConfig scc file 13 Double click the DataProtectionAgent msi file The following window opens Deploy Software Select deployment method Published 3 Assigned O Advanced Select this option to Assign the application without modifications 14 Select Assigned and click OK Wait a few moments while the MSI is added 15 Prepare the endpoints of your organization for automatic installation as described in the Preparing an Endpoint for Automatic Installation section below 55 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide heiser Sun DATA PROTECTION SUITE 16 Arestart will be required on the endpoint computer message requiring reboot will be displayed to the end user To prevent the reboot request from being displayed please refer to Automatic Client Installation Generic NOTE After the GPO is applied and the computer is restarted it is possible that the computer will only receive the settings in the GPO upon the restart and a second restart will be required for the settings to take effect i e for the msi to be installed
41. end Data Protection Suite Client 1 Locate the shared folder in which you have selected the Safend Data Protection Suite Client installation files to be created This folder contains the DataProtectionAgent msi and the ClientConfig scc files In order to install the client both files must be kept in the same folder The DataProtectionAgent_x64 msi file is also present for machines running 64 bits Date modified DataProtection gent x64 msi FISJ2010 8 22 AM 26 910 KB Installer M FISJ2010 7 35 AM Windows Installer Package 28 176 KB Installer M _ ElientConfig scc FiS 2010 11 17 SCC File 396 KB Windows Installer Package sy LataProtection amp gent msi To view the path to this folder select Administration from the Management Console s Tools menu then select the Clients tab as shown in the following figure 57 Copyright 2011 safend a wave systems company www safend com www wave com a wave systems company DATA PROTECTION SUITE 26 Administration Ea Client Installation Folder General Specify a shared folder from which you will deploy Safend Data Protection Suite Client software to Preferences endpoints Role Based E 4gent Install System Events This folder will contain all the files you need for deployment You may recreate a the installation files by selecting 4 new location Security Maintenance Licensing 2 Run DataProtectionAgent msi If
42. end a wave systems company www safend com www wave com Installation Guide hensatt def Annen DATA PROTECTION SUITE Standard Install on Untitled 1 8 Introduction This will take 196 9 MB of space on your computer Destination Sele Si Installatio Click Install to perform a standard installation of this software on the disk Untitled 1 Installations 24 Summary jer A LE Change Install Location J Customize 6 Enter the system password A Type your password to allow Installer to make changes Name daniel b Details 7 Click Continue Installation and the software will now be installed 74 Copyright 2011 safend a wave systems company www safend com www wave com Installation Guide av aktre coin DATA PROTECTION SUITE When this software finishes installing you must restart your computer Are you sure Introduct you want to install the software now Destinat 6 oars Installation this software on the disk Untitled 1 Summa Change Install Location 4 8 You will see the progress bar during the installation process installing Safend Data Protection Suite Introduction Destination Sele Installatic N Installation gt Summa aper pe e ASS Pee See GoBack Continue SRDS Ie SEL pr 9 At the conclusio
43. fend com www wave com Installation Guide safend DATA PROTECTION SUITE Safend Data Protection Suite Implementation Workflow The following is an overview of the workflow for implementing and using Safend Data Protection Suite Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 7 lt Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide heiser Sun DATA PROTECTION SUITE v Step 1 Install the Safend Data Protection Suite Management Server and Console as described in Chapter 2 Preparing for Installation page 9 and Chapter 3 Installing Safend Data Protection Suite Management Server page 12 v Step 2 Install Additional Management Consoles as described in Chapter 4 Installing Safend Data Protection Suite Management Console page 40 v Step 3 Define General Safend Data Protection Suite Administration Settings such as the method in which policies are published as described in Chapter 12 Administration in the Safend Data Protection Suite User Guide v Step 4 Scan Computers and Detect Port Device and WiFi Use Use Safend Auditor to detect the ports that have been used in your organization and the devices and WiFi networks that are or were connected to these ports as described in the Safend Auditor User Guide v Step 5 Define Safend Data Protection Suite Policies In this stage you define the blocked allowed and
44. g Safend Data Protection Suite Client It also explains how to uninstall and upgrade Safend Data Protection Suite Client v Chapter 6 Installing a MAC Client page 70 describes the procedure for installing and uninstalling a Mac client 3 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE Table of Contents Chapter 1 Installation Workflow nnnnnnunuuunnnnnnnnnnnnnnnnnnnunnunnnuunnnnnnnn 2 Safend Data Protection Suite Implementation WorkflOw cccceeeeeeeeeeeeeeeeeeeeeeaes 7 Chapter 2 Preparing for Installation n nunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnunnnr D System REGUIFECINGNICS sne 10 Propanng YoUr NVE 10 Opening WMI ports on Windows XP SP2 Firewall aaaauuuuaa vann vann eee e eee e eee e eee eeeeeeeeeeeeneneees 10 Tips on Preparing Your EndpointS sssssssssssssssnssssnssrenssnsnssnsnennsnrnnenrnnesnnnne 11 Chapter 3 Installing Safend Data Protection Suite Management Server sd ge 0 GE a a r E E A N 13 Installing Prerequisite Software xuunnuannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnne 13 Installing Microsoft NET Framework 20 rirrirriiririceriiriinririirierririnn eriin 13 MSN MIcrosoft IS vvs 13 Before Installing Safend Data Protection Suite Management Server ceeeeeeeees 15 Installing the Management Serv r ssssssssssssnssnsnsensnrnnsnrnnenronsunnnesn
45. gement Server q Backup Files To restore previous Installation of the Safend Management Server please select the appropriate backup file Specity the path to your encryption key backup file me In order to preserve security the backup file is protected by a password System backup password Cancel 29 Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide avin sen Gene DATA PROTECTION SUITE 6 Enter the path to your keys backup file and the password protecting it 7 Skip to step 11 below 8 If you have chosen to use an existing database server the following window opens Safend Data Protection Suite Management Server d Database credentials Please supply the database connection details for Safend Data Protection Suite Server to create the database tables and access it Database Server For non detault instance use the format serverinstance Database authentication mode 8 MS SOL Security Microsoft Windows Security Database validation will be performed on clicking Nest 9 Inthe Database credentials window perform the following steps 1 Inthe Database Server field enter the database server name for a non default instance use the format server instance 2 Under Database authentication mode click the appropriate radio button to select whether to use MS SQL Security or Microsoft Windows Security 3
46. he page you are trying bo view Do you want to proceed View Certificate In order to avoid these alerts you will need to replace the certificate with a signed certificate you receive from a trusted Certificate Authority 21 Click OK to continue with the installation Safend Data Protection Suite Installation X P 1 Safend Data Protection Suite will create web site SSL certificate since no such certificate exists 24 lt Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide heiser Sun DATA PROTECTION SUITE 22 Click Next In the following window you will be asked to backup the system generated by Safend Data Protection Suite To enhance the security of the system encryption keys are generated during the installation These keys are unique to your organization and raise the tampering resistance of your system These keys are used to encrypt policies and logs as well as for mutual authentication between the Server and the endpoints These keys as well as other information are protected when system backup is performed For this reason it is highly recommended to backup the system on another machine site in order to ensure smooth recovery in cases of server malfunction without the need to re deploy Clients to endpoints In order to backup the system you need to set a password that will be used to protect the system configuration backup file Safend Dat
47. ill not run from a network path 4 Click Install 5 Following extraction you will be asked to select the Safend Data Protection Suite Server language as shown below Management Server X select Language EnglishU5 Cancel 6 Select the required language and click OK The first step of the installation wizard is displayed 16 lt Copyright 2011 safend a wave systems company www safend com www wave com a wave systems company DATA PROTECTION SUITE Safend Data Protection Suite Management Server l SAFEND Management Server This wizard will install Safend Data Protection Suite Management Server on your computer Warning This program is protected by copyright law and International treaties Click Next to continue or Cancel to exit lt Back 7 Click Next and read the End User License Agreement After accepting click Next again The Installation Mode window is displayed Safend Data Protection Suite Management Server i Installation Mode Please select your installation mode New Select this option if this i new Installation O Restore Select this option to restore a previous installation of your Management Server This will allow you to continue working with your existing Safend Data Protection Suite Clients Join a Cluster Select this option if you already have at least ane Management Server using an external database and you would like to add another server to form
48. in the Global Policy Settings Window 1 Log Transfer Interval Define the frequency in which logs will be sent from endpoints to the Server IMPORTANT Be especially careful when configuring the Logs Transfer Interval in order not to burden your network and endpoints with excessive log sending Consider the following e The number of endpoints in your network e The number of expected events from each endpoint client and file logs e The level of need for real time log information in the Management Console During installation the default log interval is set to 90 minutes In the case of large scale deployments please consult Safend Support in order to optimize your settings 2 Clients Uninstall Password Change the default password to your own preference IMPORTANT Upon product installation the password is set to Password1 Since the password is one of the foundations for the tamper resistance of the client it is highly recommended that you change it as soon as you start deploying the product in a production environment IMPORTANT Make sure you have created a backup for the Server encryption keys This will prevent situations in which you cannot uninstall Clients due to password loss Refer to Chapter 7 Configuring Policies in the Safend Data Protection Suite User Guide for an explanation about the Global Policy settings 37 Copyright 2011 safend a wave systems company www safend com www wave com
49. ine 68 lt Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vase sk Gene DATA PROTECTION SUITE Uninstall from Command Line The uninstall key can be provided as a command line parameter in order to support remote automatic uninstall You can use one of the following commands for this purpose Msiexec i qn path to product msi ProductCode SAU 1 SAU KEY lt token gt Msiexec x path to product msi ProductCode SAU 1 SAU KEY lt token gt 69 Copyright 2011 safend a wave systems company www safend com www wave com amp wave systems company DATA PROTECTION SUITE Chapter 6 Installing a MAC Client About This Chapter This chapter describes the method for installing a Safend Data Protection Suite Mac Client v Prerequisites page 71 describes the Safend Data Protection Suite Mac client prerequisites v Preparing the Installation Package page 71 describes how to prepare the installation package v Installing a Safend Data Protection Suite Mac Client page 71 describes the client installation process for a Mac v Uninstalling a Safend Data Protection Suite Mac Client page 76 describes how to uninstall a Mac client 70 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vine Gen DATA PROTECTION SUITE Prerequisites NOTE Refer to the What s New
50. ings Checklist on page 37 for a list of settings which you may want to review and change 27 lt Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide heiton Era Gene DATA PROTECTION SUITE Restoring an Existing Management Server NOTE If you have an encrypted machine you cannot install a new server and connect it to the clients You must first backup and then perform restore In some cases you will need to install Safend Data Protection Suite Management Server while maintaining your system s unique encryption keys in order to work with your existing Safend Data Protection Suite Clients This may happen when you want to migrate the Server from a low CPU machine to a more powerful one or when recovering from hardware malfunctions In order to restore an existing Management Server you will need to provide the encryption keys backup file and the password that was set to protect it gt To restore an existing Management Server 1 Perform the steps described in Installing the Management Server on page 15 up to Step 7 2 Atthis stage you will be asked to choose the installation mode as shown below Safend Data Protection Suite Management Server Installation Mode Please select your installation mode New Select this option if this i new Installation O Restore Select this option to restore a previous installation of your Management Server This
51. ion window that opens click the Clients tab on the left The Administration gt Clients window opens OG Administration Client Installation Folder Specify a shared folder from which you will deploy Safend Data Protection Suite Client software to Preferences endpoints System Events This folder will contain all the files YOU need for deployment You may recreate 0 the installation files by selecting a new location General Security Maintenance Licensing Cancel 51 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide vase sk Gen DATA PROTECTION SUITE 3 Select a shared folder as the Client installation folder Once the files are created the following message Client Installation Files Ei a n J Gent installation files were successfully created at C 1Clients appears IMPORTANT Make sure you enter a network path and not a local path Click OK n You are now ready to deploy Safend Data Protection Suite Clients on the computers in your organization Once Clients have been deployed you can distribute policies to them as described in the Safend Data Protection Suite User Guide Installing Safend Data Protection Suite Client There are three ways to install the Safend Data Protection Suite Client 1 Automatically through the Active Directory Group Policy Management See Automatic Client Installation Active
52. ional cluster nodes using the latest Safend Data Protection Server version This can be achieved by selecting the Join a Cluster option from the Safend Data Protection Suite Management Server installation wizard 4 Upgrade the Safend Data Protection clients as described in Chapter 5 on page 49 36 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide heiton Era AE DATA PROTECTION SUITE Post Installation Settings Checklist The Safend Data Protection Suite Management Server installation package defines default settings for system behavior which you can find under Administration and Global Policy Settings both available from the Tools menu in the Safend Data Protection Suite Management Console Once you complete installing Safend Data Protection Suite Management Server and access the Management Console you may want to access these windows and set the parameters relevant to your environment Checklist for the Most Critical Settings in the Administration Window 1 Encryption Keys Backup If you have not backed up the encryption keys during installation 2 Client Installation Folder Set a shared folder for creating client installation files You will need these files in order to install clients Refer to Chapter 12 Administration in the Safend Data Protection Suite User Guide for an explanation of Administration settings Checklist for the Most Critical Settings
53. ite object and select All Tasks gt Remove Check the Allow users to continue to use the software but prevent new installations radio button Click the OK button D a AGN Create a new GPO Name Safend Data Protection Suite Uninstall right click the new GPO and select Edit N Navigate to Windows Settings under Computer Configuration and select Script and then Startup oo Click the Show Files button and create a new text document containing the following command msiexec exe x full UNG path to Safend Data Protection Suite shared install folder DataProtectionAgent msi qn UNINSTALL PASSWORD uninstall password NOTE The uninstall command set in the batch file shown above must be set in one line The actual uninstall process will take place only after the computer is rebooted In the case when the endpoint is encrypted the decryption process will start only after a valid user check in to the encrypted endpoint 9 Replace the full UNC path to the Safend Data Protection Suite s shared installation folder with the appropriate path 10 Replace the uninstall password with the appropriate uninstall password 11 Optional A restart will be required on the endpoint computer at the end of the uninstall process and a message requiring reboot will be displayed to the end user To prevent the reboot request from being displayed add the parameter norestart REBOOT ReallySuppress at the end of the command above NOTE This is onl
54. lation Guide vase sk Gen DATA PROTECTION SUITE Safend Data Protection Suite Management Server k Database Safend Data Protection Suite can create itt own database for storing configuration and data Alternatively you can uze an external database Select your prefered options 8 Install an embedded database on this computer O Use an external database Safend Data Protection Suite supports MS SOL 2000 and up Select this option if you already have database installed Cancel Safend Data Protection Suite can create its own internal database for storing configuration and data Alternatively you can use an existing external database NOTE Safend Data Protection Suite supports MS SQL 2000 and above 10 In the Database window select the required radio button Select the first radio button if you want to use a database which resides on the same machine as the Management Server the database is managed by Safend Data Protection Suite Management Server Select the second option if you have an MS SQL database on another machine and you want to use it as your Safend Data Protection Suite database NOTE If you choose to use an existing external database this database must already be installed 11 Click Next If you chose to install an embedded database skip to Step 15 12 If you have chosen to use an existing database server or to join a cluster the following window opens 19 Copyright 2011 safend a
55. licies will be created following the server upgrade Your organization should have at any point in time no more than two Hard Disk Encryption Policies an Encrypt policy which enforces the encryption on the appropriate workstations in your environment and optionally a Decrypt policy excluding specific workstations from the general encryption policy Remember Hard Disk Encryption policies only apply on machines not on users There is no reason to associate a Hard Disk Encryption policy to a user object or to another object Group or OU which only contains user objects gt To upgrade the Management Server NOTE Before Upgrading the Management Server you must remove Safend Data Protection Suite Console and all remote consoles as described in Uninstalling Safend Data Protection Suite Management Console on page 48 After completing server upgrade you must again reinstall the consoles as described in Installing Safend Data Protection Suite Management Console on page 41 1 Locate SafendDataProtectionSuite exe on your installation CD 2 Double click the file The Safend Data Protection Suite Management Server installation window is displayed 3 Click Browse to select a destination folder for the extracted installation files 32 Copyright 2011 safend a wave systems company www safend com www wave com 3 safend Installation Guide berieme Era aAa DATA PROTECTION SUITE NOTE Make sure that the files are
56. lowed by your firewall 23 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE The default ports are 443 for Clients communication and 4443 for Management Console communications If you wish you may change these default ports 20 In order for SSL to operate a certificate is needed to authenticate the Management Server This certificate is also used for encrypting the data sent on the communication port If the computer that is running the Server already has an active website that allows the SSL port activation the application will use the existing certificate If no certificate exists the application will create a new certificate and will notify you of this NOTE A Safend generated certificate is not signed by a valid Certificate Authority CA Although this does not affect the overall security level of the system using this certificate will cause Internet Explorer to display security alerts Security Alert i Information you exchange with this site cannot be viewed or changed by others However there is problem with the site s security certiticate The security certficate was ued by a company you have hot chosen to trust View the certificate to determine whether Pou want to trust the certifying authority The security certficate date is valid The security certiticate has a valid name matching the name of t
57. luating the software click Remind Me Later OR Click Enter License Key if you have a valid Safend license and enter your Safend license key as described in the Safend Data Protection Suite User Guide Chapter 11 Administration The Safend Data Protection Suite Management console opens displaying the main window Uninstalling Safend Data Protection Suite Management Console Here is a description of how to uninstall the console gt To uninstall the Management Console 1 From the Control Panel open Add or Remove Programs 2 From the list select Safend Data Protection Suite Management Console and click Remove NOTE Uninstalling Safend Data Protection Suite Management Console does not cause any information loss You can re install it at any time 48 lt Copyright 2011 safend a wave systems company www safend com www wave com 8safend Installation Guide avian abana colioary DATA PROTECTION SUITE Chapter 5 Installing Safend Data Protection Suite Client About This Chapter This chapter describes the various methods for installing or deploying Safend Data Protection Suite Client It also explains how to uninstall and upgrade Safend Data Protection Suite Client It contains the following sections v Prerequisites page 50 describes the prerequisites of the Safend Data Protection Suite Client v Before Deploying Safend Data Protection Suite Client page 50 describes the steps you need to take before in
58. n of the process you will be informed that the installation was successful Click Restart to reboot the system with the new client 75 lt Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide perser Aron DATA PROTECTION SUITE GO Install Safend Data Protection Suite The installation was completed successfully The installation was successful The software was installed Click Restart to finish installing the software Uninstalling a Safend Data Protection Suite Mac Client When it is necessary to uninstall a Mac client follow this procedure 1 Under the zip file of the Mac Client available in the FTP from which you downloaded the Server installation package there is a file namedUninstallDLPSuite 2 Open the terminal and run the following sudo path to theUninstallDLPSuite file 3 Enter the administrator password 4 Reboot the machine once the procedure is completed 76 lt Copyright 2011 safend a wave systems company www safend com www wave com
59. nd Ltd shall have no liability whatsoever to other parties in any way arising from or relating to the information or its use Copyright 02005 2011 Safend Ltd All rights reserved 2 Copyright 2011 safend a wave systems company www safend com www wave com ndototoncude ss Msalend amp Wave systems company DATA PROTECTION SUITE About This Guide This Installation Guide is comprised of the following chapters v Chapter 1 Installation Workflow page 6 suggests a workflow for using the Safend Data Protection Suite solution to protect your organization s endpoints v Chapter 2 Preparing for Installation page 9 describes the Safend Data Protection Suite architecture and the Safend Data Protection Suite installation workflow It then describes the system requirements and prerequisites for installation and all the preparations that need to take place before installing Safend Data Protection Suite v Chapter 3 Installing Safend Data Protection Suite Management Server page 12 describes how to install restore and upgrade the Safend Data Protection Suite Management Server and how to launch the Safend Data Protection Suite Management Console v Chapter 4 Installing Safend Data Protection Suite Management Console page 40 describes how to install Safend Data Protection Suite Management Console v Chapter 5 Installing Safend Data Protection Suite Client page 49 describes the various methods for installing or deployin
60. nfig scc This file is generated by the Server upon user request This file should be available during Client installation Before you can start deploying Safend Data Protection Suite Clients you need to define the path to which the Server will generate all the files needed for Client installation The process of generating the installation files may be performed again at any time gt To generate Safend Data Protection Suite Client installation files 1 In the Management Console from the Tools menu open the Administration window as shown in the following figure 50 Copyright 2011 safend a wave systems company www safend com www wave com a wave systems company DATA PROTECTION SUITE OG Safend Data Protection Management Console Help Update Policy Collect Logs Audit Devices Grant Suspension Password D Policia Grant Device Access Key g Ne Hard Disk Encryption Utilities gt We Clients More amp Grant Suspension Password Change Global Policy Settings Op Global Policy Settings dk Collect Client Logs Change Global Administration Settings D re SS Q update Client Policy Launch Safend Auditor Administration E Logs I Reports Recently Viewed Queries m New Report Recently Viewed Reports 8 safend a wave systems company User Administrator SAFENDQA EQ Server localhost A start NER IE Safend Data Protecti enf YO 1 04PM 2 Inthe Administrat
61. ng the Management Server check the following 1 Verify that all system requirements and prerequisites are met 2 Make sure that the Safend Data Protection Suite Server machine belongs to the same domain in which you intend to deploy Safend Data Protection Suite policies 3 Make sure that a MySQL DB is not installed on the Safend Data Protection Suite Management Server machine Installing the Management Server Here is the procedure to follow when installing the Management Server gt To install Safend Data Protection Suite Management Server 1 Locate SafendDataProtectionSuite exe on your installation CD 2 Double click the file The Safend Data Protection Suite Management Server installation window is displayed 15 Copyright 2011 safend a wave systems company www safend com www wave com 8safend Installation Guide avian alana Gene DATA PROTECTION SUITE OG Safend Data Protection Suite Vel Ei I Press Install button to start extraction Use Browse button to select the destination folder trom the folders tree It can be also entered manually e Ifthe destination folder does not exist it will be created automatically betore extraction E Browse Install Cancel Destination folder Installation progress 3 Click Browse to select a destination folder for the extracted installation files NOTE Make sure that the files are extracted to a local folder The installation w
62. nnesnsnennrnene 15 Restoring an Existing Management Server ssssssssssssensrrnsrnrrrnnrnrnsrnenrennrnrnrrnenne 28 Upgrading the Management Server s sssssesesensrsnrursnrrsnrnrnrnnrnrrrnrurenrnenrnrnrsnrrrrrnne 31 Considerations Before Performing Management Server UpGrade ccccccccceceeeeeeeeeeeeeeeeeees 31 Upgrading a Clustered Server Environment ccccccceeeeseeeeeeeeeeeeeeeeecseeeeeeeeeeeeettseeggggeennngs 36 Post Installation Settings Checklist xauunnnnnnnrnnnnnnnnnnnnnnnnnnnerrnnnnnnnnnnnnnnennnnnnene 37 Checklist for the Most Critical Settings in the Administration Window aaauuvvvvrrnnnnnnnnnnnnnener 37 Checklist for the Most Critical Settings in the Global Policy Settings Window aaauuuuuaannnnnr 37 Uninstalling Safend Data Protection Suite Management Server cece cee ees 38 ENN 38 Chapter 4 Installing Safend Data Protection Suite Management Console as tO BE 1 3 AE NE EEE EN NE Eni 41 Installing Prerequisite Software axuunnnnnrrnnnnnnnnnnnnnnnnnnennrnnnnnnnnnuvnuurnnnnnnrnnnnnnsnne 41 Installing Microsoft NET Framework 2 0 arnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 41 Installing Safend Data Protection Suite Management Console arnnnunnnnvnnnnnnnnnnnne 41 Installing the Console from the Installation Web Page rannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnsnnnnnnnne 41 Installing Safend Data Protection Suite Management Console Manually anannnnnnnnnnnnnnnn
63. nnr 46 4 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE Launching Safend Data Protection Suite Management Console for the First Time 47 Uninstalling Safend Data Protection Suite Management COnsole ccceeeeeeeeeees 48 Chapter 5 Installing Safend Data Protection Suite Client 1 49 Fe Ne 50 Before Deploying Safend Data Protection Suite Client auuuuuuavavnnrnnnnnnnnnnnnnnnnnenn 50 Installing Safend Data Protection Suite Client a xauuunavavvvnnnnnnsnnnnnnnnrnnnnrrnnnnnnnnn 52 Automatic Client Installation Active Directory xvvvvvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnen 52 Automatic Client Installation Generic HR 57 Manual Chent ps 1 pg EEE EEE EE 57 Upgrading Safend Data Protection Suite Client xuuuuvnnnnnnnnavnnnnnnnnnennnnnnnsnnernnnnn 61 Considerations Before Performing Client Upgrade axxuuuuuaannnnnnnnnnnnnnnnnnnennnnnnnnnnnnnnnnnnnnner 61 Upgrading the Client via Active Directory ccccccccsceeesseeeeeeeeeeeeeeeeeeeseeeeeeeeeeetttseggggeennngs 61 Upgrading the Client Manually avse a a 62 Uninstalling Safend Data Protection Suite Client aarunnuunnanannnnnnnnnnnnnnnnnnnnnnnnnnn 62 Ga calin Mana EEE EE O EE eee 62 Uninstalling Safend Data Protection Suite via GPO uunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 66 Safend Data Protection
64. nstallation web page and click Connect 14 The Login window appears SAFEND Server localhost Password Domain SAFENDQA Type your User Name Password and Domain and click Login The application will open displaying the main window Installing Safend Data Protection Suite Management Console Manually Here is a descripton of how to manually install the console gt To manually install the Management Console 1 Locate the ManagementConsole msi file on your CD and run it The setup window opens 46 lt Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide hetta rn DATA PROTECTION SUITE i Safend Data Protection Suite Management Console Welcome to the Safend Data Protection Suite Management Console Setup Wizard 48 safend The installer will guide you through the steps required to install 5afend Data Protection Suite Management Console on your computer WARNING This computer program is protected by copyright law and international treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe civil ar criminal penalties and will be prosecuted to the masimum extent possible under the law Cancel 2 Proceed with steps 5 through 13 as described above Launching Safend Data Protection Suite Management Console for the First Time 1 Click the 3 icon on your desktop OR Go to Start gt
65. oft NET framework and IIS v Before Installing Safend Data Protection Suite Management Server page 15 provides a checklist of issues you need to verify before starting the installation process v Installing the Management Server page 15 describes how to install the Safend Data Protection Suite Management Server for the first time and how to launch the Safend Data Protection Suite Management Console v Restoring an Existing Management Server page 28 describes how to restore an existing Safend Data Protection Suite Management Server in case of hardware upgrade or failure v Upgrading the Management Server page 31 describes how to upgrade the Management Server v Uninstalling Safend Data Protection Suite Management Server page 38 explains how to uninstall Safend Data Protection Suite Management Server v Changing your Database page 38 explains how to switch from using an embedded Safend Data Protection Suite database to an external MS SQL database and vice versa 12 Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide vas sk colieary DATA PROTECTION SUITE Prerequisites NOTE Refer to the What s New document for the most up to date system requirements Installing Prerequisite Software Installing Microsoft NET Framework 2 0 gt To install NET Framework Microsoft NET Framework 2 0 is built in by default on Windows 2003 and can be download
66. on Suite embedded database to an external MS SQL database or vice versa you can do so by using the Restore option as explained in Restoring an Existing Management Server on page 28 and selecting the new database type NOTE You can only change your database if you are using version 3 2 and above 38 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide ieioea Era Es DATA PROTECTION SUITE IMPORTANT Changing your database will result in a loss of previous logs Previous policies are transferred to the new database but policy associations with organizational objects when using the direct distribution from the Management Server to Clients policy distribution mode are lost 39 Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide hebr non DATA PROTECTION SUITE Chapter 4 Installing Safend Data Protection Suite Management Console About This Chapter This chapter describes how to install the Safend Data Protection Suite Management Console It contains the following sections v Prerequisites page 41 describes the prerequisites of the Management Console v Installing Prerequisite Software page 41 describes how to install Microsoft NET framework v Installing Safend Data Protection Suite Management Console page 41 describes two methods for installing the Console v Launching Safend
67. perform an upgrade using this version of the Safend Data Protection Suite v Before upgrading Safend Data Protection Agents from 3 3 versions a preparation action should be performed on the protected machine The preparation is performed using a lightweight executable that is activated on the protected machine before the upgrade takes place To obtain the executable please contact Safend Support Upgrading the Client via Active Directory In order for your endpoint to install the new version of the product just add the new msi file as a new GPO repeat the steps above This will automatically update the endpoints on the next reboot Unlike when installing the client when upgrading do not suppress the automatic reboot which is necessary to complete the upgrade process 61 Copyright 2011 safend a wave systems company www safend com www wave com Installation Guide DATA PROTECTION SUITE Upgrading the Client Manually Here is a description of how to upgrade the Client manually gt To upgrade the Client manually 8safend amp Wave systems company 1 Double click the DataProtectionAgent msi Safend Data Protection Suite automatically uninstalls your previous version of the product and updates it with the new version 4 Following the upgrade you must reboot the computer on which it was performed a message will appear requesting you to reboot Uninstalling Safend Data Protection Suite Client You can unin
68. ption will be controlled using a Port amp Device Control Policy encryption of the internal hard disk will be enforced using a Hard Disk Encryption policy endpoint configuration such as the log sending interval will be controlled using the Settings Policy For additional information refer to Safend Data Protection Suite v3 4 Upgrade Instructions available from Safend Recommended action to avoid the creation of multiple redundant policies following the server upgrade please review your existing policies to make sure policies are not configured to use policy specific settings instead of global policy settings without a good reason From our experience most customers do not need to configure different settings for different machines in the organization using Policy Specific Settings and can use a consistent configuration throughout the organization using Global Policy Settings After upgrade again review all policies and remove multiple or redundant policies e Before performing the upgrade it is highly recommended to create an updated System Backup file created through the Administration gt Maintenance tab This file will be used to restore the existing server in case the upgrade procedure Is not completed successfully e After the Server Upgrade you should review the Hard Disk Encryption Policies In case you are using Safend Encryptor to encrypt machines in your organization some Hard Disk Encryption po
69. r have legacy agents in your environment which were not upgraded yet it is recommended that you don t perform an upgrade using this version of the Safend Data Protection Suite e The system upgrade will maintain all policies and definitions after the upgrade process However existing history log records will no longer be available Customers are advised to backup the DB prior to the upgrade if log data is needed to be kept for future use Restore of the backed up DB should be done to a separate server in a separate environment if needed e There are several features which were supported in Safend Data Protection Suite 3 3 and are no longer supported in Safend Data Protection Suite version 3 4 Before performing an upgrade please make sure you are not using these features These features are specified ina separate document Safend Data Protection Suite v3 4 Upgrade Instructions available from Safend 31 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vane atime aE DATA PROTECTION SUITE e When upgrading the Management Server to version 3 4 all your existing policies will undergo an upgrade procedure In Safend Data Protection Suite version 3 4 instead of having one policy which defines all aspects of the endpoint behaviour you will now have separate policies managing separate aspects of the endpoint behaviour Port control device control and removable media encry
70. restricted ports devices and WiFi networks according to the security and productivity requirements of your organization as described in the Safend Data Protection Suite User Guide v Step 6 Install Safend Data Protection Suite Clients on Endpoints as described in Chapter 5 Installing Safend Data Protection Suite Client page 49 v Step 7 Distribute Safend Data Protection Suite Policies to Endpoints in this stage you can either associate policies to users and computers and distribute them directly to endpoints via SSL or use Active Directory s GPO feature to distribute Safend Data Protection Suite Policies or any other third party tool as described in the Safend Data Protection Suite User Guide v Step 8 Endpoints are Protected and Encrypted by Safend Data Protection Suite Policies in this stage only approved devices and WiFi networks can be used through permitted ports Logs about port device and WiFi network use and attempted use as well as tampering attempts are created and sent to the Management Server as described in the Safend Data Protection Suite User Guide v Step 9 Monitor Logs and Alerts view and export the log entries generated by Safend Data Protection Suite Clients as described in Chapter 10 Viewing Logs in the Safend Data Protection Suite User Guide 8 Copyright 2011 safend a wave systems company www safend com www wave com a wave systems company DATA PROTECTION SUITE Chapter 2 Preparing
71. roduct Destinatic Installatia Installatia Summa YL Wane b e 3 safend amp Wave systems company oa Sf DLPSuite mpkg readme txt UninstallDLPSuite This package will run a program to staller determine if the software can be installed To keep your computer secure you should only run programs or install software from a trusted source If you re not sure about this software s source click to Cancel to stop the program and the installation GoBack Continue aa dl 3 Now the installation configuration process begins after you click Continue 72 lt Copyright 2011 safend a wave systems company www safend com www wave com 8 safend Installation Guide a vane nelamecetiipony DATA PROTECTION SUITE Welcome to the Safend Data Protection Suite Installer 8 Introduction Destination Sele You will be guided through the steps necessary to _ install this software GoBack Continue rea ee a i 4 There is only one option click Continue Select a Destination Select the disk where you want to install the Safend Data Introduction NN Protection Suite software Destination Sel Installatior Installati n gt amp Summa Untitled 1 14 23 GB free 25 GB total Installing this software requires 196 9 MB of space fa 5 Read the summary information and click Install 73 lt Copyright 2011 saf
72. server In order not to expose your server machine user and password unnecessarily make sure you change this setting to a user group in your Active Directory before installing additional Management Consoles You can change this setting from the Administration window in the Management Console Installing the Console from the Installation Web Page Safend Data Protection Suite Management console features a One click deployment process which gives you easy access to installing the Management Console by pointing your browser to the Safend Management Server address This method automatically keeps all your Management Consoles up to date with the latest software version of the Management Server and is therefore the recommended installation method 41 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vase alana AEs DATA PROTECTION SUITE gt To install the Management Console from the installation web page 1 Access the address of the installation web page in the target machine The link is in the following format https lt servername gt lt serverport gt SafendDataProtection consoleinstall aspx Tip You may also use a shorter link format https lt servername gt lt serverport gt SafendDataProtection This address can be found in the General tab of the Administration window which you can access from the Management Console s Too s menu The installation p
73. stall Safend Data Protection Suite either manually or silently from the GPO The process of uninstalling is password protected using a global password or a policy specific password which you defined in the Policies World in the Safend Data Protection Suite Management Console Uninstalling Manually Here is a description of how to uninstall the Client manually gt To uninstall manually 1 From the Control Panel s Add or Remove Programs select Data Protection Suite Agent as follows E Add or Remove Programs Change or Remove Programs A Add Mew Programs Add Remoye Windows Components Set Program Access and Defaults Copyright 2011 safend a wave systems company www safend com www wave com Currently installed programs G Access Help Ea Adobe Flash Player 10 Activex Ea Adobe Flash Player 10 Plugin Adobe Reader 9 2 Bl Axure RP Pro 5 5 oy Babylon pp Babylon Toolbar Check Point VPN 1 SecuRemote Secureclient NGX R60 HFA Data Protection Agent Click here for support information To change this program click Change Diskeeper Lite B Filezilla remove only Z Foxit Reader G Google Toolbar For Internet Explorer 68 GoToMeeting 4 0 0 320 aa Help Center 2 Hinh NMefinitinn Audio Driver Parckaoe KRSSS111 62 lt Size Size Size Size Size Size Size Select Data Protection Agent and click Change The install wizard opens 1 65MB 210 00MB 27 34MB 76 50MB
74. stalling Safend Data Protection Suite Clients v Installing Safend Data Protection Suite Client page 52 describes the following installation methods e Automatic Client Installation through Active Directory e Automatic Client Installation generic e Manual Installation v Upgrading Safend Data Protection Suite Client page 61 describes how to upgrade the Safend Data Protection Suite Client v Uninstalling Safend Data Protection Suite Client Page 62 describes how to uninstall Safend Data Protection Suite Client 49 Copyright 2011 safend a wave systems company www safend com www wave com amp safend Installation Guide vine atime AE DATA PROTECTION SUITE Prerequisites NOTE Refer to the What s New document for the most up to date system requirements Before Deploying Safend Data Protection Suite Client In order to install Safend Data Protection Suite Client you must first install the Management Server This is necessary in order to raise the security level of the system by imprinting each installed client with the encryption keys of the server From the point of installation Safend Data Protection Suite Client knows the keys which it uses when communicating with the Server From this point on the Client will not accept any policy or perform any communication with a Server that does not hold matching keys This imprinting process is performed by initializing the Client with a file called ClientCo
75. to be fully initialized Ga Windows File Protec at eking and logon Existing users pee are logged on using cached LJ Remote Procedure credentials which results in shorter 23 Windows Time Serv logon times Group Policy is applied in J Internet Communic the background once the network Distributed COM becomes available H E Network Note that because this is 03 Printers background refresh extensions such E amp User Configuration as Software Installation and Folder H B Software Settings Redirection take two logons to apply changes To be able to operate a Windows eg safely these extensions require that Administrative Templates no users be lagged on Therefore v 4 gt gt Extended Standard The next time a computer or user in this OU reboots the Safend Data Protection Suite Client will be deployed to it NOTE In some cases depending on the Domain configuration it may take some time for the GPO containing the installation package which is linked to the dedicated OU to replicate to other domain controllers usually up to 15 minutes This may appear as endpoints that are not installing the Safend Data Protection Suite Clients In this case it is necessary to wait for the replication to finish before restarting the endpoints for installation 56 Copyright 2011 safend a wave systems company www safend com www wave com
76. ver Domain Credentals Safend Data Protection Suite Management Server uses a Domain User to perform tasks such as synchronizing with Active Directory and accessing remote computers via WMI The minimal credentials for this user i domain user with local administrative privileges on the Server machine However itis recommended to use user with local administrative privileges on client endpoint as well which will allow you to collect logs and update policy on client outside regular intervals Domain Administrator is typical user that would have such credentials Fill in the domain user credentials Mote that without proper credentials operations will fail 17 Inthe Domain Credentials window enter the domain user credentials Safend Data Protection Suite Management Server requires a domain account from your Active Directory in order to perform tasks such as creating GPOs and for controlling clients via WMI We recommend that you enter an account with domain administrator privileges you may change this user after installation 18 Click Next Users access to the Management Console is restricted for security reasons Safend Data Protection Suite does not require its own users and computers database Instead credentials are checked against Active Directory and or local user accounts on the Management Server machine Following installation access to the Management Console is restricted to users who have local
77. wave systems company www safend com www wave com 3 safend Installation Guide vase sk Gen DATA PROTECTION SUITE Safend Data Protection Suite Management Server i Database credentals Please supply the database connection details for Safend Data Protection Suite Server to create the database tables and access it Database Server For non detault instance use the format serverinstance Database authentication mode 8 MS SOL Security Microsoft Windows Security Database validation will be performed on clicking Nest 13 Inthe Database Credentials window perform the following steps 1 Inthe Database Server field enter the database server name for a non default instance use the format server instance 2 Under Database authentication mode click the appropriate radio button to select whether to use MS SQL Security or Microsoft Windows Security 3 Enter the database authentication credentials User Name and Password If you selected Microsoft Windows Security you must also enter a Domain name 14 Click Next The installation program validates access to the database NOTE If validation fails re enter the correct information or click Cancel to exit the installation wizard NOTE If a valid Safend Data Protection Suite database already exists on this database server the following window opens 20 Copyright 2011 safend a wave systems company www safend com www wave com
78. will allow you to continue working with pour existing Safend Data Protection Suite Clients Join a Cluster Select this option if you already have at least ane Management Server using an external database and you would like to add another server to form cluster Cancel 3 Select the Restore radio button The following window opens 28 lt Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide permer Aron DATA PROTECTION SUITE Safend Data Protection Suite Management Server i Restore To restore a previous instalation of your Management Server system information is required Please select one of the following 8 Use Safend Data Protection Suite backup files Select this option to import existing information to new database 3 Connect to an existing Safend Data Protection Suite MS SOL database Select this option to maintain an existing Safend Data Protection Suite external database version 3 2 and up Cancel 4 Inthe Restore window select the appropriate radio button according to whether you wish to use Safend Data Protection Suite backup files or connect to an existing external Safend Data Protection Suite MS SQL database If you select the second option Connect to an existing Safend Data Protection Suite MS SQL database skip to step 8 below 5 Click Next The Backup Files window opens Safend Data Protection Suite Mana
79. y applicable for unencrypted endpoints If the endpoint is encrypted then a reboot message will appear after decryption 12 Save the file with a bat extension 13 Close the folder click the Add button and then the Browse button 14 Select the newly created batch file and click the OK button 66 lt Copyright 2011 safend a wave systems company www safend com www wave com safend Installation Guide vas ok coligary DATA PROTECTION SUITE Safend Data Protection Suite Client Cleanup Utility A Client cleanup utility is available for use when you cannot uninstall Safend Data Protection Suite Client from an endpoint using the processes described above because the Operating System OS is not functioning NOTE In the case where the endpoint is encrypted using internal hard disk encryption run the Recovery utility See the Safend Data Protection Suite User Guide Appendix A Safend Recovery Tool for Encrypted Hard Disk gt Torun the Client Cleanup utility 1 Run the Windows PE operating system from a bootable CD 2 Runspec exe The Cleanup Utility window opens 3 Supply the computer specific Cleanup Token to Safend support Support safend com Once you receive your cleanup key from Safend support enter it in the Cleanup Key field 4 Enter the path for the system32 operating system folder 5 Click Cleanup Now The Client cleanup process begins and a progress bar shows its progress This may take a

Safend Protector User Guide

Contents

Download Pdf Manuals

Related Search

Related Contents