ESET GATEWAY SECURITY Manuel utilisateur

ESET Gateway Security

Installation Manual

and User’s documentation

we protect digital worlds

2ESET Gateway Security

Table of contents

1. Introduction .........................................................................................3

2.Terminology and abbreviations..........................................................5

3. Installation............................................................................................. 9

4. Product’s Roadmap............................................................................11

5.Integration with Internet Gateway services...................................15

5.1. Transparent HTTP/FTP proxy conguration........................................16

5.2. Manual HTTP/FTP proxy conguration............................................... 17

5.2.1. Manual proxy conguration of Mozilla Firefox.............................17

5.2.2. Manual proxy conguration of Squid Web Proxy Cache............18

5.3. Large HTTP Objects Handling..................................................................19

5.3.1. Method of deferred scan....................................................................... 19

5.3.2. Partial scan technique............................................................................ 19

5.4.ESETS plug-in lter for SafeSquid Proxy Cache..................................20

5.4.1. Operation principle..................................................................................20

5.4.2. Installation and conguration..............................................................20

6. Important ESET Gateway Security mechanisms...........................23

6.1. Handle Object Policy.................................................................................. 24

6.2. User Specic Conguration..................................................................... 24

6.3. Black-list and white-list..............................................................................25

6.4. Samples Submission System................................................................... 26

6.5. World WideWeb Interface..........................................................................26

6.6. Remote Administration..............................................................................27

7. ESET Security system update...........................................................29

7.1. ESETS update utility.................................................................................... 30

7.2. ESETS update process description........................................................ 30

8. Let us know..........................................................................................31

A. ESETS setup process description.....................................................33

A.1. Setting ESETS for scanning of HTTP communication -

transparent mode................................................................................................34

A.2. Setting ESETS for scanning of FTP communication - transparent

mode.........................................................................................................................34

Appendix A. PHP License .....................................................................37

ESET Gateway Security

ESET Gateway Security was developed by ESET, spol. s r.o. For more

information visit www.eset.com.

stored in a retrieval system or transmitted in any form or by any

means, electronic, mechanical, photocopying, recording, scanning, or

otherwise without a permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described

application software without prior notice.

This product includes PHP software, freely available from http://www.

php.net/software/.

REV.20080429-005

Chapter 1:

Introduction

4ESET Gateway Security

Dear user, you have acquired ESET Gateway Security - probably the best security system

running under the Linux/BSD/Solaris OS. As you will soon nd out, the system using the state-

of-the-art ESET scanning engine, has unsurpassed scanning speed and detection rate, combined

with a very small footprint that makes it the ideal choice for any Linux/BSD/Solaris OS server.

In the rest of this chapter we review a key features of the system.

• TheESETanti-virusscanningenginealgorithmsprovidethehighestdetectionrateand

the fastest scanning times.

• TheESETGatewaySecurityisdevelopedtorunonthesingle-processoraswellasonthe

multi-processor units.

• ItincludesuniqueadvancedheuristicsforWin32wormsandback-doors.

• Inbuiltarchiversunpackarchivedobjectswithouttheneedforanyexternalprograms.

• Inordertoincreasespeedandeciencyofthesystem,itsarchitectureisbasedonthe

running daemon (resident program) where all the scanning requests are sent to.

• Allexecutivedaemons(exceptesets_dac)runundernon-privilegeduseraccountto

enhance security.

• Thesystemsupportsselectivecongurationspecicforuserorclient/serveridentication.

• Sixlogginglevelscanbeconguredtogetinformationaboutsystemactivityand

inltrations.

• Conguration,administrationandlicensemanagementcanbeprovidedusingintuitive

and user friendly World Wide Web Interface.

• ThesystemsupportsESETRemoteAdministrationformanagementinlargecomputer

networks.

• TheESETGatewaySecurityinstallationdoesnotrequireexternallibrariesorprograms

except for LIBC.

• Thesystemcanbeconguredtonotifyanypersonincaseofdetectedinltrationand

other relevant events.

Toruneciently,ESETGatewaySecurityrequiresjust16MBofhard-diskspaceand32MBof

RAM. It works smoothly under the 2.2.x, 2.4.x and 2.6.x Linux OS kernel versions and also under

5.x, 6.x FreeBSD OS kernel versions.

Fromlower-powered,small oceserverstoenterprise-classISP serverswith thousandsof

users, the system delivers the performance and scalability you expect from a UNIX based solution

and the unequaled security of ESET products.

Chapter 2:

Terminology

and abbreviations

6ESET Gateway Security

In the following text we review terms and abbreviations used in this documentation. Note

that in this documentation (PDF format only) a boldface font is reserved for product components

names and in this chapter also for newly dened terms and abbreviations. Note also that terms

and abbreviations dened in this chapter are emphasized later in this documentation (PDF

format only).

ESETS

ESET Security is a common acronym for all security products developed by ESET, spol. s r.o. for

Linux OS, BSD OS and Solaris. It is also the name (or its part) of the software package containing

the products.

RSR

Abbreviation of ‘RedHat/Novell(SuSE) Ready’. Note that we support also so called RedHat

Ready and Novell(SuSE) Ready variation of the product. The dierence from the “standard”

Linux version is that the RSR package meets criteria defined by FHS (File-system Hierarchy

Standard defined as a part of Linux Standard Base) document required by the RedHat Ready and

Novell(SuSE) Ready certificate. This means for instance that the RSR package is installed as an

add-on application, i.e. the primary installation directory is ‘/opt/eset/esets’.

ESETS daemon

Main ESETS system control and scanning daemon esets_daemon.

ESETS base directory

The directory where ESETS loadable modules containing for instance virus signatures database

are stored. Further in this documentation we use abbreviation @BASEDIR@ for the directory. The

directory location is as follows:

Linux: /var/lib/esets

Linux RSR: /var/opt/eset/esets/lib

FreeBSD: /var/lib/esets

NetBSD: /var/lib/esets

Solaris: /var/opt/esets/lib

ESETS configuration directory

A directory where all files related with the ESET File Security configuration are stored. Further

in this documentation we use abbreviation @ETCDIR@ for the directory. The directory location

is as follows:

Linux: /etc/esets

Linux RSR: /etc/opt/eset/esets

FreeBSD: /usr/local/etc/esets

NetBSD: /usr/pkg/etc/esets

Solaris: /etc/opt/esets

ESETS configuration file

Main ESET File Security configuration file. The absolute path of the file is as follows:

@ETCDIR@/esets.cfg

ESETS binary files directory

The directory where the relevant ESET File Security binary files are stored. Further in this

documentation we use abbreviation @BINDIR@ for the directory. The directory location is as

follows:

Linux: /usr/bin

Linux RSR: /opt/eset/esets/bin

FreeBSD: /usr/local/bin

NetBSD: /usr/pkg/bin

Solaris: /opt/esets/bin

ESETS system binary files directory

The directory where the relevant ESET File Security system binary files are stored. Further in

this documentation we use abbreviation @SBINDIR@ for the directory. The directory location is

as follows:

Linux: /usr/sbin

Linux RSR: /opt/eset/esets/sbin

FreeBSD: /usr/local/sbin

NetBSD: /usr/pkg/sbin

Solaris: /opt/esets/sbin

ESETS object files directory

The directory where the relevant ESET File Security object files and libraries are stored. Further

in this documentation we use abbreviation @LIBDIR@ for the directory. The directory location is

as follows:

Linux: /usr/lib/esets

Linux RSR: /opt/eset/esets/lib

FreeBSD: /usr/local/lib/esets

NetBSD: /usr/pkg/lib/esets

Solaris: /opt/esets/lib

chapter 2 Terminology and abbreviations

Chapter 3:

Installation

This product is distributed as a binary le:

esets.i386.ext.bin

where‘ext’isaLinux/BSD/SolarisOSdistributiondependentsux,i.e.‘deb’forDebian,‘rpm’

for RedHat and SuSE,‘tgz’for other Linux OS distributions,‘fbs5.tgz’for FreeBSD 5.xx,‘fbs6.tgz‘ for

FreeBSD 6.xx, ‘nbs4.tgz‘ for NetBSD 4.xx and‘sol10.pkg.gz‘ for Solaris 10.

Note that the Linux RSR binary le format is:

esets-rsr.i386.rpm.bin

In order to install or update the product, use statement:

sh ./esets.i386.ext.bin

resp. for Linux RSR variation of the product, use statement:

sh ./esets-rsr.i386.rpm.bin

As a result the product’s User License Acceptance Agreement is shown. Once you have

conrmed the Acceptance Agreement, the installation package is placed into the current

working directory and relevant information regarding the package’s installation, un-installation

or update is printed into terminal.

Once the package is installed and the main ESETS service is running, in Linux OS you can

check its operation by using command:

ps -C esets_daemon

In case of BSD OS you can use a command:

ps -ax | grep esets_daemon

In case of Solaris you can use a command:

ps -A | grep esets_daemon

You will see the following (or similar) message on return:

PID TTY TIME CMD

2226 ? 00:00:00 esets_daemon

2229 ? 00:00:00 esets_daemon

where at least two ESETS daemon processes running in the background have to be present.

One of the processes is so-called process and threads manager of the system. The other serves

as ESETS scanning process.

ESET Gateway Security

Autres manuels pour GATEWAY SECURITY

Table des matières

Autres manuels ESET Logiciel

ESET

ESET MOBILE ANTIVIRUS - FOR WINDOWS MOBILE Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS 4 - FOR MICROSOFT WINDOWS... Manuel utilisateur

ESET

ESET MAIL SECURITY 4 - FOR MICROSOFT EXCHANGE SERVER... Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET MAIL SECURITY Manuel utilisateur

ESET

ESET SMART SECURITY Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuel utilisateur

ESET

ESET MOBILE ANTIVIRUS - ANNEXE 480 Manuel utilisateur

ESET

ESET MOBILE ANTIVIRUS - FOR WINDOWS MOBILE Manuel utilisateur

ESET

ESET REMOTE ADMINISTRATOR Manuel utilisateur

ESET

ESET NOD32 V 2.7 - Manuel utilisateur

ESET

ESET MAIL SECURITY - FOR LINUX BSD AND SOLARIS Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR NOVELL NETWARE SERVER Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuel utilisateur

ESET

ESET FILE SECURITY - FOR LINUX BSD AND SOLARIS Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET FILE SECURITY Manuel utilisateur

ESET

ESET NOD32 V 2.7 - Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur