F-SECURE ANTI-VIRUS LINUX SERVER SECURITY User Manual

98
Type: ACCEPT
Remote Host: [myNetwork]
Description: Windows Networking Local Browsing
Service (select box): Windows Networking Local
Browsing
Direction: in
h. Click Add Service to this Rule and Add to Firewall Rules. The
new rule should be visible at the bottom of the firewall rule list. If
you cannot see the rule, click >> to move to the end of the list.
i. Click on the up arrow next to the new ruleto move the rule above
any "Deny rest" rule.
j. Click Save to save your new rule set and apply new firewall rules.
Your SMB LAN browsing should work now.
Q. How can I set up firewall rules to access NFS servers?
A. You need to allow the following network traffic through the firewall:
› portmapper (tcp and udp port 111)
› nfsd (tcp and udp 2049)
› mountd (variable port from portmapper)
Mountd is needed only when the NFS share is mounted. After the
mount is completed, all traffic is to the nfsd.
As the mountd port is not always the same, follow these instructions
to mount NFS shares:
› Either turn off the firewall, mount (or umount) the NFS share and
turn on the firewall again, or
› on the NFS server, start mountd with the --port PORT option,
which forces mountd to use a fixed port number instead of a
random port. Then, create a firewall rule that allows udp and tcp
traffic to that port number.

F-SECURE ANTI-VIRUS LINUX SERVER SECURITY Specifications

General

Product Name	F-Secure Anti-Virus Linux Server Security
Category	Software
Real-time Protection	Yes
Management	Centralized Management
Type	Antivirus
Platform	Linux
Operating System Compatibility	Linux
Protection Type	Malware Protection
Protection Features	Real-Time Scanning
Update Method	Automatic Updates
Licensing	Subscription-based
Supported Distributions	Red Hat Enterprise Linux, SUSE Linux Enterprise Server, Debian, Ubuntu

Summary

Introduction

How the Product Works

Key Features and Benefits

Details the superior protection, heuristic scanning, riskware detection, and transparent end-user experience.

Deployment

Deployment on Multiple Stand-alone Linux Workstations

Deployment on Multiple Centrally Managed Linux Workstations

Installation

System Requirements

Lists the operating systems, kernel, glibc, processor, memory, and disk space needed for installation.

Installation Instructions

Provides instructions for both stand-alone and centrally managed installations.

Upgrading from a Previous Product Version

Details the process and considerations for upgrading from earlier versions of F-Secure Anti-Virus.

Upgrading the Evaluation Version

Unattended Installation

Creating a Backup

Getting Started

Accessing the Web User Interface

Basics of Using F-Secure Policy Manager

Testing the Antivirus Protection

Describes how to test the antivirus protection using the EICAR test file.

User Interface - Advanced Mode

Alerts

Virus Protection

Covers real-time, scheduled, and manual scanning, including actions on infection.

Firewall Protection

Explains firewall components, security profiles, rules, and network services.

General Settings

Command Line Tools

Firewall Protection

Explains the 'fsfwc' command line tool for managing firewall security levels.

Integrity Checking

Covers command line tools like 'fsic' and 'fsims' for system integrity and baseline management.

Appendix E: Troubleshooting

User Interface

Addresses common issues related to logging in, the F-icon, and enabling debug logs.

F-Secure Policy Manager

Integrity Checking

Resolves issues with symlinks and large numbers of modified files for Integrity Checking.

Firewall

Troubleshoots access to samba shares, network browsing, and NFS server access.

Virus Protection

Details on enabling debug logs for real-time scanning and using HTTP proxy for updates.

Generic Issues

Appendix F: Man Pages

fsav

Detailed manual page for the fsav command line interface.

fsavd

Manual page describing the F-Secure Anti-Virus daemon and its options.

dbupdate

Manual page for the dbupdate script used for virus definition database updates.

fsfwc

Manual page for the fsfwc command line interface for firewall daemon.

fsic

Manual page for the fsic command line interface for integrity checker.

Appendix G: Config Files

fsaua_config

fssp.conf