User manual KAPERSKY ANTI-VIRUS 5.6 FOR MICROSOFT ISA SERVER 2000 ENTERPRISE EDITION ADMINISTRATOR GUIDE

[. . . ] KASPERSKY LAB Kaspersky Anti-Virus® 5. 6 for Microsoft ISA Server 2000 Enterprise Edition Administrator's Guide KASPERSKY ANTI-VIRUS® 5. 6 FOR MICROSOFT ISA SERVER 2000 ENTERPRISE EDITION Administrator's Guide © Kaspersky Lab http://www. kaspersky. com Edition date: August 2005 Contents CHAPTER 1. KASPERSKY ANTI-VIRUS® FOR MICROSOFT ISA SERVER 2000 ENTERPRISE EDITION. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What's new in Kaspersky Anti-Virus® 5. 6 for Microsoft ISA Server 2000 Enterprise Edition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Recording and viewing statistics The Kaspersky-Anti-Virus performance statistics can be managed and viewed using standard Windows performance counters that are available from the Performance console (Start -> Settings -> Control Panel -> Administration Tools -> Performance). To select the parameters to be logged: 1. Switch to the Add Counters dialog box (Fig. 39) and select Use local computer counters if ISA Server is managed from an ISA Server computer, or Select counters from computer if ISA Server is managed from a remote administrator's workstation. From the Performance Object drop-down list, select the KAV for ISA object. A list of parameters currently logged appears in the lower left field: · · Select All counters if you want to view statistics of all the parameters of Kaspersky Anti-Virus® performance, and click Add. Choose Select counters from list if you want to view information only on specified parameters of the application performance. Then, select a necessary counter from the list and click Add. 2. 55 Kaspersky Anti-Virus 5. 6 for MS ISA Server 2000 Enterprise Edition Figure 39. Customizing statistics settings The following settings are required to view counters from a remote computer!To view statistics from a remote computer, you must be granted the ® following permissions on the computer where Kaspersky Anti-Virus for Microsoft ISA Server is installed: · Read access to the following files: %windir%\System32\PERFCxxx. DAT %windir%\system32\PERFHxxx. DAT · Read access to the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT \CurrentVersion\Perflib HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Con trol\SecurePipeServers\Winreg · Read and write access to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Ser vices\Anti-Virus KL for Microsoft ISA · System privileges (assigned from Control Panel -> Administrative tools -> Local Security Policy -> Security settings -> Local Policies -> User permissions): o Profile System Performance. Using Kaspersky Anti-Virus® for ISA Server 56 o Profile Single Process. The above list of permissions is described in Microsoft Knowledge Base Article Q158438 at http://support. microsoft. com/default. aspx?kbid=158438 By default, these permissions are granted to users from the Ad® ministrators group on the computer where Kaspersky Anti-Virus for Microsoft ISA Server is installed. To view statistics on a server with Kaspersky Anti-Virus® for Microsoft ISA Server from a remote computer, the following services must be enabled: o o Remote Registry Administration. NetBIOS access (check the File and Printer Sharing for Microsoft Networks checkbox in My Network Places -> Properties -> LAN -> Properties). 4. 6. 2. Notifying the administrator using ISA Server Alerts Using ISA Server Alerts system tools, you can notify administrator upon critical events that might occur during performance of applications installed on ISA Server. The administrator can be informed by various means, such as logging events to system log, sending notifications by e-mail, etc. The administrator must immediately response to some critical events related to ® Kaspersky Anti-Virus performance. For example, a critical event is Your license is about to expire (see Figure 40). Kaspersky Anti-Virus critical events are added to the existing list of critical events after the application is installed on the server. You can customize how you will be notified upon such events. 57 Kaspersky Anti-Virus 5. 6 for MS ISA Server 2000 Enterprise Edition Figure 40. Customizing notifications upon critical events. 4. 6. 3. Configuring diagnostics options for the application Kaspersky Anti-Virus® allows you to monitor the application performance on each Microsoft ISA Server and record results in the following log files: kavisaDATE. log ­ Kaspersky Anti-Virus® log that stores the customizable amount of information about application performance during the designated time period. In the file name, DATE is the date of creation of this file in the format YearMonthDate, for example, kavisa20040410. log. If the program is trying to add report to the file while you are currently editing the file, Kaspersky Anti-Virus® will create a new file with a slightly modified name, for example, kavisa20040410_1. log. ® virusDATE. log ­ Kaspersky Anti-Virus log file that stores information about malicious objects detected during scans. You can custom the report detail level on the Diagnostics tab of the Server Properties dialog box (see Figure 41). Using Kaspersky Anti-Virus® for ISA Server 58 The time of events, written to the above-listed event logs, is displayed in Universal Coordinated Time (UTC) format Figure 41. [. . . ] It shall be at 101 Kaspersky Anti-Virus 5. 6 for MS ISA Server 2000 Enterprise Edition the absolute discretion of Kaspersky Lab whether or not you have satisfied this condition for the provision of Support Services. (ii) Support Services will terminate unless renewed annually by payment of the then-current annual support charge and by successful completion of the Support Services Subscription Form again. (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privacy Policy, which is deposited on ww. kaspersky. com/privacy, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. (iv) "Support Services" means: (a) Daily updates of the anti-virus database; (b) Free software updates, including version upgrades; (c) Extended technical support via e-mail and phone hotline provided by Vendor and/or Reseller; (d) Virus detection and disinfection updates 24 hours per day. [. . . ]