Trend Micro Smart Scan for OfficeScan 10 Getting …

1 OfficeScanTM 10 For Enterprise and Medium BusinessSmart scan Getting Started GuideEndpoint SecurityesTrend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files, release notes, and the latest version of the applicable user documentation, which are available from the Trend Micro Web site at: Micro , the Trend Micro t-ball logo, OfficeScan , Control Manager, Damage Cleanup Services, eManager, InterScan, Network VirusWall, ScanMail, ServerProtect, and TrendLabs are trademarks or registered trademarks of Trend Micro , Incorporated. All other product or company names may be trademarks or registered trademarks of their 1998-2009 Trend Micro Incorporated. All rights Part No. OSEM104052/90318 Release Date: April 2009 Protected by Patent No. 5,623,600; 5,889,943; 5,951,698; ,165 The user documentation for Trend Micro OfficeScan introduces the main features of the software and installation instructions for your production environment.

2 Read through it before installing or using the information about how to use specific features within the software are available in the online help file and the online Knowledge Base at Trend Micro s Web Micro always seeks to improve its documentation. If you have questions, comments, or suggestions about this or any Trend Micro document, please contact us at evaluate this documentation on the following site: Documentation ..viiiAudience .. ixDocument Conventions .. ixTerminology .. xChapter 1: Introducing Trend Micro Smart ScanHow Does Trend Micro Smart scan Work? .. 1-2 The Need for a New Solution .. 1-2 The Trend Micro Smart scan Solution .. 1-3 Smart scan Server .. 1-4 OfficeScan Server .. 1-5 How a File s Reputation is Determined .. 1-6 Features and Benefits .. 1-6 Trend Micro Smart Protection Network .. 1-7 File Reputation .. 1-7 Chapter 2: Smart scan DeploymentScan Methods .. 2-2 Deployment Overview.

3 2-6 All Clients Use Smart scan .. 2-7 Most Clients Use Smart scan .. 2-8 Deploying Smart scan During an Upgrade .. 2-9 Deploying Smart scan During Fresh Installations .. 2-14 Most Clients Use Conventional scan .. 2-16 Trend Micro Smart scan for OfficeScan 10 Getting Started GuideivChapter 3: Smart scan EnvironmentPreparing the Smart scan Environment .. 3-2 Installing Local Smart scan Servers .. 3-3 Recommended System Requirements .. 3-4 Environment Considerations .. 3-8 Recommended Capacity Examples .. 3-8 Performance Considerations .. 3-9 Installing the Standalone Smart scan Server ..3-10 Running the Installation Program ..3-10 Post-installation ..3-23 Logging On to the Standalone Server ..3-23 Installing the Integrated Smart scan Server ..3-24 Configuring External Proxy Settings ..3-27 Configuring Internal Proxy Settings ..3-28 Configuring the Smart scan Server List ..3-29 Standard List.

4 3-29 Custom Lists ..3-31 Configuring Computer Location Settings ..3-32 Reference Servers ..3-34 Chapter 4: Managing Smart scan Clients and ServersManaging Smart scan Clients .. 4-2 Client Information .. 4-2 Client Icons .. 4-4 Managing the Standalone Smart scan Server .. 4-8 Using the Product Console .. 4-8 Accessing the Product Console .. 4-9 Using the Summary Screen ..4-10 Updating Components ..4-10 Configuring Manual Updates ..4-11 Configuring Scheduled Updates ..4-12 Configuring an Update Source ..4-13 Configuring Proxy Settings ..4-14 Updating the Program ..4-15 ContentsvAdministrative Tasks .. 4-15 Using SNMP Service .. 4-15 Downloading Diagnostic Information .. 4-18 Changing the Product Console Password .. 4-19 Managing the Integrated Smart scan Server .. 4-20 Updating Components .. 4-20 Proxy for Server Update .. 4-21 Component Rollback .. 4-22 Chapter 5: Getting HelpTroubleshooting.

5 5-2 Contacting Trend Micro .. 5-4 Technical Support .. 5-4 The Trend Micro Knowledge Base .. 5-5 TrendLabs .. 5-5 Security Information Center .. 5-6 Sending Suspicious Files to Trend Micro .. 5-6 Documentation Feedback .. 5-7 Appendix A: Smart scan Deployment TasksConfiguring scan Methods .. A-1 Recording OfficeScan Server Information .. A-2 Upgrading Clients by Moving Them to an OfficeScan 10 Server .. A-2 Manually Upgrading Clients .. A-4 Configuring Automatic Client Upgrade and Update Settings .. A-6 Managing OfficeScan Domains .. A-7 Appendix B: Command Line Interface (CLI) CommandsList of Commands ..B-2 IndexTrend Micro Smart scan for OfficeScan 10 Getting Started GuideviviiPrefacePrefaceWelcome to the Trend Micro Smart scan for OfficeScan Getting Started guide . This document introduces Smart scan concepts, guides users on preparing the Smart scan environment, and provides instructions on managing Smart scan in this chapter: OfficeScan Documentation on page viii Audience on page ix Document Conventions on page ixTrend Micro Smart scan for OfficeScan 10 Getting Started guide viiiOfficeScan DocumentationOfficeScan documentation includes the following:Download the latest versions of the PDF documents and readme at: P-1.

6 OfficeScan documentationDOCUMENTATIONDESCRIPTIONT rend Micro Smart scan for OfficeScan Getting Started GuideA PDF document that helps users understand Smart scan concepts, prepare the environment needed to use Smart scan , and manage Smart scan clientsInstallation and Upgrade GuideA PDF document that discusses requirements and procedures for installing and upgrading the OfficeScan serverAdministrator s GuideA PDF document that discusses Getting started information, client installation procedures, and OfficeScan server and client managementHelpHTML files compiled in WebHelp or CHM format that provide "how to's", usage advice, and field-specific information. The Help is accessible from the OfficeScan server, client, and Policy Server consoles, and from the OfficeScan Master fileContains a list of known issues and basic installation steps. It may also contain late-breaking product information not found in the Help or printed documentationKnowledge BaseAn online database of problem-solving and troubleshooting information.

7 It provides the latest information about known product issues. To access the Knowledge Base, go to the following Web site: documentation is intended for the following users: OfficeScan Administrators: Responsible for OfficeScan management, including server and client installation and management. These users are expected to have advanced networking and server management knowledge. Cisco NAC administrators: Responsible for designing and maintaining security systems with Cisco NAC servers and Cisco networking equipment. They are assumed to have experience with this equipment. End users: Users who have the OfficeScan client installed on their computers. The computer skill level of these individuals ranges from beginner to power ConventionsTo help you locate and interpret information easily, the OfficeScan documentation uses the following conventions:TABLE P-2. Document conventionsCONVENTIONDESCRIPTIONALL CAPITALSA cronyms, abbreviations, and names of certain commands and keys on the keyboardBoldMenus and menu commands, command buttons, tabs, options, and tasksItalicsReferences to other documentation or new technology componentsTOOLS > CLIENT TOOLSA "breadcrumb" found at the start of procedures that helps users navigate to the relevant Web console screen.

8 Multiple breadcrumbs means that there are several ways to get to the same screen.<Text>Indicates that the text inside the angle brackets should be replaced by actual data. For example, C:\Program Files\<file_name> can be C:\Program Files\ Micro Smart scan for OfficeScan 10 Getting Started guide xTerminologyThe following table provides the official terminology used throughout the OfficeScan documentation:Note:textProvides configuration notes or recommendationsTip: textProvides best practice information and Trend Micro recommendationsWARNING! textProvides warnings about activities that may harm computers on your networkTABLE P-3. OfficeScan terminologyTERMINOLOGYDESCRIPTIONC lientThe OfficeScan client programClient computer or endpointThe computer where the OfficeScan client is installedClient user (or user)The person managing the OfficeScan client on the client computerServerThe OfficeScan server programServer computerThe computer where the OfficeScan server is installedTABLE P-2.

9 Document conventions (Continued)CONVENTIONDESCRIPTIONP refacexiAdministrator (or OfficeScan administrator)The person managing the OfficeScan serverConsoleThe user interface for configuring and managing OfficeScan server and client settingsThe console for the OfficeScan server program is called "Web console", while the console for the client program is called "client console".Security riskThe collective term for virus/malware, spyware/grayware, and Web threatsProduct serviceIncludes Antivirus, Damage Cleanup Services, and Web Reputation and Anti-spyware all of which are activated during OfficeScan server installationOfficeScan serviceServices hosted by Microsoft Management Console (MMC). For example, , the OfficeScan Master the OfficeScan client, Cisco Trust Agent, and Plug-in ManagerComponentsResponsible for scanning, detecting, and taking actions against security risksClient installation folderThe folder on the computer that contains the OfficeScan client files.

10 If you accept the default settings during installation, you will find the installation folder at any of the following locations:C:\Program Files\ Trend Micro \ OfficeScan ClientC:\Program Files (x86)\ Trend Micro \ OfficeScan ClientTABLE P-3. OfficeScan terminology (Continued)TERMINOLOGYDESCRIPTIONT rend Micro Smart scan for OfficeScan 10 Getting Started guide xiiServer installation folderThe folder on the computer that contains the OfficeScan server files. If you accept the default settings during installation, you will find the installation folder at any of the following locations:C:\Program Files\ Trend Micro \OfficeScanC:\Program Files (x86)\ Trend Micro \OfficeScanFor example, if a particular file is found under \PCCSRV on the server installation folder, the full path to the file is:C:\Program Files\ Trend Micro \ OfficeScan \PCCSRV\<file_name>. Smart scan clientAn OfficeScan client that has been configured to use Smart scanConventional scan clientAn OfficeScan client that has been configured to use conventional scanTABLE P-3.