2.
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files, release notes, and the latest version of the applicable user documentation, which are available from the Trend Micro web site at: http://docs.trendmicro.com/ Trend Micro, the Trend Micro t-ball logo, TrendLabs, and OfficeScan are trademarks or registered trademarks of Trend Micro, Incorporated.
The user documentation for Trend Micro™ Smart Protection Server is intended to introduce the main features of the software and installation instructions for your production environment. You should read through it prior to installing or using the software. Detailed information about how to use specific features within the software are available in the online help file and the Knowledge Base at Trend Micro web site. http://esupport.trendmicro.com Trend Micro is always seeking to improve its documentation.
Contents Preface Smart Protection Server Documentation .....................................................viii Audience ............................................................................................................viii Document Conventions ....................................................................................ix Chapter 1: Planning Smart Protection Server Installation and Upgrade System Requirements ...............................................................................
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide TrendLabs .........................................................................................................4-3 Known Issues ...................................................................................................4-3 Frequently Asked Questions .........................................................................
Preface Preface Welcome to the Trend Micro™ Smart Protection Server Installation and Upgrade Guide. This document contains information about product settings.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Smart Protection Server Documentation The Smart Protection Server documentation consists of the following: • Installation and Upgrade Guide: Helps you plan for installation and deployment. • Administrator’s Guide: Helps you configure all product settings. • Online Help: Provides detailed instructions on each field and how to configure all features through the user interface.
Preface Document Conventions To help you locate and interpret information easily, the Smart Protection Server documentation uses the following conventions. TABLE P-1.
Trend Micro™ Smart Protection Server 2.
Chapter 1 Planning Smart Protection Server Installation and Upgrade This chapter includes information about planning for a fresh installation or upgrade of Smart Protection Servers.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide System Requirements The following table lists the system requirements: TABLE 1-1. System Requirements H ARDWARE / S OFTWARE Hardware R EQUIREMENTS • 2.0GHz Intel® Core2 Duo™ 64-bit processor supporting Intel® Virtualization Technology™ or equivalent • 1.5GB RAM • 30GB disk space when installed on a virtual machine Note: Smart Protection Server automatically partitions the detected disk space as required.
Planning Smart Protection Server Installation and Upgrade TABLE 1-1. System Requirements (Continued) H ARDWARE / S OFTWARE Virtualization R EQUIREMENTS • Microsoft® Windows Server® 2008 R2 Hyper-V™ (Legacy Network Adapter is required to detect the network device for Hyper-V installations.) Note: After installing Smart Protection Server, use the Command Line Interface (CLI) to enable Hyper-V Integration Components to increase capacity. • VMware® ESXi™ Server 5.1, 5.0 Update 2, 4.1 Update 1, 4.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide TABLE 1-1. System Requirements (Continued) H ARDWARE / S OFTWARE Virtual Machine R EQUIREMENTS • CentOS 5 64-bit (Guest Operating System). If your • • • • • • hypervisor does not support CentOS, use Red Hat® Enterprise Linux® 5 64-bit. 1.5GB RAM 2.
Planning Smart Protection Server Installation and Upgrade Planning for Deployment The following section provides information on how to determine the type of environment to configure when installing local Smart Protection Servers. Best Practices • • • • Avoid performing Manual scans and Scheduled scans simultaneously. Stagger the scans in groups. Avoid configuring all endpoints from performing Scan Now simultaneously. (For example, the "Perform scan now after update" option.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Deployment Guidelines Consider the following when setting up your local Smart Protection Server: • Smart Protection Server is a CPU-bound application. This means that increasing CPU resources increases the number of simultaneous requests handled. • Network bandwidth may become a bottleneck depending on network infrastructure and the number of simultaneous update requests or connections.
Chapter 2 Upgrading and Installing Smart Protection Server This chapter includes information about upgrading and installing Smart Protection Server.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Performing a Fresh Installation After preparing the requirements for installation, run the installation program to begin installation. To install Smart Protection Server: 1. Create a virtual machine on your VMware or Hyper-V server and specify the virtual machine to boot from the Smart Protection Server ISO image. Refer to the Virtual Machine section in Table 1-1.
Upgrading and Installing Smart Protection Server 2. Power on the virtual machine. The Installation Menu displays with the following options: • Install Smart Protection Server: Select this option to install Smart Protection Server to the new virtual machine. • System Memory Test: Select this option to perform memory diagnostic tests to rule out any memory issues. • Exit Installation: Select this option to exit the installation process and to boot from other media. FIGURE 2-1.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 3. Select Install Smart Protection Server. The Select language screen appears. FIGURE 2-2. Note: 4. 2-4 Select Language screen From this screen on, you can access the readme from a button in the lower left hand corner of the installation screen. Select the language for this installation of Smart Protection Server and click Next. The License Agreement screen appears.
Upgrading and Installing Smart Protection Server FIGURE 2-3. 5. License Agreement screen Click Accept to continue. The Keyboard Selection screen appears.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide FIGURE 2-4. 6. 2-6 Keyboard Selection screen Select the keyboard language and click Next to continue. The Hardware Components Summary screen appears.
Upgrading and Installing Smart Protection Server FIGURE 2-5. Hardware Components Summary screen The installation program performs a scan to determine if the system specifications have been met and displays the results. If the hardware contains components that do not meet the system requirements, the installation program highlights those components. Installation can proceed as long as there is a hard drive and network device. If there is no hard drive or no network device, installation cannot continue.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 7. Click Next to continue. The Network Settings screen appears. FIGURE 2-6. Note: Network Settings screen To change the active on boot device after installation, log on to the Command Line Interface (CLI). If there are multiple network devices, configure settings for all devices. (Only one device can be active on boot.
Upgrading and Installing Smart Protection Server 8. Specify the Active on Boot network devices, host name, and miscellaneous settings. The Edit button allows you to configure IPv4 and IPv6 settings. The default setting for IPv4 is Dynamic IP configuration (DHCP). The default setting for IPv6 is DHCPv6. 9. Click Edit to select manual configuration and configure miscellaneous settings. 10. Click Next to continue. The Time Zone screen appears. FIGURE 2-7.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 11. Specify the time zone. 12. Click Next to continue. The Authentication screen appears. FIGURE 2-8.
Upgrading and Installing Smart Protection Server 13. Specify passwords. Smart Protection Server uses two different levels of administrator types to secure the server. a. Type the "root" and "admin" passwords. The password must be a minimum of 6 characters and a maximum of 32 characters. Tip: • • To design a secure password consider the following: (1) Include both letters and numbers. (2) Avoid words found in any dictionary (of any language). (3) Intentionally misspell words.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 14. Click Next to continue. The Installation Summary screen appears. FIGURE 2-9.
Upgrading and Installing Smart Protection Server 15. Confirm the summary information. Note: Continuing with the installation formats and partitions the necessary disk space and installs the operating system and application. If there is any data on the hard disk that cannot be erased, cancel the installation and back up the information before proceeding. If any of the information on this screen requires a different configuration, click Back. 16.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 17. A message appears when the installation completes. The installation log is saved in the /root/install.log file for reference. FIGURE 2-11.
Upgrading and Installing Smart Protection Server 18. Click Reboot to restart the virtual machine. The initial product Command Line Interface (CLI) logon screen appears and displays the client connection addresses and the web console URL. Tip: Trend Micro recommends disconnecting the CD ROM device from the virtual machine after Smart Protection Server is installed. 19. Use admin to log on to the product CLI or the web console to manage Smart Protection Server.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Upgrading to Smart Protection Server Upgrade to this version of Smart Protection Server from Smart Protection Server 2.1 or 2.0. TABLE 2-2. Version Upgrade Details VERSION R EQUIREMENTS Upgrading to Smart Protection Server 2.5 • Ensure that System Requirements are met before installation. See System Requirements on page 1-2. • Smart Protection Server 2.1or 2.
Upgrading and Installing Smart Protection Server To upgrade Smart Protection Server: 1. 2. 3. 4. 5. 6. 7. Log on to the web console. Click Updates from the main menu. A drop down menu appears. Click Program. The Program screen appears. Under Upload Component, click Browse. The Choose File to Upload screen appears. Select the upgrade file from the Choose File to Upload screen. Click Open. The Choose File to Upload screen closes and the file name appears in the Upload program package text box.
Trend Micro™ Smart Protection Server 2.
Chapter 3 Post-Installation Tasks This chapter includes information about post installation tasks.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Post-Installation Trend Micro recommends performing the following post-installation tasks: • After installing Smart Protection Server with Hyper-V, enable Hyper-V Integration Components to increase capacity. Ensure that a Network Adapter is available before enabling Hyper-V Integration Components.
Post-Installation Tasks Initial Configuration Perform the following tasks after installation: 1. 2. Log on to the web console. The first time installation wizard appears. Select the Enable File Reputation Service check box to use File reputation. FIGURE 3-13.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 3. 4. Click Next. The Web Reputation Service screen appears. Select the Enable Web Reputation Service check box to enable Web Reputation. FIGURE 3-14. Configure Web Reputation Settings 5. 3-4 (Optional) Click Advanced Settings to configure the filter priority. The filter priority settings allow you to specify the filter order for URL queries.
Post-Installation Tasks 6. Click Next. The Smart Feedback screen appears. FIGURE 3-15. Smart Feedback 7. Select to use Smart Feedback to help Trend Micro provide faster solutions for new threats.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide 8. Click Next. The Proxy Settings screen appears. FIGURE 3-16. Proxy Settings 9. Specify proxy settings if your network uses a proxy server. 10. Click Finish to complete the initial configuration of Smart Protection Server. The Summary screen of the web console displays. Note: 3-6 Smart Protection Server will automatically update pattern files after initial configuration.
Chapter 4 Troubleshooting and Contact Information Trend Micro is committed to providing service and support that exceeds our users’ expectations. This chapter contains information on how to get technical support. Remember, you must register your product to be eligible for support.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Before Contacting Technical Support Before contacting technical support, here are two things you can quickly do to try and find a solution to your problem: • Check your documentation: Search the product documentation to see if they contain your solution. • Visit the Trend Micro Technical Support Website: The Trend Micro Technical Support website contains the latest information about all Trend Micro products.
Troubleshooting and Contact Information TrendLabs Trend Micro TrendLabsSM is a global network of virus prevention and web threat research and product support centers providing continuous 24/7 coverage to Trend Micro customers worldwide. Staffed by a team of more than 250 engineers and skilled support personnel, the TrendLabs dedicated service centers worldwide ensure rapid response to any virus outbreak or urgent customer support issue, anywhere in the world.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide Frequently Asked Questions How do I log on to the Command Line Interface (CLI)? CLI commands allow administrators to perform configuration tasks and to perform debugging and troubleshooting functions. Administrators can log on to CLI through CLI or the SSH console. To log on to the Command Line Interface (CLI): • Log on to the Command Line Interface (CLI) using the "admin" account through the SSH connection.
Troubleshooting and Contact Information FIGURE 4-1. Note: IP address no longer appears On Microsoft™ Hyper-V machines, the IP address may disappear if a network adapter is not connected. To rollback the network setting: 1. 2. Log on to the Command Line Interface (CLI) using admin.
Trend Micro™ Smart Protection Server 2.5 Installation and Upgrade Guide How Do I Change the Smart Protection Server IP Address? To change an IPv4 address: 1. 2. Log on to the Command Line Interface (CLI) using admin. Type the following commands: enable configure ipv4 static 3. Verify the changes by typing the following command: show ipv4 address 4. Restart the machine. To change an IPv6 address: 1. 2. Log on to the Command Line Interface (CLI) using admin.
Troubleshooting and Contact Information How Do I Change the Smart Protection Server Hostname? To change the hostname: 1. 2. Log on to the Command Line Interface (CLI) using admin. Type the following commands: enable configure hostname 3. Verify the changes by typing the following command: show hostname How Do I Perform an Upgrade If a Pattern is Updating? Trend Micro recommends waiting until a pattern finishes updating before performing an upgrade.
Trend Micro™ Smart Protection Server 2.
Index A M admin 2-11 Audience P-viii manual scan 1-5 memory 2-3 B N best practices 1-5 network bandwidth 1-6 network device 2-7–2-8 network infrastructure 1-6 C CLI 2-8, 2-15 client computer 1-6 command line interface 2-15 continuity 1-5 CPU 1-6 P product console 2-11, 2-15 proxy server 1-6 proxy settings 3-6 D R design a secure password 2-11 Document Conventions P-ix documentation 4-2 Readme File 4-3 root 2-11 H K Scan Now 1-5 scheduled scan 1-5 server 1-6 Smart Scan Server 2-3, 2-11, 2-15
Trend Micro™ Smart Protection Server 2.