Webroot Enterprise System Administrator Guide Webroot Software, Inc. PO Box 19816 Boulder, CO 80308 www.webroot.com Webroot Enterprise System Administrator Guide © 2004­2005 Webroot Software, Inc. All rights reserved. Webroot, Spy Sweeper, and the Webroot and Spy Sweeper icons are registered trademarks or trademarks of Webroot Software, Inc. All other trademarks are properties of their respective owners. Contents 1: Planning Your Installation 1 About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Understanding Webroot Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Planning for Webroot Enterprise Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 How Webroot Enterprise Updates Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Key Steps to Installing and Setting Up Webroot Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2: Installing Webroot Enterprise 9 Setting up a SQL Server Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Installing Webroot Enterprise Server on Your Company Server. . . . . . . . . . . . . . . . . . . . . . 11 Setting Up Client Workstations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Setting Up Client Workstations from the Admin Console . . . . . . . . . . . . . . . . . . . . . . . . 20 Alternate Client Workstation Setup Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Client Installation Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Example Logon Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Uninstalling Spy Sweeper from Client Workstations. . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Installing and Assigning Distributor Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Installing Distributor Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Assigning Distributor Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Changing the Distributor Server Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Understanding the Admin Console Window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 3: Setting Up the Webroot Enterprise Server 29 Accessing the Admin Console and Viewing News. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Editing the Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Setting Up Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setting Up Notification E-mail Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setting Up Notification Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Setting Up Error Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Managing Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Managing Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Creating and Exporting Client Reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Polling Client Workstations Now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Deleting Client Workstations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Filtering Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 4: Managing Spy Sweeper 39 Managing Spyware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Setting Up Automatic Spyware Handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Setting Up Continuous Monitoring: Active Shields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Configuring Sweeps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Webroot Enterprise System Administrator Guide i Configuring Sweep Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Setting Up Sweep Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Running Sweeps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Running a Sweep Now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Scheduling Sweeps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing and Stopping Sweeps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Updating Spy Sweeper . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Installing Updates Manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Installing Updates Automatically . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Setting Up Update Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Setting up Updating for Mobile End Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing a Summary of Detected Spyware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Unlocking Functions at a Client Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 45 46 46 47 48 48 49 50 50 51 52 52 5: Monitoring Status Reviewing the Webroot Enterprise Dashboard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the Sweep Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the Definition Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the Infection Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the Top Spyware Threats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the Server Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Update History and Installed Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Update History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Applications Installed by Workstation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Client Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Generating Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 53 54 55 55 56 57 57 57 57 58 58 59 A: Webroot Enterprise Port Requirements B: Migrating an Existing Installation from DBISAM to SQL Server Index 61 63 65 ii Contents 1: Planning Your Installation Webroot EnterpriseTM lets you install and manage Webroot® products throughout your company. You can set up groups with different settings, install updates automatically or manually, view the status of all products, and much more. Webroot Enterprise gives you companywide management and control to ensure that your company's computer resources are protected from a variety of threats. About This Guide This Guide tells you how to set up and use Webroot Enterprise to install and manage Webroot products throughout the company. It assumes that you have detailed knowledge of the Windows operating systems in use in your company and your network. The information in this Guide is also available from the help button. Conventions This Guide uses several typographical conventions to help explain how to use Webroot Enterprise. Convention Bold Tree navigation Definition Words in bold show items to select or click, such as menu items or buttons. The Guide uses parent node > child node notation for tree navigation. For example, Admin Tasks > Settings. This means to expand to the Admin Tasks node in the tree and select the Settings node. This symbol means the following information is a note that gives you important information that may affect how you use Webroot Enterprise. This symbol means the following information is a caution that warns you about actions that may affect your ability to use some programs on your computer. This symbol means that the following information is a procedure. Note Caution Webroot Enterprise System Administrator Guide 1 Technical Support Technical support is available by phone and e-mail: · · Call 800-870-8102 Send your questions to: esupport@webroot.com.We will respond within one business day. System Requirements Following are the system requirements for Webroot Enterprise. Table 1: Company server system requirements Operating system CPU Memory Windows NT 4.0 SP5 or higher, Windows 2000, Windows XP (see note below), Windows Server 2003 200 MHz minimum; 350 MHz or better recommended 512 MB recommended 30 MB free space for operation. Additional free space needed for database growth. We recommend 1 GB of free space. Disk space Table 2: Distributor server system requirements Operating system CPU Memory Windows NT 4.0 SP5 or higher, Windows 2000 SP4 or higher, Windows XP (see note below), Windows Server 2003 200 MHz minimum; 350 MHz or better recommended 512 MB recommended 60 MB free space for operation. Disk space Table 3: Client workstation system requirements Operating system CPU Memory Windows 98, 98SE, ME, NT 4.0, 2000, or XP 150 MHz or better recommended 32 MB RAM minimum; 128 MB RAM or better recommended 15 MB free space Version 6.0 with Service Pack 1 required for Windows 98, 98SE, and ME Disk space Internet Explorer Note Due to modifications that Microsoft made in Service Pack 2 for Windows XP that limit simultaneous TCP/IP connections, we do not recommend using the Poll Now or Sweep Now functions for more than five client workstations at a time. If you do, you may see temporary system lag and an Event ID error 4226 entry in your Windows system log. If you are managing large numbers of clients with frequent polling intervals from a server with Windows XP and SP2, you may also see the 4226 error when more than five clients poll in simultaneously. 2 1: Planning Your Installation Understanding Webroot Enterprise Webroot Enterprise offers a total enterprise solution for your companywide spyware management using a client/server architecture. Figure 1 shows a base configuration and how Webroot Enterprise works. Webroot Update Server where application and definition updates are available. Internet LAN Your company server, with Webroot Enterprise installed, downloads updates from the Webroot Update Server over the Internet. Workstations on your LAN, with the Spy Sweeper client installed, download updates from your company server. Figure 1: Webroot Enterprise base architecture The Webroot Enterprise product includes three types of components that you install on your computers: · On a company server, you install Webroot Enterprise ServerTM, which is described in Table 4. ­ If you want to use more than one company server, consider using additional distributor servers, as described in "Planning for Webroot Enterprise Deployment" on page 5, or contact technical support for assistance. · · On each end user's computer, you install the client workstation components, which are described in ...