User manual KASPERSKY LAB KASPERSKY ANTI-VIRUS 5.5 FOR PROXY SERVER ADMINISTRATOR GUIDE

[. . . ] KASPERSKY LAB Kaspersky Anti-Virus 5. 5 for Proxy Server ADMINISTRATOR'S GUIDE KASPERSKY ANTI-VIRUS 5. 5 FOR PROXY SERVER Administrator's Guide © Kaspersky Lab http://www. kaspersky. com Revision date: June 2006 Contents CHAPTER 1. Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Licensing policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Distribution kit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Unlicensed operation ­ the mode used by the application in cases when the license key is not installed or an error has occurred while loading the information about the current license. In such situation the application does not perform anti-virus scanning of proxy traffic and applies to all objects the action defined by the LicenseErrorAction parameter. Operation without the anti-virus databases ­ the mode used by the application if its anti-virus databases are not installed or if an error has occurred while loading them. In that mode the application does not perform anti-virus scanning of proxy traffic and applies to all objects the action defined by the BasesErrorAction parameter. · · · Additional settings of Kaspersky Anti-Virus 41 5. 6. Modes of interaction with proxy via ICAP The mode used by Kaspersky Anti-Virus for work with a proxy server is defined by the AnswerMode parameter, which can take the following values: · partial ­ in that mode Kaspersky Anti-Virus sends to proxy parts of the object being scanned with the frequency determined by the MaxSendDelayTime parameter for their further transfer to the user. The last part of an object will only be sent to user when the anti-virus scanning of the object is complete and only if the resulting status does not mean that the deny action should be applied to that object. If the deny action is applied to the object, then the application in that mode does not send a template-based file to the user (see section 5. 3 on p. The mode described above is convenient when large files are downloaded. In that case users begin receiving objects before completion of an anti-virus check because otherwise a user may terminate connection before he/she receives response because of a long waiting period. · complete ­ in that mode Kaspersky Anti-Virus returns an object to proxy server only after it is downloaded and tested completely, and provided that the deny action does not apply to its resulting status. If the deny action is applied to the object according to the results of anti-virus scanning, then the application will return to the user a template-based file instead of the requested object (see section 5. 3 on p. When the complete mode is used, please keep in mind that after a click on an object in browser the user will not see a window with an offer to save the object or cancel scanning until that object is completely downloaded by the proxy server and scanned by Kaspersky Anti-Virus. User can only cancel the download by closing the browser window thus terminating the connection. 5. 7. Application statistics logging Kaspersky Anti-Virus administrators: · provides two types of statistical information for Statistics on the results of anti-virus scanning and processing 42 Kaspersky Anti-Virus for Proxy Server · General statistics of application activity. Statistics of anti-virus processing can be written to a local file or to a network socket. In order to make the application log its statistics to a local file, specify the path to that file as the value for the AVStatisticsFile parameter. The AVStatisticsAddress parameter is intended to specify a network socket. Every line in the resulting statistics file will contain information about a single tested object in the following format: Time Size Verdict Virus_info IP URL Table 2 contains a summary of all these parameters. Table 2. Statistics parameters Alias Time Size Verdict Meaning Date of object scanning. URL of a requested object. Virus_info IP URL If for some reason output of a report on a processed object is impossible, information about such object will not be logged. In addition to the statistics of anti-virus scanning, the application also uses special counters, which return statistical information about its activity. Counter values can be output to a file specified as the CounterStatisticsFile parameter in the application configuration file. The resulting file will contain a log of values returned by counters described in Table 3. Table 3. [. . . ] (i) Kaspersky Lab will provide you with the support services ("Support Services") as defined below for a period of one year following: (a) Payment of its then current support charge, and: (b) Successful completion of the Support Services Subscription Form as provided to you with this Agreement or as available on the Kaspersky Lab website, which will require you to produce the Key Identification File which will have been provided to you by Kaspersky Lab with this Agreement. It shall be at the absolute discretion of Kaspersky Lab whether or not you have satisfied this condition for the provision of Support Services. (ii) Support Services will terminate unless renewed annually by payment of the then-current annual support charge and by successful completion of the Support Services Subscription Form again. (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privacy Policy, which is deposited on ww. kaspersky. com/privacy, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. [. . . ]