VirusScan Enterprise 7.1.0 Installation Guide

VirusScan® Enterprise

version 7.1.0

Installation GuideRevision 1.0

COPYRIGHT© 2003 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 5000 Headquarters Drive, Plano, Texas 75024, or call +1-972-963-8000.

TRADEMARK ATTRIBUTIONSActive Firewall, Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Appera, AVERT, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX Certification Certified Network Expert and design, Covert, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label, E and Design, Entercept, Enterprise SecureCast, Enterprise SecureCast (in Katakana), ePolicy Orchestrator, Event Orchestrator (in Katakana), EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HelpDesk IQ, HomeGuard, Hunter, Impermia, InfiniStream, Intrusion Prevention Through Innovation, IntruShield, IntruVert Networks, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, MultiMedia Cloaking, NA Network Associates, Net Tools, Net Tools (in Katakana), NetAsyst, NetCrypto, NetOctopus, NetScan, NetShield, NetStalker, Network Associates, Network Performance Orchestrator, Network Policy Orchestrator, NetXray, NotesGuard, nPO, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PortalShield, Powered by SpamAssassin, PrimeSupport, Recoverkey, Recoverkey – International, Registry Wizard, Remote Desktop, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic, SecureCast, SecureSelect, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), SpamKiller, SpamAssassin, Stalker, SupportMagic, ThreatScan, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, VIDS, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, What's The State Of Your IDS?, Who’s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks or trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. Sniffer® brand products are made only by Network Associates, Inc. All other registered and unregistered trademarks in this document are the sole property of their respective owners.

LICENSE INFORMATIONLicense AgreementNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED,WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICHTYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDERDOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE(AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWAREPACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE,YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND.

AttributionsThis product includes or may include:

Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).

Cryptographic software written by Eric A. Young ([email protected]) and software written by Tim J. Hudson ([email protected]).

Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar Free Softwarelicenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the sourcecode. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the sourcecode also be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any FreeSoftware licenses require that Network Associates provide rights to use, copy or modify a software program that are broader than the rights granted inthis agreement, then such rights shall take precedence over the rights and restrictions herein.Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer.

Software originally written by Robert Nordier, Copyright © 1996-7 Robert Nordier. All rights reserved.

Software written by Douglas W. Sauder.

Software developed by the Apache Software Foundation (http://www.apache.org/).

International Components for Unicode (“ICU”) Copyright © 1995-2002 International Business Machines Corporation and others. All rights reserved.

Software developed by CrystalClear Software, Inc., Copyright © 2000 CrystalClear Software, Inc.

FEAD® Optimizer® technology, Copyright Netopsystems AG, Berlin, Germany.

Issued SEPTEMBER 2003 / VirusScan® Enterprise software version 7.1.0DOCUMENT BUILD 005-EN

http://www.openssl.org/

mailto:http://www.apache.org/

mailto:[email protected]


Contents

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Getting information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Contacting McAfee Security & Network Associates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

1 Installing the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Pre-installation procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

System requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Server requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Workstation requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Deployment, updating, and management options . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Pre-configuring the installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Using McAfee AutoUpdate Architect and McAfee Installation Designer . . . . . . 14

Using ePolicy Orchestrator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Installation and configuration for use with other products . . . . . . . . . . . . . . . . . . . . . 15

Netopsystems’ FEAD® Optimizer® . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Windows Terminal Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

EMC Celerra™ server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Check Point™ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Product license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Installing VirusScan Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Using the Setup utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Starting the installation process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Typical installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Custom installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Using the command line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Installing silently . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Installing to a custom directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Selecting specific features to install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Customizing installation properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Installation Guide iii

Contents

Setting restart options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Removing incompatible software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Preserving settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Running Setup from a login script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Installed files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

VirusScan folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Res09 folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Engine folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Testing your installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Modifying VirusScan Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Starting the Setup utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Modifying program features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Reinstalling or repairing program files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

2 Removing the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Using the Setup utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Using the command line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Using the Add/Remove Programs utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

A Configuring Netopsystems’ FEAD Optimizer . . . . . . . . . . . . . . . 59

Command-line properties and switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Optimized file defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

B Configuring Check Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Client computer installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Administrator configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

iv VirusScan® Enterprise software version 7.1.0

Preface

This guide introduces McAfee® VirusScan® Enterprise software version 7.1.0, and provides the following information:

Detailed instructions for installing the software.

Procedures for modifying the software.

Procedures for removing the software.

Information on configuring Netopsystems’ FEAD® Optimizer®.

Information on configuring Check Point™.

AudienceThis information is intended primarily for two audiences:

Network administrators who are responsible for their company’s anti-virus and security program.

Users who are responsible for updating virus definition (DAT) files on their workstation, or configuring the software’s detection options.

Installation Guide 5

Preface

ConventionsThis guide uses the following conventions:

Bold All words from the user interface, including options, menus, buttons, and dialog box names.

ExampleType the User name and Password of the desired account.

Courier Text that represents something the user types exactly; for example, a command at the system prompt.

ExampleTo enable the agent, run this command line on the client computer:

FRMINST.EXE /INSTALL=AGENT /SITEINFO=C:\TEMP\SITELIST.XML

Italic For emphasis or when introducing a new term; for names of product manuals and topics (headings) within the manuals.

ExampleRefer to the VirusScan Enterprise Product Guide for more information.

<TERM> Angle brackets enclose a generic term.

ExampleIn the console tree under ePolicy Orchestrator, right-click <SERVER>.

NOTE Supplemental information; for example, an alternate method of executing the same command.

WARNING Important advice to protect a user, computer system, enterprise, software installation, or data.

6 VirusScan® Enterprise software version 7.1.0

Getting information

Getting informationInstallation Guide *† System requirements and instructions for installing and starting the software.

VirusScan Enterprise 7.1.0 Installation Guide

Product Guide * Product introduction and features, detailed instructions for configuring the software, information on deployment, recurring tasks, and operating procedures.

VirusScan Enterprise 7.1.0 Product Guide

McAfee AutoUpdate Architect™ Product Guide

McAfee Installation Designer™ Product Guide

Alert Manager™ Product Guide

ePolicy Orchestrator™ Product Guide

Help § High-level and detailed information on configuring and using the software.

What’s This? field-level help.

Release Guide * High-level description of new and changed features for this version of the product.

Configuration Guide * For use with ePolicy Orchestrator™. Procedures for configuring, deploying, and managing your McAfee Security product through ePolicy Orchestrator management software.

Implementation Guide * Supplemental information for product features, tools, and components.

Release Notes ‡ ReadMe. Product information, resolved issues, any known issues, and last-minute additions or changes to the product or its documentation.

Contacts ‡ Contact information for McAfee Security and Network Associates services and resources: technical support, customer service, AVERT (Anti-Virus Emergency Response Team), beta program, and training. This file also includes phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world.

* An Adobe Acrobat .PDF file on the product CD or the McAfee Security download site.

† A printed manual that accompanies the product CD. Note: Some language manuals may be available only as a .PDF file.

‡ Text files included with the software application and on the product CD.

§ Help accessed from the software application: Help menu and/or Help button for page-level help; right-click option for What’sThis? help.


Preface

Contacting McAfee Security & Network AssociatesTechnical Support

Home Page http://www.networkassociates.com/us/support/

KnowledgeBase Search https://knowledgemap.nai.com/phpclient/homepage.aspx

PrimeSupport Service Portal * http://mysupport.nai.com

McAfee Security Beta Program http://www.networkassociates.com/us/downloads/beta/

Security Headquarters — AVERT (Anti-Virus Emergency Response Team)

Home Page http://www.networkassociates.com/us/security/home.asp

Virus Information Library http://vil.nai.com

Submit a Sample — AVERT WebImmune

AVERT DAT Notification Service

https://www.webimmune.net/default.asp

http://www.networkassociates.com/us/downloads/updates/

Download Site

Home Page http://www.networkassociates.com/us/downloads/

DAT File and Engine Updates http://www.networkassociates.com/us/downloads/updates/

ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

Product Upgrades * https://secure.nai.com/us/forms/downloads/upgrades/login.asp

Training

McAfee Security University http://www.networkassociates.com/us/services/education/mcafee/university.htm

Network Associates Customer Service

E-mail [email protected]

Web http://www.nai.com/us/index.asp

http://www.networkassociates.com/us/products/mcafee_security_home.htm

US, Canada, and Latin America toll-free:

Phone +1-888-VIRUS NO or +1-888-847-8766

Monday – Friday, 8 a.m. – 8 p.m., Central Time

For additional information on contacting Network Associates and McAfee Security— including toll-free numbers for other geographic areas — see the Contact file that accompanies this product release.

* Logon credentials required.


http://www.networkassociates.com/us/support/

https://knowledgemap.nai.com/phpclient/homepage.aspx

http://mysupport.nai.com

http://www.networkassociates.com/us/downloads/beta/

http://www.networkassociates.com/us/security/home.asp

http://vil.nai.com

https://www.webimmune.net/default.asp


http://www.networkassociates.com/us/downloads/


ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

https://secure.nai.com/us/forms/downloads/upgrades/login.asp

http://www.networkassociates.com/us/services/education/mcafee/university.htm

http://www.networkassociates.com/us/services/education/mcafee/university.htm


http://www.nai.com/us/index.asp

http://www.networkassociates.com/us/products/mcafee/enterprise_home.asp

http://www.networkassociates.com/us/products/mcafee/enterprise_home.asp

1
Installing the Software
The VirusScan Enterprise 7.1.0 software supports both servers, workstations, and many third-party applications. It is a replacement for:

VirusScan Enterprise version 7.0 software for workstations and servers.

VirusScan version 4.5.1 software for workstations.

NetShield NT version 4.5 software for servers.

NetShield for Celerra™ version 4.5 for Celerra™ filers.

These topics are included in this section:

Before you begin on page 10.

Installing VirusScan Enterprise on page 18.

Modifying VirusScan Enterprise on page 45.



Before you beginBefore you start the installation, we recommend that you review these topics to ensure that you are prepared:

Pre-installation procedures on page 10.

System requirements on page 11.

Deployment, updating, and management options on page 13.

Installation and configuration for use with other products on page 15.

Product license on page 17.

Pre-installation proceduresComplete these procedures before beginning the installation process:

Product software — Locate the VirusScan Enterprise 7.1.0 software.

McAfee Security distributes VirusScan Enterprise software in two ways:

As an archive file that you can download from the web. Go to the McAfee Security download web site to download the archive file. See Contacting McAfee Security & Network Associates on page 8.

On a product CD.

Readme — Locate the Readme file and read it thoroughly to identify special installation instructions or issues. The Readme file can be found in the same location as the product software.

Installation rights — Verify that you have the appropriate rights to install the software. To install VirusScan Enterprise, you must have local administrator rights for the computer on which you plan to install the program.

Preserve settings — When upgrading from an earlier version of the software, decide whether you want to preserve settings.

If you are installing VirusScan Enterprise 7.1.0 on a computer with an earlier version of NetShield, VirusScan, or VirusScan Enterprise, you have the option of preserving the settings from the earlier version of the software. If you preserve settings, saved tasks, user-specified extensions, and exclusion settings are saved from the previously installed version.

Alternatively, you can remove the previous version of the software first, then install VirusScan Enterprise 7.1.0. If you use this method, you lose the settings from the previous version of the software.


Before you begin

System requirementsVerify that your computer meets the following system requirements before you start the installation process.

Server requirementsThe VirusScan Enterprise software installs and runs on a server equipped with:

Processor — An Intel processor or compatible architecture. McAfee Security recommends an Intel Pentium processor or Celeron running a minimum of 166MHz.

Operating system — Any of these Microsoft Windows platforms:

Windows NT Server 4.0, with Service Pack 6 or 6a.

Windows NT Enterprise Server 4.0, with Service Pack 6 or 6a.

Windows NT Terminal Server Edition, with Service Pack 6.

Windows 2000 Server, with Service Pack 1, 2, or 3.

Windows 2000 Advanced Server, with Service Pack 1, 2, or 3.

Windows 2000 DataCenter Server, with Service Pack 1, 2, or 3.

Windows Server 2003 Standard (formerly known as Windows .NET Server 2003, Standard Edition).

Windows Server 2003 Enterprise (formerly known as Windows .NET Server 2003, Enterprise Edition).

Windows Server 2003 Web (formerly known as Windows .NET Server 2003, Web Edition).

Windows Server 2003 DataCenter.

Browser — Microsoft Internet Explorer, version 4.0 or later.

Memory — 32MB RAM minimum.

NOTEFor information on optimal operating system performance, review Microsoft’s guidelines for minimum RAM configuration.



Free disk space — Adequate hard disk space:

20MB — A complete installation of all the program’s features and components occupies approximately 20MB of disk space on your computer.

25MB — The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete.

Other — A CD-ROM drive or an Internet connection.

Workstation requirementsThe VirusScan Enterprise software installs and runs on a workstation equipped with:

Processor — An Intel processor or compatible architecture. McAfee Security recommends an Intel Pentium processor or Celeron running a minimum of 166MHz.

Operating system — Any of these Microsoft Windows platforms:

Windows NT Workstation 4.0, with Service Pack 6 or 6a.

Windows 2000 Professional, with Service Pack 1, 2, or 3.

Windows XP Home, Professional, and Tablet PC Edition, with Service Pack 1.

Browser — Microsoft Internet Explorer, version 4.0 or later.

Memory — 32MB RAM minimum.

NOTEFor information on optimal operating system performance, review Microsoft’s guidelines for minimum RAM configuration.

Free disk space — Adequate hard disk space:

20MB — A complete installation of all the program’s features and components occupies approximately 20MB of disk space on your computer.

25MB — The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete.

Other — A CD-ROM drive or an Internet connection.


Before you begin

Deployment, updating, and management optionsDecide how you plan to deploy, manage, and update the product. If you use supporting tools to deploy, pre-configure, update, or manage VirusScan Enterprise, the installation procedure may vary.

To pre-configure the VirusScan Enterprise installation package we recommend that it includes:

Where and how you get updates.

When you check for updates (the default is Friday at 17:00 local time to the computer).

Which policy settings should be defined.

Pre-configuring the installation packageYou can pre-configure the VirusScan Enterprise installation package using these methods:

Using McAfee AutoUpdate Architect and McAfee Installation Designer on page 14.

Using ePolicy Orchestrator on page 14.



Using McAfee AutoUpdate Architect and McAfee Installation DesignerTo use McAfee AutoUpdate Architect and McAfee Installation Designer to pre-configure the installation package, follow these steps:

NOTEIf you plan to use the Network Associates FTP or HTTP update sites as your update location, skip Step 1 and Step 2. The VirusScan Enterprise software comes pre-configured to get updates from these locations. The FTP site is the default location and the HTTP site is configured as the next location in the repository list.

For more information about updating or using the Network Associates FTP or HTTP update sites, see the VirusScan Enterprise 7.1.0 Product Guide.

1 Install McAfee AutoUpdate Architect and use it to configure the VirusScan Enterprise repository list, SITELIST.XML. See the McAfee AutoUpdate Architect Product Guide for more information. The repository list contains the available updating sites that VirusScan Enterprise uses for updating.

2 Export the repository list, SITELIST.XML, to a temporary folder.

3 Install McAfee Installation Designer and use it to customize the installation options for VirusScan Enterprise 7.1.0. See the McAfee Installation Designer Product Guide for more information.

Using ePolicy OrchestratorIf you installed ePolicy Orchestrator prior to deploying VirusScan Enterprise 7.1.0, you can use it to pre-define the policy settings and update configuration. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator for more information.

NOTEWe recommend that before you use ePolicy Orchestrator to push the software to client computers, you use McAfee Installation Designer to replace or update the default virus definition (DAT) and engine files that are included in the installation package. This ensures that the client computer has the most current protection at installation time and also saves network bandwidth by not having to retrieve the updated files after installation.

The options you have available to you depend on which version of ePolicy Orchestrator you are using.


Before you begin

Using ePolicy Orchestrator 3.0ePolicy Orchestrator version 3.0 or later includes McAfee AutoUpdate Architect, which can be used to create and manage your update repositories. This ensures that product installations and updates are applied from a local source. See the McAfee AutoUpdate Architect Product Guide for more information.

You can easily define and modify VirusScan Enterprise policies and updates using ePolicy Orchestrator 3.0. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator 3.0 for more information.

When using ePolicy Orchestrator 3.0, we recommend that you use the McAfee AutoUpdate Architect that is included in ePolicy Orchestrator, to create the repositories prior to deploying VirusScan Enterprise 7.1.0.

Using ePolicy Orchestrator 2.5.xePolicy Orchestrator version 2.5.x can manage VirusScan Enterprise policies. However, ePolicy Orchestrator 2.5.x does not include McAfee AutoUpdate Architect, so you must use a stand-alone version of McAfee AutoUpdate Architect to create and manage your update repositories. To use created repository sites, you first need to define the VirusScan Enterprise AutoUpdate tasks in ePolicy Orchestrator 2.5.x. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator 2.5.x for more information.

Installation and configuration for use with other productsIf you are installing the VirusScan Enterprise software where third party products are installed, or plan to use the VirusScan Enterprise software with supporting products, you may be required to vary the installation procedure or perform additional configuration.


Netopsystems’ FEAD® Optimizer® on page 16.

Windows Terminal Server on page 16.

EMC Celerra™ server on page 16.

Check Point™ on page 16.



Netopsystems’ FEAD® Optimizer®

The VirusScan Enterprise 7.1.0 installation file (.MSI) has been optimized using the Netopsystems’ Fast Electronic Application Distribution (FEAD® Optimizer®) technology. This significantly reduces the size of the installation file until it is recomposed.

If using the Setup utility to install the VirusScan Enterprise software, the file is automatically recomposed before the installation begins.

When executing SETUP.EXE from the command line, you can apply special command-line properties and switches to recompose the installation files. See Configuring Netopsystems’ FEAD Optimizer on page 59 for more information.

McAfee Installation Designer can also be used to recompose the installation file, then optimize it again after changes have been made. See the McAfee Installation Designer Product Guide for more information.

Windows Terminal ServerIf Windows NT Terminal Server Edition, or Windows 2000 or 2003 Terminal Server Application is installed, and the Setup utility is used to install the VirusScan Enterprise software, the installation stops and the user is notified that they must install the product using the Add/Remove Programs utility that is included in the Windows Control Panel.

To access the Add/Remove Programs utility, click Start, then select Settings | Control Panel | Add/Remove Programs.

NOTEThis installation method is not required if you are using ePolicy Orchestrator to deploy the VirusScan Enterprise software.

EMC Celerra™ serverIf you are installing the VirusScan Enterprise software to an EMC Celerra server, you must first install the EMC Scanner Server software, then install the VirusScan Enterprise 7.1.0 software. This ensures that the VirusScan Enterprise software configures correctly with the EMC Celerra server settings.

Check Point™

The VirusScan Enterprise software has been enhanced to integrate with Check Point™ VPN-1/FireWall-1® SCV. This integration allows you to prevent clients without up-to-date anti-virus protection from accessing the corporate network through the Virtual Private Network (VPN). See Configuring Check Point on page 61 for more information.


Before you begin

Product licenseIf you are installing a licensed version of the VirusScan Enterprise 7.1.0 software for the first time, the product is licensed during the installation process. Skip this section and go to Installing VirusScan Enterprise on page 18.

If you are installing a licensed version of the VirusScan Enterprise 7.1.0 software over an evaluation version, you must upgrade the evaluation version to a licensed version. The license does not automatically upgrade itself if you are installing over an evaluation version.

WARNINGYou must perform the license upgrade before the evaluation period expires. If you do not, the scanning and updating functions will stop until you replace the evaluation version with a licensed version of the product.

Use one of these methods to upgrade an evaluation version of VirusScan Enterprise to a licensed version:

Use the McAfee Installation Designer to upgrade an installed evaluation version to a licensed version:

Install the licensed version of VirusScan Enterprise.

Use McAfee Installation Designer to upgrade the license. Refer to the McAfee Installation Designer Product Guide for specific details.

Remove the existing evaluation version of the product and install the licensed version of the product. If you use this method, you lose all of the settings you selected for the previous installation. This method is only recommended if you cannot use McAfee Installation Designer to upgrade the license.



Installing VirusScan EnterpriseYou can install the VirusScan Enterprise program files on either a server or workstation.

NOTEThe installer determines whether you are installing to a server or a workstation and sets a registry value for ePolicy Orchestrator reporting (via plug-in) to either McAfee VirusScan Enterprise Server or McAfee VirusScan Enterprise Workstation.

This allows ePolicy Orchestrator to distinguish between a server and a workstation for reporting and policy enforcement purposes.

Use any of these methods to install the VirusScan Enterprise software:

The Setup utility that comes with the VirusScan Enterprise software.

The command line.

McAfee Installation Designer can be used to create a customized installation package and to configure product settings. See the McAfee Installation Designer Product Guide for detailed instructions.

Review the System requirements starting on page 11 before you begin the installation process.

These topics are covered in this section:

Using the Setup utility on page 19.

Using the command line on page 33.

Installed files on page 41.

Testing your installation on page 44.


Installing VirusScan Enterprise

Using the Setup utilityOn the computer that you want to install the program:

1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods:

If your copy of the software is on the product CD:

a Insert the CD into the CD-ROM drive.

b Click Install from the Welcome dialog box.

If you are downloading the software:

a Create a temporary folder on your hard drive.

b Download the archive file from the McAfee Security download web site. See Contacting McAfee Security & Network Associates on page 8.

c Use a decompression utility, such as WinZip, to extract the files you downloaded to this folder.

d Click Start, then select Run. The Run dialog box appears.

e Type <X>:\SETUP.EXE in the text box, then click OK.

Here, <X>: represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

Figure 1-1. Run



The Netopsystems’ FEAD Optimizer dialog box appears.

NOTEIt may take a few minutes to recompose the files. The next dialog box appears when the files have been recomposed.

The McAfee VirusScan Enterprise Setup dialog box appears.

Figure 1-2. Netopsystems’ FEAD Optimizer

Figure 1-3. McAfee VirusScan Enterprise Setup



2 Review the product information:

a Click View Readme to display the README file, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box.

b When you have finished reviewing the product information, click Next to open the Network Associates Licensing dialog box.

3 In the License expiry type text box, click to select the type of license.

NOTEThe license type must match the length of the license that you agreed to, when purchasing the software. If you are unsure of which type of license to select, contact the person from whom you purchased the software.

4 In the Select country where purchased and used text box, click to select the country in which you are using the software.

5 Read the license agreement carefully, then choose one of these options:

If you agree to the license terms, select I accept the terms in the license agreement, then click OK to continue.

If you do not agree to the terms, select I do not accept the terms in the license agreement, then click Cancel to stop the installation process.

Figure 1-4. Network Associates Licensing



6 The procedure varies at this point depending on whether you are installing the software for the first time, or if you are installing the software over a previous version:

First-time installation — If you are installing the VirusScan Enterprise 7.1.0 software for the first time, or reinstalling the software, (Setup does not detect a previously installed version of NetShield, VirusScan, or VirusScan Enterprise), the Select Setup Type dialog box appears. Go to Starting the installation process on page 23 to continue.

Previous version — If you are installing the VirusScan Enterprise 7.1.0 software over a previous version of NetShield, VirusScan, or VirusScan Enterprise, you can preserve the settings for saved tasks, user-specified extensions, and exclusions settings from the previously installed version.

The Previous Version Detected dialog box appears.

The Select Setup Type dialog box appears. Go to Starting the installation process on page 23 to continue.

Figure 1-5. Previous Version Detected

Preserve Settings. This option is selected by default. Deselect this option if you do not want to use the settings from the previous version of the McAfee anti-virus software.

NOTEIf Preserve Settings is not selected, the settings from the previously installed version are removed.

Click Next to continue.



Starting the installation processYou must have completed the steps in Using the Setup utility on page 19 to continue with a typical or custom installation.

In the Select Setup Type dialog box, decide which installation type you want to use:

Typical. Installs the software, together with all utilities, and provides the functionality for virus scanning, updating of virus definition (DAT) files, and sending alert messages. McAfee Security recommends this installation type for most environments.

NOTETypical installation does not give you the capability of importing the AutoUpdate repository list or setting a user interface password. You must use Custom installation to use these features.

Go to Typical installation on page 24 to continue with the installation process.

Custom. Allows you to choose the specific features that you want to install. You also have the capability to import the AutoUpdate repository list, set up a user interface password, or install the alerting function to a workstation.

Go to Custom installation on page 26 to continue with the installation process.

Figure 1-6. Setup Type



Typical installationYou must have completed the steps in Using the Setup utility on page 19, before you can continue with a typical installation:

1 In the Select Setup Type dialog box, select the setup type and installation path:

a Select Typical, if it is not already selected.

b Under Install To, select the installation path. By default, Setup installs the VirusScan Enterprise program files to this path:

<drive>:\Program Files\Network Associates\VirusScan\

Accept the default path or click Browse to select another path.

c Click Disk Space to view the disk space requirements, then click OK to return to the Select Setup Type dialog box.

d Click Next to continue.

The Ready to install dialog box appears.

2 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process.

NOTETo review or change any of the settings, click Back, then return to the Ready to install dialog box and click Install.

The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation.

Figure 1-7. Ready to install



When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears.

3 You can run an update task or on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation.

Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation.

4 Click Finish.

NOTEDepending on the options you selected in Step 3, the program may run the update program or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs.

5 You may be requested to restart your computer. If so, the VirusScan Setup dialog box appears.

Click Yes to restart now, or click No to restart at a later time.

Figure 1-8. Setup completed successfully — Update and scan options



Custom installationYou must have completed the steps in Using the Setup utility on page 19, before you can continue with a custom installation:

1 In the Select Setup Type dialog box, select the setup type and installation path:

a Select Custom.

b Under Install To, select the installation path. By default, Setup installs the VirusScan Enterprise program files in this path:


Accept the default path or click Browse to select another path.

c Click Disk Space to view the disk space requirements, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box.


The Feature Selection dialog box appears.

2 Under Select which features you would like to install, select the individual features.

a Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel.

Figure 1-9. Feature Selection



b For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature.

Choose one of these action options:

c Under Install To, accept the default path or click Browse to select a new installation path.

Figure 1-10. Feature action options

This feature will be installed on local hard drive. Installs the selected feature on the computer.

This feature, and all subfeatures, will be installed on local hard drive. Installs the selected feature and all of the features that are subordinate to it. For example, if you select Console, then AutoUpdate, E-mail Scanner, On-Access Scanner, and On-Demand Scanner are also installed.

This feature will not be available. Removes the selected feature, if it is already installed.




The Install Alert Manager dialog box appears.

NOTEThe installation wizard detects whether Alert Manager is installed. If Alert Manager is already installed, the options on this dialog box are disabled.

3 Choose whether you want to install Alert Manager after the VirusScan Enterprise installation completes:

a Install Alert Manager Server. This option is selected by default if the current operating system is a server, Alert Manager has not already been installed, and Alert Manager is available in the specified location. Deselect this option if you do not want to install Alert Manager automatically after the VirusScan Enterprise installation completes.

NOTEIf you select this option, the Alert Manager files must be in the location shown under Alert Manager installation files.

Figure 1-11. Install Alert Manager



b Alert Manager installation files. Accept the default path or click Browse to select a different location.

WARNINGIf you do not install Alert Manager as part of a custom installation the first time you install VirusScan Enterprise 7.1.0, you cannot use the VirusScan Enterprise installation utility to install Alert Manager at a later time. To install Alert Manager at a later time after VirusScan Enterprise has been installed, you must run the stand-alone Alert Manager installer. See the Alert Manager 4.7 Product Guide for more information.

c Click Next to continue.

The Product Configuration dialog box appears.

4 In the Product Configuration dialog box, choose any combination of these options, then click Next to continue:

Import AutoUpdate repository list. This option is selected by default only if a repository list is included in the installation file (.MSI) or the command-line property (CMASOURCEDIR) has been set to a new location to point to the SITELIST.XML file. You can use McAfee Installation Designer to place the SITELIST.XML into the .MSI file. Select this option to import the repository list from the location you specify.

Figure 1-12. Product Configuration



Import the AutoUpdate repository list. Accept the default location or click Browse to select a new location.

NOTEIf you do not import a repository list at this time, and a repository list resides in the installation folder, that repository list will be imported even though you do not select the Import AutoUpdate repository list option. If a repository list is not imported, AutoUpdate performs updates using the default Network Associates site as its repository list.

See the Updating section in the VirusScan Enterprise Product Guide for more information about the repository list.

Enable On-Access Scanner at the end of installation. This option is selected by default. Automatically starts the on-access scanner upon completion of the installation process. Deselect this option to manually start the on-access scanner after installation.

5 Click Next to continue.

The Security Configuration dialog box appears.

6 In the Security Configuration dialog box, you can set a user interface password and determine which menu items users will be able to see.

a Under Configuration Password Protection, type and confirm the user interface password.

b Under Start menu, select Do not display the VirusScan items under the Start menu if you do not want to display these items on the menu.

Figure 1-13. Security Configuration



c Under System tray icon and menu, choose one of these options:

NOTEAfter installation, you can choose to set or reset password protection and system tray icon options from the VirusScan Console. See Setting user interface options in the VirusScan Enterprise Product Guide for more information.


The Ready to install dialog box appears.

Show the system tray icon with all menu options. This option is selected by default. Deselect this option if you do not want to display all menu items on the system tray icon.

Show the system tray icon with minimal menu options. Limit the menu items users can see on the system tray icon menu to About VirusScan Enterprise and On-Access Scan Statistics. All other menu items are not displayed on the system tray icon menu.

Do not show the system tray icon. Prevent users from accessing the system tray icon menu. If you select this option, the system tray icon menu is not displayed in the system tray.

Figure 1-14. Ready to install





The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation.


8 You can run an update task or an on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation.


9 Click Finish.

NOTEDepending on the options you selected in Step 8, the program may run the update task or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs.




10 You may be prompted to restart your computer. If so, the VirusScan Setup dialog box appears.


Using the command lineThe VirusScan Enterprise Setup utility runs as a Microsoft Installer (.MSI) application, providing a wide array of custom installation options. Running the Setup utility from the command line allows you to customize the installation so that it runs the way you want and installs exactly the product features you want.

NOTEYou can run Setup from the command line to install the VirusScan Enterprise software to your local computer, but only if you have local administrator rights. To install the software to a remote computer, you must use ePolicy Orchestrator or other product deployment software. Refer to the VirusScan Enterprise Configuration Guide for information about how to use ePolicy Orchestrator to install the program files.

1 Click Start, then select Run. The Run dialog box appears.

2 Type the command line you want to use in the Run dialog box, then click OK.

The Setup command-line syntax looks like this:

setup PROPERTY=VALUE[,VALUE] [/option]

This syntax does not require any specific order in its elements, except that you may not separate a property and its value. The syntax consists of:

File name — The name of the executable file: setup.exe.

Options — Any options are preceded by a forward slash (/) character and are not case-sensitive. The installation scenarios that appear later in this guide discuss some of the available options.

Properties — Any properties you want to use to shape how the installation runs.



Each property consists of:

The following sections describe some common scenarios that use command-line options to run custom installations.

Installing silentlyUse command-line options to set up VirusScan Enterprise software on each network node with little or no interaction from users. During a silent installation, Setup does not display any of its usual wizard panels, or offer the user any configuration options. Instead, you pre-configure these choices and run Setup in the background on each destination computer. You can install VirusScan Enterprise software on any unattended computer with or without the user’s knowledge, provided you have the necessary administrator rights.

A name, which must appear in uppercase letters.

An equal (=) sign.

One or more values, each separated by commas. Most property values must appear in all uppercase too, but some, such as True and False, must appear in mixed case. The Microsoft Installer permits a large variety of properties, all of which you can use to determine how your installation runs. To learn about those properties, see the Microsoft Installer documentation. To install VirusScan Enterprise software, specifically, you can use these additional properties:

ADDLOCAL. Installs specific features to the local computer.

INSTALLDIR. Specifies which installation folder you want to use. The value consists of the directory path.

PRESERVESETTINGS. Specifies whether Setup should retain the configuration options you used for previous on-access scanner installations. By default, its value is True.

REBOOT. Specifies whether Setup should restart your computer. You can force the computer to restart if it is required, or prevent it from restarting.

REMOVE. Removes one or more program features. You can specify a feature, or use the value ALL to remove all features. If you combine this property with the ADDLOCAL property, you can install all but one or two specific features.

REMOVEINCOMPATIBLESOFTWARE. Removes competitor’s anti-virus software that could conflict with this VirusScan Enterprise version. By default, its value is True.



For example, setup/q:

Use /q to run a silent installation.

Other semi-silent installation methods are:

To record installation progress in a log file, add this option and parameter to the Setup command line:

/l*v “c:\temp\log.txt”

Here, c:\temp\log.txt can be any directory and any file name you want to use to create the log file. This option logs all installer activity, including all files copied, all registry keys added, and all .INI file changes.

Replace the asterisk (*) shown in the command-line example, with one or more of these parameters to limit the type of data that the log file records:

/qb Shows a small progress bar during installation, with a cancel button.

/q+ Shows a success/failure installation completed dialog box.

/qb+ Shows both the progress and completed dialog boxes.

/qf Shows the full progress during installation, with a cancel button.

i status messages

w non-fatal warnings

e all error messages

a action starts

r action-specific records

u user requests

c initial user interface parameters

m out-of-memory or fatal exit information

o out-of-disk space messages

p terminal properties

+ append to existing file

! flush each line to the log



Installing to a custom directoryTo install VirusScan Enterprise software to a custom directory, add the INSTALLDIR property to the command line, then follow the property with a value for the directory you want to use. To install VirusScan Enterprise software to C:\My Anti-Virus Software, for example, type this line at the command prompt:

setup INSTALLDIR=“c:\My Anti-Virus Software”/q

Use quotes only if the destination directory name has spaces. You can add the /q switch to run the installation silently.

Selecting specific features to installWhen you run Setup from the command line to install specific program features, the utility installs those features according to a pre-existing hierarchy. This means that if you choose to install only the VirusScan Enterprise shell extensions, for example, Setup knows that you must have SCAN32.EXE, the VirusScan Enterprise application, installed to use the extensions. It therefore installs both this file and any related files.

To specify the features that you want to install, Setup requires that you add specific feature names as command-line parameters. The feature names you can specify from the command line are:

NOTEYou can specify features, or use the ALL property to install all the features.

To use these feature names in a command line, specify the destination and the feature name, exactly as they appear in the table.

For example, to add the VirusScan Enterprise application to the local system, type this line at the command prompt:

setup.exe ADDLOCAL=ALL/q

Feature Name Description

AutoUpdate The AutoUpdate utility.

Console The VirusScan Enterprise Console.

EmailScan The e-mail scanner and the e-mail scan extension.

OnAccessScanner The on-access scanner.

OnDemandScanner The on-demand scanner.

ShellExtentions Extensions that add right-click functionality that enables you to scan individual files.



Use a comma to separate values when installing more than one feature. To add the on-demand scanner and the on-access scanner together, for example, type this line at the command prompt:

setup.exe ADDLOCAL=OnAccessScanner,OnDemandScanner/q

For a complete installation, type this line at the command prompt:

setup.exe ADDLOCAL=ALL/q

To remove all VirusScan Enterprise components, type this line at the command prompt:

setup.exe REMOVE=ALL/q

To install all features except one, for example the e-mail scanning feature, type this line at the command prompt:

setup.exe ADDLOCAL=ALL REMOVE=EmailScan/q

You can also choose different features for an installation that you do not run silently. If, for example, you leave off the /q option in any of the command line examples shown, the Custom Setup wizard panel (see Custom installation on page 26) shows only the features you specify as those available for installation. If you use these same examples to specify a feature set for installation, Setup installs only the features you specified during a Typical installation.



Customizing installation propertiesYou can customize the installation process using specific properties when installing from the command line. The customized properties that you can specify are:

Command-line Property Function

ALERTMANAGERSOURCEDIR Sets the default Alert Manager source path. The default path is \AMG.

You can set it yourself in SETUP.INI.

CMASOURCEDIR Set the source path for the SITELIST.XML. The default path is: %TEMP%\NAITemp.

ENABLEONACCESSSCANNER False = A False value cannot be set.

True = Enable on-access scanner upon completion of installation. This is the default.

Note: If you do not want to enable the on-access scanner, set the property to “”. This literally means ENABLEONACCESSSCANNER=“”, an empty string.

EXTRADATSOURCEDIR Set the source path for the EXTRA.DAT. During installation, the EXTRA.DAT is copied into the location where the engine files reside.

FORCEAMSINSTALL True = Install Alert Manager, if present.

INSTALLDIR Sets the default installation directory.

INSTALLCHECKPOINT False = Do not install the Check Point SCV integration.

True = Install the Check Point SCV integration.

LOCKDOWNVIURUSSCANSHORTCUTS False = A False value cannot be set.

True = Do not display any shortcuts under the start menu.

Note: To allow the shortcuts to be installed, set the property to “”. This literally means LOCKDOWNVIRUSSCANSHORTCUTS=“” an empty string. This is the default.



PRESERVESETTINGS Preserves settings upon upgrade of NetShield 4.5, VirusScan 4.5.1, or VirusScan Enterprise 7.0.

False = A False value cannot be set.

True = Preserve settings. This is the default.

Note: If you do not want to preserve settings, set the property to “”. This literally means PRESERVESETTINGS=“”, an empty string.

RUNAUTOUPDATE False = A False value cannot be set.

True = Run update upon completion of installation. This is the default.

Note: If you do not want to run update upon completion of installation, set the property to “”. This literally means RUNAUTOUPDATE=“”, an empty string.

RUNONDEMANDSCAN False = A False value cannot be set.

True = Run a scan of all local drives upon completion of installation. This is the default.

Note: If you do not want to run the on-demand scanner at completion of installation, set the property to “”. This literally means RUNONDEMANDSCAN=“”, an empty string.




Setting restart optionsYou can force a restart if one is required, or prevent the destination computer from restarting during the installation. To do this, add the REBOOT property to the command line:

REBOOT=F forces the restart if one is required.

REBOOT=R prevents the restart.

If you must first install the Windows Installer service on a destination computer, Setup requires you to restart, whether you force or prevent a restart for other reasons. Setup resumes after MSI forces a restart. It then uses the options you set to determine whether to force or prevent a restart after the installation.

setup REBOOT=R/q

This example runs a silent installation and prevents a system restart.

Removing incompatible software By default, Setup removes incompatible software during a silent installation. Incompatible software is defined as all competitors’ products. If you do not want to remove incompatible software, add the REMOVEINCOMPATIBLESOFTWARE property to the command line with the value False:

setup REMOVEINCOMPATIBLESOFTWARE=False

RUNAUTOUPDATESILENTLY False = A False value cannot be set.

True = Run silent update upon completion of installation.

The default is an empty string.

Note: If you do not want to run a silent update upon completion of installation, set the property to “”. This literally means RUNAUTOUPDATESILENTLY=“”, an empty string.

RUNONDEMANDSCANSILENTLY False = A False value cannot be set.

True = Run on-demand scan silently upon completion of installation.

The default is an empty string.

Note: If you do not want to run a silent on-demand scan upon completion of installation, set the property to “”. This literally means RUNONDEMANDSCANSILENTLY=“”, an empty string.




Preserving settingsBy default, Setup preserves your settings from previous VirusScan and NetShield installations. To install the new VirusScan Enterprise version without previous settings, add the PRESERVESETTINGS property to the command line with the value set to an empty string:

setup PRESERVESETTINGS=“”

Running Setup from a login scriptTo install VirusScan Enterprise software at the time each of your destination computers starts, you can add a Setup command line to your login script and include any logic you think necessary to ensure that the installation runs once; checking for the VirusScan Enterprise default program directory, for example. The command line should include all of the options and properties you want to use to govern how Setup runs.

In order to use a login script for this purpose, you must also copy or “push” the VirusScan Enterprise installation package to a local directory on the destination computer. You may not use a login script to install VirusScan Enterprise software from elsewhere on your network. To install VirusScan Enterprise software from a remote location on the network, use McAfee ePolicy Orchestrator management software.

Installed filesDuring the VirusScan Enterprise installation process, files are installed in the installation path, in these folders:

VirusScan folder on page 42.

Res09 folder on page 43.

Engine folder on page 43.

NOTEThe installation path is determined during the installation process. The default installation path is:




VirusScan folderThese files are installed in the installation directory, VirusScan folder:

Additional Preserved Settings NaiEvent.dll

AdsLokUU.Dll nailite.dll

dssdata.h NaKrnlU.Dll

DSSDATA.INI nautilu.dll

emconfig.exe NTClient.dll

ftcfg.dll Packing.lst

ftl.dll pireg.exe

license.txt readme.txt

logparser.exe scan32.exe

McAVDetect.DLL ScanEmal.Dll

mcavscv.dll scncfg32.exe

mcconsol.exe scnstat.exe

Mcshield.exe SDATPACK.LST

mcupdate.exe shcfg32.exe

MERTool.url shext.dll

midutil.dll shstat.exe

NaEventU.Dll shutil.dll

naiann.dll SVCPWD.exe

naiavf5x.cat VSPlugin.dll

naiavf5x.inf VSTskMgr.exe

naiavf5x.sys vsupdate.dll

naiavfin.exe



Res09 folderThese files are installed in the installation directory, Res09 folder:

Engine folderThese files are installed in the Engine folder that is located at:

<drive>:\Program Files\Common Files\Network Associates\

FtCfgRc.dll ScnStat.DLL

McConsol.DLL SEmalRes.Dll

McShield.DLL ShCfg32.DLL

mcupdate.DLL shextres.dll

NaEvtRes.Dll ShStat.DLL

NaUtlRes.Dll ShUtilRc.DLL

Product.DLL VSE.chm

Scan32.DLL VsTskMgr.DLL

ScnCfg32.DLL AMG.chm (if Alert Manager is installed)

avparam.dll messages.dat

clean.dat names.dat

EXTRA.DAT scan.dat

license.dat scan.exe

mcscan32.dll SCAN86.EXE

MCTOOL.EXE SignLic.Txt



Testing your installationOnce installed, the software can scan your system for infected files. You can test whether it is installed correctly and can properly scan for viruses by implementing a test developed by the European Institute for Computer Anti-Virus Research (EICAR), a coalition of anti-virus vendors, as a method for their customers to test any anti-virus software installation.

To test your installation:

1 Using a standard Windows text editor, such as Notepad, type the following string, on a single line with no spaces or line breaks:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

2 Save the file with the name EICAR.COM. The file size is 68 bytes. Make a note of the folder in which you saved the file.

3 Start the program.

To test the on-demand scanner, create an on-demand scan task that examines the folder where you saved EICAR.COM. When the scanner examines this file, it reports finding the EICAR test file.

To test the on-access scanner, confirm that the on-access scanner is configured to scan files written to the computer and files read from the computer. See Configuring the on-access scanner in the VirusScan Enterprise Product Guide for additional information. Locate the EICAR.COM file and try to copy or move it to another location. The scanner reports finding the EICAR test file when it examines the file.

NOTEThis file is not a virus—it cannot spread, infect other files, or harm your system. Delete the file when you have finished testing your installation to avoid alarming other users.


Modifying VirusScan Enterprise

Modifying VirusScan EnterpriseYou can use the Setup utility to modify or repair the VirusScan Enterprise program files.

These topics are covered in this section:

Starting the Setup utility.

Modifying program features on page 47.

Reinstalling or repairing program files on page 49.

Starting the Setup utility1 Click Start, then select Run. The Run dialog box appears.

2 Type <X>:\SETUP.EXE in the text box provided, then click OK.

Here, <X>: represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a Total Virus Defense CD, you must also specify which folder contains the VirusScan Enterprise software.

Figure 1-16. Run



The Program Maintenance dialog box appears.

3 Select the program maintenance activity you want to perform:

Modify. This option is selected by default. Change which program features are installed. This option uses the Feature Selection dialog box to change the installed features.

See Modifying program features on page 47 to complete the modification process.

Repair. Select this option to reinstall or repair the program files.

See Reinstalling or repairing program files on page 49 to complete the reinstall or repair process.

Remove. Select this option to remove the program files.

See Removing the Software on page 53 for more information about removing program files.

Figure 1-17. Program Maintenance



Modifying program features1 Select Modify in the Program Maintenance dialog box, then click Next.

The Feature Selection dialog box appears.

2 Under Select which features you would like to install, select the individual features you want to install:

Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel.

For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature.

Figure 1-18. Feature Selection — Modify

Figure 1-19. Feature action options



Choose one of these action options:

NOTEThe Install To path and Disk Space features are disabled. To change the installation path, you must first remove the product, then reinstall the product to the required path.

3 Click Next to continue.

The Product Configuration dialog box appears.

This feature will be installed on local hard drive. Installs the selected feature on the computer.

This feature, and all subfeatures, will be installed on local hard drive. Installs the selected feature and all of the features that are subordinate to it. For example, if you select Console, then AutoUpdate, E-mail Scanner, On-Access Scanner, and On-Demand Scanner are also installed.

This feature will not be available. Removes the selected feature, if it is already installed.

Figure 1-20. Product Configuration — Modify



4 In the Product Configuration dialog box, choose whether you want to enable the on-access scanner at the end of the installation process:

Enable On-Access Scanner at the end of installation. This option is selected by default. Automatically starts the on-access scanner upon completion of the installation process. Deselect this option to manually start the on-access scanner after installation.

NOTEThe Import AutoUpdate repository list option is disabled. To import the repository list, see the Updating section in the VirusScan Enterprise Product Guide.

5 Click Next to open the Ready to install dialog box.



7 When the setup process completes successfully, click Finish.

Reinstalling or repairing program filesUse this feature to reinstall or repair product components.

WARNINGIf you manually remove or rename files, the repair feature may fail. See the Troubleshooting appendix in the VirusScan Enterprise Product Guide for detailed instructions about repairing files after they have been removed or renamed.

1 Select Repair in the Program Maintenance dialog box, then click Next.



The Reinstall or Repair the Product dialog box appears.

2 Select from these maintenance options:

Reinstall McAfee VirusScan Enterprise. This option is selected by default. Reinstalls the program files, registry keys and shortcuts.

Detect and repair missing or corrupt files. Finds missing or corrupt files and repairs them.

WARNINGNeither the Reinstall McAfee VirusScan Enterprise or the Detect and repair missing or corrupt files features supports reinstalling or repairing update components. If an AutoUpdate file is removed or corrupted, you must remove the update component, then reinstall it.

To remove the update component using VirusScan Enterprise, use the Setup utility or the command line. See Removing the Software on page 53 for more information.

If the update component was deployed using an ePolicy Orchestrator environment, you can remove the program files, and the update component will be installed again by ePolicy Orchestrator. See the ePolicy Orchestrator Product Guide for more information.

Figure 1-21. Reinstall or Repair the Product

Re-write registry keys.



3 Click Install.


4 You can run an update task or an on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the AutoUpdate task upon completion of installation.


5 Click Finish.

NOTEDepending on the options you selected in Step 3, the program may run the update program or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs.

6 You may be required to restart your computer. If so, the VirusScan Setup dialog box appears.






2
Removing the Software
You can remove the VirusScan Enterprise program files:

Using the Setup utility on page 54.

Using the command line on page 57.

Using the Add/Remove Programs utility on page 57.



Using the Setup utilityOn the computer from which you want to remove the program:

1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods:

If your copy of the software is on the product CD:

a Insert the CD into the CD-ROM drive.

b Click Install from the Welcome dialog box.

If you downloaded the software:

a Click Start, then select Run. The Run dialog box appears.

b Type <X>:\SETUP.EXE in the text box, then click OK.

Here, <X> represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

Figure 2-1. Run


Using the Setup utility

The Program Maintenance dialog box appears.

2 Select Remove, then click Next.

The Remove McAfee VirusScan Enterprise dialog box appears.

3 Click Remove to start the removal process.

4 When the setup process completes successfully, click Finish.

Figure 2-2. Program Maintenance

Figure 2-3. Remove VirusScan Enterprise



The uninstaller detects whether there are any remaining files or directories. These are files or directories, for example, log files or other files or directories added by the user, that were not installed initially with the VirusScan Enterprise installation.

When the program files are removed, two files are left in the %TEMP%\NAI Logs directory. These files are used for debugging purposes:

5 Click Yes to remove the remaining files, or click No if you do not want to remove the remaining files.

6 Restart your computer after the removal process completes.

WARNINGWe strongly recommend that you restart your computer after removing files. The restart should be performed before installing again.

When you remove files using SETUP.EXE or the command line, some files or stopped services may not be removed. For example, if you remove the VirusScan Enterprise product while the Network Associates Task Manager or the Network Associates McShield services are stopped, these services would not be removed. Restarting after removing files ensures that all files and services are removed before installing again.

Figure 2-4. Remove remaining files

VSEUninst.log

VSEInst.log


Using the command line

Using the command line1 Open the Windows command-line component using one of these methods:

Select Command Prompt from the Start menu.

Select Run from the Start menu.

2 Type this string at the command prompt or in the Run dialog box:

<X>:\SETUP.EXE/x

Here, <X> represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

3 Restart your computer after the removal process completes.

WARNINGWe strongly recommend that you restart your computer after removing files. The restart should be performed before installing again.

When you remove files using SETUP.EXE or the command line, some files or stopped services may not be removed. For example, if you remove the VirusScan Enterprise product while the Network Associates Task Manager or the Network Associates McShield services are stopped, these services would not be removed. Restarting after removing files ensures that all files and services are removed before installing again.

Using the Add/Remove Programs utilityTo access the Add/Remove Programs utility that is included in the Windows Control Panel, click Start, then select Settings | Control Panel | Add/Remove Programs.




A
Configuring Netopsystems’ FEADOptimizer
The VirusScan Enterprise 7.1.0 installation file (.MSI) has been optimized using Netopsystems’ FEAD Optimizer technology. This technology reduces the size of the installation package.


Command-line properties and switches.

Optimized file defaults on page 60.

Command-line properties and switchesWhen executing the SETUP.EXE from the command line, command-line properties and switches can be used with an optimized file to customize the recomposing process of the destination file.

The syntax is:

setup.exe [<switches>...]

The switches are defined as:

<switches> = <Netopsystems’ switches>|<VirusScan Enterprise switches>

The VirusScan Enterprise switches are the parameters that you pass to the VirusScan Enterprise Setup utility. For example:

setup.exe -s -nos_d installdir=“c:\abc def” /L

setup.exe nocdi=true -nos_o“d:\temp” -nos_s reboot=a


Configuring Netopsystems’ FEAD Optimizer

These command-line properties or switches may be used with an optimized file:

Optimized file defaultsThe default actions are set as follows:

Command-line property or switch Function

-nos_ne No execution — Extracts the setup files from the SETUP.EXE, but does not execute the SETUP.EXE or delete the setup files.

-nos_nd No delete — Do not delete the setup files after executing the SETUP.EXE. If the -nos_-ne switch is also present, the -nos_-nd switch is overridden.

-nos_d Delete — Deletes the setup files after executing the SETUP.EXE. If the -nos_-ne switch is also present, the -nos_-d switch is overridden.

-nos_s Silent mode — Installs the setup files in silent mode. (Installs automatically when using /s, /S, -s, -S, /q, /Q, -q, -Q).

-nos_o“<path>” Output folder — The folder to which you want to extract the setup files.

Action Default

Execution Yes

Delete Yes

Silent No

Output folder %TEMP%\McAfee VirusScan Enterprise 7


B
Configuring Check Point
The VirusScan Enterprise software has been enhanced to integrate with Check Point™ VPN-1/FireWall-1® SCV.

We have provided the McAfee Check Point Secure Configuration Verification (SCV) plug-in (MCAVSCV.DLL) to integrate the two products. This plug-in is a Dynamic Link Library which meets the requirements of the Check Point™ VPN-1/FireWall-1® SCV (Secure Configuration Verification) Specification, dated November 2001. This specification can be found at the Open Platform for Security (OPSEC) web site:

http://www.opsec.com

When installed and enabled, the Check Point product can be configured to allow or block access based on the protected state of VirusScan Enterprise on the system.


Client computer installation on page 62.

Administrator configuration on page 63.


http://www.opsec.com


Client computer installationWhen installing theVirusScan Enterprise 7.1.0 software, these files are also installed into the installation directory for use with Check Point:

The default installation directory is:


The SCV plug-in is registered with Check Point VPN-1 and/or Firewall-1 if the Check Point SecuRemote™ registry entry is present.

If the Check Point product is installed after the VirusScan Enterprise product, you must reinstall VirusScan Enterprise 7.1.0.

To register the MCAVSCV.DLL plug-in, follow these steps:

1 Stop the SecureClient service.

2 Install the VirusScan Enterprise 7.1.0 product.

3 Start the SecureClient service, after VirusScan Enterprise has registered the SCV plug-in.

After registration completes, the MCAVSCV.DLL plug-in can be used by VPN-1 or Firewall-1 to enforce VirusScan Enterprise protection, providing that the Check Point administrator has:

Enabled SCV checking.

Added the McAfee SCV section to the LOCAL.SCV on the security policy server for the Check Point systems.

MCAVSCV.DLL

MCAVDETECT.DLL


Administrator configuration

Administrator configurationThe Check Point administrator can edit the policy file (LOCAL.SCV) on the Check Point server to change the VirusScan Enterprise protection requirements for VPN-1 and/or Firewall-1.

The SCV Editor tool is located at:

http://www.checkpoint.com/techsupport/downloadsng/utilities.html

For an explanation of syntax used for the LOCAL.SCV, see the Check Point VPN-1 documentation that was provided with the Check Point product.

Following is a sample section of a LOCAL.SCV file that shows a policy for the MCAVSCV.DLL plug-in that is included in the VirusScan Enterprise installation package:

: (mcavscv

:type (plugin)

:parameters (

:product (VSE)

:minimum_product (7.1)

:minimum_engine (4260)

:minimum_dat (4260)

:dat_age_max_days (30)

:begin_admin (admin)

:send_log (alert)

:mismatchmessage

McAfee VirusScan Enterprise protection is not running or is out of date, please run AutoUpdate or enable the on-access scanner.

:end (admin)

)

)





The Check Point administrator can change the VirusScan Enterprise protection requirements for VPN-1 and/or Firewall-1 as follows.

The plug-in name is mcavscv and must be in lowercase letters. We assume that the Check Point Security policy administrator is familiar with configuring the SCV policy for Check Point products.

:product is optional and is assumed to be VSE for VirusScan Enterprise. No other product values are currently implemented. The VirusScan Enterprise protection check returns not protected if VirusScan Enterprise is not installed on a system running this SCV check.

:minimum_product is optional and is ignored if not included in the SCV file. Current valid values are 7.0 and 7.1. The VirusScan Enterprise protection check returns not protected if the installed version of the product (currently always VSE) is less than the value specified on a system running this SCV check.

:minimum_engine is optional and is assumed to be 4260 if not specified. The VirusScan Enterprise protection check returns not protected if the installed engine version is less than the value specified on a system running this SCV check.

:minimum_dat is optional and is ignored if not specified. The VirusScan Enterprise protection check returns not protected if the installed DAT version is less than the value specified on a system running this SCV check.

:dat_age_max_days is optional and is assumed to be 31 if not specified. The VirusScan Enterprise protection check returns not protected if the installed DAT is older than the number of days specified, on a system running this SCV check.

:mismatchmessage specifies the message to display if the VirusScan Enterprise protection check indicates not protected. The Check Point administrator configures where these messages are logged or if they should be displayed to the user.

The VirusScan Enterprise protection check returns a protected status to the Check Point VPN-1 or Firewall-1 product if all of the above checks have been completed (or ignored) and these conditions are met:

No not protected results are indicated.

The VirusScan Enterprise on-access scanner is currently running and enabled.

Otherwise, a not protected status is returned.


Index

AAdd/Remove Programs utility, 57AVERT (Anti-Virus Emergency Response Team),

contacting, 8

Bbefore you begin, 10beta program, contacting, 8

Ccommand-line installation, 33

customizing installation properties, 38installing silently, 34installing specific features, 36installing to a custom directory, 36login script, 41parameters, 35preserving settings, 41removing incompatible software, 40setting restart options, 40syntax, 33

conventions used in this manual, 6custom installation, 26customer service, contacting, 8

DDAT file updates, web site, 8deployment, updating, and management

options, 13documentation for the product, 7download web site, 8downloading the product software, 19

EEICAR test file, 44

Ffiles installed, 41

Ggetting information, 7

Iinstallation package, pre-configuring

with ePolicy Orchestrator, 14with McAfee AutoUpdate Architect and McAfee

Installation Designer, 14installing VirusScan Enterprise, 9

before you begin, 10custom installation, 26files installed, 41from a product download, 19from the product CD, 19installing program files, 18start the installation process, 23system requirements, 11

server, 11workstation, 12

Terminal Services, 16testing your installation, 44typical installation, 24using a login script, 41using McAfee Installation Designer, 18using the command line (See command-line

installation), 33using the Setup utility, 19

KKnowledgeBase search, 8

Llicense, 21login-script installation, 41

Mmanuals, 7McAfee Security University, contacting, 8


Index

modifying VirusScan Enterprise program files, 45selecting features, 47using the Setup utility, 45

NNetopsystems’ FEAD® Optimizer®,configuring, 59

Oon-demand scan

custom installation, 32reinstalling or repairing program files, 51typical installation, 25

operating systems supportedserver, 11workstation, 12

Ppre-configuring the VirusScan Enterprise installation

packageusing ePolicy Orchestrator, 14using McAfee AutoUpdate Architect and

McAfee Installation Designer, 14PrimeSupport, 8product documentation, 7product license, 17product training, contacting, 8program files

installing, 18removing, 53

RRAM requirements

server, 11workstation, 12

reinstalling program files, 49removing incompatible software via command

line, 40removing VirusScan Enterprise, 53

using the Add/Remove Programs utility, 57using the command line, 57using the Setup utility, 54

repairing program files, 49requirements

server, 11

workstation, 12restart options via command line, 40

Ssecurity headquarters, contacting AVERT, 8service portal, PrimeSupport, 8Setup utility

configuring the optimized file, 59installing software, 19modifying software, 45removing software, 54

silent installs via command line, 34submitting a sample virus, 8system requirements, 11

product license, 17server, 11workstation, 12

Ttechnical support, 8Terminal Services, 16testing your installation, 44training web site, 8typical installation, 24

Uupdate now

custom installation, 32reinstalling or repairing program files, 51typical installation, 25

upgrade web site, 8

VVirus Information Library, 8virus, submitting a sample, 8


Documents

VirusScan Enterprise 7.1.0 Installation Guide