background image

Avira GmbH

Avira AntiVir Virus Scan Adapter

43

In addition to the commands, you can specify the following options:

Option

Platform

Notes

-a

all

Program ID of the RFC destination, such as VSCAN_LOCAL.

-g

all

Host name of the SAP gateway.

-x

all

Service name of the SAP gateway, such as sapgw00.

-cfg

all

Complete path specification of the XML configuration file.

-f

all

Path specification of the trace file to be used.

-l

all

Trace level of the trace file:

0 := Errors

1 := Errors and warnings (such as virus infections)

2 := Errors, warnings, and virus scan engine calls

3 := Additional information, all RFC calls, and memory operations.

-c

all

SAP codepage for NON-UNICODE virus scan servers.

-V

all

Path specification of the virus scan adapter to be used. If you do not 
set this option, the environment variable VSA_LIB is used.

-p

all

Profile name (Default: VSA_CONFIG) for the current VSA 
configuration. This option allows differentiation if you are using 
multiple (different) VSA configurations in one XML file.

-T

all

Maximum number of threads that the server can use. Possible 
values: 1 to 999.

-m

all

Minimum number of threads that the server should use.

Note: The mean value of -m and -T is always used for the number of 
threads that are held open.

-L

all

Path specification for an SNC library.

-S

all

The SNC name of this instance.

Note: Setting -L, -S, or -Q activates SNC for the server.

-Q

all

SNC security level Possible values

1:=Authentication

2:=Integrity protection

3:=Encryption

7:=Minimum level

8:=DEFAULT

9:=Maximum level.

-P

all

The SNC name of the SAP instance.

Caution: If you set this name, only requests from SAP instances 
with this SNC identity are accepted.

-I

all

Timeout in seconds for the internal instances operations RELOAD 
and SHUTDOWN.

-n

all

Maximum number of trace lines for the memory trace. Default 
value: 10000

-h

all

Retention period in seconds for the memory trace: Default value: 
86400 seconds.

Summary of Contents for ANTIVIR VIRUS SCAN ADAPTER FOR SAP NETWEAVER

Page 1: ...User Manual Avira AntiVir Virus Scan Adapter for SAP NetWeaver www avira com...

Page 2: ......

Page 3: ...IX 19 4 1 Overview 19 4 2 Configuration Files 19 4 3 Configuration Script configantivir 23 4 4 Configuring Regular Updates 24 Chapter 5 Configuration Windows 29 5 1 Available Entries in SAVAPI INI 29...

Page 4: ...gration with the Enterprise Portal and the Knowledge Management Center 66 Chapter 9 Operation 73 9 1 Reaction to Viruses Unwanted Programs Detected 73 Chapter 10 Service 74 10 1 Support 74 10 2 Contac...

Page 5: ...g you the following information The full name of the program is Avira AntiVir Virus Scan Adapter for SAP Solutions For easier reading we have shortened the name in this manual to AntiVir VSA The term...

Page 6: ...st Viruses Chapter Contents Symbol Meaning 3 shown before a condition that must be met prior to performing an action shown before a step you have to perform shown before the result that directly follo...

Page 7: ...your system by integrating AntiVir VSA into the SAP system with the Virus Scan Interface In this way you can scan files or documents processed by applications for viruses and unwanted programs using a...

Page 8: ...ion features includes Provision of AntiVir Versions by Internet download License file by email Complete installation instructions digital PDF manuals available for Internet download Four weeks install...

Page 9: ...Enterprise Server 9 Debian GNU Linux 4 stable Ubuntu Server Edition 8 SOLARIS Hardware UltraSparc IIi 650 MHz 768 MB RAM 512 MB on hard disk Operating System Sun Solaris x86 8 9 10 Windows Hardware P...

Page 10: ...10 Avira AntiVir Virus Scan Adapter Avira GmbH...

Page 11: ...our website http www avira com to your local computer The file name is antivir vsa prof version tar gz Save the file in a tmp folder on the computer on which you want to run AntiVir VSA Getting the In...

Page 12: ...AntiVir configuration files are inherited Optionally it installs AntiVir Update Daemon Optionally it configures an automatic start for AntiVir Updater on system start up Preparing Installation Login a...

Page 13: ...copying vdf antivir2 vdf to usr lib AntiVir done copying vdf antivir3 vdf to usr lib AntiVir done Enter the path to your key file hbedv key copying hbedv key to usr lib AntiVir hbedv key done copying...

Page 14: ...tivirvsa so 1 1 0 to usr lib AntiVir done linking libantivirvsa so to libantivirvsa so 1 1 0 done installation of VSA library complete checking for existing etc avsapvsa conf not found copying etc avs...

Page 15: ...a so version The administrator has to integrate the SAPCAR tool in etc avsapvsa conf see the given example without this entry AntiVir does not scan SAPCAR archives SapCarProgram usr bin SAPCAR 3 2 Ant...

Page 16: ...r VSA Requirements Please check the following requirements in order for the software to perform efficiently 3 Make sure the System Requirements are met 3 Log in as administrator or as user with admini...

Page 17: ...the License agreement Confirm with Yes The window for selecting the Destination folder appears Confirm with Next if the path is correct OR Click Browse and select the path then click Next You must agr...

Page 18: ...lation the following actions have been performed in the background Copying of the Virus Scan Adapter VSA file ANTIVIRVSA DLL to the installation folder Setting of the environment variable VSA_LIB in t...

Page 19: ...ng parameters and logging rules when viruses or unwanted programs are detected Configuration script You can use the script configantivir located in usr lib AntiVir to edit the settings in avupdater co...

Page 20: ...nned ArchiveMaxSize 1GB ArchiveMax Recursion Maximum archive recursion If the setting is 0 recursive nested archives are unpacked whatever their recursion depth If the set value is 0 all archives that...

Page 21: ...path to the binary of this tool There is no default path SapCarProgram usr local bin SAPCAR Parameters in the Configuration File avupdater conf This section provides a short description of the settin...

Page 22: ...pdater replaces installed files with newer versions when updates are available Even if the program is testing the new files you might want to keep backups of earlier versions When activating this opti...

Page 23: ...mary of the configuration settings is displayed For example If you do not agree with all displayed options Type N to restart the configuration script and correct the values If all settings correspond...

Page 24: ...UNIX knowledge You have to carry out the configuration yourself but it gives you more flexibility Configuring the Internet Connection for Updates 3 Check that your Internet connection is functioning...

Page 25: ...le to update every two hours update daily Time settings for updates for daily updates You can set the time yourself let the daemon choose a random time The script chooses the time once and keeps it as...

Page 26: ...problems AntiVir can be configured to check for updates every 2 hours 2 or once a day d You can also choose to disable the Internet Update Daemon n Note Updates can also be done manually from the comm...

Page 27: ...regular system processes For more details refer to your UNIX documentation Using cron for updates you have more configuration possibilities than with the Internet Updater Example Enter the following c...

Page 28: ...validity gpg sign key build vira com Change to the bin sub directory of the AntiVir installation directory example cd tmp antivir vsa prof version bin Here you can find the files antivir and antivir a...

Page 29: ...cessary restart the program that uses SAVAPI DLL 5 1 Available Entries in SAVAPI INI You can change the following parameters of SAVAPI INI Port Number This value indicates the number of the TCP IP por...

Page 30: ...mum size of the logfile in kB When this value is exceeded the oldest entries are deleted automatically If the value is 0 there is no restriction for the logfile size Example LogFileSize 1000 Updates S...

Page 31: ...r should use to access the proxy server These values are applied only if ProxyEnabled is active Example ProxyUserName fmeier ProxyPassword password Email Notifications If SmtpMailEnabled is active 1 S...

Page 32: ...70 Port Number This is the number of the TCP IP port used for communication between Savapi Service and SAVAPI DLL If this port is already assigned you can change it Do not forget to change this value...

Page 33: ...scanner group for each product class of virus scanners that are connected to the system using the virus scan server If you include your own virus scanners with the BAdI VSCAN_INSTANCE create a scanner...

Page 34: ...mbH In the Implementation Guide choose IMG SAP Web Application Server System Administration Virus Scan Interface Choose the Execute option next to Define Scanner Groups The screen Change View Scanner...

Page 35: ...s step Field Notes Scanner Group Freely definable name of the scanner group Business Add In If this indicator is set the program transfers the request for a virus scan instance for this scanner group...

Page 36: ...g the virus scan server on an application server using the Computing Center Management System choose the gateway of that application server In the Implementation Guide choose IMG SAP Web Application S...

Page 37: ...r field enter the name of the virus scan server The name must be the same as the name of the RFC destination that contains the technical connection to the virus scan server Under Virus Scan Server Def...

Page 38: ...ecessary starts it on the specified application server INAC Inactive on an Application Server The CCMS monitors the virus scan server and if necessary stops it on the specified application server NONE...

Page 39: ...on from outside the system can be performed you can leave the field empty This interface is available to certified vendors of virus scanners n Interval in hours Specifies the number of hours after whi...

Page 40: ...the monitor Virus Scan Servers in the monitor set SAP CCMS Monitors for Optional Components for more details see SAP Website The following differences exist in this case Application Server Starters I...

Page 41: ...NIX Installing a Virus Scan Server as a Self Starter The self starter is available to you as an alternative if you cannot use the application server starter for example in the following cases The SAP...

Page 42: ...mandatory for this The options received using the command line are stored as the server configuration in this case If you do not specify any command line options the predefined values are set Use this...

Page 43: ...NFIG for the current VSA configuration This option allows differentiation if you are using multiple different VSA configurations in one XML file T all Maximum number of threads that the server can use...

Page 44: ...emon directly on operating system start up Example Starting a daemon vscan_rfc cfg vsa vscan_rfc xml daemon You can monitor the daemon with operating system resources CRONTAB INITTAB Configuring the S...

Page 45: ...then performed as part of the enclosing virus scan profile A virus scan is performed under the name of a virus scan profile The system administrator can use the profile to activate or deactivate the...

Page 46: ...46 Avira AntiVir Virus Scan Adapter Avira GmbH The screen Change View Virus Scan Profile Overview appears Choose New Entries The screen New Entries Overview of Added Entries appears...

Page 47: ...the application program works without a virus scan You can activate the virus scan for each application by setting this indicator Default Profile Indicator that this virus scan profile is the default...

Page 48: ...ionship All steps successful The virus scan must have performed all steps without errors At least one step successful It is sufficient if one step of the virus scan was successfully performed Specifie...

Page 49: ...m this group or a BAdI implementation for the virus scan If you choose Profile the program processes the specified virus scan profile instead of this step You can define any conditions by combining th...

Page 50: ...n perform a virus scan with this scanner group the program calls your implementation of the BAdI as a filter value for the group name and you can transfer an instance of your scanner implementation Cr...

Page 51: ...ings or additional information to a file or writes them on the server s memory You can use the VSCANTRACE analysis tool to query and output this memory content to analyze all registered virus scan ser...

Page 52: ...mation You have the following options in the overview Refresh Refreshes the list Delete Deletes the trace output Export Exports the list to a local file Status Displays the current status of the virus...

Page 53: ...se this procedure to check that your configured virus scan server is functioning correctly Start transaction VSCANTEST Specify the object to be checked using either the test data provided or your own...

Page 54: ...rus product that you specified scans the data for viruses and displays a result If you choose Check and Clean the product also attempts to clean the data if a virus infection is diagnosed 6 4 Commente...

Page 55: ...and accesses the external anti virus product using a virus scan adapter Virus scan adapter or virus scan server for an integrated installation Java and ABAP Both purely Java installations provide the...

Page 56: ...GmbH Virus Scan Adapter or Virus Scan Server for an Integrated Installation Java and ABAP Follow the steps explained in the next Chapter Define a Scanner Group Page 57 Define a Virus Scan Provider Pa...

Page 57: ...al Administrator The steps of the configuration are Define a Scanner Group Page 57 Define a Virus Scan Provider Page 60 Define a Virus Scan Profile Page 63 8 1 1 Define a Scanner Group A scanner group...

Page 58: ...mbH On the Groups tab create a scanner group by pressing the New button Specify the name of the new group AVIRA in the dialog box and confirm your entry with OK The group names are case sensitive You...

Page 59: ...the Settings tab activate the Default option to set the group as default Enter a description of the group in the Description field To save your entries press Set You do not have to make any configurat...

Page 60: ...n the Provider tab page select the Virus Scan Adapter node and press the New button to create a new virus scan provider Specify the name of the new provider AVIRA in the dialog box and confirm your en...

Page 61: ...nt adapter Group The drop down list shows the available groups to which you can assign the current adapter Init Interval The time interval in hours for the NetWeaver to end VSA and restart it Values 0...

Page 62: ...et You do not have to make any configuration on the Parameters and Trace tab at this point To activate the virus scan provider select it and choose Activate It will be marked as active You have define...

Page 63: ...adjust the values described in the table below Data for a Self Configured Profile Field Comment Default When activated the profile will be automatically selected Name Name of the new profile Descripti...

Page 64: ...rovider Finally you can check the configuration see Check the Configuration Page 64 8 1 4 Check the Configuration You can use the test applet provided by SAP NetWeaver to check the functionality of th...

Page 65: ...et Select the EICAR Anti Virus Test File under Object to Be Checked Select the default profile under Scanner Selection Leave selected the option Check Only under General Settings Press the button Exec...

Page 66: ...nnect to the SAP NetWeaver Portal as administrator Go to the menu System Administrator System Configuration On the left panel select under Detailed Navigation the item Knowledge Management Content Man...

Page 67: ...ick on the link to Virus Scanner Groups Press New to create a new Scan Group In the field Group Name write AVIRA and in the List of Providers write VSA_AVIRA The values are case sensitive You have to...

Page 68: ...68 Avira AntiVir Virus Scan Adapter Avira GmbH Press OK Select Virus Scanner Profiles in the Topic Area to return to the profiles list...

Page 69: ...s OK To create a new profile click New In the field Profile Name write AVIRA Select the checkboxes for the options Is Active and Is Default The option Is Reference must remain inactive For the option...

Page 70: ...Type in the Package Name com sapportals wcm service antivirus Press OK to save the profile To activate the Virus Scan Service return to the Topic Area select Global Services and click Edit Make the n...

Page 71: ...files cannot be loaded in the Knowledge Management for safety reasons It depends on the File Count and Path for Temporary Files For example if you set the maximum size to 1000 MB and the File Count is...

Page 72: ...72 Avira AntiVir Virus Scan Adapter Avira GmbH...

Page 73: ...system Perform targeted scanning on the data storage supports you used Inform your team superiors or partners Submit Infected Files to Avira GmbH Please send us the viruses unwanted programs and suspi...

Page 74: ...nual fee for this service which includes eliminating viruses and hoax support is 20 of the list price of your purchased AntiVir program Another optional service is the AntiVir Premium Support which in...

Page 75: ...75 Avira AntiVir Virus Scan Adapter Avira GmbH...

Page 76: ...etects Dialers Engine The scanning module of AntiVir software Heuristics The systematic process of solving a problem using general and specific rules drawn from previous experience However solution is...

Page 77: ...mmetric Multi Processing Computer architecture with multiple similar CPUs working in parallel SMTP Simple Mail Transfer Protocol protocol for email communication on the Internet syslog daemon A daemon...

Page 78: ...ng and during installation If there are other users connected to your computer you should define the following rules for protection against viruses Use a test computer to check downloads of new softwa...

Page 79: ...m Avira GmbH Errors and technical subject to change Issued Q4 2008 AntiVir is a registered trademark of the Avira GmbH All other brand and product names are trademarks or registered trademarks of thei...

Reviews: