Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version 1.7.1 Copyright (C) 2012 McAfee, Inc. All Rights Reserved __________________________________________________________ Release date: June 15, 2012 This release was developed and tested on: - VirusScan Enterprise for Linux: 1.7.1 - DAT Version: 6732.0000 - Engine Version: 5400.1158 __________________________________________________________ CONTENTS - ABOUT THIS DOCUMENT - ABOUT THIS RELEASE - DISCLAIMER - FILES INCLUDED WITH THIS RELEASE - SYSTEM REQUIREMENTS - INSTALLATION INSTRUCTIONS - PREREQUISITES - STANDARD INSTALLATION - INTEGRATING USING EPOLICY ORCHESTRATOR 4.5/4.6 - RUNNING VIRUSSCAN ENTERPRISE FOR LINUX - UPGRADING FROM PREVIOUS VERSIONS - UNINSTALLATION - KNOWN ISSUES __________________________________________________________ ABOUT THIS DOCUMENT Thank you for choosing this McAfee(R) VirusScan(R) Enterprise for Linux. This document contains important information about the current release. We strongly recommend that you read the entire document. IMPORTANT: We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. __________________________________________________________ ABOUT THIS RELEASE This release includes: - Upgraded Apache (2.4.2) - Command-line option to Enable/Disable Scan-on-Read feature of on-access scan - Runtime kernel module support extended to Amazon EC2 kernels __________________________________________________________ DISCLAIMER - Before installing any third-party product(s), make sure that exclusions are set, as specified in the "McAfee VirusScan Enterprise for Linux 1.7 - Best Practices Guide." (See McAfee KnowledgeBase article - PD23607) __________________________________________________________ FILES INCLUDED WITH THIS RELEASE This release consists of a package "McAfeeVSEForLinux-1.7.1..ZIP", which contains the following files: McAfeeVSEForLinux-1.7.1.-release-full.noarch.tar.gz = VirusScan Enterprise for Linux software package. README.TXT = This text file. __________________________________________________________ SYSTEM REQUIREMENTS Supported Operating Systems (32-bit/64-bit): - SuSE Linux Enterprise Server/Desktop 10.x - SuSE Linux Enterprise Server/Desktop 11.x - Red Hat Enterprise 5.x Advanced Platform, Desktop - Red Hat Enterprise 6.x Server, Workstation, Client - Novell Open Enterprise Server 2.x - CentOS 5.x - CentOS 6.x - Ubuntu 10.04, 10.10, and 11.04 (Desktop/Server edition) NOTE: To view complete list of supported distributions see "KB72999" in the McAfee Support online KnowledgeBase: https://mysupport.mcafee.com. Supported Processors: - Intel x86 architecture-based processor - Intel x86_64 architecture-based processor that supports Intel Extended Memory 64 Technology (Intel EM64T) - AMD x86_64 architecture-based processor with AMD 64-bit technology Memory: - Minimum: 2GB RAM - Recommended: 4GB RAM Free Disk space: - Minimum: 1GB Supported Browsers: - Microsoft Internet Explorer 5.5, 6.0, 7.0, 8.0, and 9.0 - Konqueror 3.5.1, 4.1.3, 4.2.x, and 4.3.x - Mozilla 0.9.9, 1.0.1, 1.2.1, 1.4, 1.6, 1.7.8, 1.8.x, and 1.9.x - Firefox 1.0, 1.5, 2.0, 3.0, 3.5, 3.6, 4.0, 5.0, 6.0, 7.0, 8.0, 9.0, 10.0 ,11.0, 12.0, and 13.0 - Safari 5.0.x and 5.1.x - Google Chrome 19.0.x and 20.0.x Supported McAfee Management software: - McAfee ePolicy Orchestrator 4.5 - McAfee ePolicy Orchestrator 4.6 Supported McAfee Agent software: - McAfee Agent 4.5 Patch 2 - McAfee Agent 4.6 Patch 1 (bundled with the product) __________________________________________________________ INSTALLATION INSTRUCTIONS PREREQUISITES - Ensure that there is no user named as "nails" or group named as "nailsgroup" on the computer. - Ensure that you have root privileges to install McAfee VirusScan Enterprise for Linux, version 1.7.1. - If you are installing VirusScan Enterprise for Linux on a 64-bit OEL 6.x system, ensure that 32-bit OEL 6.x PAM libraries are also installed. IMPORTANT: During installation, you are prompted to supply a password and other information. For most of the questions, you can accept the default value that is offered. To set up email notification for alerts (if required), you need the Mail Transfer Agent (MTA) configured, and the following information: - Email address of the VirusScan administrator - IP Address of the SMTP host - TCP/IP port number of the SMTP host STANDARD INSTALLATION 1. Download "McAfeeVSEForLinux-1.7.1..ZIP" and extract the contents to a temporary directory. 2. From the terminal, type the following commands: tar -zxvf McAfeeVSEForLinux-1.7.1.-release-full.noarch.tar.gz tar -zxvf McAfeeVSEForLinux-1.7.1.-others.tar.gz tar -zxvf McAfeeVSEForLinux-1.7.1.-release.tar.gz 3. Install McAfee Runtime by typing the following command: rpm -ivh MFErt.i686.rpm 4. Install McAfee Agent (MA) by typing the following command: rpm -ivh MFEcma.i686.rpm 5. To confirm that McAfee agent is running correctly, type the following: /etc/init.d/cma status 6. Install McAfee VirusScan Enterprise for Linux by typing the following command: bash McAfeeVSEForLinux-1.7.1.-installer 7. Answer the questions when prompted, accept the default values or type custom values. 8. When prompted to start the VirusScan services, select the default option, "Y." 9. To confirm that VirusScan Enterprise for Linux is installed and running correctly, type the following command: /etc/init.d/nails status __________________________________________________________ INTEGRATING USING EPOLICY ORCHESTRATOR 4.5/4.6 BEFORE YOU BEGIN: If you have any VirusScan Enterprise for Linux 1.7.0 hotfix checked in to the Master Repository's Current branch, move the hotfix to previous branch or delete it. 1. Extract the contents of "McAfeeVSEForLinux-1.7.1..ZIP" on to a temporary directory. 2. Extract the contents of the following files: - McAfeeVSEForLinux-1.7.1.-release-full.noarch.tar.gz - McAfeeVSEForLinux-1.7.1.-others.tar.gz - McAfeeVSEForLinux-1.7.1.-release.tar.gz 3. Check in the McAfee Agent (MSA-LNX_4.6.0_Package.ZIP) bundled with this package on to the ePolicy Orchestrator "Master repository". 4. Check in "McAfeeVSEForLinux-1.7.1.-release-EPO.zip" on to the ePolicy Orchestrator "Master Repository". 5. Check in the following extensions on to the ePolicy Orchestrator "Extensions": - LYNXSHLD1700.ZIP - LYNXSHLD1700PARSER.ZIP 6. Deploy the McAfee Agent 4.6 on client computer. 7. Create a Product Deployment Task on ePolicy Orchestrator to deploy McAfee VirusScan Enterprise for Linux, version 1.7.1. NOTE: For more detailed information on how to integrate and configure McAfee VirusScan Enterprise for Linux using ePolicy Orchestrator, see the "McAfee VirusScan Enterprise for Linux, version 1.7.1 - Configuration Guide." 8. To confirm that VirusScan Enterprise for Linux is installed and running correctly, type the following command on the client computer: /etc/init.d/nails status __________________________________________________________ RUNNING VIRUSSCAN ENTERPRISE FOR LINUX 1. From a supported web-browser, go to: https://: Specify the hostname or IP address of the computer, on which VirusScan Enterprise for Linux is installed. By default, the port number is "55443". For example: https://192.168.200.200:55443 (or) https://server1:55443 2. On the log on page, type the user name "nails" and type the password that you specified during installation. __________________________________________________________ UPGRADING FROM PREVIOUS VERSIONS Use this task to upgrade your previous LinuxShield version 1.5.1, McAfee VirusScan Enterprise for Linux version 1.6 or 1.7 to version 1.7.1. 1. To upgrade McAfee Agent (MA), type the following command in the terminal window: rpm -Uvh MFEcma.i686.rpm 2. To confirm that the McAfee Agent is running correctly, type the following command in the terminal window: /etc/init.d/cma status 3. To upgrade McAfee VirusScan Enterprise for Linux, type the following command in the terminal window: bash McAfeeVSEForLinux-1.7.1.-installer 4. To confirm that VirusScan Enterprise for Linux is running correctly, type the following command in the terminal window: /etc/init.d/nails status 5. Restart the client computer using the command: reboot __________________________________________________________ UNINSTALLATION 1. To uninstall VirusScan Enterprise for Linux, type the following commands: rpm -e McAfeeVSEForLinux rpm -e MFEcma rpm -e MFErt 2. Reboot the computer to remove the LinuxShield kernel modules. NOTE: You do not have to reboot the computer immediately, because the VirusScan Enterprise for Linux kernel modules does not interrupt functioning of any other running service. UNINSTALLATION USING EPOLICY ORCHESTRATOR 4.5/4.6 - Create a Product Deployment Task on ePolicy Orchestrator to remove McAfee VirusScan Enterprise for Linux version 1.7.1. For more detailed information on how to uninstall McAfee VirusScan Enterprise for Linux using ePolicy Orchestrator, see the "McAfee VirusScan Enterprise for Linux, version 1.7.1 - Configuration Guide." __________________________________________________________ KNOWN ISSUES For known issues in this product release, refer to KnowledgeBase article KB75523 at: https://kc.mcafee.com/corporate/index?page=content&id=KB75523 __________________________________________________________ FINDING PRODUCT DOCUMENTATION McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1. Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com. 2. Under Self Service, access the type of information you need: For user documentation: 1. Click "Product Documentation." 2. Select a "Product," then select a "Version." 3. Select a product document. For the KnowledgeBase: - Click "Search the KnowledgeBase" for answers to your product questions. - Click "Browse the KnowledgeBase" for articles listed by product and version. __________________________________________________________ COPYRIGHT Copyright (C) 2012 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies. __________________________________________________________ TRADEMARK ATTRIBUTIONS AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. __________________________________________________________ LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. V3.1.9