Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version Copyright (C) 2014 McAfee, Inc. All Rights Reserved

Transcription

1 Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version Copyright (C) 2014 McAfee, Inc. All Rights Reserved Release date: October 08, 2014 This RTW build was developed and tested on: - VirusScan Enterprise for Linux: DAT Version: Engine Version: About this release Thank you for choosing McAfee(R) VirusScan(R) Enterprise for Linux (previously known as LinuxShield). This document contains important information about the current release. We strongly recommend that you read the entire document. IMPORTANT: We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall any pre-release version. New features These new features are available in this build that could be used either on a standalone system or from McAfee epolicy Orchestrator to manage McAfee VirusScan Enterprise for Linux on client systems. Support for new operating system (64-bit): - Support for Red Hat Enterprise Linux 7.x - Support for CentOS 7.x - Support for SUSE Linux Enterprise Server 12 - Support for Oracle Enterprise Limited 7.x - Amazon Linux AMI bit - Support for above mentioned operating system on Amazon Elastic Compute Cloud (Amazon EC2) Engine support: Pre-packaged with the latest 5700 engine that provides enhanced detection capabilities.

2 Files included with this release This release consists of a package "McAfeeVSEForLinux <build_number>.ZIP", which contains below file: McAfeeVSEForLinux <build_number>-release-full.x86_64.tar.gz = McAfee VirusScan Enterprise for Linux software package. Readme.txt - This text file. System requirements Supported operating systems (64-bit): Note: This product cannot be used on 32-bit platforms. Operating Systems (64-bit) - SUSE Linux Enterprise Server 11 SP2 and SP3 - SUSE Linux Enterprise Server 12 - Novell Open Enterprise Server 11 SP1 - Red Hat Enterprise Linux 7.x - CentOS 7.x - Oracle Enterprise Linux 7.x - Ubuntu 12.04, 12.10, 13.04, bit, and Amazon Linux AMI Support for cloud platforms such as Amazon Elastic Compute Cloud (Amazon EC2) Virtual platforms - VMware - KVM - Citrix Xen - Virtual box - Xen - Guest operating system on Xen Hypervisor Supported processors: - Intel x86_64 architecture-based processor that supports Intel Extended Memory 64 Technology (Intel EM64T) - AMD x86_64 architecture-based processor with AMD 64-bit technology Memory: - Minimum: 2 GB RAM - Recommended: 4 GB RAM Free disk space: - Minimum: 1 GB Supported McAfee Management software: - McAfee epolicy Orchestrator 4.6

3 - McAfee epolicy Orchestrator McAfee epolicy Orchestrator 5.1 Supported McAfee Agent software: - McAfee Agent 4.8 Patch 2 - McAfee Agent 5.0 Installation instructions Pre-Requisites - Ensure that there is no user named as "nails" or group named as "nailsgroup" on the computer. - Ensure that you have root privileges to install McAfee VirusScan Enterprise for Linux, version IMPORTANT: During installation, you are prompted to supply a password and other information. For most of the questions, you can accept the default value that is offered. Please note that the silent installation and the software deployment through epolicy Orchestrator do not prompt for a password for nails user. In such cases this must be setup using passwd or change password task from epolicy Orchestrator. To set up notification for alerts (if required), you need the Mail Transfer Agent (MTA) configured and the following information: - address of the VirusScan administrator - IP Address of the SMTP host - TCP/IP port number of the SMTP host Standalone installation (RPM based systems) 1. Download "McAfeeVSEForLinux <build_number>.ZIP" to a temporary directory and execute these commands in sequence: # unzip McAfeeVSEForLinux <build_number>.ZIP # cd McAfeeVSEForLinux <build_number> # tar -zxvf McAfeeVSEForLinux <build_number>-release-full.x86_64.tar.gz # tar -zxvf McAfeeVSEForLinux <build_number>-release.tar.gz # tar -zxvf McAfeeVSEForLinux <build_number>-others.tar.gz 2. Install McAfee Runtime by typing the following command: rpm -ivh MFErt.i686.rpm

4 3. Install McAfee Agent using this command: rpm -ivh MFEcma.i686.rpm 4. Confirm that McAfee agent is running correctly using this command: /etc/init.d/cma status 5. Install McAfee VirusScan Enterprise for Linux using the command: bash McAfeeVSEForLinux <build_number>-installer 6. Answer the questions when prompted, accept the default values or type custom values. 7. When prompted to start the VirusScan services, select the default option, "Y." 8. To confirm that VirusScan Enterprise for Linux is installed and running correctly, type the following command: /etc/init.d/nails status Installation on Ubuntu systems 1. Download McAfeeVSEForLinux <build_number>.ZIP to a temporary directory and execute these commands in the given sequence: # unzip McAfeeVSEForLinux <build_number>.ZIP # cd McAfeeVSEForLinux <build_number> # tar -zxvf McAfeeVSEForLinux <build_number>-release-full.x86_64.tar.gz # tar -zxvf McAfeeVSEForLinux <build_number>-release.tar.gz # tar -zxvf McAfeeVSEForLinux <build_number>-others.tar.gz 2. Install McAfee Runtime using this command: sudo dpkg -i MFErt.i686.deb 3. Install McAfee Agent using this command: sudo dpkg -i MFEcma.i686.deb 4. Confirm that McAfee Agent is running correctly /etc/init.d/cma status 5. Install VirusScan Enterprise for Linux: sudo bash McAfeeVSEForLinux <build_number>-installer 6. Answer the questions when prompted. Accept the default values, or type custom values. 7. When prompted to start the VirusScan services, type the

5 default option Y. 8. Confirm that VirusScan Enterprise for Linux is installed and running correctly: /etc/init.d/nails status The message The McAfeeVSEForLinux daemon is running: process information follows appears. NOTE: For detailed information on how to install McAfee VirusScan Enterprise for Linux on Novell Open Enterprise Server, see the "McAfee VirusScan Enterprise for Linux Product Guide. Silent installation (RPM based and Ubuntu systems) NOTE: Before installing McAfee VirusScan Enterprise for Linux, you must have McAfee Runtime and McAfee Agent already installed on the computer. 1. Create a file "nails.options" in the root home directory. For example: SILENT_ACCEPTED_EULA="yes" SILENT_INSTALLDIR="/opt/NAI/LinuxShield" SILENT_RUNTIMEDIR="/var/opt/NAI/LinuxShield" SILENT_ADMIN="admin@example.com" SILENT_HTTPHOST=" " SILENT_HTTPPORT="55443" SILENT_MONITORPORT="65443" SILENT_SMTPHOST=" " SILENT_SMTPPORT="25" SILENT_NAILS_USER="nails" SILENT_NAILS_GROUP="nailsgroup" SILENT_CREATE_USER="yes" SILENT_CREATE_GROUP="yes" SILENT_RUN_WITH_MONITOR="yes" SILENT_QUARANTINEDIR="/quarantine" SILENT_START_PROCESSES="yes" 2. Type the following at the command prompt: bash McAfeeVSEForLinux <build_number>-installer 3. After performing the installation, use the command "passwd" to assign a password to the user "nails".

6 NOTE: For detailed information on how to install McAfee VirusScan Enterprise for Linux on Novell Open Enterprise Server, see the "McAfee VirusScan Enterprise for Linux Product Guide. Integrating using epolicy Orchestrator 4.6/5.0/5.1 BEFORE YOU BEGIN: If you have any VirusScan Enterprise for Linux hotfixes checked in to the Master Repository's Current branch, you must either delete the hotfixes from the Master Repository or move them to the previous branch. 1. Extract the McAfee VirusScan Enterprise for Linux v2.1 package (McAfeeVSEForLinux <build_number>.ZIP) on to a temporary directory. 2. From the temporary directory, extract these files in sequence: McAfeeVSEForLinux <build_number>-release-full.x86_64.tar.gz McAfeeVSEForLinux <build_number>-release.tar.gz McAfeeVSEForLinux <build_number>-others.tar.gz 3. Check in the McAfee Agent (MSA-LNX_4.8.0_Package.zip) bundled with this package on to the epolicy Orchestrator "Master Repository". 4. Check in "McAfeeVSEForLinux <build_number>-release-EPO.zip" on to the epolicy Orchestrator "Master Repository". 5. Check in the following extensions on to the epolicy Orchestrator "Extensions": - EPOAGENTMETA.ZIP - LYNXSHLDMETA.ZIP - LYNXSHLDPARSER.ZIP - help_vsel_201.zip 6. Deploy McAfee Agent 4.8 Patch 2 on the client computer. 7. Create a Product Deployment Task on epolicy Orchestrator to deploy McAfee VirusScan Enterprise for Linux, version To confirm that VirusScan Enterprise for Linux is installed and running correctly, type this command on the client system: /etc/init.d/nails status

7 NOTE: For detailed information on how to integrate and configure McAfee VirusScan Enterprise for Linux using epolicy Orchestrator, see the "McAfee VirusScan Enterprise for Linux Product Guide". Upgrading from previous versions on RPM based and Ubuntu systems You can upgrade the software from versions or 1.9.0, 2.0 to version Upgrade McAfee Agent: For RPM based systems: rpm -Uvh MFEcma.i686.rpm For Ubuntu systems: dpkg -i MFEcma.i686.deb 2. Confirm that McAfee Agent is running correctly: /etc/init.d/cma status 3. Upgrade VirusScan Enterprise for Linux: bash McAfeeVSEForLinux <build number>-installer 4. Confirm that VirusScan Enterprise for Linux is running correctly: /etc/init.d/nails status 5. Restart the computer, (Required only if you are upgrading from version or 1.9 to version ) reboot Note: When you upgrade the software, the existing on-access scan settings, on-demand scan settings, and the exclusions list are migrated. Launching VirusScan Enterprise for Linux 1. From a supported web-browser, go to: or IP address>:<port number> Specify the hostname or IP address of the computer, on which VirusScan Enterprise for Linux is installed. By default, the port number is "55443". For example: (or) 2. On the log on page, type the user name "nails"

8 and type the password that you specified during installation, then click Log on. Uninstallation 1. To uninstall VirusScan Enterprise for Linux, type these commands: For RPM based systems: rpm -e McAfeeVSEForLinux rpm -e MFEcma rpm -e MFErt For Debian based systems: dpkg purge mcafeevseforlinux dpkg purge mfecma dpkg purge mfert Uninstallation using epolicy Orchestrator 4.6/5.0/5.1 - Create a Product Deployment Task on epolicy Orchestrator to remove McAfee VirusScan Enterprise for Linux version For detailed information on how to uninstall the software using epolicy Orchestrator, see McAfee VirusScan Enterprise for Linux Product Guide. Known issues For the list of known issues, see McAfee KnowledgeBase article Finding product documentation McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1. Go to the McAfee Technical Support ServicePortal at 2. Under Self Service, access the type of information you need:

9 For user documentation: 1. Click "Product Documentation." 2. Select a "Product," then select a "Version." 3. Select a product document. For the KnowledgeBase: - Click "Search the KnowledgeBase" for answers to your product questions. - Click "Browse the KnowledgeBase" for articles listed by product and version. Copyright (C) 2014 McAfee, Inc. Do not copy without permission. McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others.