User manual KASPERSKY LAB ANTI-VIRUS 5.0 ADMINISTRATION FOR LINUX

[. . . ] KASPERSKY LABS Kaspersky Anti-Virus 5. 0 for Linux Workstation ADMINISTRATOR'S GUIDE KASPERSKY ANTI-VIRUS 5. 0 FOR LINUX WORKSTATION Administrator's guide Kaspersky Labs, Ltd. http://www. kaspersky. com Revision date: November 2003 Contents CHAPTER 1. KASPERSKY ANTI-VIRUSTM FOR LINUX WORKSTATION . . . . . . . . . . . . . . . . What's new in version 5. 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] The aveclient component exchanges information with the aveserver component through a local aveserver socket (LocalSocketPath parameter in the [path] 42 Kaspersky Anti-VirusTM for Linux Workstation section). Therefore proper functioning of the aveclient component requires mandatory indication of the socket path using the -p<path> command line option. The component can accomplish the following tasks: · It can detect whether aveserver is running. If it is, the client component can output on-screen information about the date of the most recent update effected for the anti-virus databases and the number of records therein. In addition, information about all installed license keys will be displayed. The information telling whether the said daemon is running can be duplicated in the return code (Query task). In order to receive information on the status of aveserver daemon, enter (for example) the following in the command line: $ aveclient ­p /var/run/aveserver -c As a result a message telling whether aveserver is running will be displayed ­ together with information on installed anti-virus databases and license keys (provided that the connection is established) in the following format: RECORDS <number of records> (in the anti-virus databases) UPDATED <latest update> (of the anti-virus databases) The following information is output for each license key: SERIAL <key serial number> EXPIRE <expiry date for the key> <empty string> · The component also performs scanning of files transferred for anti-virus processing from the command line with subsequent output of its results to the screen and in the return code (Scan task). Object: Anti-virus scanning of the myfile. zip file. In order to accomplish the above task from the command line enter the following: $ aveclient ­s ­p /var/run/aveserver myfile. zip Scanning result will be displayed in the following format: <file name> <status> [list name] [list] Advanced settings 43 where: <file name> represents the name of the file being scanned <status> represents the file status If viruses have been detected in a file (Warnings or Suspicions status) or successfully removed from it, a corresponding list will be output to screen. The list will consist of one of the words: LINFECTED, LCURED, LWARNING, LSUSPICION, followed by a tab-separated list of names for the respective viruses. For example: myfile. zip INFECTED LINFECTED Macro. Excel97. Obvious Macro. Access. Poison 5. 2. 3. Additional opportunities for integration with third party software Kaspersky Anti-Virus 5. 0 can be integrated with third party software in order to ensure e-mail, network traffic and Internet access protection. Those purposes can be accomplished using the version of the aveserver component offered with the Kaspersky Anti-Virus Software Development Kit (SDK). Integration can be achieved using the command line, an interface implemented in the C programming language, or directly through a protocol supported by the daemon (via Unix sockets or TCP/IP). Kaspersky Anti-Virus SDK with a corresponding documentation package can be obtained from the customized solutions department of Kaspersky Labs at oem@kaspersky. com. We shall provide comprehensive assistance in the integration and support of the obtained product; the integrated anti-virus SDK in its turn will help you produce a complete solution faster with less effort. Your product will become more valuable for your clients owing to a licensed built-in virus protection. 5. 3. Localization of the format of time and date display When running, Kaspersky Anti-Virus generates reports for every component, as well as different notifications sent to the users and the administrators. This information is always accompanied by the time and date it was generated. 44 Kaspersky Anti-VirusTM for Linux Workstation By default, Kaspersky Anti-Virus uses the formats of time and date conforming to the strftime standard: %H:%M:%S ­ Displayed time format. The administrator is provided with the option of changing the format of time and date representation. The formats can be localized in the section [locale] of the configuration file kav4unix. conf. The following formats can be set: %I:%M:%S %P ­ to display time in 12-hour format (TimeFormat parameter) with an am/pm indication. [. . . ] Kaspersky® Corporate Suite The package has been developed to provide full-scale data-protection for corporate networks of any size and complexity. The package components allow protection of all nodes on a corporate network. The product can be perfectly integrated into your corporate network regardless of the software and hardware from other manufacturers that you use on it. The flexibility of this anti-virus solution allows you to create an effective data-protection system that is fully appropriate and compatible to your network configurations. [. . . ]