Avira AntiVir WebGate 3.2 Release Notes

Size: px

Start display at page:

Download "Avira AntiVir WebGate 3.2 Release Notes"

Felix Chester Lewis
6 years ago
Views:

1 Release Notes 1. Features 1.1 Enhanced Reporting With the new version 3.2 Avira AntiVir WebGate offers enhanced reporting capabilities. Web- Gate now logs information into any ODBC database so that the user can now create his own statistics. To support this feature WebGate, version 3.2 now offer a number of new options in the webgate.conf: DBSupport [yes no] Enable/disable writing data to a database. Default is NO DBodbcIni [path] Define the path to the.ini file that configures the OBDC driver for database logging. DBodbcDataSource [string] Give the database source name used for connecting to the database. DBLogCleanRequests [yes no] This option enables the user to control if clean requests are logged into the database or not. WebGate logs information into two different tables: WebGate 3.2 Release Notes (Status ) 1

2 1.1.1 Alerts table: This table holds all information about the requests that WebGate has received. This is: Status (scan flags, ACL blocked, the filter that blocked the request or clean and tunneled if this is the case) URL Alert URL Alert name Action (blocked, allowed, tunneled, quarantined, deleted) Source Category (received from WebProtector, WebCat) Engine version Date VDF version Counter table This table contains WebGate specific statistics for quick look-up: number of files blocked because of extension number of files blocked because of suspicious behavior: processing errors, partial, unsupported, encrypted archives, limits reached (max size, max recursions etc) number of infected files number of clean files number of scanned files total received bytes These two tables including the columns needed have to be created by the user. The user must also provide an ODBC driver and driver manager for the database. If database support has been activated, the actual definition of the ODBC database must be done in the odbc.ini (which is by default the avwebgate-odbc.ini) the path to which is set in the dbodbcini section of the avwebgate.conf. The information that is logged into these two tables now allows the user to create his individual reports about all WebGate activities using his preferred report generating tool. WebGate 3.2 Release Notes (Status ) 2

3 1.2. Send SNMP traps Avira AntiVir WebGate, version 3.2 is now able to send SNMP to inform the administrator mainly about security relevant issues in WebGate. Traps include infos about issues such as WebGate started/stopped, SMTP server terminated, Scanner found malware, Scan could not be finished, requests were treated as suspicious Scanner could not be reached Request matched against a configured category with the online filter (note: this option is only available in the Avira WebGate Suite) Request matched against a configured category with the RTPS filter (note: this option is only available with a WebGate RTPS license). Request matched against a configured category with the offline filter parameters. License will expire soon (in less than 30 days) or license has expired. WebGate uses the MIB-format to specify SNMP traps. Users can find those SNMP specifications in the avira-mib.txt and avira-webgate-v0-mib.txt files. SNMP traps are used to inform the administrator about security relevant issues. This is especially useful when WebGate itself is managed within a software management system such as HP Open View and others. WebGate 3.2 Release Notes (Status ) 3

4 1.3. Thread Pools Pool of persistent connections to the scanner Avira AntiVir WebGate, version 3.2 now allows using a persistent pool of connections to the scanner. The persistent connections pool maintains a number of open connections to the scanner to speed up the scanning process by eliminating the need to create and close a connection for each request. To configure these persistent pool connections add the new option ScannerPoolSize to the proxy settings part of the avwebgate.conf. The default value is 100 and a range between 0 (=persistent connection pool disabled,, i.e. a new connection is opened for each new request) and 250. Please note: This ScannerPoolSize option is closely related to the PoolScanners option in the avwebgate-scanner.conf which determines the number of connections the scanner accepts at all. If the value defined in PoolScanners is smaller or not all scanner connections are available (e.g. because another process is using some of them) then WebGate will create as many connections as possible. The persistent pool of connections for the scanner considerably speeds up the scanning process because it provides a number of always open connections to the scanner Persistent thread pool for incoming requests The new Avira AntiVir WebGate, version 3.2 also allows configuring a pool of threads to handle incoming requests. To configure this thread pool for incoming requests add the new option WorkerPoolSize to the proxy settings part of the avwebgate.conf. The default is 0, i.e. the thread pool is disabled. Set it to a value > 0 to enable it. The maximum number of threads allowed is The persistent thread pool for incoming requests considerably enhances WebGate s stability especially under heavy load, i.e. when it has to deal with a great number of simultaneous incoming requests. WebGate 3.2 Release Notes (Status ) 4

5 1.4. URL filtering With version 3.2 Avira AntiVir WebGate also supports URL filtering when running as an ICAP server. Enhances the ICAP support of Avira AntiVir WebGate by allowing using URL filtering also when WebGate is running as an ICAP server. 2. Fixed issues 2.1 Version information inside the binary added In version 3.2 all WebGate binaries now contain version number making it easier for the customer to check if he is using the most recent version New ACL definition for URIs or regexp. of URIs added Up to version 3.2. Avira AntiVir WebGate supported ACL filtering of requests using the domain name. Version 3.2 now also supports filtering requests based on the full URI which in effect allows a much more precise filtering of requests Configuration dump feature added Avira AntiVir WebGate, version 3.2 now offers a new command./avwebgate.bin dumpconfig which displays the current valid configuration values excluding all comments and disabled configuration setting and thus offers a concise and easy to read overview over all valid configuration settings WebCat, Engine, VDF and Savapi version information now availa ble Version 3.2 now allows extracting the version information of the WebCat, the Engine, the VDF and the Savapi. Use./avwebgate.bin - - filter-version to display it. WebGate 3.2 Release Notes (Status ) 5

6 2.5. New ACL element scan Up until version 3.2 WebGate could not allow and scan a connection that had been blocked by the URL filtering of WebGate before. Now, in version 3.2, Avira AntiVir WebGate offers an option to do exactly that - to bypass the URL filtering and allow the request and scan it. Use the new <scan> option that is offered for the http_access or http_reply_access access lists No blocking of unsupported archives Version 3.2 now has changed the default value for BlockUnsupportedArchives to YES as a default so that archives that cannot be handled by the scanner and the engine are blocked as a default. WebGate 3.2 Release Notes (Status ) 6

7 3. The system requirements have been adapted for the 3.2 release of Avira AntiVir WebGate/WebGate Suite as follows: Platforms: Red Hat Enterprise Linux 6 Server Red Hat Enterprise Linux 5 Server Red Hat Enterprise Linux 4 Server* Novell Open Enterprise Server 10.2 Novell Linux Desktop 9 (NLD 9) Novell SUSE Linux Enterprise Server 11 (SLES 11) Novell SUSE Linux Enterprise Server 10.3 (SLES 10 SP 2)** Novell SUSE Linux Enterprise Server 9 (SLES 9) *** Debian GNU/Linux 4**** Debian GNU/Linux 5 Debian GNU/Linux 6 Ubuntu Server Edition 8***** Ubuntu Server Edition 9 Ubuntu Server Edition 10.4 Sun Solaris 9 (SPARC) * Sun Solaris 10 (SPARC) * Please note that Red Hat Enterprise Linux 4 Server is supported until ** Please note that Novell Suse Linux Enterprise Server 10 is supported until *** Please note that Novell SUSE Linux Enterprise Server 9 (SLES 9) is supported until **** Please note that Debian GNU/Linux 4 is supported until ***** Please note that Ubuntu Server Edition 8 is supported until ****** Please note that Sun Solaris 9 (SPARC) is supported until CPU: Intel, AMD, 32-bit or 64-bit with 32-bit compatibility mode RAM: 512 MB (2 GB recommended) HDD: 10 GB (recommended 50+ GB) space on configured TemporaryDir for downloading and scanning large files. 1 GB temporary space needed for unpacking archives. Note: * Sun Solaris 9 (SPARC) won t be supported any longer than Use under 64 bit Linux: Please use the required 32 bit libraries. Administration through the Avira SMC: Please note that the libstdc++so.5 is required for the SMC agent Avira GmbH. All rights reserved. All named products and company names are registered trademarks of the respective company. Our General Terms and Conditions of Business and the End-user License Agreement can be found in the Internet: E&OE. Technical information as of June Avira GmbH Kaplaneiweg Tettnang Germany Telephone: Facsimile:

Avira AntiVir Exchange. Installation of Avira AntiVir Exchange in a Database Availability Group. HowTo

Avira AntiVir Exchange. Installation of Avira AntiVir Exchange in a Database Availability Group. HowTo Avira AntiVir Exchange Installation of Avira AntiVir Exchange in a Database Availability Group HowTo Table of Contents Installation of Avira AntiVir Exchange in a DAG...3 Prerequisites... 3 Making the