F-SECURE ANTI-VIRUS LINUX SERVER SECURITY User Manual

96
Q. I forgot to use Software Installation Mode and my system is not
working properly. What can I do?
A. Create a new baseline. Execute the following commands:
/opt/f-secure/fsav/bin/fslistfiles | fsic --add -
fsic --baseline
Q. Can I update the Linux kernel when I use Integrity Checking?
A. Use the Software Installation Mode. After you have updated the
kernel, disable the Software Installation Mode to restore the normal
protection level. For more information, see “Software Installation
Mode”, 62.
Q. There are too many modified files to update with the user
interface.
A. Create a new baseline. Execute the following commands:
/opt/f-secure/fsav/bin/fslistfiles | fsic --add -
fsic --baseline
Q. The Integrity Checking page in the user interface does not
display all entries. How can I fix this?
A. If you have many (over 10000) files in the baseline, you may have to
adjust the memory settings of the Java Virtual Machine view all
entries in the baseline.
a. Edit /opt/f-secure/fsav/tomcat/bin/catalina.sh file:
Replace
JAVA_OPTS=-Djava.library.path=/opt/f-secure/fsav/
tomcat/shaj
with
JAVA_OPTS="-Djava.library.path=/opt/f-secure/fsav/
tomcat/shaj -Xmx256M"
b. Restart the product to take new settings into use:
/etc/init.d/fsma restart

F-SECURE ANTI-VIRUS LINUX SERVER SECURITY Specifications

General

Product Name	F-Secure Anti-Virus Linux Server Security
Category	Software
Real-time Protection	Yes
Management	Centralized Management
Type	Antivirus
Platform	Linux
Operating System Compatibility	Linux
Protection Type	Malware Protection
Protection Features	Real-Time Scanning
Update Method	Automatic Updates
Licensing	Subscription-based
Supported Distributions	Red Hat Enterprise Linux, SUSE Linux Enterprise Server, Debian, Ubuntu

Summary

Introduction

How the Product Works

Key Features and Benefits

Details the superior protection, heuristic scanning, riskware detection, and transparent end-user experience.

Deployment

Deployment on Multiple Stand-alone Linux Workstations

Deployment on Multiple Centrally Managed Linux Workstations

Installation

System Requirements

Lists the operating systems, kernel, glibc, processor, memory, and disk space needed for installation.

Installation Instructions

Provides instructions for both stand-alone and centrally managed installations.

Upgrading from a Previous Product Version

Details the process and considerations for upgrading from earlier versions of F-Secure Anti-Virus.

Upgrading the Evaluation Version

Unattended Installation

Creating a Backup

Getting Started

Accessing the Web User Interface

Basics of Using F-Secure Policy Manager

Testing the Antivirus Protection

Describes how to test the antivirus protection using the EICAR test file.

User Interface - Advanced Mode

Alerts

Virus Protection

Covers real-time, scheduled, and manual scanning, including actions on infection.

Firewall Protection

Explains firewall components, security profiles, rules, and network services.

General Settings

Command Line Tools

Firewall Protection

Explains the 'fsfwc' command line tool for managing firewall security levels.

Integrity Checking

Covers command line tools like 'fsic' and 'fsims' for system integrity and baseline management.

Appendix E: Troubleshooting

User Interface

Addresses common issues related to logging in, the F-icon, and enabling debug logs.

F-Secure Policy Manager

Integrity Checking

Resolves issues with symlinks and large numbers of modified files for Integrity Checking.

Firewall

Troubleshoots access to samba shares, network browsing, and NFS server access.

Virus Protection

Details on enabling debug logs for real-time scanning and using HTTP proxy for updates.

Generic Issues

Appendix F: Man Pages

fsav

Detailed manual page for the fsav command line interface.

fsavd

Manual page describing the F-Secure Anti-Virus daemon and its options.

dbupdate

Manual page for the dbupdate script used for virus definition database updates.

fsfwc

Manual page for the fsfwc command line interface for firewall daemon.

fsic

Manual page for the fsic command line interface for integrity checker.

Appendix G: Config Files

fsaua_config

fssp.conf