BitDefender Enterprise Manager Startup guide 1
Table of Contents Product installation... 3 Install BitDefender Enterprise Manager... 3 Install BitDefender Server add-on... 4 Protection configuration... 5 Product registration... 6 Network configuration... 7 Clients creation... 9 Antivirus installation... 12 Update server configuration... 14 Alerts administration... 16 Alerts... 16 Email settings section... 16 Tasks administration... 18 Reports administration... 19 Contact information... 21 2
Product installation Install BitDefender Enterprise Manager To ensure a proper functioning of the product, before installation, verify that the following system requirements are met: Processor: Intel Pentium compatible processor RAM: 64MB Minimum free disk space: 10MB Operating system: Windows 98 SE/NT SP6/Me/2000/XP/2003 Internet Explorer 4.0 or superior Locate the setup file and double click it. This will launch the setup wizard, which will guide you through the setup process: 1. Click Next to continue or click Cancel if you want to quit installation. 2. Please read the License Agreement, select I accept the terms in the License Agreement and click Next. 3
Product installation 3. You can choose what kind of installation you want: typical, custom or complete. If you select Typical or Complete you will skip step 6. 4. If you have selected Custom, a new window will appear containing all the BitDefender components listed so that you may select the ones you would like to install. If you click any component, a short description (including the minimum space required on hard disk) will appear on the right side. If you click any a window will appear where you can choose to install or not the selected module. You can select the folder where you want to install the product. The default folder is C:\Program Files\Softwin\BitDefender Enterprise Manager. If you want to select another folder, click Browse and in the window that will open, select the folder you wish BitDefender to be installed in. Click Next. 5. Click Install. 6. Click Finish to complete the product installation. If you have accepted the default settings for the installation path, a new folder named Softwin is created in Program Files and it contains the subfolder BitDefender Enterprise Manager. TIPS: a. To manage the BitDefender clients from a different workstation than the BitDefender Server, you must perform a custom installation of the BitDefender Enterprise on that computer. In the third step of the installation click Custom and in the window that appears disable all other components than BitDefender Enterprise Management Console and BitDefender Deployment Tool. b. If you want to connect to the BitDefender Server from another workstation you must perform a custom installation of the BitDefender Enterprise on that computer. In the third step of the installation click Custom and in the window that appears disable all other components than BitDefender Enterprise Management Console. Install BitDefender Server add-on BitDefender Client Professional Plus / Standard v8 (Server add-on) helps BitDefender Client Professional Plus / Standard v8 to integrate with BitDefender Enterprise Management Console. It contains the antivirus kit along with some tasks templates that will help you configure these products from the Management Console. BitDefender Client Professional Plus / Standard v8 (Server add-on) is required to be able to remotely install the BitDefender Client Professional Plus / Standard v8 antivirus. The BitDefender Standard / Professional Edition (server add-on) must be installed on the BitDefender Enterprise server. Locate the setup file and double-click it. This will launch the setup wizard, which will guide you through the setup process. 4
Protection configuration Each time you open the BitDefender Management Console a connection window will appear: Type in the name or the IP of the computer where BitDefender Enterprise Server is installed in the field Server Name/IP. You can also specify an already existing IP, by selecting it from the drop-down menu. If this is the first time you access the management console or you haven't previously specified a password, you don't need to type in any password. Otherwise, you must type the server connection password in the Password field and then click OK. The management console will try to establish the connection to the server. Setting a password In the main menu select File and click Change Password. This window will appear: You don't need to type any password in the field Enter current password, if there is no password. Type the new password in the field Enter new password and re-enter it in the field Confirm new password. Click OK. It is important for you to remember this password because, from now on, the access to the server will be granted only after providing this new password to the server. 5
Product registration The product is delivered with a trial registration key valid for thirty days, a number of fifty desktop clients and five server licences. At the end of the trial period, if you want to purchase the product and change the number of licenses, you have to provide a new serial number. To modify the default serial number you must access the About window from the management console. To access the About window you should do one of the following: On the Help menu, click About BitDefender Enterprise Manager; Click the About button from the toolbar. In the About window you can view the information about product details and the current version of the product. Click Enter registration key and type in the serial number in the window that appears. Click OK to finish the registration process. In the About window now, you can see the new registration key and the corresponding number of licenses. 6
Network configuration BitDefender NetBuilder discovers all the online computers from a specified domain or all the computers from the domain on which the server is installed (by using the Active Directory option) and joins them into groups according to the filters created by you. The first time you open the management console the NetBuilder tool appears. You can also launch it any time you want from the management console (on the Tools menu, click NetBuilder Wizard). This will launch the wizard that will guide you through the configuration process: 1. Click Next. 2. You can select the following options: Do not apply the selected filters to the clients that already belong to a group - the selected filters will not apply to the computers that are already in a group; Empty the groups from the checked filters before joining the clients that match the filter string - the groups from the selected filters will be cleared before the new computers are added; Restore previously deleted clients which match the filters - to restore the previously deleted computers that match the selected filters (you can see these computers in the Restore Deleted Clients window from the Clients pane). Those computers weren't complete deleted. 7
Network Configuration Click Add filter in order to specify the filters. The next window will appear: You can select a specific domain (from the drop-down menu corresponding to the Domain field) or you can use the Active Directory. Note With Active Directory all the computers from the current domain will be added to the group. If you select a specified domain only the online computers from that domain will be added to the group. In the Group Name field type a name for the group or select a previously created group from the drop-down menu. The filters must be used in the following manner: * - the clients will be added to the specified group; A* only the clients started with A will be added to the specified group; AB* only the clients started with AB will be added to the specified group. After specifying the filters click Next to continue 3. Click Finish. TIP: The next logic step is to run BitDefender Deployment Tool on all listed clients.
Clients creation In order to become BitDefender Enterprise client, a workstation must have installed BitDefender Local Manager. The installation of this component enables the transfer of tasks from the BitDefender Server to the client workstation. System requirements: Processor: Intel Pentium Compatible processor - 200 MHz or higher; Minimum hard disk space: 10MB; Minimum RAM Memory: 32MB; Operating system: minimum Windows 98 SE. The module that performs the deploy installation is BitDefender Deployment Tool. There are 3 ways to launch it: On the Tools menu, click BitDefender Deployment Tool; From Windows start menu follow the path: Programs BitDefender Enterprise Manager BitDefender Deployment Tool; Select the target from the Clients section, right-click and from the shortcut menu click BitDefender Deployment Tool. 9
Clients creation 1. Click Next. 2. You can create and install the package automatically or manually. Select the check box corresponding to one of the options. Automatically Install / Uninstall / Repair a product - to create a deployment package and to automatically install it on the selected network computers; TIP: The automatic installation of BitDefender Local Manager works only on NT/2000/XP/2003. Create an unattended installation package for later use - to create a deployment package on your computer. You can put it on a cd, on a shared folder, send it by e-mail or use a logon script in order to install it on the workstations. TIP: For more information about the logon script procedure please read the BitDefender Enterprise Manager user guide. Click Next 3. Select the package you want to use (in our case BitDefender Local Manager) and click Next. 4. You can install, repair or remove BitDefender Local Manager. Select the check box corresponding to the action and click Next (only for automatically deployment). 5. For every MSI package you can select which components to install. If the package doesn't contain facilities you will be noticed. In the lower part of the window you must set some properties for the package. Note With the package you can do one of the following: 1. For the BDLM package you must type the name or the IP of the BitDefender Enterprise Server. 2. For other products you must type in the serial number or other properties. Click Next. 6. Here you can set the general and the reboot options. General Options Notify user before and after deploying the package two box-messages will be delivered to the client, before and after the deploying process. This is the alert window the user will receive. Do not display user interface on the target computers (recommended) the Windows Installer interface will not be displayed on target computers. Use non interactive Authentication the user has the possibility to introduce set of pairs of username / password, that will be used automatically when authentication on the target computer is necessary (only for automatically deployment). 10
Clients creation You must provide a list with valid usernames/passwords in order to avoid entering credentials anytime authentication is necessary. Reboot Options Do not reboot target computers the target computers will not be restarted, even if it is necessary. Reboot the computer if necessary, and ask the user to confirm the target computers will be restarted if necessary. The user will be asked to confirm the reboot. If no user response is received, the systems are restarted after the specified number of seconds. Force the target computer to reboot the target computers will be restarted after the specified number of seconds. Click Next. 7. You must select the target computers. Click corresponding to the Look in field in order to select a specified domain. Double click the target computers to add them to the list (or select them and click Add computers to list). TIP: Use the Ctrl key to add more computers to the list or Ctrl + A to add them all. You can also type their name or IP directly in the list. Click Next. For manual deployment you must type a full path and a name for the package or click Browse and select the path Click Save Results to save the results in a html or a txt file (only for automatically deployment). Click Finish In order to check if the installation of BitDefender Local Manager was successfully finished proceed as follows: if you have a Windows 98 operating system - verify if the folders BitDefender Communicator and BitDefender Local Manager have been created on that workstation. The path to them is Program Files\Common Files\Softwin on the system operation partition; if you have a Windows NT/2000/XP/2003 operating system you can extra check if the BitDefender Communicator and BitDefender Local Manager services have already been installed and started. For this select the client from the Clients pane and from the contextual menu click Manage Client's Services. TIP: Access the Groups section and create clients groups in order to administrate them easily. 11
Antivirus installation To install BitDefender Client Standard / Professional Plus 8 on clients, you must double-click the Install BitDefender Client Standard / Professional Plus 8 icon from the Tasks Templates section. This will launch the wizard, which will guide you through the installation process. TIP: You can also install BitDefender Client Standard / Professional Plus 8 with the BitDefender Deplyment Tool. In the third step of the wizard select BitDefender Antivirus. 1. Click Next. 2. Click Next. 3. You must select the clients and/or the groups. TIP: If a group contains at least one client then a double-click on that group's name or its corresponding icon will expand that group. 12
Antivirus installation You can choose to run the task on one or several clients. To select all the clients from a group select the check box corresponding to that group's name. If you schedule a task on an entire group of clients, the task will be launch even on the clients added at a later time. Once you have selected the target workstations, click Next. 4. You can opt for an immediate or a programmed task. For an immediate task, click Immediately and specify the following: Enter the task name - type in a name for the task; Enter the task description - type in a short description of the task. For a scheduled task, click Scheduled for later and specify the following: Enter the task name - type in a name for the task; Enter the task description - type in a short description of the task; Run the task - it is a list with time intervals when the task should run. Select One time only to run the task on the selected clients only once at a specified moment; Start date - click the arrow corresponding to the field and select a day from the calendar that appears; Start time - type the hour when the task will launch. You can use the corresponding arrows up/down. The task may fail if the target workstation is offline, therefore select the check box corresponding to If a client is offline, run the task when the client is online. Once you specified all the information, click Next to view a summary description of the task 5. The last window of the wizard contains all the information regarding the task. Click Finish. Depending on the run time you have selected, the task will appear in the Active Tasks section, in case it is an immediate task or in the Scheduled Tasks section, if it is a scheduled task.
Update server configuration The BitDefender Update Server allows you to set up an upgrade location within your local network. You don't have to worry about updating the products installed on computers that are not connected to the Internet, achieving, at the same time, faster updates and reduced Internet traffic. It is easy to configure through an intuitive step by step wizard, that you can run every time you want to change some of the configuration settings. The BitDefender Update Server will help you get the latest updates both for BitDefender Client Standard & Professional Plus 8 products. In order to ensure a proper functioning of the update server, verify that the following system requirements are met: Processor: Intel Pentium Compatible processor; Minimum hard disk space: 100MB (for updates); Minimum RAM Memory: 64MB; Operating system: Windows NT-SP6/2000/XP/2003; Internet Explorer 5.0 (or higher). You must publish the folder where you download the updates in order to make them available to the network clients. Launch the update server configuration wizard from: Start Programs BitDefender Enterprise Manager BitDefender Update Server. The following window will appear where you can view the BitDefender Update Server settings 14
Update server configuration Click Change Settings to access the wizard where you can modify the update server settings. 1. Click Next. 2. The default update address is: http://upgrade.bitdefender.com. Click Next 3. Type in the path to the local folder where to store the updates or click Browse and select it. You must select the check box corresponding to Use BitDefender HTTP Server to use BitDefender's own HTTP server. You can also publish the downloads folder by using anothet HTTP server like IIS or Apache or you can change the port. Note The update address for all BitDefender clients is: 1. http://computer_name in case you are using port 80. 2. http://computer_name:port if you are using a different port. Click Next. 4. In case you are using proxy click Use a proxy server for access to the internet and type the proxy settings. Click Next. 5. Select the products installed on clients and click Next. 6. Type in the update interval in hours and click Next. 7. The last window of the wizard contains all the information regarding the update configuration. Click Finish. 15
Alerts administration BitDefender Enterprise Manager includes a real time warning system that generates alerts whenever an exceptional situation, such as virus detection, failure to complete a task and others, occurs. You can view these alert messages from the management console. Also, you can customize the warning system to send warning email messages to network administrators. To manage the alerts, click Alerts in the configuration bar. The Alerts window is structured in two sections: Alerts and Email Settings. In the Alerts section you can administrate all the alerts generated so far. In the Email Settings section you must configure BitDefender in order to send alerts to specified e-mail addresses. Alerts BitDefender Enterprise Manager allows you to see all the alerts it has generated so far. Every alert comes with several information like: its type (warning, information, critical), the application that generated it, the name and IP of the computer on which that application was running, the date and time when the event occurred. On the bottom side, you can see a descriptive section. It contains details about the parameters of the selected alert. There are three types of alerts: Information - this is a low-level alert, nothing to worry about; Warning - this is a medium-level alert, meant to report potential dangerous situations for the network protection. Such a situation may be the detection of suspicious files on a workstation during a scan task; Critical - it is a high-level alert, that warns about virus detection or tasks failing to execute. Email settings section You may customize BitDefender Enterprise Manager to send e-mail alerts, whenever an alert message is generated, to all persons concerned. 16
Alerts administration Steps to be followed in order to configure this feature correct: 1. Specify the e-mail settings BitDefender Server uses these settings when the alert messages are sent. Type the e- mail address of the sender in the From field. The e-mail messages containing alerts will have this address on the sender's field. Note You must specify a valid e-mail address; otherwise the SMTP server might decline sending an e-mail whose sender is unknown to him. 2. Specify the SMTP Server settings Type the SMTP Server the company uses to send e-mails in the field SMTP Server and the SMTP port in the field SMTP Port. 3. Specify a subject for the e-mail Type in a subject for the alert e-mail messages generated by the BitDefender Server in the field Greetings. This subject will be specific for the messages generated by BitDefender Server. On the bottom side of the section you can see a column with all the e-mail addresses to which alerts will be sent and another three columns, one for each type of event (one for critical, one for warning and one for information). To each of these addresses, a message is sent only in case one of the corresponding checked events occur. 17
Tasks administration To manage the tasks, click Tasks in the configuration bar. The Tasks window is structured in three sections: Tasks Templates, Active Tasks and Scheduled Tasks. In the Tasks Templates section you can launch different tasks. They can be of many types, depending on the BitDefender products that are installed on the workstations. In the Active Tasks section you can see all the tasks and there parameters. In the Scheduled Tasks section you can see all the scheduled tasks and there parameters. Here you can modify any scheduled task. In order to create a new task, it is necessary to access the Task Templates section. Double-click an icon to launch the wizard that will help you select the protection options. Run the following tasks templates in order to secure your network against viruses: Register BitDefender products - to register BitDefender products; Configure Client - to configure the BitDefender products installed on workstations; Update Client - to update the clients; Scan systems for viruses - to scan the clients. TIP: Check the BitDefender Enterprise user guide or the help file to find more detailed information. 18
Reports administration The management console allows viewing the report files, generating customized reports with information about the antivirus activity during a given period of time. BitDefender Enterprise Manager has designed a wizard that helps you customize the reports. Every time you want to see a report, you must enter the reports window. To create & administrate reports, click Reports in the configuration bar. Each type of task that can be executed on workstations allows you to create a report file that contains the results of its execution. You can create a report file in one of the following ways: On the Reports menu, point Reports and click Create report file; Right-click the Report folders pane and from the shortcut menu select Create report. A wizard will appear, helping you to select the options for the report. 19
Reports administration 1. Click Next. 2. The window contains a list with icons for all the tasks template. Select the type of task you want to create the report for and click Next. 3. These reports are conceived based on the information about the selected type of task, information received from one or more clients. You must select the workstations to be considered when gathering information for the report. The window contains a list of all groups managed by the Enterprise Server. If you want to select only certain workstations from a group, expand the group and select the workstations. Click Next. 4. You must specify the time interval for the report. Type the start date in the From field and the end date in the To field. Specify the hour, as for the date, click corresponding to each field and select the day. The report created by using the Multiple results option will help to keep track of the changes occured in your network during a period of time. The Single result option will take into account only the last results from the workstations. This will give you a view of the current situation. If the report emphasizes some problems within the network those clients will be written in red in the report. BitDefender Enterprise Manager gives you the oportunity to solve those problems through its Resolve issues feature from the Reports section. Click Next. 5. You must specify a name for the report file in the Log Name field and a short description in Description field. Click Finish. BitDefender Server will gather the required information from the clients. The new reports are saved automatically in the default folder from the Report Folders pane. 20
Contact information As a valued provider, SOFTWIN strives to provide its customers an unparallel level of fast and accurate support. The Support Center is continually updated with the newest virus descriptions and answers to common questions to help you find answers to your problems in a timely manner. We at SOFTWIN, are dedicated to saving customer's time and money by providing the most advanced products at the fairest prices. We think that a successful business has a lot to do with good communication and a commitment to excellence in customer support. Sales department: sales@bitdefender.com http://buy.bitdefender.com Technical support: support@bitdefender.com Phone: 0040-21-233 07 80 Product web site: www.bitdefender.com Find a local distributor: www.bitdefender.com/partner_list/ Address: SOFTWIN 5th Fabrica de Glucoza St. PO BOX 52-93 Bucharest, ROMANIA Please send feedback regarding the document to: documentation@bitdefender.com 21