home *** CD-ROM | disk | FTP | other *** search
- Updating Virus Patterns
- LANProtect comes with unlimited virus pattern updates that can be
- downloaded from either Intel■s electronic bulletin board system (BBS)
- or CompuServe. This virus pattern library is updated approximately
- every month so you can keep LANProtect updated. If you have
- LANProtect 1.0 and have not yet upgraded to LANProtect 1.5, be
- aware that the virus pattern files for the two versions are not
- compatible. You must upgrade to 1.5 to continue updating the pattern
- files.
- To update the virus patterns for LANProtect on your network, you
- must copy the virus patterns that you downloaded to the LANProtect
- directory. You do not need to unload LANProtect or down the server
- to update the files. If you have more than one file server on your
- network, you can choose whether or not to automatically update the
- other servers with the pattern sharing feature. When you update the
- first file server, it broadcasts that it has received a new virus pattern
- file. When other servers receive notification of the new pattern file,
- they log in to the first server and update themselves.
- To download pattern files from Intel■s BBS:
- 1. Call the Intel electronic bulletin board system (BBS) on your modem
- at (503)-645-6257 (U.S.) or 44-793-432-955 (Europe).
- 2. Follow the on-screen prompts (such as name, company information,
- and so on).
- 3. Select File Download Area.
- 4. Select Express Lane Software Updates | LANProtect Virus Pattern
- Updates.
- 5. Download the virus pattern update.
- 6. Copy the virus pattern to the directory where you installed
- LANProtect.
- To download pattern files from CompuServe:
- 1. Connect to CompuServe and enter Go Intel.
- 2. Select Libraries | Download a File.
- 3. Select the name of the file you want to download. The filename is
- DOWNLOAD FILE UPDATE.EXE.
- The file is downloaded.Pattern Library Sharing
- Pattern library sharing is an option that updates all the servers on the
- network with the new pattern file. With this option LANProtect can
- update all servers with a new pattern at the time you download the
- pattern from the BBS, or you can prevent the automatic updating
- procedure until you are ready to update other servers on the network.
- A careful way to update the network is to turn pattern sharing off until
- you have made sure that the pattern update is working well with the
- server you downloaded it on. When you are ready to share the pattern
- with other servers, turn the pattern sharing on to update the other
- servers. The other servers in the domain will be updated in
- approximately ten minutes.
- To update all servers with the current virus pattern file:
- 1. Select Virus Utilities | Pattern Library Sharing.
- A list box appears on the screen with fields for entering the
- domain and turning the pattern sharing on and off.
-
- The domain is the group of servers that you manage. You add the
- servers to the domain by giving them the same domain name.
- 2. Type in the domain for the pattern sharing and press <Enter>.
- The cursor moves to the next field. You have the option to share
- pattern updates with other servers in the domain. If you do not
- share (No), the new pattern update will not be copied to other
- servers. If you do share (Yes), the new pattern update will be
- copied to all other LANProtect servers in the domain.
- 3. Begin typing Yes or No to update other file servers within the
- domain.
- The following dialog box appears.
-
- 4. Highlight Yes or No and press <Enter>.
- Your selection is saved as the default for updating the pattern file.
- The next time you update the pattern file, LANProtect will take the
- action you selected.
- Note: If you want to delete the latest pattern file after it has been copied by
- servers on the network, you must disable pattern sharing on each
- server in the domain, flag the latest virus pattern RW, and delete it
- from each server. Then unload LANProtect and reload it again.
- Exception File List Exception File List
- LANProtect does not allow infected files to leave the file server.
- However, there may be times when you want to access the infected file
- for examination without disabling maximum security. You can do this
- by placing the infected file on a list of exception files. If you do place
- a file on the exception list, please contact Intel Customer Support. If
- you are receiving false alarms from a particular file, Intel will try to
- come up with a solution for the problem.
-
- When you place a file in the Exception File list, you set up the amount
- of time (up to 30 days) that the file will not be scanned by the Real
- Time File scan. Prescheduled and Manual Server scans do not have
- access to the Exception File list and all files are scanned according to
- the configuration of the scan.
- To add a file name to the Exception File list:
- 1. Select Virus Utilities | Exception Lists | Exception File.
- The Exception File list box appears.
-
- 2. Press <Ins>.
- A dialog box appears so you can enter the complete path for the
- file you want to exempt from the Real Time File scan.
-
- 3. Type in the full path of the file you are adding and press <Enter>.
- The file will be scanned for a virus. If no virus is found, an error
- message appears and the operation is aborted. Each entry will have
- a separate count down timer from other entries. The default time
- assigned to a newly created entry is one hour.
- To change the Exception File list configuration:
- 1. Highlight the file name of a file already on the list you want to edit
- and press <Enter>.
- The ■Current Exception File Information■ dialog box appears.
-
- ■Which Connection Can Access This File■ allows you to specify
- which Novell NetWare network connection number(s) can access
- the file.
- 2. Type the connection number.
- A 0 (zero) will allow all connections to have access to this file,
- any other number will represent the connection number that will
- have access to the file.
- Note: To determine a user■s connection number, type USERLIST at a DOS
- workstation or look at the connection information on the Monitor.NLM
- screen on the server.
- The next three fields specify the period of time this file name will
- remain in the exception list.
- 3. Type in the number of days you want this file in the exception list
- and press <Enter>.
- The maximum number is 29.
- 4. Type in the number of hours you want this file on the exception list
- and press <Enter>.
- The maximum number is 23.
- 5. Type in the number of minutes you want this file on the exception
- list and press <Enter>.
- The maximum number is 59.
- The maximum time limit is 29 days, 23 hours, and 59 minutes, or
- 30 days. Once the time expires for an entry in the Exception File
- List, the entry is automatically removed from the list.
- 6. Press <Esc> to save the information and return to the Exception
- Lists menu.
- To delete an entry in the Exception File List:
- 1. Highlight the entry you want to move.
- 2. Press <Del>.
- A confirmation box appears.
-
- 3. Highlight Yes or No and press <Enter>.
- If you select No, the entry is not deleted and you return to the
- Exception File List. If you select Yes, the entry is deleted and you
- return to the Exception File List.Exception Pattern List
- The Exception Pattern list is similar to the Exception File list except
- that it lists virus signature patterns. Occasionally a virus pattern may
- be generating false alarms. To stop the false alarms until the problem
- can be fixed, the supervisor can place the virus pattern generating the
- false alarms on the Exception Pattern List.
- To place a virus pattern on the Exception Pattern List:
- 1. Select Virus Utilities | Exception Lists | Exception Pattern.
- The Exception Pattern list box appears.
-
- 2. Press <Ins>.
- A dialog box appears so you can enter the name of the virus
- pattern you want exempted from the scans. If you have forgotten
- the name or spelling of the pattern (the name will appear when
- you get the false alarm), consult the Detectable Virus Patterns list.
- 3. Enter the virus pattern name and press <Enter>.
- The virus pattern appears on the Exception Pattern list.
- To remove a virus pattern from the
- Exception Pattern List:
- 1. Select Virus Utilities | Exception Lists | Exception Pattern.
- 2. Highlight the virus pattern and press <Del>.
- A confirmation box appears.
- 3. Select Yes to confirm that you want to remove the virus patterns
- from the list.
- The virus patterns are removed from the Exception Pattern list.Detectable Virus Patterns
- The Detectable Virus Patterns list displays the viruses and virus strains
- that can be detected by LANProtect in alphabetical order. When you
- update the virus pattern file, the number of detectable viruses changes
- to reflect the update.
- To display the list of detectable virus patterns:
- 1. Select Virus Utilities | Detectable Virus Patterns.
- The list of viruses appears. The asterisk to the right of the virus
- name depicts a boot sector virus. If you place a boot sector virus
- on the Exception Pattern list, you must include the asterisk. The
- list also shows which virus patterns infect COM and EXE files.
-
- 2. Scroll through the list by pressing <PgDn>, <PgUp>, <Home>,
- <End>, or <Enter>.
- 3. Press <Esc> to exit.
- If you know of an existing virus that is not listed in this report,
- contact Intel immediately.