User's Manual

Doc. No.
Rev.
Date
DRAFT
1.01
2012-01-27
Damm Cellular Systems A/S, Denmark
TetraFlex
®
7.5 Manual - Virus protection
TetraFlex® 7.5 Manual 2-36
2.2 VIRUS PROTECTION
2.2.1 Introduction
The DAMM system is designed with the LAN area as a completely closed IP area without any
connection to the outside world.
That means, that BSC’s, TR’s etc. without a WAN connection cannot access the outside
world and cannot be accessed from the outside world.
Only system components with a WAN connection have a risk to get infected, including
Gateways, Log Servers, Terminal Servers etc., all entities, which if present need external
access.
Any virus problem on systems have been closely watched for a period of time, but so far no
infections have been observed.
Regarding system components WITHOUT a WAN connection, it is most safe to proceed
without any virus protection as we do today. This is of cause under the presumptions that the
operator has control with external media as USB sticks, CD etc. These media must be virus
free before inserted or connected to the system. Installing a virus protection would create the
need of opening up access to an update server, which would increase the risk that viruses
could penetrate into the internal LAN area.
2.2.2 Virus Threat
The major threat for a system is that viruses will infect the system components with WAN
access. These components will either be a Damm BSC running Windows or a PC with a full
Windows installation. The major source of infection is normally via E-mails and via Home
pages. It is therefore strongly recommended never to use any computer in a system for these
tasks.
2.2.2.1 Standard PC
For standard PC’s running Windows and used for tetra applications or running a BSC the
firewall can be kept activated. It is just needed to include the programs in the exception list.
Window XP SP3 and Windows 7 ask automatically, whether you want to do that. In addition,
it is recommended to have an anti-virus program running on these computers. Internally at
DAMM, AVG antivirus is used and can be recommended. This gives a reasonable protection,
and no issues have been seen regarding conflicts between AVG and Tetra applications. The
Log Server (TetraFlex
®
only) could have some performance degradation during scanning,
whereas the BSC is running with higher priority and is not expected to be degraded.
Scanning should be setup to run in the night when system activity is low. No experience has
been gained with other anti-virus programs.