Chapter 3: Creating Anti-virus Network

Quick start to an anti-virus network deployment:

1.Make a plan of the anti-virus network structure, include all protected computers and mobile devices.

Select a computer to perform the functions of Dr.Web Server. The anti-virus network can incorporate several Dr.Web Servers. The features of such configuration are described in Administrator Manual, p. Peculiarities of a Network with Several Dr.Web Servers.

info

Dr.Web Server can be installed on any computer, not only on a computer functioning as a LAN server. General system requirements to this computer are described in p. System Requirements.

 

On all protected stations including LAN servers, the same Dr.Web Agent version is installed. The difference is in the list of installed anti-virus components defined by the Dr.Web Server settings.

To install Dr.Web Server and Dr.Web Agent, one-time access (physical or via tools of remote control and program launch) to the correspondent computers is required. All further steps will be taken from the anti-virus network administrator’s workplace (which can also be outside the local network) and will not require access to Dr.Web Servers and workstations.

When planning the anti-virus network, it is also recommended that a list of persons is made up, who are to be granted access to the Control Center as required by their job duties, as well as a list of roles with respective responsibilities assigned to each role. An administrative group shall be created for every role. Specific administrators can be linked with the roles by having their accounts placed into administrative groups. If necessary, administrative groups (roles) can be grouped hierarchically as a multilevel system allowing for individual editing of administrative permissions for each level.

For detailed guidelines of how to manage administrative groups and permissions see Administrator Manual, Chapter 6: Anti-Virus Network Administrators..

2.According to the constructed plan, define what products for what operating systems should be installed on corresponding network nodes. Detailed information on the supported products is given in the Distribution Kit section.

All required products can be obtained as a box solution or downloaded at the official website of Doctor Web at https://download.drweb.com.

info

Dr.Web Agents for stations under Android OS, Linux OS, macOS can be also installed from the standalone packages and in the sequel get connected to the centralized Dr.Web Server. Description of the Agent settings is given in the corresponding User manuals.

3.Install Dr.Web Server general distribution kit on selected computer or computers. Installation description is given in Installation Manual, p. Installing Dr.Web Server.

Dr.Web Security Control Center is installed with Dr.Web Server.

By default, Dr.Web Server automatically starts after installation and every time after restarting the operating system.

4.Install and configure the Proxy Server, if necessary. Description is given in Installation Manual, p. Installing Proxy Server.

5.If your anti-virus network consists of virtual machines, it is recommended to use the Scanning Server. The detailed description of the installation and the configuration procedures is given in Installation Manual, p. Installing Dr.Web Scanning Server.

6.To configure Dr.Web Server and anti-virus software on stations, connect to Dr.Web Server via Dr.Web Security Control Center.

info

Dr.Web Security Control Center can be opened on any computer, not just on the one with Dr.Web Server installed. It is enough to have a network connection with a computer on which Dr.Web Server is installed.

Control Center is available at the following address:

http://<Dr.Web_Server_Address>:9080

or

https://<Dr.Web_Server_Address>:9081

where <Dr.Web_Server_Address> is the IP address or domain name for the computer on which Dr.Web Server is installed.

In the authorization request dialogue window, specify the administrator's credentials. For default administrator:

Name—admin.

Password:

for Windows OS—password that was set during the Dr.Web Server installation.

for UNIX system-based OS—password that was automatically created during the Dr.Web Server installation (see also Installation Manual, p. Installing Dr.Web Server for UNIX System-Based OS).

On successful connect to Dr.Web Server, the main window of the Control Center will be opened (detailed description see in the Administrator Manual, in p. Dr.Web Security Control Center).

If you installed Dr.Web Scanning Server, specify its address in the settings of the stations. For detailed information refer to the Administator Manual, p. Connecting Stations to the Scanning Server.

7.Perform the initial configuration of Dr.Web Server (detailed description of the Dr.Web Server settings is given in the Administrator Manual, in p. Chapter 9: Configuring Dr.Web Server):

a.In the License Manager section, add one or several license keys and propagate them on corresponding groups, particularly on the Everyone group. The step is obligatory if the license key was not set during the Dr.Web Server installation.

b.In the General repository configuration section, set the components of anti-virus network to update from Dr.Web GUS. If anti-virus network will include protected stations under Android OS, Linux OS, macOS, Dr.Web enterprise products must be downloaded.

In the Repository state section, update products in the Dr.Web Server repository. Update might take a long time to complete. Wait for the end of the update process before continuing the further configuring.

info

By default, after installing Dr.Web Server version 13, updates of the Dr.Web for Android databases, Dr.Web Agent for UNIX and Dr.Web Proxy Server repository products are downloaded from GUS only when these products are requested from stations. For more details, see Administrator Manual, p. Detailed Repository Configuration.

If your Dr.Web Server is not connected to the internet, and updates are loaded manually from another Dr.Web Server or using the Repository Loader, before installing or updating products with the Update on demand only option, you must first manually load these products to the repository.

c.The Administrating → Dr.Web Server page contains information about the Dr.Web Server version. If a new version is available, update Dr.Web Server as described in the Administrator manual, in p. Updating Dr.Web Server and Restoring from the Backup.

d.If necessary, set up the Network connections to change default network settings used for interaction of all anti-virus network components.

e.If necessary, set up the list of the Dr.Web Server administrators. The external administrators authentication is also available. For more details, see the Administrator Manual, in Chapter 6: Anti-Virus Network Administrators.

f.Before using the anti-virus software, it is recommended to change the settings of the backup folder for the Dr.Web Server critical data (see Administrator Manual, p. Setting Dr.Web Server Schedule). It is recommended to keep the backup folder on another local disk to reduce the risk of losing the Dr.Web Server software files and backup copies at the same time.

8.Specify settings and configuration of anti-virus software for workstations (detailed description of groups and stations setup is given in the Administrator Manual, in Chapter 7 and Chapter 8):

a.If necessary, create user groups of stations.

b.Configure settings of the Everyone group and created user groups. Particularly, configure installing components section.

9.Install Dr.Web Agent software on workstations.

In the Installation Files section, look through the list of supported files for the Agent installation. Select suitable for you installation option based on stations operating system, remote installation ability, option to specify the Dr.Web Server settings during the Agent installation, etc. For example:

If users install the anti-virus independently, use personal installation packages which are created vie the Control Center separately for each station. This type of packages also can be sent to users by email directly from the Control Center. The stations connect to Dr.Web Server automatically, once the installation is complete.

If you need to install the anti-virus on several stations within one user group, you can use the group installation package which is created via the Control Center in a single copy for multiple stations of a certain group.

For remote installation via network on a station or several stations simultaneously running Windows OS or Linux OS, use the network installer. The installation is performed from the Control Center.

Also you can perform the remote installation via the network on a station or on several stations simultaneously via the Active Directory service. For this, use Dr.Web Agent installer for networks with Active Directory, which is supported together with Dr.Web Enterprise Security Suite distribution kit but separately from the Dr.Web Server installer.

If you need to reduce the load on a communication channel between Dr.Web Server and stations during the installation, you can use the full installer that perform the installation of the Agent and protection components at a time.

Installation on stations running Android OS and macOS can be performed locally by the general rules. Also, already installed standalone product can be connected to Dr.Web Server according to the corresponding configuration.

warning

To guarantee that Dr.Web Agent works properly on a server Windows OS starting from Windows Server 2016, make sure to manually disable Windows Defender using group policies.

10.The Agents establish connection with Dr.Web Server immediately after the installation. Anti-virus workstations are authorized at Dr.Web Server according to the set policy (see Administrator Manual, p. New Stations Approval Policy):

a.For installation from installation packages and also for automatic approval on Dr.Web Server, workstations automatically get registration at first connect to Dr.Web Server, and additional approval is not required.

b.For installation from installer and manual access approval, new workstations should be approved by an administrator manually to be registered at Dr.Web Server.

11.At this, new workstations are not connected automatically, but placed by Dr.Web Server into the newbies group. After connecting to Dr.Web Server and receiving settings, corresponding set of anti-virus components specified in the primary group settings are installed on the station.

info

To finish the installation of workstation components, computer restart required.

12.Configuring stations and anti-virus software is also available after the installation (detailed description is given in the Administrator Manual, in Chapter 8).