Sophos Anti-Virus Mac OS 8 or 9 on a network installation guide

Installation guideMac OS 8 or 9 on a networkFor networks with Mac server (optional) and Mac workstations

About this guideThis guide tells you how to

� install Sophos Anti-Virus on Macintosh workstations

� run a scan on a Macintosh workstation or server

� set up automatic disinfection

� set up central virus reporting

� update Sophos Anti-Virus

� remove Sophos Anti-Virus.

Sophos Anti-Virus for Macintosh is compatible with Mac OS 8.1 or later.This installation guide shows screens from Mac OS 9.x.

Mac OS X users should see the Sophos Anti-Virus Mac OS X computers ona network installation guide.

Sophos documentation is published on the Sophos CD each month and atwww.sophos.com/support/docs/

http://www.sophos.com/support/docs/

2

Sophos Anti-Virus Installation Guide

Technical supportUK (24 hours): (+44) 1235 559933 [email protected]

USA (24 hours): (+1) 888 767 4679 [email protected]

Australia (24 hours): (+61) 2 9409 9111 [email protected]

France: (+33) 1 40 90 20 90 [email protected]

Germany (24 hour): (+49) 6136 91193 [email protected]

Italy: (+39) 02 662810 0 [email protected]

Japan (24 hours): (+81) 45 227 1800 [email protected]

Singapore (24 hours): (+65) 6776 7467 [email protected]

A support knowledgebase and virus information are available on the Sophoswebsite www.sophos.com

If you contact technical support, provide as much information as possible,including Sophos software version number(s), operating system(s) and patchlevel(s), and the exact text of any error messages.

Copyright © 2003, 2004 by Sophos Plc

All rights reserved. No part of this publication may be reproduced, stored in aretrieval system, or transmitted, in any form or by any means, electronic, mechanical,photocopying, recording or otherwise unless you are either a valid licensee where thedocumentation can be reproduced in accordance with the licence terms or youotherwise have the prior permission in writing of the copyright owner.

Any name should be assumed to be a trademark unless stated otherwise. InterCheckand Sophos are registered trademarks of Sophos Plc.

http://www.sophos.com/

mailto:[email protected]








3

Mac OS 8 or 9 on a network

Contents

1 Installing Sophos Anti-Virus 3

2 Using Sophos Anti-Virus 12

3 Keeping Sophos Anti-Virus up to date 18

4 Removing Sophos Anti-Virus 21

4

Sophos Anti-Virus installation guide

1 Installing Sophos Anti-Virus

1.1 Before you install Sophos Anti-Virus

Before you install Sophos Anti-Virus, uninstall any other anti-virussoftware from your network.

1.1.1 Ensure the server is free of viruses

1. At the Macintosh server, or at a workstation that has the server mounted onthe desktop, insert the Sophos Anti-Virus CD.

2. Double-click the Run Sophos Anti-Virus from CD icon.

3. In the Sophos Anti-Virus window, click the Start button (green arrowhead).

5


Sophos Anti-Virus now scans the server’s hard disk(s) and any networkvolumes for viruses.

If no viruses are found, quit Sophos Anti-Virus and go straight tosection 1.2.

1.1.2 What if Sophos Anti-Virus finds a virus?

If Sophos Anti-Virus finds a virus, the warning below is displayed.

1. Close it and, at the main Sophos Anti-Virus window, click Details (at thebottom left of the screen) to open the on-screen log.

2. Read it – it tells you which viruses have been discovered and which files areinfected.

3. Contact Sophos technical support for help with disinfection.

When your network is free of viruses, go to section 1.2.

6


1.2 Create the central installation

The central installation is the central copy of the Sophos Anti-Virus files onthe network server. Sophos Anti-Virus is installed and updated onworkstations from this central installation.

1. At a Macintosh server or a Macintosh computer that has the server mountedon the desktop, insert the Sophos Anti-Virus CD.

2. Double-click the Sophos Anti-Virus Installer icon.

3. In the Sophos Anti-Virus Installer dialog box, click the Install to Server tab.

4. Ensure Copy the Sophos Anti-Virus installation files onto the server andCopy the on-line manuals onto the server are both selected. If you want toinstall the central installation in a different location to the default destinationshown in the dialog box, click Select folder and browse to your chosenlocation.

7


5. Click Install.

The installer program creates a folder called macinst and copies theinstallation files to it.

The Installation Successful dialog box is displayed.

You should now add the latest virus identity files (IDEs) to the centralinstallation (section 1.3).

8


1.3 Add the latest virus identity files

A virus identity file (IDE) enables Sophos Anti-Virus to detect a specificvirus. You need IDEs to protect your network against viruses discoveredsince your version of Sophos Anti-Virus was compiled.

Carry out this procedure at a computer that has access to the internet andthe central installation.

Download IDEs as follows:

1. Go to the IDE download page of the Sophos website(www.sophos.com/downloads/ide).

2. Download the compressed IDEs file for your version of Sophos Anti-Virus.

3. Extract the file to the IDE folder in the macinst folder in the centralinstallation.

If you prefer, scroll down the page and download the IDEs one by one, to thelocation above.

Help with downloading IDEs is available in the Sophos supportknowledgebase (www.sophos.com/support/knowledgebase). If you useInternet Explorer 5.0, read the article on why IDEs may acquire an extra fileextension when you download them.

If you need further help with downloading IDEs, please contact Sophostechnical support.

You have downloaded the latest IDEs.

If you have a Macintosh server, go to section 1.4 to find out how to installSophos Anti-Virus on the server.

If you do not have a Macintosh server, go straight to section 1.5 to installSophos Anti-Virus on the workstations.

http://www.sophos.com/downloads/ide

http://www.sophos.com/support/knowledgebase

9


1.4 Install Sophos Anti-Virus on the Macintosh server

This section describes how to install Sophos Anti-Virus on the Macintoshserver on which you created the central installation.

If you created the central installation on a non-Macintosh server, refer to theSophos Anti-Virus installation guide for the relevant server platform to findout how to install Sophos Anti-Virus on it. Then go straight to section 1.5and install Sophos Anti-Virus on the Macintosh workstations.

There are two steps:

� Install Sophos Anti-Virus (section 1.4.1).

� Set up automatic updating (section 1.4.2).

1.4.1 Install Sophos Anti-Virus on the server

1. At the Macintosh server, open the macinst folder and double-click theSophos Anti-Virus Installer icon.

2. In the Sophos Anti-Virus Installer dialog box, ensure Install SWEEP foron-demand scanning is selected and deselect Install InterCheck for on-access scanning. If necessary, click Select folder and browse to analternative installation location. Click Install.

3. In the Installation Successful dialog box, click Run SWEEP.

You have installed Sophos Anti-Virus on the server without InterCheckon-access scanning. This Installation Guide recommends that you installInterCheck on the workstations, so there is no need to install it on the server.

10


If you need to scan the server for viruses, you should carry out regularimmediate virus scans (see section 2.2).

Now set up automatic updating on the server (section 1.4.2).

1.4.2 Set up automatic updating on the server

The procedure describes how to configure Sophos Anti-Virus on the server soit automatically updates whenever you update the central installation.

1. If the Sophos Anti-Virus window is not already in view, open the SophosAnti-Virus folder and double-click the SWEEP icon.

2. In the Sophos Anti-Virus window, click the Preferences button.

3. In the SAV Preferences dialog box, under Central Updates in theConfiguration menu, choose Update Options. Select Enable Updates. ClickSelect Folder and browse to the macinst folder. Close the SAV Preferencesdialog box.

Now install Sophos Anti-Virus on the Macintosh workstations (section 1.5).

11


1.5 Install Sophos Anti-Virus on the workstations

Before installation, ensure that each workstation is free of viruses. At eachworkstation, follow the procedure described in section 1.1.

1. At a Macintosh workstation, ensure that the file server is mounted on thedesktop.

2. Open the macinst folder.


4. In the Sophos Anti-Virus Installer dialog box, ensure Install SWEEP foron-demand scanning and Install InterCheck for on-access scanning areselected. Click Install to install Sophos Anti-Virus on the workstation at thedefault destination shown in the dialog box.

12


5. In the Installation Successful dialog box, click Restart.

InterCheck on-access scanning will become active after the Macintosh isrestarted.

6. Repeat this procedure on each Macintosh workstation.

Sophos Anti-Virus will now scan or check every file on each Macintoshworkstation as it is accessed.

Workstations are automatically configured to check for Sophos Anti-Virusupdates in the network central installation.

13


2 Using Sophos Anti-Virus

2.1 Introduction to the Sophos Anti-Virus window

This section describes the main features of the Sophos Anti-Virus window.

To open the window, double-click the Sophos Anti-Virus folder, then double-click SWEEP.

The Immediate tabbed page is open by default.

Use the buttons to control and configure immediate scanning as follows:

The button starts an on-demand scan.

The button interrupts the on-demand scan.

The button enables you to change the list of items that are scanned.

The button opens the Sophos Anti-Virus Preferences pages.

The button connects you to virus information on the Sophos website.

The button opens the help pages.

14


Click the InterCheck tab to control and configure InterCheck on-accessscanning as follows:

The button disables InterCheck.

The button enables InterCheck.

The button is not available.

The button opens the Sophos Anti-Virus Preferences pages.

The button connects you to virus information on the Sophos website.

The button opens the help pages.

For more information about the Sophos Anti-Virus Preferences pages, seethe Sophos Anti-Virus Mac OS 8 or 9 user manual.

15


2.2 To run an immediate scan

To run an immediate virus scan, first ensure the Immediate tabbed page isin view.

� To scan any item on the Macintosh, drag and drop the file from Finder ontothe Start button.

� To scan an item listed in the Sophos Anti-Virus window, double-click it.

� To scan several files, folders or disks, add them to the list in the SophosAnti-Virus window (by dragging and dropping from Finder), then click theStart button. Alternatively, click this button to add or remove items to bescanned.

Click Details at the bottom left of the Sophos Anti-Virus window to see theresults of the scan.

If Sophos has found a virus, double-click on its name in the Details pane tobe connected to its virus analysis on the Sophos website.

16


2.3 To set up automatic disinfection

Remember to check disinfected documents carefully after disinfection, asthe virus may have corrupted them.

2.3.1 To set up automatic disinfection for immediate scanning

If you want Sophos Anti-Virus to attempt disinfection whenever it encountersa virus during an immediate scan, do as follows:


2. In the SAV Preferences dialog box, under Immediate Mode in theConfiguration menu, choose Virus Action.

3. In Virus Action on the right-hand side of the dialog box, select EnableDisinfection. Leave Confirm Disinfection selected.

Sophos Anti-Virus will now attempt to disinfect viruses it encounters duringimmediate scanning. Continue to step 4 to determine how it deals withinfected files it cannot disinfect.

4. Select Infected Files.

5. Click Delete, Move or Copy.

17


6. If you clicked Move or Copy, click Select Folder and browse to the folder youwish infected files to be moved or copied to.

7. Close the SAV Preferences dialog box.

If you also want Sophos Anti-Virus to attempt disinfection as soon as theworkstation tries to access an infected file, go to section 2.3.2.

2.3.2 To set up automatic disinfection for on-access scanning (InterCheck)


2. In the SAV Preferences dialog box, under InterCheck Mode in theConfiguration menu, choose Virus Action.

3. In Virus Action on the right-hand side of the dialog box, select Enableautomatic disinfection.

Sophos Anti-Virus will now attempt to disinfect viruses it encounters whenthe workstation attempts to access infected files.

It is not possible to delete, move or copy files that cannot be disinfectedduring on-access scanning. User confirmation does not exist for on-accessdisinfection.


18


2.4 To set up central reporting

Central reporting enables Macintoshes connected to a non-Macintosh serverto report virus finds to it. InterCheck Server must be installed on the serverto enable it to receive reports. For more information about InterCheck Server,refer to the Sophos Anti-Virus user manual for your server platform.

To set up central reporting:


2. In the SAV Preferences dialog box, under Virus Notification in theConfiguration menu, choose Central Notification.

3. Select Notify InterCheck Server. Then click Select Folder and browse to theComms folder in your server’s InterCheck Server installation.


19


3 Keeping Sophos Anti-Virus up to date

The files in the central installation must be updated regularly to enableSophos Anti-Virus to detect the latest viruses. You must therefore update thecentral installation

� using the monthly update CD (section 3.1)

� whenever a significant new virus is discovered (section 3.2).

The workstations are automatically configured to update from the centralinstallation.

It is possible to fully automate Sophos Anti-Virus updates using EMLibrary. Visit www.sophos.com/products/em or contact your local sales officefor more information.

3.1 To update Sophos Anti-Virus with the monthly CD

1. Before installation, download the latest compressed IDEs file (or individualIDEs) from the Sophos website as described in section 1.3.

2. At the Macintosh server, or at a Macintosh workstation that has the servermounted on the desktop, insert the Sophos Anti-Virus CD.


http://www.sophos.com/products/em

http://www.sophos.com/partners/find

20


4. In the Sophos Anti-Virus Installer dialog box, click the Update Server tab.

5. Click Update.

6. In the Central Update Successful dialog box, click Quit.

The workstations will update from the central installation the next time theyare restarted.

If you have disabled InterCheck on a workstation, you must open the SophosAnti-Virus window to prompt that workstation to update from the centralinstallation.

21


3.2 To update Sophos Anti-Virus when a new virus is discovered

To ensure you are aware of the latest virus threats, subscribe to Sophos’ freeemail notification service at www.sophos.com/virusinfo/notifications.

Whenever there is a significant new virus threat, download the virus identityfile (IDE) for the virus from the Sophos website as follows:

1. Go to the IDE download page of the Sophos website(www.sophos.com/downloads/ide).

2. Download the IDE for the virus.

3. Drag the file from your normal download area to the IDE folder in themacinst folder in the central installation.

4. Restart the workstations so that InterCheck on-access scanning can use thenew IDE.

If you have disabled InterCheck on a workstation, you do not need to restartit after updating with a new IDE.

http://www.sophos.com/virusinfo/notifications

http://www.sophos.com/downloads/ide

22


4 Removing Sophos Anti-Virus

To uninstall Sophos Anti-Virus go to each workstation and carry out thefollowing procedure.

1. Insert the Sophos Anti-Virus CD.


3. In the Sophos Anti-Virus Installer dialog box, click the Remove tab.

4. Click Remove.

5. In the Removal Successful dialog box, click Restart to completeuninstallation.

200412

Documents

Sophos Anti-Virus Mac OS 8 or 9 on a network installation guide