INSTALLATION HANDS-ON

Page 2

About the Hands-On

This hands-on section is structured in a way, that it allows you towork independently, but still giving you the possibility to consultstep-by-step instructions.

Each given task will be divided into two sections

•Actual Task

•Conditions, goals and short instructions

•Allowing you to work independently

•Detailed instructions (step-by-step work through)

•In case you can not come up with own solutions

Page 3

Task Overview

1.Policy Manager deployment (incl. PMS, PMC and AUSYS)

2.Console initialization and initial configuration

3.AVCS 6.x rollout

Page 4

Infrastructure

Your environment consists of two computers

•Windows 2003 Standard Server (SP3)

•Windows XP Professional (SP2)

Network

•100 Mbit Ethernet, supporting TCP/IP

•C-class network (192.168.100.0/24)

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\lan1_white.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\muuri.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\net1_white.gif$

XP Pro SP2

2003 Server

Root UpdateServer

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$

Page 5

Task 1

Install Policy Manager with allnecessary components (notFSAVCS yet) on a singlecomputer

•Is such an installation possible inthis environment?

Once you have a clear plan howto proceed, install the productsand configure it as follows

•Limit access to the PMS adminmodule to local host (use thedefault ports during installation)

If needed, the next pages willprovide you with a step-by-stepwalkthrough

=> After installation is completed,continue on to page 19

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\lan1_white.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\muuri.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\net1_white.gif$

XP Pro SP2

2003Server

RootUpdateServer

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$

Page 6

Policy Manager Installation Walk-Through

Insert the F-Secure Product CD (old screenshot!)

•Select ”F-Secure Policy Manager”

$H:\Install1.jpg$

Page 7

Policy Manager Installation Walk-Through

Choose the installation language

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst01.jpg$

Page 8

Policy Manager Installation Walk-Through

Read the F-Secure License Terms and accept the agreement

•Click ”Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst02.jpg$

Page 9

Policy Manager Installation Walk-Through

Accept Custom installation

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst03.jpg$

Page 10

Policy Manager Installation Walk-Through

Also here accept default selections

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst04.jpg$

Page 11

Policy Manager Installation Walk-Through

Default installation path C:\Program Files\F-Secure is fine

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst05.jpg$

Page 12

Policy Manager Installation Walk-Through

There is no old Policy Manager installed, so accept the default

•Click ”Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst06.jpg$

Page 13

Policy Manager Installation Walk-Through

Accept the default Port Numbers

•Click ”Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst07.jpg$

Page 14

Policy Manager Installation Walk-Through

Select F-Secure Anti-Virus Client Security 6.x

•Click ”Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst08.jpg$

Page 15

Policy Manager Installation Walk-Through

Necessary setup information has been collected. System is ready forinstallation

•Click “Start”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst09.jpg$

Page 16

Policy Manager Installation Walk-Through

Installation in process. Do not restart the system until 100 %completed

•Might take some minutes

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst10.jpg$

Page 17

Policy Manager Installation Walk-Through

Components have been installed

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst11.jpg$

Page 18

Policy Manager Installation Walk-Through

Installation finished successfully

•Click “Finish”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Inst12.jpg$

Page 19

Task 1 Completed

F-Secure Policy Manager is nowinstalled

•Check the Server Status

•Start/Status Monitor

•Both Apache modules should haveStatus: OK

•Web Reporting Module will still show anerror, because we didn’t initialize theconsole yet

Initializing and configuring the consolewill be your next task

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\ApacheCheck1.jpg$

Page 20

Task 2

Initialize and configure Policy Manager Console

•Start the Console and go through the initialization process

•After that, configure the console as follows

•Rename the Root domain to F-Secure

•Restrict all user settings (try to find the easiest way)

•Define the Policy Manager host communication address

•Note: The address defined during the consoleinitialization is the administration module address

•Change the server polling interval to 10 seconds (incomingand outgoing requests)

•Distribute policies!

Task continues on next page…

Page 21

Task 2

Perform a general system check

•Are all modules working properly?

•What does the status monitor say?

•Try out the web reporting, does it work?

Try to complete this task independently

•If needed, next pages will provide you with a step-by-step walk through

=> If you managed to complete this task, continue on page 36

Page 22

Console Initialization Walk-Through

Start Policy Manager from Start menu for initialization

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\PMC_Conf01.jpg$

Page 23

Console Initialization Walk-Through

Select Administrator mode

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\PMC_Conf02.jpg$

Page 24

Console Initialization Walk-Through

Accept default

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\PMC_Conf03.jpg$

Page 25

Console Initialization Walk-Through

Select the location of the key-pair. Defaults are ok.

•Click ”Next”

$T:\wengch\ProductCourses\Screenshots\Installation\SetupWizard4.jpg$

Page 26

Console Initialization Walk-Through

Create administrator’s cryptographic keys

•Move the cursor until the next dialogue box appears

$T:\wengch\ProductCourses\Screenshots\Installation\SetupWizard5.jpg$

Page 27

Console Initialization Walk-Through

Enter the administrative password. Use “password” in this hands-on

•Click “Next”

$T:\wengch\ProductCourses\Screenshots\Installation\SetupWizard6.jpg$

Page 28

Console Initialization Walk-Through

Click ”Finish”

$T:\wengch\ProductCourses\Screenshots\Installation\SetupWizard7.jpg$

Page 29

Console Initialization Walk-Through

First Policy Manager Console launch

•By default, Policy Manager Console is run in the Anti-VirusAdministration mode (AV mode)

Policy Manager is now initialized and ready to use

Next step is the console configuration and first policy distribution

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\PMC_FirstLaunch.jpg$

Page 30

Initial Console Configuration Walk-Through

Rename the root domain

•Right-click the root domain

•Select Domain/Host Properties

•Rename “Root” to “F-Secure”

After that start fine tuning thecommunication settings

•Click Centralized Management tab

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Initial Configuration.jpg$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\nuoli_i_s.gif$

Page 31

Initial Console Configuration Walk-Through

Prevent user from changing most important settings

•Click “Do not allow users to change settings…”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\CommunicationSettings.jpg$

Page 32

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\CommunicationSettings.jpg$

Initial Console Configuration Walk-Through

Define communication settings

•Set Policy Manager Server address (IP address of your PMS computer)

•Set both polling intervals to 10 seconds

Page 33

Initial Console Configuration Walk-Through

Distribute the Policy, select File/Distribute (or press CTRL + D)

$C:\av550c_v09_i\Screen Captures\pm\Image34.jpg$

Page 34

System Status CheckOverall

Check the status of the PolicyManager Server

•From the start menu:Start/Programs/F-Secure PolicyManager Server/Status Monitor

•The Web Reporting error should nowbe fixed

$T:\wengch\ProductCourses\Screenshots\Installation\ServerMonitor.jpg$

Page 35

System Status Check (Optional)Web Reporting

Open Report web interface

•From the start menu: Start/Programs/F-Secure Policy Manager Server/F-Secure Policy Manager Web Reporting

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\WebReporting.jpg$

Page 36

Task 2 completed

Policy Manager initialization andconfiguration has been finalized

•The next task will be F-Secure Anti-VirusClient Security 6 rollout

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\lan1_white.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\muuri.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\net1_white.gif$

XP Pro SP2

F-SecurePMS / PMC

Root UpdateServer

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2.gif$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\newpc_logo.gif$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$

Page 37

Task 3

Install AVCS 6.x on your client computer running Windows XP SP2

•Is the installation possible without any changes to the host?

•Any conflicting software installed on the target system?

•Which rollout method is best suited for this environment?

•Which methods are possible?

•Is there a firewall installed on the host preventing certain rolloutmethods?

Task continues on next page…

Page 38

Task 3

Once you have a clear plan on how to rollout AVCS 6.x, and you havechecked all issues mentioned on the previous page, go ahead with therollout

Try to complete this task independently

•If needed, the next pages will provide you with a step-by-step walk through

=> If you managed to complete this task and your client has rebooted,continue on page 61

Page 39

Pre-Rollout Checks

Check your target host for installed conflicting software

•Check if there is conflicting software installed on the computer

•If there is, check if that product is automatically detected and removed byF-Secure Sidegrade Function

•Important: Always check all your hosts for conflicting software beforeyour start any rollout

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\RolloutChecklist_McAfee.jpg$

Page 40

Pre-Rollout Checks

If the XP Firewall on your host is enabled:

•F-Secure Intelligent Installations requirescertain inbound traffic allowed on target host(TCP 135 and 445)

•Try to connect to the ports from your PMS

•Open the command prompt and telnetthe ports

•There will be no response, so you needto allow the above mentioned protocolson your target host

•Try to come up with a solution, withoutdisabling the firewall!

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\RolloutChecklist_PushError.jpg$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\RolloutChecklist_Telnet.jpg$

Page 41

XP Firewall Configuration

Configure XP SP2 firewall exceptions

•Allow “File and Printer Sharing”

•Press “Edit”

•Enable SMB only (TCP 445)

•Disable all other ports

•Create a new service and allow RPC

•Press “Add Port”

•Name: RPC, Port number: 135

•Confirm by pressing OK

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\RolloutChecklist_XPFW1.jpg$

Page 42

Remote Installation Walk-Through

Select ”Installation” tab on the editor pane

•Click “Autodiscover Windows hosts…”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage1.jpg$

Page 43

Remote Installation Walk-Through

Select your target host from the list

•Click “Install”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage2.jpg$

Page 44

Remote Installation Walk-Through

Select F-Secure Anti-Virus Client Security 6.x

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage3.jpg$

Page 45

Remote Installation Walk-Through

Check that F-Secure Anti-Virus for Client Security 6.x is the onlyselection

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage4.jpg$

Page 46

Remote Installation Walk-Through

Include the policy from your root domain “F-Secure”

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage5.jpg$

Page 47

Remote Installation Walk-Through

Accept the default domain account

•Domain administrator account will be used to access the target host

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage6.jpg$

Page 48

Remote Installation Walk-Through

Check the installation details, correct if necessary (“Back” button)

•Click “Start”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage7.jpg$

Page 49

Remote Installation Walk-Through

Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage8.jpg$

Page 50

Remote Installation Walk-Through

Instructor will provide you with the correct keycode

•After typing the keycode, click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage9.jpg$

Page 51

$E:\captures\webtraffic.jpg$

Remote Installation Walk-Through

Install Virus Protection, E-mail scanning and Internet Shield

•Click ”Next”

Page 52

Remote Installation Walk-Through

Select the language the product will use

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage11.jpg$

Page 53

Remote Installation Walk-Through

Choose centrally managed installation

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage12.jpg$

Page 54

Remote Installation Walk-Through

Specify your Policy Manager Server’s URL

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage13.jpg$

Page 55

Remote Installation Walk-Through

No need to add a custom property at this stage

•Click ”Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage14.jpg$

Page 56

Remote Installation Walk-Through

At this point you will be able to choose whether to remove conflictingsoftware automatically

•Accept the default setting

•Click “Next”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage15.jpg$

Page 57

Remote Installation Walk-Through

Select “Restart after installation, in”

•Change the countdown to 1 minute

•Type a reboot message

•Click “Finish”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage16.jpg$

Page 58

Remote Installation Walk-Through

Wait while Intelligent Installation creates the distribution package

•This step might take some minutes (depending on your system)

•Do not press “Cancel”

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage17.jpg$

Page 59

Remote Installation Walk-Through

F-Secure Setup will start and install AVCS 6.x to your computer

Wait until the Reboot message appears on your screen

•Don’t reboot yet, minimize the window

$I:\16\suite\HO\02.gif$

$I:\16\suite\HO\03.gif$

$I:\16\suite\HO\04.gif$

Page 60

Remote Installation Walk-Through

The ”Installation progress” windowshows you if the installation hasfinished successfully

•Close this window

•Also close the autodiscoverwizard window

•Distribute policies!

•Close Policy Manager Console

On the other computer, open thereboot dialogue again and clickreboot

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_CreatePackage18.jpg$

Page 61

System Status Check

After the reboot

•Open F-Secure Anti-Virus ClientSecurity 6.x by double-clicking theF-Secure icon in the system tray

•Click “Central Management”

•Check Last connection and Policyfile counter

$C:\av550c_v09_i\Screen Captures\client\1\Image10.jpg$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\Screenshots\05_InstallationHandsON\Rollout_SystemStatusCheck1.jpg$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\nuoli_e_s.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\nuoli_i_s.gif$

Page 62

Task 3 Completed

Congratulations! You have successfully finished theInstallation hands-on

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\lan1_white.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\muuri.gif$

$N:\CustomerAdvocacy\Professional Services\TrainingDepartment\icons\net1_white.gif$

F-SecureAVCS 6

F-SecurePMS / PMC

Root UpdateServer

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2.gif$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\newpc_logo.gif$

$C:\Documents and Settings\wengch\Desktop\pm600c_v300_i\icons\server2_s.gif$