KASPERSKY LAB Kaspersky™ Corporate Suite ANTI-VIRUS SOLUTION
KASPERSKY CORPORATE SUITE Anti-Virus Solution KASPERSKY LAB LTD Visit our WEB site: http://www.kaspersky.
Contents 1. KASPERSKY™ CORPORATE SUITE ................................................. 5 1.1. 1.2. 1.3. 2. MAIN FUNCTION OF THE SOFTWARE PACKAGE ........................................ 5 MAIN FEATURES OF THE KASPERSKY™ CORPORATE SUITE PACKAGE ....... 6 COMPONENTS ....................................................................................... 8 PROTECTING WORKSTATIONS....................................................... 9 2.1.
3.2. KASPERSKY™ ANTI-VIRUS FOR NOVELL NETWARE. MAIN FEATURES ... 15 3.2.1. Full-scale anti-virus protection ............................................. 15 3.2.2. Integration into Novell Directory Service ............................ 15 3.2.3. Centralized deployment and management ......................... 15 3.2.4. Real-time configuration update ............................................ 16 3.2.5. Quarantine of dangerous and suspicious objects .............. 16 3.2.6. Virus alerts broadcasting.........
.1.3. Unique combination of the most advanced anti-virus tools for Linux and UNIX ...................................................................................... 23 5.1.4. Centralized protection of your e-mail systems................... 24 5.1.5. Easy integration into third-party applications .................... 24 5.1.6. Automated retrieve of updates via the Internet ................ 24 5.1.7. Interactive management system ......................................... 24 6.
1 Chapter 1. Kaspersky™ Corporate Suite 1.1. Main function of the software package Kaspersky™ Corporate Suite is developed to provide the full-scale dataprotection for corporate networks. Main advantage of this package is that it allows you to develop platform-independent and centrally-managed information security structure successfully protecting corporate networks of any size and complexity (with possible application to the remote sub-networks located overseas) against malicious code and hacker attacks.
K A S P E R S K Y C O R P O R A T E S U I T E 1.2. Main features of the Kaspersky™ Corporate Suite package 1. Reliable protection When developing a modern enterprise-wide data-security solution the main task is to implement a system with all its components operating trouble-free and in full co-operation. The time-tested reliable and effective Kaspersky™ Corporate Suite components successfully provide reliable anti-virus protection for hundreds of corporations around the world.
K A S P E R S K Y C O R P O R A T E S U I T E tecting workstations, file and mail servers, Web servers, and controlling data traffic passing via e-mail gateways and firewalls. Kaspersky™ Corporate Suite is powered by a unique management tool for advanced administration of the anti-virus system. Kaspersky™ Administration Kit allows for a centralized product deployment and management across the corporate network. 5.
K A S P E R S K Y C O R P O R A T E S U I T E 1.3. Components What components the Kaspersky™ Corporate Suite package includes? Kaspersky™ Corporate Suite includes the following components: • Protection for workstations — Kaspersky™ Anti-Virus for Windows 95/98/Me, Windows 2000/NT/XP Workstation, OS/2 and Linux. • Protection for file servers — Kaspersky™ Anti-Virus for Windows 2000/NT Server, Netware, UNIX (FreeBSD, OpenBSD, BSDi, Solaris) and Linux.
2 Chapter 2. Protecting Workstations 2.1. Kaspersky™ Anti-Virus for workstations running Windows 95/98/Me and Windows 2000/NT/XP (Wintel). Main features 2.1.1. Real-time protection The background virus-interceptor - Monitor permanently resides in your Wintel workstation’s memory, checking for viruses in files (including the archived) while they are started, created or copied, and also in the memory of started programs.
K A S P E R S K Y C O R P O R A T E S U I T E press, MS Exchange, Eudora, MS Mail, Pegasus Mail, Netscape Mail, JSMail, MIME, The BAT), it reliably protects against viruses in mail message storage locations. The built-in Mail Checker efficiently deletes viruses from e-mail messages, and completely recovers the original contents. 2.1.3.
P R O T E C T I N G W O R K S T A T I O N S manually or schedule its start using Kaspersky™ AV Control Centre included in the package. 2.1.7. Intercepting script-viruses To protect the user from script-viruses the package uses the built-in Script Checker module that completely solves this problem by integrating itself as a filter in-between the script-virus and its handler. This enables you to check for viruses in any script before it is executed. 2.1.8.
K A S P E R S K Y C O R P O R A T E S U I T E the commonly used file systems at once: FAT (DOS), FAT32 (Windows 95/98), NTFS (Windows NT/2000), HPFS (OS/2), EXT (Linux). 2.2. Kaspersky™ Anti-Virus for OS/2. Main features 2.2.1. Two-level anti-virus protection Kaspersky™ Anti-Virus for OS/2 provides your computer with a two-level antivirus protection. The first level is an anti-virus scanner that may be started on demand or from a third-party scheduler.
3 Chapter 3. Protecting File Servers 3.1. Kaspersky™ Anti-Virus for Windows 2000/NT Server. Main features 3.1.1. Real-time protection Kaspersky™ Anti-Virus for 2000/NT Server includes a background virus interceptor, Kaspersky™ AV Monitor that permanently resides in the computer memory checking all used files (e.g. when these are opened or closed) in realtime. The module also allows checking-in the memory of running programs right after it is loaded, and also every time you update your anti-virus bases.
K A S P E R S K Y C O R P O R A T E S U I T E system) enable you to centrally install and control Kaspersky™ Anti-Virus for NT Server from any (including the remote) computer; to define a timetable and an order in which the modules must be started; to automatically retrieve and enable anti-virus database updates via the Internet; to broadcast notifications on virus attacks and review virus-check logs. 3.1.3.
P R O T E C T I N G F I L E S E R V E R S 3.2. Kaspersky™ Anti-Virus for Novell NetWare. Main features Kaspersky™ Anti-Virus for NetWare is a unique anti-virus solution with a network management system, which is completely integrated in the Novell Directory Service (NDS). The program is a loadable module (NLM) for file and application servers running Novell NetWare. It effectively controls all file operations on a server.
K A S P E R S K Y 3.2.4. C O R P O R A T E S U I T E Real-time configuration update To apply the changes you have made to the program settings, you do not need to restart the server. They will be activated right after you have confirmed them. 3.2.5.
P R O T E C T I N G 3.2.9. F I L E S E R V E R S Automated retrieve of updates via the Internet Kaspersky™ Anti-Virus for NetWare supports the automatic downloading and hookup of anti-virus database updates via the Internet. The procedure may be performed on demand or scheduled by a network administrator. 3.2.10.
4 Chapter 4. Protecting Mail Systems 4.1. Kaspersky™ Anti-Virus for Microsoft Exchange Server. Main features Kaspersky™ Anti-Virus for Exchange is a centralized anti-virus system for mail servers running Microsoft Exchange Server 5.x and 2000. The program provides centralized anti-virus filtering for the entire local and external e-mail traffic in real-time as well as on a user demand. 4.1.1.
P R O T E C T I N G M A I L S Y S T E M S set the program to delete, block or disinfect the infected messages. Furthermore, if a virus has infected one of your workstations, it is unable to distribute itself, since the program suppresses any attempts of the kind and informs the system administrator about this event. 4.1.3.
K A S P E R S K Y 4.1.7. C O R P O R A T E S U I T E Centralized management The product is completely integrated in MS Exchange Administrator (included in MS Exchange). It enables you to centrally perform full control over Kaspersky™ Anti-Virus for Exchange from any computer; to perform on-demand scan for protected objects and schedule program operating; to control access rights to change the program configuration; and update the list of protected mailboxes.
P R O T E C T I N G 4.2.2. M A I L S Y S T E M S Comprehensive control over e-mail messages Kaspersky™ Anti-Virus for Lotus Notes/Domino controls all elements of an email message: the message body, embedded OLE objects, attached files (including archived and compressed files) and other messages of any nesting level. 4.2.3.
5 Chapter 5. Protecting Linux/UNIX Operating Systems 5.1. Kaspersky™ Anti-Virus for Linux/UNIX Operating Systems. Main features Kaspersky™ Corporate Suite provides anti-virus protection for workstations, file and application servers and mailing systems running Linux and UNIX (FreeBSD, OpenBSD, BSDi, Solaris) operating systems against all types of malicious code. 5.1.1.
P R O T E C T I N G 5.1.2. L I N U X A N D U N I X O P E R A T I N G S Y S T E M S Compliancy with the most popular Linux and UNIX versions These Kaspersky™ Corporate Suite components can be used with the most popular versions of Linux for the Intel platform, which uses the NSS library version 1.x. The list includes Red Hat Linux, S.u.S.E. Linux, Linux-Mandrake, Debian GNU/Linux, Black Cat Linux etc. It is also compatible with FreeBSD/BSDi 3.xx and 4.xx.
K A S P E R S K Y 5.1.4. C O R P O R A T E S U I T E Centralized protection of your e-mail systems3 Kaspersky™ Corporate Suite includes a ready-made solution to integrate the product into the popular Sendmail, Qmail, Exim and Postfix email systems under Linux, FreeBSD and BSDi operating systems. This is a perfect solution to create your own centralized system that filters e-mail traffic. 5.1.5.
6 Chapter 6. Protecting WEB Servers 6.1. Kaspersky™ WEB Inspector Kaspersky™ WEB Inspector is installed directly on the physical Web server. The program checks the integrity of data on the server and traces all changes in real-time and in background. If the program detects any unauthorized changes, it sends notification to a pre-set address(es) and allows for the complete recovery of the original content of your Web server. 6.1.1.
K A S P E R S K Y 6.1.2. C O R P O R A T E S U I T E Improved file analysis Kaspersky™ WEB Inspector allows for the fastest and the most effective check of your Web server while requiring minimum system resources. Since the program supports most popular formats of executable files (PE EXE (Win32), NE EXE (Win16), MZ EXE (DOS), SYS, COM, OLE2 (Word, Excel и Access), ELF (Linux)), it creates Fast-CRC sums for these files.
P R O T E C T I N G 6.1.7. W E B S E R V E R S User-friendly Kaspersky™ WEB Inspector logs all program activity and virus attack statistics. The user-friendly interface makes your work with this program simple and easy. All the main actions are performed by a step-by-step method, offering a user recommendations for the next step. Main functions of the program (processing of the contents of server, updating CRC database, creation of report) can be activated by the touch of a single key.
7 Chapter 7. Protecting Data Traffic Passing through Firewalls 7.1. Kaspersky™ Anti-Virus for Firewall Kaspersky™ Anti-Virus for Firewall is a special plug-in module for the centralized filtering of data traffic passing through firewalls supporting Content Vectoring Protocol (CVP). 7.1.1. Anti-virus solution for the Internet The major concept of your corporate network anti-virus protection is effective control of the external data traffic.
P R O T E C T I N G 7.1.2. D A T A T R A F F I C Compliancy with all the most popular firewalls Kaspersky™ Anti-Virus for Firewall may be used in any firewall supporting Content Vectoring Protocol (CVP). For example, Check Point FireWall-1 and others. 7.1.3. Advanced anti-virus technology Kaspersky™ Anti-Virus for Firewall is based on the world's famous antivirus kernel used in other Kaspersky Lab products. The program searches for viruses in archived and packed files and e-mail.
K A S P E R S K Y 7.1.6. C O R P O R A T E S U I T E Centralized management The product is completely integrated into Kaspersky Administration Kit (included in the package). It enables you to centrally install and control Kaspersky™ Anti-Virus for Firewall from any (including the remote) computer; to schedule starts of the program modules; and to automatically retrieve and enable updates of anti-virus database via the Internet. 7.1.7.
8 Chapter 8. Management of anti-virus protection 8.1. Kaspersky™ Administration Kit Kaspersky™ Administration Kit is developed specially for administrators of corporate networks or anti-virus security officers. This is a network toolkit allowing a network administrator to install, to configure and to update the anti-virus software, and also to efficiently and timely deal with virus-outbreaks simultaneously on all the workstations of a corporate network directly from the administrating station. 8.1.1.
K A S P E R S K Y C O R P O R A T E S U I T E porate network and to schedule the scanning procedure to be automatically started at a certain point of time. • automatically update anti-virus databases on workstations. The updating procedure may be performed centrally, in this case you do not need every workstation to connect to the Kaspersky Lab web server. The updating procedure also may be scheduled to start automatically on a regular basis.
M A N A G E M E N T 8.1.3. O F A N T I - V I R U S P R O T E C T I O N Cumulative reporting The network report describes events detected by the anti-virus software on all the protected workstations. You can also request separate reports from workstations, and to be reported on the integrity of the logic network itself. 8.1.4. Isolating infected and suspicious objects The administrator can centrally store suspicious files, encode them and move to the server quarantine.
Appendix. KASPERSKY LAB Ltd. Kaspersky Lab Ltd. is a privately-owned, international, data-security softwaredevelopment group of companies with offices in Moscow (Russia), Cambridge (United Kingdom) and Pleasanton (United States). Founded in 1997, Kaspersky Lab concentrates its efforts on the development, marketing and distribution of leading-edge information security technologies and computer software. Kaspersky Lab is one the world leaders in data-security and anti-virus technologies.
K A S P E R S K Y L A B L T D . only behavior blocker for MS Office 2000 provides 100% guaranteed protection against any macro-viruses. If you have any questions, comments or suggestions please refer them to our distributors or directly to Kaspersky Lab. We will be glad to advise you on any matters related to our product by phone or e-mail and all your recommendations and suggestions will be thoroughly reviewed and considered. Technical support Please find the technical support information at www.
