Download pdf - Huong Dan Sophos

Transcript

1 V hng dn ny Hng dn ny s cho bn bit lm th no ci t Sophos Enterprise Manager, phin bn 4,7, v bo v mng ca bn vi phn mm bo mt Sophos. Sophos Enterprise Manager l mt giao din iu khin t ng qun l v cp nht phn mm bo mt Sophos trn my tnh Windows, Mac v Linux. Enterprise Manager cho php bn: Bo v mng ca bn khi virus, Trojans, su, phn mm gin ip, cc trang web c hi, v mi e da cha bit, cng nh phn mm qung co v cc ng dng c kh nng khng mong mun khc. Qun l tng la bo v khch hng trn my tnh thit b u cui. Ngn chn ngi dng s dng thit b lu tr bn ngoi tri php v cc cng ngh kt ni khng dy trn my tnh thit b u cui. Ngn chn ngi dng t cu hnh li, v hiu ha hoc g b ci t phn mm bo mt Sophos. xem danh sch cc tnh nng ca Enterprise Manager v thng tin v cch Enterprise Manager v cc giy php lin quan c s khc nhau t cc sn phm v giy php ca Sophos khc, Sophos h tr kin ca bi vit 113711 (http://www.sophos.com/support/knowledgebase/article/113711.html ). Thay i t doanh nghip iu khin Hng dn ny cng cho bn bit v cc bc b sung m bn cn phi thc hin nu bn mun b ci t Doanh nghip Console v ci t Enterprise Manager. Quan trng: Downgrading t Enterprise Console Enterprise Manager

khng c h tr.Bn s cn phi g b ci t Enterprise Console v sau ci t qun l doanh nghip nh m t trong ti liu hng dn ny v thit lp n. Bn s mt tt c cc thit lp iu khin doanh nghip ca bn. Trc khi bn g b ci t Enterprise Console, lm cho mt lu cc thit lp hin ti ca bn v sao lu c s d liu iu khin doanh nghip nh m t trong Ph lc: Thay i qun l doanh nghip t doanh nghip Console (trang 17).

2 - cc bc chnh l g? Bn thc hin cc bc chnh: Kim tra yu cu h thng. Chun b ci t. Ti v trnh ci t. Ci t Enterprise Manager. Download phn mm bo mt.

To cc nhm my tnh. Thit lp chnh sch an ninh.

Tm kim cho my tnh. Bo v my tnh. Kim tra sc khe ca mng ca bn.

3 Kim tra yu cu h thng Kim tra phn cng, h iu hnh v cc yu cu phn mm h thng trc khi bn bt u ci t.

3.1 Phn cng v h iu hnh i vi phn cng v cc yu cu h iu hnh, h thng yu cu trang ca trang web Sophos (http://www.sophos.com/products/all-sysreqs.html).

3,2 phn mm h thng Microsoft Enterprise Manager i hi mt s h thng phn mm Microsoft (v d, phn mm c s d liu). B ci t Enterprise Manager c gng ci t phn mm h thng nu n khng phi l c sn trn my ch ca bn. Tuy nhin, trong mt s trng hp, phn mm khng tng thch vi my ch ca bn hoc cn phi c ci t bng tay. SQL ci t Server Ci t c gng ci t SQL Server 2008 Express, tr khi bn c SQL Server 2005 Express hoc sau . Lu rng: Chng ti khuyn bn khng ci t SQL Server trn mt b iu khin

min. SQL Server 2008 Express l khng tng thch vi Windows Server 2003 SP1 hoc Windows XP SP1 64-bit hoc Windows Server Essential 2008. Windows Server 2008 R2 Datacenter, bn phi nng cao trnh min chc nng cho Windows Server 2003, nh gii thch ti http://support.microsoft.com/kb/322692 NET khung ci t Trnh ci t c gng ci t. NET Framework 3.5, tr khi n c ci t. Lu rng: ci t khng th ci t NET Framework 3.5 trn mt my tnh chy Windows Server 2008 R2. Bn phi thm t phn tnh nng ca Server Manager. Lu : Sau khi bn ci t phn mm h thng yu cu, bn c th cn phi khi ng li my tnh ca bn. bit thm thng tin, xem Sophos h tr kin iu 65190 v 111220

(Http://www.sophos.com/support/knowledgebase/article/65190.html v http://www.sophos.com/support/knowledgebase/article/111220.html).

4 Chun b ci t Chn mt my ch p ng cc yu cu h thng v chun b nh sau:

m bo rng bn ang kt ni vi internet. m bo rng bn c a CD h iu hnh Windows v a CD Service Pack. Bn c th c nhc nh cho h trong qu trnh ci t. Nu my ch ang chy Windows Server 2008 hoc sau , tt User Account Control (UAC) v khi ng li my ch. Lu : Bn c th bt UAC trn mt ln na sau khi bn hon thnh vic ci t v ti v phn mm bo mt ca bn.

5 Ti v trnh ci t Ti v ci t Sophos v t n trn my ch, ni bn mun ci t giao din qun l: 1. i http://www.sophos.com/support/updates/. 2. Loi MySophos ca bn tn ngi dng v mt khu. 3. Ti xung v cp nht trang web, ti v b ci t Enterprise Manager. 4. Nu cn thit, sao chp cc ci t ti v my ch, ni bn mun lm cho ci t.

6 Ci t Enterprise Manager ci t qun l doanh nghip: 1. Ti cc my tnh m bn mun ci t qun l doanh nghip, ng nhp vo nh l mt qun tr vin: Nu my tnh l trong mt min, ng nhp nh mt qun tr vin min.

Nu my tnh l trong mt nhm lm vic, ng nhp nh mt qun tr a phng. 2. Tm cc ci t qun l doanh nghip m bn ti v trc . 3. Kch p vo trnh ci t. 4. Trong hp thoi ci t mng, nhp vo Ci t. Cc tp tin ci t c sao chp vo my tnh v mt thut s ci t bt u. 5. Trn trang Welcome ca wizard ci t qun l doanh nghip Sophos, kch Next.

6. Mt trnh thut s hng dn bn thng qua ci t. Bn nn chp nhn s mc nh bt c ni no c th. 7. Khi ci t hon tt, bn c th c nhc nh khi ng li. Nhn Yes hoc Kt thc.

7 Ti v phn mm bo mt Khi bn ng nhp tr li hoc khi ng li ln u tin sau khi ci t, Enterprise Manager s t ng m ra v mt thut s chy. Lu : Nu bn s dng Remote Desktop ci t, giao din iu khin khng t ng m. M n t menu Start. Cc thut s hng dn bn thng qua vic la chn v ti v phn mm bo mt. Bn nn lm nh sau:

1. Trn trang Chi tit Ti v Sophos Ti khon, nhp tn ngi dng v mt khu c in trn lch trnh giy php ca bn. Nu bn truy cp internet thng qua mt my ch proxy, chn Sophos truy cp thng qua mt hp kim tra my ch proxy. 2. Trn trang la chn Platform, chn nn tng m bn mun bo v. Khi bn kch Next, Enterprise Manager bt u ti v phn mm ca bn. 3. Trn trang ti v phn mm, ti v tin c hin th. Nhn Next bt k thi im no. 4. Trn cc my tnh nhp khu t trang Active Directory, chn Thit lp cc nhm cho my tnh ca bn nu bn mun Enterprise Manager s dng cc nhm my tnh mc ng nhp hin ti ca bn. Lu : Nu my tnh c thm vo nhiu hn mt container Active Directory, n s gy ra mt vn , vi thng ip c trao i lin tc gia my tnh v qun l doanh nghip.

Cc phn mm m bn chn s c ti v chia s \ \ server name \ SophosUpdate, my ch tn l tn ca my ch m trn Enterprise Manager c ci t. Nu bn tt User Account Control trc khi ci t, by gi bn c th bin n trn mt ln na.

8 To cc nhm my tnh Trc khi bn c th bo v v qun l my tnh, bn cn phi to cc nhm cho h. Nhm rt hu ch bi v bn c th: C cc my tnh trong cc nhm khc nhau c cp nht t cc ngun khc nhau hoc trn cc lch trnh khc nhau.

S dng chng vi rt khc nhau v HIPS, tng la, v cc chnh sch khc cho cc nhm khc nhau. Qun l my tnh d dng hn.

Nu bn thit lp nhm my tnh ca bn da trn cc nhm Active Directory ca bn, bng cch s dng Wizard Ti phn mm bo mt, b qua phn ny. Ti Thit lp cc chnh sch an ninh (trang 7). 1. Nu doanh nghip qun l cha c m, m n. 2. Trong ca s Groups ( pha bn tri ca giao din iu khin), m bo rng tn my ch c hin th u trang c la chn. 3. Trn thanh cng c, hy nhp vo biu tng Create nhm. Mt "Nhm mi" c thm vo danh sch, vi tn ca n c nh du. 4. Nhp tn cho nhm. to cc nhm tip, ca s bn tay tri. Chn my ch hin th u trang nu bn mun mt nhm cp cao nht. Chn mt nhm nu bn mun c mt nhm ph bn trong n. Sau , to ra v t tn nhm nh trc.

9 Thit lp cc chnh sch bo mt

Mc nh chnh sch Enterprise Manager p dng chnh sch "mc nh" an ninh cho cc nhm my tnh ca bn. Bn khng cn phi thay i cc chnh sch ny tr khi bn mun, vi nhng trng hp ngoi l: Bn phi thit lp mt chnh sch tng la. Xem Thit lp mt chnh sch tng la (trang 8). Bn phi chnh sa cc thit b iu khin v lm xo trn chnh sch bo v nu bn mun s dng cc tnh nng ny. Bn c th lm iu ny bt c lc no. i vi thng tin v vic kch hot v cu hnh thit b iu khin v lm xo trn chnh sch bo v, Cu hnh chnh sch kim sot thit b v cu hnh chnh sch bo v gi mo trong Tr gip Enterprise Manager. To chnh sch mi Trong Enterprise Manager, bn c th to ti a bn chnh sch mi ca tng loi. Mt khi bn t n gii hn ny, Chnh sch To v cc ty chn chnh sch trng lp s b v hiu. to ra mt chnh sch mi: 1. Trong quan im thit b u cui, trong khung chnh sch, phi bm vo cc loi chnh sch m bn mun to, v d, "Cp nht" v chn To chnh sch. "Chnh sch mi" c thm vo danh sch, vi tn ca n c nh du. 2. Nhp tn mi cho chnh sch. 3. Kch p vo chnh sch mi. Nhp cc ci t m bn mun. i vi cc hng dn v lm th no chn cc thit lp, hy xem phn

cu hnh chnh sch c lin quan. Bn to ra mt chnh sch c th c giao cho cc nhm.

n nh chnh sch cho cc nhm 1. Trong ca s chnh sch, lm ni bt cc chnh sch. 2. Nhp vo chnh sch v ko n vo nhm m bn mun p dng cc chnh sch. Khi c nhc, xc nhn rng bn mun tip tc.

9,1 Thit lp mt chnh sch tng la Theo mc nh, tng la c kch hot v ngn chn tt c lu lng truy cp khng cn thit. V vy, bn nn cu hnh cho php cc ng dng bn mun s dng, v th nghim n trc khi ci t n trn tt c cc my tnh. Xem hng dn qun l doanh nghip Sophos thit lp chnh sch c t vn chi tit. Bn c th thit lp cc ty chn cu hnh chnh cho cc bc tng la Firewall Policy Wizard. 1. Trong ca s chnh sch, kch p vo Firewall. 2. Kch p vo chnh sch mc nh chnh sa n. Mt hng dn c a ra. 3. Trong Firewall Policy Wizard, chng ti khuyn bn thc hin cc la chn sau y. a) Trn trang cu hnh tng la, chn v tr n tr khi bn mun cc bc tng la s dng cc thit lp khc nhau ty theo v tr ni bn s

dng n. b) Trn trang Ch hot ng, chn Block trong v cho php lu lng gi i. c) Trn trang chia s file v my in, chn Cho php chia s file v my in.

10 Tm kim cho my tnh Bn phi tm kim cho cc my tnh trn mng trc khi Enterprise Manager c th bo v v qun l chng. Nu bn thit lp nhm my tnh ca bn da trn cc nhm Active Directory ca bn, bng cch s dng Wizard Ti phn mm bo mt, b qua phn ny. Bo v my tnh Windows (trang 9). 1. Nhp Tm kim mi my tnh biu tng trong thanh cng c. 2. Chn phng php no bn mun s dng tm kim cho my tnh. Nu bn s dng nhp khu t ty chn Active Directory, v sau chn nhp khu my tnh v cc thng cha, cc my tnh c t trong cc nhm tng ng ca h. Nu bn s dng mt trong cc ty chn Tm, cc my tnh c t trong nhm Unassigned. 3. Nhp chi tit ti khon nu cn thit v ch nh ni bn mun tm kim. 4. Nu bn s dng mt trong cc ty chn Tm, nhp vo nhm Unassigned xem cc my tnh c tm thy. bt u qun l my tnh, chn chng v ko chng vo mt nhm.

11 Bo v my tnh Windows Phn ny s cho bn bit lm th no bo v my tnh Windows t ng hoc bng tay, nu my tnh khng th c bo v t ng.

11,1 Chun b bo v my tnh Windows t ng Trc khi bn bo v my tnh, bn phi chun b nh sau: Chun b cho vic loi b cc phn mm bo mt ca bn th ba. Kim tra rng bn c mt ti khon c th c s dng ci t phn mm. Chun b cho ci t ca phn mm chng virus.

11.1.1 Chun b cho vic loi b cc phn mm bo mt ca bn th ba Nu bn mun ci t Sophos loi b bt k phn mm bo mt ci t trc , lm nh sau: Nu my tnh ang chy phn mm chng virus ca nh cung cp khc, m bo rng giao din ngi dng ca n c ng li. Nu my tnh ang chy tng la hoc HIPS sn phm ca nh cung cp khc, m bo rng n c tt hoc cu hnh cho php trnh ci t Sophos chy. Nu my tnh ang chy cng c cp nht ca nh cung cp khc, bn c th mun loi b n. Xem Hy b phn mm bo mt ca bn th ba trong phn Bo v my tnh ca Tr gip Enterprise Manager.

11.1.2 Kim tra rng bn c mt ti khon c th c s dng ci t phn mm Khi bo v my tnh t ng, trong wizard Bo v my tnh, bn s c nhc nh nhp cc chi tit ca mt ti khon c th c s dng ci t phn mm bo mt.iu ny thng l mt ti khon qun tr tn min. N phi: C quyn qun tr a phng trn cc my tnh m bn mun bo v. Hy th ng nhp vo my tnh m bn ci t Enterprise Manager. c truy cp n v tr m my tnh s cp nht t. Theo mc nh, my tnh cp nht t mt phn ngun chnh UNC, \ \ \ SophosUpdate, l tn ca my tnh, ni Enterprise Manager c ci t. kim tra v tr ny, trong khung chnh sch, cp nht, v sau kch p vo chnh sch m bn mun kim tra.

11.1.3 Chun b cho ci t ca phn mm chng virus Bn phi chun b my tnh ci t phn mm chng virus. Cc bc ph thuc vo h iu hnh. Lu : Nu mt h iu hnh khng c hin th y, bn khng cn phi chun b my tnh ang chy h thng.

11.1.3.1 Chun b my tnh Windows 7 chun b cho Windows 7 my tnh ci t phn mm chng virus, hy lm theo cc bc di y. Ngoi ra, nu bn s dng Active Directory, bn c th chun b cho Windows 7 my tnh s dng mt Group Policy Object (GPO) trong Windows 2008 v Windows 2008 R2. Xem Sophos h tr kin bi vit 111180 (http://www.sophos.com/support/knowledgebase/article/111180.html). 1. Trong Control Panel, m Network and Sharing Center. i vi cc v tr mng lm vic, m bo rng cc ty chn c cu hnh nh sau: Mng li pht hin: Tp tin v my in chia s: Tp tin chia s kt ni: Kch hot tnh nng chia s tp tin cho cc thit b s dng 40 hoc m ha 56-bit Mt khu bo v chia s: Tt 2. m bo rng cc dch v Remote Registry c bt u v khi ng loi ca n c thit lp t ng. 3. Thit lp User Account Control bao gi thng bo. Khi ci t hon tt, bn nn thit lp li mc nh. 4. Tt Chia s wizard. 5. M Windows Firewall vi Advanced Security, bng cch s dng mc Administrative Tools trong Control Panel. a) m bo rng cc kt ni Du lch trong nc c php. b) Thay i cc quy tc Tour trong nc cho php cc quy trnh di y. Khi ci t hon tt, v hiu ha chng mt ln na:

Qun tr t xa (NP-In) Domain Qun tr t xa (NP-In) c nhn Qun tr t xa (RPC) Domain Qun tr t xa (RPC) t nhn Qun tr t xa (RPC-EPMAP) Domain Qun tr t xa (RPC-EPMAP) t nhn

11.1.3.2 Chun b my tnh Windows Vista 1. Trong Control Panel, m Network and Sharing Center. m bo rng cc ty chn c cu hnh nh sau: Mng li pht hin: Chia s tp tin: My in chia s: Mt khu bo v chia s: Tt 2. m bo rng cc dch v Remote Registry c bt u v khi ng loi ca n c thit lp t ng. 3. Tt User Account Control. Khi ci t hon tt, bn nn quay tr li. 4. Tt Chia s wizard. 5. M Windows Firewall vi Advanced Security, bng cch s dng mc Administrative Tools trong Control Panel. a) m bo rng cc kt ni Du lch trong nc c php. b) Thay i cc quy tc Tour trong nc cho php cc quy trnh di

y. Khi ci t hon tt, v hiu ha chng mt ln na: Qun tr t xa (NP-In) Domain Qun tr t xa (NP-In) c nhn Qun tr t xa (RPC) Domain Qun tr t xa (RPC) t nhn Qun tr t xa (RPC-EPMAP) Domain Qun tr t xa (RPC-EPMAP) t nhn

11.1.3.3 Chun b Windows 2003/XP Pro/2000 my tnh 1. m bo rng Remote Registry, Server, Computer Browser, v cc dch v Task Scheduler c bt u. 2. m bo rng phn C $ qun tr c kch hot. 3. m bo rng Simple File Sharing c bt (XP Pro). 11.1.3.4 Chun b Windows XP (SP2 hoc mi hn) my tnh Lu : i vi cc my tnh Windows XP Pro, xem Chun b Windows 2003/XP Pro/2000 my tnh (trang 11). 1. m bo rng Remote Registry, Server, Computer Browser, v cc dch v Task Scheduler c bt u. 2. m bo rng phn C $ qun tr c kch hot. 3. m bo rng Simple File Sharing c tt.

4. Kch hot tnh nng File and Printer Sharing for Microsoft Networks. 5. m bo rng cc cng TCP 8.192, 8193, v 8194 c m. 6. Khi ng li my tnh thc hin cc thay i c hiu qu.

11,2 Bo v my tnh Windows t ng bo v my tnh, hy lm nh sau: 1. Chn my tnh bn mun bo v. 2. Nhn chut phi v chn Bo v my tnh. Lu : Nu my tnh ang trong nhm Unassigned, ch cn ko chng vo nhm ca bn la chn. 3. Mt trnh thut s hng dn bn thng qua vic ci t phn mm bo mt Sophos.Bn nn lm nh sau: a) Trn trang Chn tnh nng, chn bt k tnh nng ty chn m bn mun. Cc tnh nng chng virus c ci t. Sophos Firewall Client khng c h tr trn h iu hnh my ch. Quan trng: Hy chc chn rng bn cu hnh tng la cho php lu lng truy cp, ng dng, v cc qu trnh bn mun s dng trc khi ci t v chy n trn my tnh. Xem Thit lp mt chnh sch tng la (trang 8). b) Trn trang tm tt bo v, kim tra i vi bt k vn ci t. c tr gip, xem X l s c (trang 16). c) Trn trang Giy chng nhn, nhp cc chi tit ca mt ti khon c th c s dng ci t phn mm trn my tnh.

Ci t so le, cc qu trnh c th khng y v tt c cc my tnh

trong mt thi gian. Lu : Trong qu trnh ci t tng la, s c mt ngt kt ni tm thi ca b iu hp mng. Vic gin on c th gy ra ngt kt ni ca cc ng dng trn mng, chng hn nh Remote Desktop. kim tra trng thi bo v ca my tnh, chn nhm m bn t cc my tnh, hoc chn cc my ch c hin th pha trn xem tt c cc my tnh. Khi ci t hon tt, trong danh sch my tnh, trong ct Ontruy cp, hot ng t ch ra rng cc my tnh ang chy qut virus trn truy cp.

11,3 Bo v my tnh Windows Nu bn c my tnh m bn khng th bo v t ng, bo v chng bng cch chy mt chng trnh ci t t mt th mc chia s m cc phn mm bo mt thit b u cui c ti v. Th mc ny c bit n nh l v tr bootstrap. 1. tm ra th mc chng trnh ci t, qun l doanh nghip m. Vo View menu, bm vo v tr Bootstrap. Trong hp thoi Bootstrap cc a im, ct V tr hin th ng dn ca v tr ti v khi ng h iu hnh cho mi nn tng. 2. Ti mi my tnh v ng nhp vi quyn qun tr a phng. 3. Xc nh v tr cc chng trnh ci t trong v tr ti v khi ng h iu hnh v kch p vo n. i vi Windows, chng trnh c gi l setup.exe.

4. Mt trnh thut s hng dn bn thng qua ci t.

12 Bo v Mac OS X my tnh T ng ci t l khng th trn cc my tnh Mac. Bo v chng bng cch chy mt chng trnh ci t t mt th mc chia s m cc phn mm bo mt thit b u cui c ti v. Th mc ny c bit n nh l v tr bootstrap. 1. tm ra th mc chng trnh ci t, qun l doanh nghip m. Vo View menu, bm vo v tr Bootstrap. Trong hp thoi Bootstrap cc a im, ct V tr hin th ng dn ca v tr ti v khi ng h iu hnh cho mi nn tng. 2. Ti mi my tnh v ng nhp vi quyn qun tr a phng. 3. Xc nh v tr cc chng trnh ci t trong v tr ti v khi ng h iu hnh v kch p vo n. i vi h iu hnh Mac OS X, chng trnh c gi l Sophos AntiVirus.mpkg. 4. Mt trnh thut s hng dn bn thng qua ci t.

13 Bo v my tnh Linux bo v my tnh Linux, bn phi: To mt gi trin khai.

Ci t Sophos Anti-Virus trn cc my tnh Linux.

13,1 To mt gi phn mm trin khai Phn ny gi nh rng bn ti v Sophos Anti-Virus cho Linux, nh c gii thch trong Ti v cc phn mm bo mt (trang 6). Bn c th s dng kch bn mkinstpkg to ra mt gi trin khai u cui ngi dng ca bn. Kch bn ny s nhc bn cho thng tin v Sophos Anti-Virus s c ci t trn cc my tnh Linux ca bn, v cu tr li thu thp c a vo gi trin khai. Khi ngi dng ci t t gi ny trin khai, n s khng nhc nh cho bt k thng tin no v s thit lp c hai v tr cp nht v cc thng tin mt cch chnh xc. Bn c th to ra mt gi trong nh dng tar hoc RPM. Lu : Cc kch bn mkinstpkg l s dng trong t chc ca bn ch. Xin vui lng c cc tha thun cp php v thng bo php l c hin th bi cc kch bn mkinstpkg. to ra mt gi trin khai: 1. tm ra ng dn ca th mc chia s m Sophos Anti-Virus c ti v, c bit n nh l v tr ti v khi ng h iu hnh: a) Trong Enterprise Manager, vo menu View, nhp vo a im Bootstrap. Trong hp thoi Bootstrap cc a im, ct V tr hin th ng dn ca v tr ti v khi ng h iu hnh cho mi nn tng.

b) Thc hin mt lu ca cc ng dn c lin quan. 2. ng nhp vo my ch Linux ca bn nh l ngi ch. 3. Gn kt cc v tr bootstrap. kch hot tnh nng th mc ny c gn kt t ng khi khi ng h thng, s dng cc cng c phn phi c th lm nh vy, hoc chnh sa fstab. 4. Thay i v tr bootstrap. 5. to ra mt gi phn mm trin khai nh dng tar, c gi l savinstpkg.tgz, loi: / Mkinstpkg.sh. to ra mt gi phn mm trin khai trong nh dng RPM, c gi l savinstpkg-0,0-1.i586.rpm loi: /. Mkinstpkg.sh-r Lu : tn tp tin c th khc nhau ty thuc vo thit lp RPM. 6. Khi c nhc, la chn cho php qun l t xa. 7. Khi c nhc nh cho cc v tr, vo v tr ti v khi ng h iu hnh (nh thy t cc my tnh Linux). By gi bn sn sng ci t Sophos Anti-Virus bng cch s dng gi ny trin khai.

13,2 Ci t Sophos Anti-Virus cho Linux bng cch s dng cc gi phn mm trin khai

Bn s dng gi ci t Sophos Anti-Virus trong mt trong hai cch: tay trn mi my tnh. Cch tip cn ny c th c s dng vi mt gi RPM hoc nh dng tar. T ng trn mng. Cch tip cn ny c th c s dng ch vi mt gi RPM nh dng. Lu : phin bn Red Hat Enterprise Linux 6 64 bit, cc gi sau y phi c ci t ci t ca Sophos Anti-Virus thnh cng: glibc-2.11.1-1.i686 NSS-softokn-freebl i686 3.12.4-10.fc12

13.2.1 Ci t Sophos Anti-Virus cho Linux tay

1. S dng cc cng c ca ring bn sao chp cc gi phn mm trin khai cho cc my tnh m bn mun ci t Sophos Anti-Virus. 2. Cho mi my tnh v ng nhp nh l ngi ch. 3. t gi trin khai trong mt th mc tm thi v chuyn n th mc . 4. ci t t gi tar, loi: tar-zxvf savinstpkg.tgz /. Sophos-av / install.sh ci t t gi RPM, loi: rpm-i gi RPM

Cc tp tin cn c sao chp t my ch v Sophos Anti-Virus c ci t. T by gi, Sophos Anti-Virus s c cp nht t ng bt c khi

no v tr ti v khi ng h iu hnh c cp nht.

13.2.2 Ci t Sophos Anti-Virus cho Linux t ng ci t Sophos Anti-Virus s t ng t cc gi phn mm trin khai, s dng mt trong nhng cng c iu hnh qun tr h thng h tr trin khai t xa. bit thm thng tin, xem ti liu cho cc cng c . Mt khi Sophos Anti-Virus c ci t, n s c bt u v s c cp nht t ng bt c khi no v tr ti v khi ng h iu hnh c cp nht.

14 Kim tra sc khe ca mng ca bn kim tra sc khe ca mng ca bn t Enterprise Manager, trn thanh menu, nhn vo Bng iu khin biu tng (nu Bng iu khin cha c hin th). Bng iu khin cho bn thy lm th no nhiu my tnh: pht hin mi e da. Cc ngy. Khng tun th chnh sch.

15 Khc phc s c

Khi bn chy thut s Bo v my tnh, ci t phn mm bo mt c th tht bi i vi mt s l do: t ng ci t bng cch s dng qun l doanh nghip l khng th trn cc my tnh Mac v Linux. i vi thng tin v lm th no bo v cc h thng iu hnh, Bo v my tnh Mac OS X (Trang 13) v Bo v my tnh Linux (trang 13). h thng iu hnh khng th xc nh c. iu ny c th l v bn khng nhp tn ng nhp ca bn trong lnh vc nh dng \ tn ngi dng khi tm kim my tnh. Cc my tnh ang chy mt tng la.

16 Nhn tr gip vi cc tc v thng thng i vi thng tin v vic lm th no thc hin cc tc v thng thng, xem phn sau trong cc doanh nghip Qun l Tr gip: Cu hnh chnh sch Cu hnh chng virus v chnh sch HIPS Cu hnh chnh sch tng la Cu hnh chnh sch kim sot thit b Cu hnh chnh sch bo v gi mo Bo v my tnh i ph vi cc cnh bo v li

Lm sch my tnh

To bo co i vi cc hng dn thit lp chnh sch v thc hnh tt nht, xem thm hng dn qun l doanh nghip Sophos thit lp chnh sch.

17 Ph lc: Thay i qun l doanh nghip t Doanh nghip iu khin Khi bn g b ci t Enterprise Console v sau ci t Enterprise Manager, tt c ca bn Doanh nghip thit lp bn iu khin s b mt. My tnh s c chuyn vo nhm Unassigned v cc chnh sch thit lp li mc nh. Thc hin mt lu v cu hnh hin ti ca bn. N s lm cho n d dng hn ti to cc nhm my tnh v cu hnh cc chnh sch trong Enterprise Manager. Bn c th xut khu cc thit lp cu hnh tng la chnh sch t cc doanh nghip iu khin phin bn 4.5 hoc 4,7 v nhp khu qun l doanh nghip. c hng dn v vic lm th no lm iu ny, xem phn tip theo. Nu bn ang s dng Sophos NAC (Network Access Control), bn phi g b n t mng ca bn. N cng c khuyn rng nu bn ang s dng kim sot d liu v cc tnh nng kim sot ng dng, bn v hiu ha chng trc khi g b ci t Enterprise Console.

Quan trng: Trc khi bn g b ci t Enterprise Console, sao lu c s d liu Enterprise Console nh m t trong Sao lu c s d liu Enterprise Console (trang 19).

17,1 Xut khu v cu hnh thit lp tng la nhp khu xut khu cc thit lp cu hnh tng la chnh sch t Enterprise Console v sau nhp khu Enterprise Manager: 1. Doanh nghip iu khin, trong khung chnh sch, kch p vo Firewall, v sau kch p vo chnh sch m bn mun xut khu. 2. Trn trang Welcome ca wizard Firewall Policy, chnh sch tng la nng cao. 3. Trong hp thoi Firewall Policy, trn tab General, di s qun l cu hnh, kch Xut khu sang xut khu cc thit lp tng la nh l mt tp tin cu hnh (*. Conf). 4. Lp li cc bc 1-3 cho mi chnh sch tng la iu khin doanh nghip ln n ti a l 5 (Enterprise Manager h tr ti a trong 5 chnh sch). 5. nhp khu cc thit lp qun l doanh nghip, trong Enterprise Manager, trong ca s Chnh sch, kch p vo Firewall, v sau kch p vo chnh sch m bn mun nhp khu cc thit lp. 6. Trn trang Welcome ca wizard Firewall Policy, chnh sch tng la nng cao. 7. Trong hp thoi Firewall Policy, trn tab General, di s qun l cu hnh, kch Nhp khu nhp khu cc thit lp cu hnh tng la. 8. Lp li cc bc t 5-7 cho chnh sch tng la doanh nghip khc qun l theo yu cu.

17,2 Remove Sophos NAC Nu bn ang s dng Sophos NAC (Network Access Control), bn phi g b n t mng ca bn. Bn phi loi b cc thnh phn Sophos NAC nh sau: Hy b cht c Tun th Sophos t my tnh thit b u cui. Hy b NAC Manager t my ch. Hy b cc c s d liu NAC t my ch. Lu : Nu bn khng loi b cc thnh phn theo th t ny, li c th c hin th cho ngi dng.

17.2.1 Remove Sophos tun th Agent loi b cht c Tun th Sophos, bn phi i n mi my tnh thit b u cui v loi b cc i l th cng. Lu : Bn c th c nhc ng cc ng dng nht nh trc khi loi b cc i l. Lu : Bn c yu cu phi khi ng li my tnh sau khi loi b cc i l. 1. Ti my tnh thit b u cui. 2. T trnh n Start, chn Control Panel> Add or Remove Programs. 3. Chn Network Access Control Sophos, v nhn Remove. 4. Nhn Yes xc nhn g b.

17.2.2 Remove NAC qun l loi b NAC Manager: 1. i n my ch m NAC Manager c ci t. iu ny thng l cng mt my ch ni Doanh nghip bn iu khin c ci t. 2. Trn menu Start, chn Control Panel> Add or Remove Programs 3. Chn Sophos ng dng NAC Server v nhn Remove. 4. Nhn Yes xc nhn g b. NAC Manager c loi b.

17.2.3 Remove NAC c s d liu Lu : Th tc ny s loi b cc tp tin my ch c s dng to ra cc c s d liu v khng phi bn thn cc c s d liu.

Ti cc my ch c s d liu NAC c ci t: 1. Trn menu Start, chn Control Panel> Add or Remove Programs. 2. Chn Sophos NAC c s d liu v nhn Remove. 3. Nhn Yes xc nhn g b.

17,3 Back up c s d liu Enterprise Console

Trc khi bn g b ci t Enterprise Console, hy chc chn rng bn c mt bn sao lu, hp l ca cc ci t iu khin doanh nghip ca bn. Hy chc chn rng bn c th phc hi h thng t bn sao lu. Nu sau bn quyt nh ci t li doanh nghip bn iu khin, iu ny s cho php bn khi phc li cc thit lp ca n. Lu : th mc ci t mc nh cho cc c s d liu l C: \ Program files \ Microsoft SQL Server \ MSSQL $ Sophos. sao lu c s d liu Enterprise Console: 1. Ti my tnh iu khin my ch qun l doanh nghip c ci t. 2. Ngng Router tin nhn Sophos v Sophos dch v Qun l Dch v. lm iu ny: a) Click Start, Run, g services.msc v nhn OK. b) Trong ca s Services, chut phi vo tn dch v v nhn Stop. c) ng ca s Services. iu ny m bo rng khng c thng tin mi c ghi vo c s d liu trong khi n ang c sao lu. 3. To mt th mc sao lu c s d liu, v d, C: \ SophosBackups. 4. M mt ca s lnh ti th mc ci t c s d liu doanh nghip Console. Cc th mc mc nh l C: \ Program Files \ Sophos \ Doanh nghip iu khin \ DB. 5. Sao lu c s d liu bng cch nhp mt lnh nh dng ny: BackupDB C: \ SophosBackups \ SOPHOS.bak Nu trng hp SQL Server l bt c iu g khc hn Sophos, thm tn ca cc v d SQL Server, v d: BackupDB C: \ SophosBackups \ SOPHOS.bak MySQLServerInstance

6. Xut khu cc kha registry sau y: i vi mt h iu hnh 32-bit: HKLM \ SOFTWARE \ Sophos \ Chng nhn qun l i vi mt h iu hnh 64-bit: HKEY_LOCAL_MACHINE \ Software \ Wow6432Node \ Sophos \ Chng nhn qun l

Bn sn sng g b ci t Enterprise Console. bit thm thng tin v vic khi phc li c s d liu iu khin doanh nghip, xem Khc phc s c di y.

17,4 khc phc s c

Phc hi d liu Enterprise Console

1. 2.

Tt c cc quyn.

Ti liu tham kho 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19.

20. 21. 22.

Tt c cc quyn. Ti phn phi v s dng ngun v hnh thc nh phn, c hoc khng c sa i, cho php vi iu kin l cc iu kin sau y: 1. Redistributions m ngun phi gi li cc thng bo bn quyn trn, danh sch ny cc iu kin v khuyn co sau y. 2. Redistributions di dng nh phn phi c ti to thng bo bn quyn trn, danh sch ny ca iu kin v khuyn co sau y trong cc ti liu v / hoc cc vt liu khc c cung cp vi phn phi. 3. Tt c cc ti liu qung co cp n tnh nng s dng ca phn mm ny phi hin th xc nhn sau y:

4. i vi s cho php bng vn bn, xin vui lng lin h vi [email protected]. 5. 6.

Sn phm ny bao gm phn mm mt m c vit bi Eric Young ([email protected]).

Ti phn phi v s dng ngun v hnh thc nh phn, c hoc khng c sa i, cho php vi iu kin l cc iu kin sau y: 1. 2. Redistributions di dng nh phn phi c ti to thng bo bn quyn trn, danh sch ny ca iu kin v khuyn co sau y trong cc ti liu v / hoc cc vt liu khc c cung cp vi phn phi. 3.