background image

����������

Introduction

The  process  of  updating  virus  pattern  files  on  workstations  protected  by  Deep  Freeze  Enterprise 

involves three fundamental steps:

1.  Rebooting the workstations into a Thawed state so the updates are kept upon restart
2.  Updating the virus pattern file
3.  Shutting down or restarting the workstation into a Frozen state

This white paper provides technical information on how to approach these steps with Trend Micro 

OfficeScan.

Deep  Freeze  is  not  marketed  as  an  antivirus  product.  However,  Deep  Freeze  will 

protect workstations from any virus. Just restart the Frozen workstation and the virus 

is gone. Many viruses require a fundamental change to be made to the core files and 

only become active on restart. With Deep Freeze installed and activated, these viruses 

will be deleted upon restart and therefore never become active.
Ensure the BIOS is set to boot directly to the C: drive and that the BIOS is protected 

with a password; failure to do so can result in boot sector viruses being transferred to 

the hard disk drives via infected floppy disks.

Setting the Workstations to a Thawed state

In order to make any permanent changes, the workstations protected by Deep Freeze have to be set 

into a 

Thawed

 state. Those permanent changes include antivirus updates; therefore, the workstations 

must be rebooted into a 

Thawed

 state before applying these updates.

There are basically three ways to remotely set workstations into a 

Thawed

 state: 

• By manually using the Deep Freeze Enterprise Console
• By setting up an Scheduled Maintenance Period 
• By using the Command Line Control

Содержание DEEP FREEZE ENTERPRISE - TREND MICRO OFFICESCAN...

Страница 1: ......

Страница 2: ...y become active on restart With Deep Freeze installed and activated these viruses will be deleted upon restart and therefore never become active Ensure the BIOS is set to boot directly to the C drive...

Страница 3: ...ess to the functions of the Console To boot a workstation into the Thawed state select the workstation and click the Thaw Workstation icon on the toolbar Alternatively you can right click and select t...

Страница 4: ...ntenance Period using the Enterprise Console Assuming Deep Freeze is already deployed throughout your network the following instructions elaborate on how to create update the Maintenance Period with t...

Страница 5: ...ontrol DFC The Deep Freeze Command Line Control DFC o ers network administrators increased exibility in managing Deep Freeze workstations DFC works in combination with third party enterprise managemen...

Страница 6: ...dating through a command line ECHO OFF SERVER SHARE FOLDER DFC EXE get isfrozen IF ERRORLEVEL 1 GOTO FROZEN IF ERRORLEVEL 0 GOTO THAWED ECHO Errors where encountered running the command line control o...

Страница 7: ...es the only down side of this method is that with time the patterns will keep growing bigger Therefore it is recommended to schedule a Thawed Maintenance Period at least twice a year to make the updat...

Страница 8: ...Deployment Under the Deployment Schedule section check Enable scheduled deployment 4 In our example we set Deep Freeze Enterprise to have a maintenance window Monday through Friday from 18 00 to 20 00...

Страница 9: ...heduled Maintenance Period 2 Check the Run Bat radio button to allow the workstations to run a batch le automatically during the Maintenance period 3 Click the Advanced Maintenance tab and enter the f...

Страница 10: ...EL 1 GOTO FROZEN IF ERRORLEVEL 0 GOTO THAWED ECHO Errors where encountered running the command line control on this workstation FROZEN SERVER SHARE FOLDER DFC EXE password bootthawed GOTO END THAWED R...

Страница 11: ...e to accommodate the newly created partitions The complete workstation image should be evaluated to determine what folders need to be recreated as drives on the workstation to allow the applications t...

Страница 12: ...virus software on the workstations in a manner that allows automatic updates to proceed correctly Below are before and after screen shots of the installation of Trend Micro O ceScan using the default...

Страница 13: ...C drive The rst step in creating the additional partitions required is to create an extended partition that stores the additional partitions using the Disk Management feature of the Computer Manageme...

Страница 14: ...o not want to limit the number of partitions that can be created Click Next The next screen prompts for the size of partition to be created It is recommended that you con gure all the disk space remai...

Страница 15: ...This can be done by right clicking on the free space now present on the drive as shown below and selecting Create Logical Drive A wizard appears to set the size and folder name of the new partition T...

Страница 16: ...ath of the new partition The option Mount this volume at an empty folder that supports drive paths should be selected The path the drive will be mounted to should be entered in the text eld In this ca...

Страница 17: ...resenting the folder as a hard disk drive In the example below the Trend Micro folder is displayed as a small hard disk drive Now you are ready to deploy the O ceScan clients as per the manufacturer s...

Отзывы: