User manual AVIRA ANTIVIR ISA SERVER

[. . . ] www. avira. com User Manual Avira AntiVir ISA Server Security for your Internet communication MORE THAN SECURITY Contents Chapter 1. About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] You should do the following: Try to detect the way the virus / unwanted program infiltrated your system. Inform your system administrator and security provider. Submit Infected Files to Avira GmbH Please send us the viruses, unwanted programs and suspicious files that our product does not yet recognize or detect. Send us the virus or unwanted program packed in a passwordprotected archive (PGP, gzip, WinZIP, PKZip, Arj), attached to an email, to virus@antivir. com. In this way, the file will not be deleted by virus scanners on email gateways. 22 AntiVir ISA Server Avira GmbH Configuration 5 5. 1 Configuration Configuration of Microsoft ISA Server 2000/2004 Please refer to your Microsoft ISA Server documentation. 5. 2 Configuration of AntiVir ISA Service AntiVir ISA Server (SAVAPI 2) consists of two components: AntiVir ISA Service (Savapi Service) and SAVAPI. DLL. Please note that you do not usually need a special configuration of AntiVir ISA Service. AntiVir ISA Service first starts with safe default values and the SAVAPI. INI file is automatically created. You can modify most of the parameters while AntiVir ISA Service is running. Only the following parameters require a restart: · · · · · Port number Temporary files directory Updates directory Name of the license file Name of the logfile Changing Parameters If you want to change one of the above parameters: Start the Service Applet in Services (Start\Control Panel\Administrative Tools\Services). Restart the program to change the SAVAPI. DLL. Avira GmbH AntiVir ISA Server 23 Configuration 5. 2. 1 Entries in SAVAPI. INI You can change the following parameters in the configuration file SAVAPI. INI: Port Number This indicates the TCP/IP port for the communication between AntiVir ISA service and SAVAPI. DLL . Remember to modify the corresponding entry in SAVAPIDL. INI (see Entry in SAVAPIDL. INI (optional) ­ Page 29). Example PortNumber=18371 Update Directory In this directory, AntiVir ISA service temporarily saves the updates downloaded from the Internet. It is a so-called working directory for the Internet Updater and it should not be changed. Make sure AntiVir ISA update service has write access to this directory. Example UpdateDirectory=C:\Programs\AntiVir\AntiVir ISA Server\update\ Name of the License File This parameter refers to the license file name which has been copied to the installation directory. Example KeyFileName=C:\Programs\AntiVir\AntiVir ISA Server\ hbedv. key Name of the Logfile It specifies the name of the logfile. By default, the logfile is placed in the installation directory and it is named SAVAPI. LOG. Example LogFileName=C:\Programs\AntiVir\AntiVir ISA Server\ savapi. log Maximum Logfile Size This value is the maximum size of the logfile (in kB). When the file size exceeds the limit, the oldest entries are deleted automatically. The file has no size limit if the value is 0. Example LogFileSize=1000 24 AntiVir ISA Server Avira GmbH Configuration Scan Archive If the value is 1 (activated), AntiVir ISA service also scans for malware in archives. The parameter is "deactivated" (0) by default. Example ScanArchives=0 Maximum Recursion for Archive Scanning This value sets the maximum nesting level for scanned archives. AntiVir ISA service unpacks the archived files down to this level and scans them for viruses and other types of malware. The parameter applies only when ScanArchives is active. Example ArchiveMaxRecursion=2 Automatic Archive Detection Archives can be identified in two modes: based on the file extension or on the contents. The detection based on the contents ("SmartDetection") is a safer method, but it takes longer. If this option is active (1), AntiVir ISA service tries to identify the archives by means of content; otherwise by file extension. The parameter applies only when ScanArchives is active. Example ArchiveSmartDetection=1 Blocking "mail bombs" It blocks so-called "mail bombs" with a very high compression ratio. You can specify up to which ratio AntiVir should unpack archives, between archived and unpacked file size. [. . . ] AntiVir detects backdoor control programs (Unwanted programs configuration tab). Without a license file, AntiVir ISA Server runs only as a demo version and scans for viruses and unwanted programs only on the local drive C: The repair function is also deactivated. When installed on your computer, this program sets up a Premium Rate Number Internet connection, charging you at high rates. Program component of AntiVir ISA Server which scans for viruses and unwanted programs. [. . . ]