INSTALLATION GUIDE. GroupShield VERSION 5.2. for Microsoft Exchange English/Deutsch/Français/Español/

Transkript

1 INSTALLATION GUIDE GroupShield VERSION 5.2 for Microsoft Exchange 2000 English/Deutsch/Français/Español/

2 Issued March 2002 / GroupShield version 5.2 for Microsoft Exchange 2000

3 Contents Purpose ENG-11 Audience ENG-11 Getting more information ENG-11 Contacting McAfee and Network Associates ENG-13 Overview ENG-15 What s in this guide? ENG-15 Components installed by the software ENG-17 Installation phases ENG-18 Rights and permissions ENG-19 System requirements ENG-20 Important considerations ENG-20 Installation checklist ENG-21 Choosing a language ENG-22 Installing GroupShield 5.2 for Microsoft Exchange ENG-23 Upgrading an existing version of the software ENG-31 Testing your installation ENG-34 Installing the Configuration Properties console on a remote machine ENG-36 Repairing the software ENG-37 Removing the software ENG-37 Uninstall cleanup ENG-40 Installation Guide iii

4 Contents Zweck DEU-3 Zielgruppe DEU-3 Zugriff auf weitere Informationen DEU-3 Kontakt zu McAfee und Network Associates DEU-5 Überblick DEU-7 Zum Inhalt dieses Handbuchs DEU-7 Von der Software installierte Komponenten DEU-9 Phasen der Installation DEU-11 Zugriffsrechte und Befugnisse DEU-12 Systemanforderungen DEU-13 Wichtige Hinweise DEU-13 Checkliste für die Installation DEU-14 Auswählen einer Sprache DEU-15 Installation GroupShield 5.2 für Microsoft Exchange DEU-16 Upgraden einer vorhandenen Softwareversion DEU-25 Testen der Installation DEU-28 Installieren der Konfigurationskonsole auf einem Remote-Computer DEU-30 Reparieren der Software DEU-31 Entfernen der Software DEU-32 Aufräumen nach der Deinstallation DEU-35 iv GroupShield version 5.2 for Microsoft Exchange 2000

5 Contents Objectif FRA-3 Public FRA-3 Comment obtenir des informations complémentaires FRA-3 Comment contacter McAfee et Network Associates FRA-5 Présentation générale FRA-7 Que contient ce guide FRA-7 Composants installés par le logiciel FRA-9 Phases d'installation FRA-11 Droits et autorisations FRA-12 Configuration requise FRA-13 Considérations importantes FRA-13 Liste de contrôle de l'installation FRA-14 Choix de la langue FRA-15 Installation de GroupShield 5.2 pour Microsoft Exchange FRA-16 Mise à niveau d'une version existante du logiciel FRA-25 Test de votre installation FRA-28 Installation de la console des propriétés de configuration sur une machine distante FRA-30 Réparation du logiciel FRA-31 Suppression du logiciel FRA-32 Nettoyage de désinstallation FRA-35 Installation Guide v

6 Contents Propósito ESP-3 Destinatarios ESP-3 Más información ESP-3 Cómo ponerse en contacto con McAfee y Network Associates ESP-5 Descripción ESP-7 Qué incluye esta guía? ESP-7 Componentes instalados por el software ESP-9 Fases de la instalación ESP-11 Derechos y permisos ESP-12 Requisitos de sistema ESP-13 Consideraciones importantes ESP-13 Lista de control para la instalación ESP-14 Selección de un idioma ESP-15 Instalando GroupShield 5.2 for Microsoft Exchange ESP-16 Ampliar de una versión actual del software ESP-25 Comprobación de la instalación ESP-28 Instalación de la consola de Propiedades de configuración en un equipo remoto ESP-30 Reparar el software ESP-31 Desinstalación del software ESP-32 Limpieza de desinstalación ESP-35 vi GroupShield version 5.2 for Microsoft Exchange 2000

7 Contents McAfee Network Associates GroupShield 5.2 for Microsoft Exchange Installation Guide vii

8 Contents viii GroupShield version 5.2 for Microsoft Exchange 2000

9 GroupShield version 5.2 for Microsoft Exchange 2000 Installation Guide English Installation Guide ENG-ix

10 COPYRIGHT 2002 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 3965 Freedom Circle, Santa Clara, California 95054, or call TRADEMARK ATTRIBUTIONS Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, CNX, CNX Certification Certified Network Expert and design, CyberCop, CyberCop (in Katakana), CyberMedia, CyberMedia UnInstaller, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon s, Dr Solomon s label, Enterprise SecureCast, Enterprise SecureCast (in Katakana), EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HomeGuard, Hunter, ISDN TEL/SCOPE, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, MultiMedia Cloaking, Net Tools, Net Tools (in Katakana), NetCrypto, NetOctupus, NetScan, NetShield, NetStalker, Network Associates, NetXray, NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PC Medic 97, PCNotary, PGP, PGP (Pretty Good Privacy), Pretty Good Privacy, PrimeSupport, Recoverkey, Recoverkey International, Registry Wizard, ReportMagic, RingFence, Router PM, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), SniffMaster, SniffMaster (in Hangul), SniffMaster (in Katakana), SniffNet, Stalker, SupportMagic, TIS, TMEG, TNV, TVD, TNS, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, Who s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners. LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND. Issued March 2002/ GroupShield version 5.2 for Microsoft Exchange 2000

11 Preface Purpose Audience This Installation Guide provides the following information for GroupShield version 5.2 for Microsoft Exchange 2000: system requirements, detailed instructions for installing the software, and where to find other product documentation. This guide is designed for system and network administrators who are responsible for their company s anti-virus program. Getting more information Product Guide Product introduction and features, detailed instructions for configuring the software, information on deployment, recurring tasks, and operating procedures. Available in an Adobe Acrobat.PDF file from either the product CD or the McAfee download site. Help Product information in the Help system that is accessed from within the application. The Help system provides high-level and detailed information. Access from either a Help menu option or Help button in the application, or by pressing the [F1] function key. Configuration Guide For use with epolicy Orchestrator. Procedures for installing, configuring, deploying, and managing GroupShield version 5.2 for Microsoft Exchange 2000 through McAfee epolicy Orchestrator management software. Available in an Adobe Acrobat.PDF file from either the product CD or the McAfee download site. Installation Guide ENG-11

12 Preface Release Notes README file. Product information, system requirements, resolved issues, any known issues, and last-minute additions or changes to the product or this guide. Available as a.txt file from either the product CD or the McAfee download site. Contact A list of phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world. Also includes contact information for services and resources, including: Technical Support Customer Service Download Support AVERT Anti-Virus Research Site McAfee Beta Site On-Site Training Network Associates Offices Worldwide ENG-12 GroupShield version 5.2 for Microsoft Exchange 2000

13 Preface Contacting McAfee and Network Associates Technical Support McAfee Beta Site AVERT Anti-Virus Research Site Download Site DAT File Updates Product Upgrades Valid grant number required. Contact Network Associates Customer Service. On-Site Training Network Associates Customer Service: Web US, Canada, and Latin America toll-free: Phone VIRUS NO or Monday Friday, 8 a.m. 8 p.m., Central Time For additional information on contacting Network Associates and McAfee including toll-free numbers for other geographic areas see the Contact file that accompanied this product release. Installation Guide ENG-13

14 Preface ENG-14 GroupShield version 5.2 for Microsoft Exchange 2000

15 1Installing the Software Overview This guide describes how to install GroupShield version 5.2 for Microsoft Exchange Step-by-step instructions describe a typical installation of the software, and further information describes other types of installation. GroupShield installs using the Microsoft Windows Installer. In addition to installing the software, the Windows Installer also allows you to repair a corrupt GroupShield installation or remove the software completely from your system. You can install this version of GroupShield on clustered or non-clustered Microsoft Exchange 2000 servers. If you have GroupShield version 4.5 or 5.0 already installed, you can upgrade your existing version to GroupShield v 5.2. When you install GroupShield 5.2 for Microsoft Exchange 2000, the following components are also installed: Outbreak Manager Log and Quarantine Alert Manager What s in this guide? This guide includes the following topics: Installation media and where to obtain it. See GroupShield version 5.2 for Microsoft Exchange 2000 software distributions on page 18. The rights and permissions you need before you can install GroupShield for Microsoft Exchange. See Rights and permissions on page 19. The required specification for the server using the software. See System requirements on page 20. The checks you need to make before proceeding with the installation. See Installation checklist on page 21. Installation Guide ENG-15

16 Installing the Software Selecting which language to use for the installation. See Choosing a language on page 22. Detailed procedure of a typical first-time installation. See Installing GroupShield 5.2 for Microsoft Exchange 2000 on page 23. Trying out your installation to see if it works properly. See Testing your installation on page 34. Changes to your system following installation. These are changes made to your system as a result of installing the software. See Changes to your system after installation on page 30. Installing a newer version of the software. See Upgrading an existing version of the software on page 31. Repairing damaged software. See Repairing the software on page 37. Removing software. See Removing the software on page 37. ENG-16 GroupShield version 5.2 for Microsoft Exchange 2000

17 Components installed by the software Installing the Software When installation is complete, you can use the following components to protect your Microsoft Exchange servers against viruses and other malicious software: GroupShield Properties console This configures and manages how GroupShield for Microsoft Exchange protects your mail server from virus infection. McAfee GroupShield On-Demand Console This displays progress and statistical information relating to an on-demand scan. Performance Monitor This continually monitors GroupShield for Microsoft Exchange anti-virus activities and publishes its results to the Microsoft Windows Performance Monitor. McAfee Log Manager This provides event information about the GroupShield for Microsoft Exchange anti-virus activities. You can use the Log Manager to create reports and archive logs. McAfee Quarantine Manager This moves infected messages or attachments to a quarantine database or directory pending further action. McAfee Alert Manager This provides alerting options that notify you and other administrators of virus attacks. You can use the alerts individually or in combinations to suit your working environment. McAfee Outbreak Manager This monitors traffic to give timely warning of a major virus attack. It looks for multiple versions of the same virus, identical attachments or message throughput over a period that you specify. If the Outbreak Manager identifies abnormal behavior, it responds immediately according to rules that you choose. For more information on these components and the main features of the product, refer to the GroupShield version 5.2 for Microsoft Exchange 2000 Product Guide. Installation Guide ENG-17

18 Installing the Software Before you start We recommend that you read this chapter thoroughly before you install GroupShield 5.2 for Microsoft Exchange GroupShield version 5.2 for Microsoft Exchange 2000 software distributions Installation phases McAfee distributes GroupShield in a number of ways: as a compressed file that you download from the Network Associates web site; or from one of the following McAfee software CDs: McAfee Active Virus Defense (AVD) GroupShield Security Suite Once you have downloaded a GroupShield program archive or placed a McAfee installation CD in your computer s CD-ROM drive, follow the installation steps in Installing GroupShield 5.2 for Microsoft Exchange 2000 on page 23. Installing GroupShield 5.2 for Microsoft Exchange 2000 consists of two phases: the Microsoft Windows Installer (MSI) installation. This installs all the required files and creates registry keys. configuring GroupShield for your system. MSI installation phase MSI installation copies the required files and registry settings. At the end of this phase, on single, non-clustered servers, GroupShield starts to detect viruses. NOTE: On cluster servers, further configuration is required before viruses can be detected. This phase of the installation: Allows you to install GroupShield to a different location on the disk. Ensures that minimal changes are made to the system if you stop the installation. When upgrading, stops existing GroupShield components so that they can be upgraded. ENG-18 GroupShield version 5.2 for Microsoft Exchange 2000

19 Installing the Software Installs and starts the services. Upgrades configuration information. Removes all the original files and registry settings if you uninstall the software. NOTE: Any files, folders or registry entries created since the original installation will not be removed when the software is uninstalled. In a cluster environment, performs a cleanup after the last installation in the cluster. In a cluster environment, copies sufficient files and registry settings onto a node to start a virtual server. Configuration phase The configuration wizard helps you configure the system. On cluster servers, it also allows you to add virtual servers. This phase allows you to: Launch the registration applet. Launch the configuration console (MMC snap-in). Install resource.dlls or launch the cluster administrator. You are also informed of any extra steps required for a functional product. Rights and permissions To install and manage GroupShield 5.2 for Microsoft Exchange 2000, the following system account must be available on the Microsoft Exchange server: The installation account Use the installation account to log on to the computer on which you want to install GroupShield. The account must have: Service Account Administrator role for Microsoft Exchange 2000 at the organization, site and configuration levels. Domain Administrator rights to the Windows 2000 server that is running Microsoft Exchange Installation Guide ENG-19

20 Installing the Software System requirements The following requirements assume that Microsoft Exchange 2000 Server is installed and running correctly on your system before you install GroupShield. Server Intel-based servers Processor Memory Available hard disk space Operating system Other software General 300 MHz Pentium or faster 256MB minimum 500MB minimum of free hard disk space on the disk drive where Microsoft Exchange 2000 is installed 200MB minimum of free hard disk space on the system drive. Microsoft Windows 2000 Server with Service Pack 1 or above. Microsoft Exchange 2000 with Service Pack 1 or above. A CD-ROM drive (if installing from CD) or an Internet connection (if installing from the McAfee download site) Important considerations Before starting the installation process, we recommend that you check the following: Microsoft Exchange 2000 Server Service Pack 1 (SP1 build or later) must be installed in order for all the GroupShield features to be available. To check whether Microsoft Exchange 2000 Server SP1 is installed, look at the version and build number of STORE.EXE in Program Files\Exchsrvr\BIN. The Microsoft Exchange server must have a private information store. GroupShield 5.2 for Microsoft Exchange 2000 cannot be installed on servers running Microsoft Exchange 5.5. ENG-20 GroupShield version 5.2 for Microsoft Exchange 2000

21 Installing the Software Front-end/back end solutions. When installing GroupShield on a Microsoft Exchange 2000 Server environment that is configured as a front-end/back-end solution, we recommend that you only install GroupShield on the back-end servers that host the information stores where the public folders and mailboxes are held. However, if your front-end server holds mailboxes or public folders, GroupShield 5.2 for Microsoft Exchange 2000 should also be installed on the front-end server. Installation checklist Before you install GroupShield, read the following installation checklist to ensure that your system is configured correctly to run the GroupShield Setup program and that you have all the information required to install the program: You have administrative rights to Microsoft Windows 2000 and Microsoft Exchange 2000 Server. The installation computer has a CD drive, if you plan to install GroupShield for Microsoft Exchange using a CD. The installation computer has access to the Network Associates web site, if you plan to download GroupShield. The installation computer has at least 200MB of free hard disk space to install the software. Check that you have the correct rights and permissions for all installation and service accounts needed when you install GroupShield. This includes network and domain rights. You know the account names of other administrators in your organization who need access to the quarantine location where GroupShield stores infected messages and attachments. You know the name of the mailbox or mailboxes you want to notify when GroupShield detects a virus. You have identified a suitable time for running a scheduled on-demand scan after installing the software. Installation Guide ENG-21

22 Installing the Software Post-installation After installation you need to configure your system. We recommend that you do the following: Allow other administrators in your organization access to the specified quarantine location where GroupShield stores infected items. Specify a mailbox or mailboxes to be notified when GroupShield detects a virus. Perform an on-demand scan after you install GroupShield to ensure that the Microsoft Exchange message store is virus-free. Schedule the scan to run when server activity is low. For information on configuring and scheduling an on-demand scan, refer to the GroupShield version 5.2 for Microsoft Exchange 2000 Configuration Guide. Choosing a language GroupShield for Microsoft Exchange can be viewed in one of five languages: English French German Japanese Spanish The Setup program selects the language based on your computer s locale. If your computer s locale matches one of the languages listed above, that language is selected and GroupShield for Microsoft Exchange text displays in that language. If there is no match, the language defaults to English. To change which language displays, change the computer s locale. ENG-22 GroupShield version 5.2 for Microsoft Exchange 2000

23 Installing the Software Installing GroupShield 5.2 for Microsoft Exchange 2000 The steps in this section describe how to install GroupShield 5.2 for Microsoft Exchange 2000 on a single Microsoft Exchange 2000 server that does not have previous versions of GroupShield already installed. In this scenario Microsoft Exchange must be running on the installation server when you install GroupShield. Subsequent sections describe how to install GroupShield 5.2 for Microsoft Exchange 2000 in the following scenarios: Upgrading an existing version of the software on page 31. Installing the software on a cluster on page 28. Installing the Configuration Properties console on a remote machine on page 36. Preparing to install from the McAfee download site 1 Create a temporary directory on your hard disk. 2 Connect to the following web site to obtain the GroupShield version 5.2 for Microsoft Exchange 2000 software package: 3 Locate the GroupShield version 5.2 for Microsoft Exchange 2000 section and extract the archived folders to the temporary directory. You can obtain the necessary utilities to extract.zip archives from most electronic services. Installing on a single Microsoft Exchange server 1 Close all open GroupShield dialog boxes, MMC plug-ins and other applications. 2 In the temporary directory where you downloaded GroupShield, double-click SETUP.EXE to open the installation wizard. The Welcome to the GroupShield for Exchange 2000 Installation Wizard dialog box opens. 3 Click Next> to start the installation. 4 Select the License Type. 5 If prompted, select the Country where purchased and used. Installation Guide ENG-23

24 Installing the Software 6 Read the Network Associates software license agreement carefully. If you install the software, you agree to abide by the terms of the license. To accept the license terms, click Accept. If you do not agree to the license terms, click Cancel. The installation stops (no changes are made to your system). 7 View the Readme Information that is displayed. You can also view and print the complete Readme file, README.RTF, located in the same folder as SETUP.EXE. This contains important last minute information about this release of the software. 8 Click Next> to display the Destination Folder dialog box. 9 To install the software to the default folder, click Next>. To specify a different installation folder, click Browse> and select the folder required, then click OK. 10 Click Next> on the Start Installation dialog box to continue. The Updating System dialog box opens, displaying progress messages and a progress bar. The GroupShield files are copied and the software is installed. NOTE: While the files are being copied, clicking Cancel displays a confirmation window, allowing you to select Exit Setup, which returns the system to its previous state, or Resume, which continues the installation. Once the Microsoft Installer (MSI) starts the installation process, you cannot cancel the installation process. On completion, the GroupShield for Exchange 2000 has been successfully installed dialog box opens. 11 Click Finish to open the GroupShield Exchange Setup Wizard. 12 To configure your system: a Click Configure to open GroupShield Exchange within the Microsoft Management Console (MMC). Then, either: Right-click Configuration and choose Properties. Click Configuration and choose ENG-24 GroupShield version 5.2 for Microsoft Exchange 2000

25 Installing the Software b c Configure your system as required. For example, if you want scanning notifications to be delivered, you must specify a recipient s mailbox on the Administration tab. For details, see the GroupShield version 5.2 for Microsoft Exchange 2000 Product Guide. On completion, click OK to save the configuration. d Close the Configuration dialog box and return to the GroupShield Exchange Setup Wizard. To register your details in the McAfee customer database: a Click Register You can either register GroupShield version 5.2 for Microsoft Exchange 2000 via the Internet, or you can print out and fax the registration information. To register via the Internet b Select Direct Connection to the Internet. Click Finish to open an Internet connection and your Web Browser. c Follow the instructions given in the On-line Product Registration pages. To register using the Print and fax option d Select Print and fax option. Click Next> to display the McAfee GroupShield 5.2 for Microsoft Exchange 2000 User Registration dialog box. e f g Fill in the relevant information in each of the GroupShield User Registration dialog boxes. On completion, click either Save... to save the registration information to your computer, or Print... to print out the Registration Summary. Fax the information to the McAfee number given in the Registration Summary. Finish to return to the GroupShield Exchange Setup Wizard. 13 To complete the installation and close the GroupShield Exchange Setup Wizard, click OK. In some cases, you may be asked to restart the server at this time. Installation Guide ENG-25

26 Installing the Software Installing the software from the command line You can install GroupShield 5.2 for Microsoft Exchange 2000 from the command line, using the msiexec command. This command runs the installation program SETUP.MSI. WARNING: Do not run msiexec directly from the command line on a system that has any previous versions of GroupShield Exchange installed. The syntax of msiexec is: msiexec /i <path-to-setup.msi-file>setup.msi [STOPFORMINSTALL=Y] [INSTALLDIR=<path-to-installation-directory>] [GSECONFIGFILE=<path-to-configuration-file><configuration file.gse>] NOTE: The command must be on a single line. Each parameter and its value is joined with an equals sign without spaces. If you need to include a space, you must enclose the value in a double-quote ("). For example: INSTALLDIR="C:\Program Files\McAfee" The parameters have the following effects: STOPFORMINSTALL=Y Defines whether the organizational forms will be installed. If not specified, the forms are installed. INSTALLDIR=<path-to-installation-directory> Defines the directory where you want to install GroupShield. If not specified, the installation process prompts you for this information. NOTE: During a silent installation, as described in Using SETUP.INI to customize the installation on page 32, you are not prompted for the directory. GroupShield installs to the default installation directory on the boot drive: <C>:\Program Files\McAfee\GroupShield Exchange (where <C> is the boot drive). ENG-26 GroupShield version 5.2 for Microsoft Exchange 2000