TM Client/Server Edition8 - Trend Micro

1 OfficeScanTMClient/ server Edition8for Enterprise and Medium BusinessInstallation and Deployment GuideEndpoint SecurityesTrend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files, release notes, and the latest version of the applicable user documentation, which are available from the Trend Micro Web site at: Micro , the Trend Micro t-ball logo, OfficeScan, Control Manager, Damage Cleanup Services, ScanMail, ServerProtect, and TrendLabs are trademarks or registered trademarks of Trend Micro , Incorporated. All other product or company names may be trademarks or registered trademarks of their 1998-2007 Trend Micro Incorporated. All rights reserved. Document Part No. OSEM83054/70130 Release Date: May 2007, updated November 2007 Protected by Patent No. 5,623,600; 5,889,943; 5,951,698; ,165 The user documentation for Trend Micro OfficeScan introduces the main features of the software and installation instructions for your production environment.

2 Read through it before installing or using the information about how to use specific features within the software are available in the online help file and the online Knowledge Base at Trend Micro s Web Micro always seeks to improve its documentation. If you have questions, comments, or suggestions about this or any Trend Micro document, please contact us at evaluate this documentation on the following site: 1: Planning server InstallationInstallation Requirements .. 1-1 OfficeScan server Requirements .. 1-2 Web Console Requirements .. 1-3 Product Versions and Keys .. 1-3 Full Version and Evaluation Version .. 1-3 The Registration Key and Activation Codes .. 1-4 Installation Considerations .. 1-5 Location of the OfficeScan server .. 1-5 Remote Installation .. 1-5 server Performance .. 1-6 Dedicated server .. 1-6 Unsupported Client Platforms .. 1-7 Number of Domains .. 1-7 Number of clients .. 1-7 Network Traffic .. 1-8 Placement of the Program Files .. 1-9 Third Party Antivirus Applications.

3 1-10 Required Installation Information .. 1-10 OfficeScan Ports .. 1-11 Other Installation Notes .. 1-11 Computer Restart not Required .. 1-11 Other OfficeScan Programs .. 1-12 Client Settings .. 1-12 Apache Web server .. 1-12 Planning a Pilot Deployment .. 1-13 Choosing a Pilot Site .. 1-13 Creating a Rollback Plan .. 1-13 Deploying Your Pilot .. 1-13 Evaluating Your Pilot Deployment .. 1-13 Known Compatibility Issues .. 1-14 Microsoft Small Business server .. 1-14 Microsoft Lockdown Tools and URLScan .. 1-14 Trend Micro OfficeScan Installation and Deployment GuideiiMicrosoft Exchange server .. 1-14 SQL server .. 1-15 Internet Connection Firewall (ICF) .. 1-15 Chapter 2: Installing and Upgrading the OfficeScan ServerInstalling or Upgrading the OfficeScan server .. 2-2 Performing Silent Installation .. 2-10 Upgrading from an Evaluation Version .. 2-11 Upgrading from Control Manager .. 2-12 Post-installation Tasks .. 2-18 Verifying the server Installation or Upgrade.

4 2-19 Updating OfficeScan Components .. 2-20 Checking Default Settings .. 2-20 Using Client Mover for Legacy Platforms .. 2-21 Restoring Settings after Rollback or Reinstallation .. 2-24 Registering OfficeScan to Control Manager .. 2-26 Installing Plug-in Manager .. 2-26 Uninstalling the server .. 2-27 Chapter 3: Planning Client InstallationInstallation Requirements .. 3-1 Update Agent Requirements .. 3-5 Installation Methods .. 3-5 Summary .. 3-7 Chapter 4: Installing and Upgrading the OfficeScan ClientPerforming Fresh Installation .. 4-2 Installing from the Web Install Page .. 4-2 Installing with Login Script Setup .. 4-3 Installing with Client Packager .. 4-6 Installing from the OfficeScan Web Console .. 4-13 Installing from a Client Disk Image .. 4-15 Installing with Vulnerability Scanner .. 4-16 Upgrading the OfficeScan Client .. 4-17 Migrating from Third-party Antivirus Applications .. 4-17 Automatic Client Migration .. 4-17 Migrating from ServerProtect Normal Servers.

5 4-18 ContentsiiiSystem Requirements .. 4-18 Installing server Protect Normal server Migration Tool .. 4-19 Post-installation Tasks .. 4-21 Verifying the Client Installation, Upgrade, or Migration .. 4-21 Initiating Component Update .. 4-24 Testing OfficeScan Using the EICAR Test Script .. 4-25 Uninstalling the Client .. 4-26 Uninstalling from the Web Console .. 4-26 Running the Client Uninstallation Program .. 4-27 Chapter 5: FAQs and TroubleshootingFrequently Asked Questions (FAQs) .. 5-1 Troubleshooting Resources .. 5-4 Case Diagnostic Tool .. 5-4 Installation Logs .. 5-4 server Debug Logs .. 5-5 Client Debug Logs .. 5-6 Knowledge Base .. 5-6 Troubleshooting Installation Issues .. 5-7 Client Installation .. 5-7 Migration from Third-party Antivirus Software .. 5-10 Client Uninstallation .. 5-12 server Uninstallation .. 5-14 Apache Web server .. 5-15 Chapter 6: Contacting Trend MicroTechnical Support .. 6-1 Speeding Up Your Support Call .. 6-2 The Trend Micro Knowledge Base.

6 6-2 TrendLabs .. 6-3 Security Information Center .. 6-3 Sending Suspicious Files to Trend Micro .. 6-4 Documentation Feedback .. 6-4 Trend Micro OfficeScan Installation and Deployment GuideivAppendix A: Sample DeploymentBasic Network .. A-1 Multiple Site Network .. A-2 Head Office Deployment .. A-5 Remote Site 1 Deployment .. A-5 Remote Site 2 Deployment .. A-6 Index1-1 Chapter 1 Planning server InstallationTopics in this chapter: Installation Requirements on page 1-1 Product Versions and Keys on page 1-3 Installation Considerations on page 1-5 Required Installation Information on page 1-10 OfficeScan Ports on page 1-11 Other Installation Notes on page 1-11 Planning a Pilot Deployment on page 1-13 Known Compatibility Issues on page 1-14 Installation RequirementsThe following are the requirements for the OfficeScan server and Web Micro OfficeScan Installation and Deployment Guide1-2 OfficeScan server RequirementsTABLE 1-1.

7 OfficeScan server requirementsResourceRequirementOperating System Microsoft Windows 2000 server with Service Pack 3 or 4 Microsoft Windows 2000 Advanced server with Service Pack 3 or 4 Microsoft Windows server 2003 32-bit edition with or without Service Pack 1 or 2 Microsoft Windows server 2003 64-bit edition with or without Service Pack 1 or 2 Microsoft Windows server 2003 R2 32-bit edition with or without Service Pack 1 or 2 Microsoft Windows server 2003 R2 64-bit edition with or without Service Pack 1 or 2 Microsoft Windows Storage server 2003 32-bit edition Microsoft Windows Storage server 2003 64-bit edition Microsoft Cluster server 2000 Microsoft Cluster server 2003 Hardware 800 MHz Intel Pentium processor or equivalent 512MB of RAM 1GB of disk space Network Interface Card (NIC) Monitor that supports 800 x 600 resolution at 256 colors or higherWeb server Microsoft Internet Information server (IIS)on Windows 2000: version (Service Pack 3 or 4)on Windows server 2003: version Apache Web server or later (for Windows 2000/ server 2003 only)Planning server Installation1-3 Note:If you plan to install the Cisco Trust Agent (CTA) on the same computer as the OfficeScan server , do not install OfficeScan server on Windows server 2003 x64 edition .

8 See the Administrator s Guide for more information on CTA requirements. Web Console RequirementsProduct Versions and KeysFull Version and Evaluation VersionInstall either a full version of OfficeScan or a free, evaluation (trial) version. Full version: Includes all the product features and technical support, and provides a grace period (usually 30 days) after the license expires. If you do not renew the license after the grace period expires, you will not be Others Administrator or Domain Administrator access on the server computer File and printer sharing for Microsoft Networks installed on the server computerTABLE 1-2. Web console requirementsResourceRequirementHardware 300 MHz Intel Pentium processor or equivalent 128MB of RAM 30MB of available disk space Monitor that supports 800 x 600 resolution at 256 colors or higherBrowserMicrosoft Internet Explorer Service Pack 1 or laterTABLE 1-1. OfficeScan server requirementsResourceRequirementTrend Micro OfficeScan Installation and Deployment Guide1-4able to obtain technical support and perform component update.

9 The scan engines will still scan computers using out-of-date components. These out-of-date components may not be able to protect you completely from the latest security risks. You can renew the license before or after it expires by purchasing a maintenance renewal. Evaluation (Trial) version: Includes all the product features. You can upgrade an evaluation version to a full version at any time. If not upgraded at the end of the evaluation period, OfficeScan disables component update, scanning, and all client :Both versions require a different type of Activation Code. Register your product if you do not have an Activation Registration Key and Activation CodesDuring installation, OfficeScan prompts you to enter the Activation Codes for the Antivirus, Damage Cleanup Services (optional) and Web Threat Protection you do not have the Activation Code(s), use the Registration Key that came with your product to register on the Trend Micro Web site and receive the Activation Code(s).

10 The OfficeScan master installer automatically redirects you to the Trend Micro Web site: you do not have either the Registration Key or Activation Code, contact your Trend Micro sales representative (see Contacting Trend Micro on page 6-1).Note:For questions about registration, refer to server Installation1-5 Installation ConsiderationsTake the following factors into consideration when planning to install the OfficeScan server : Location of the OfficeScan server on page 1-5 Remote Installation on page 1-5 server Performance on page 1-6 Dedicated server on page 1-6 Unsupported Client Platforms on page 1-7 Number of Domains on page 1-7 Number of clients on page 1-7 Network Traffic on page 1-8 Placement of the Program Files on page 1-9 Third Party Antivirus Applications on page 1-10 Location of the OfficeScan ServerOfficeScan can accommodate a variety of network environments. For example, you can position a firewall between the OfficeScan server and its clients , or position both the server and all clients behind a single network firewall.