Creating Anti-virus Network

Quick start to anti-virus network deployment:

1.Make a plan of the anti-virus network structure, include all protected computers, virtual machines and mobile devices.

Select a computer that will perform the functions of Dr.Web Server. The anti-virus network can incorporate several Dr.Web Servers. This configuration is described in Administrator Manual, section Peculiarities of a Network with Several Dr.Web Servers.

info

Dr.Web Server can be installed on any computer, not only on a computer acting as a LAN server. General system requirements for this computer are described in the Installation Manual, section System Requirements.

 

The same version of Dr.Web Agent is installed on all protected stations including LAN servers. The difference is in the list of installed anti-virus components which is determined by the Dr.Web Server settings.

Installation of Dr.Web Server and Dr.Web Agent requires one-time access (physical or using tools for remote control and program launch) to corresponding computers. All further actions are performed remotely from the anti-virus network administrator's workstation (which can also be located outside the local network) and do not require access to Dr.Web Servers or stations.

When planning the anti-virus network, it is also recommended to create a list of persons who will have access to the Control Center as required by their job duties, as well as a list of roles and the responsibilities assigned to each role. An administrative group needs to be created for every role. Specific administrators can be linked with the roles by having their accounts placed into administrative groups. If necessary, administrative groups (roles) can be grouped hierarchically as a multilevel system allowing for individual editing of administrative permissions for each level.

For detailed guidelines on managing administrative groups and permissions see the Administrator Manual, Chapter 6: Anti-Virus Network Administrators..

2.Based on the plan you created earlier, determine which products for which operating systems should be installed on the corresponding network nodes. Detailed information about the supported products is given in the Distribution Package section.

All required products can be purchased as a Dr.Web Enterprise Security Suite box solution or downloaded from the official website of Doctor Web at https://download.drweb.com.

info

Dr.Web Agents for stations running Android OS, Linux OS, macOS can also be installed from standalone packages and then get connected to the central Dr.Web Server. The settings of Dr.Web Agents are described in the corresponding User manuals.

3.Install the Dr.Web Server general distribution kit on the selected computer or computers. The installation procedure is described in the section Installing Dr.Web Server.

Dr.Web Security Control Center is installed together with Dr.Web Server.

By default, Dr.Web Server starts automatically after installation and upon every restart of the operating system.

4.Install and configure the Proxy Server, if necessary. A detailed description is given in the  section Installing Dr.Web Proxy Server.

5.If your anti-virus network consists of virtual machines, it is recommended to use the Scanning Server. The detailed description of the installation and the configuration procedures is given in the , p. Installing Dr.Web Scanning Server.

6.To configure Dr.Web Server and anti-virus software on stations, connect to Dr.Web Server using Dr.Web Security Control Center.

info

Dr.Web Security Control Center can be opened on any computer, not only on the computer where Dr.Web Server is installed. It requires only a network connection to the computer where Dr.Web Server is installed.

Control Center is available at the following address:

http://<Dr.Web_Server_Address>:9080

or

https://<Dr.Web_Server_Address>:9081

where <Dr.Web_Server_Address> is an IP address, NetBIOS or domain name of the computer on which Dr.Web Server is installed.

In the authorization request dialog window, specify the administrator credentials. By default, the administrator credentials are as follows:

Name: admin.

Password:

for Windows OS—a password that was set during the Dr.Web Server installation.

for Unix-like OS—a password that was automatically created during the Dr.Web Server installation (see also section Installing Dr.Web Server for Unix-like OS).

On successful connection to Dr.Web Server, the main window of the Control Center will be opened (for detailed description refer to the Administrator Manual, in section Dr.Web Security Control Center).

If you installed Dr.Web Scanning Server, specify its address in the station settings. For detailed information refer to the Administrator Manual, section Connecting Stations to the Scanning Server.

7.Perform the initial configuration of Dr.Web Server (detailed description of the Dr.Web Server settings is given in the Administrator Manual, in Chapter 10: Configuring Dr.Web Server):

a.In the License Manager section, add one or several license keys and allocate them to corresponding groups, particularly to the Everyone group. This step is obligatory if the license key was not set during the Dr.Web Server installation.

b.In the General Repository Configuration section, set the components of the anti-virus network to be update by Dr.Web GUS. If the anti-virus network includes protected stations running Android OS, Linux OS or macOS, you need to download Dr.Web enterprise products.

In the Repository State section, update the products in the Dr.Web Server repository. Updating might take a long time. Wait for the update process to complete before proceeding with the configuration.

info

By default, after installing Dr.Web Server, the updates for the Dr.Web for Android virus databases, Content filter databases for UNIX and Dr.Web Proxy Server repository products are downloaded from GUS only when these products are requested by the stations. For more details, see the Administrator Manual, section Detailed Repository Configuration.

If Dr.Web Server is not connected to the internet and updates are downloaded manually from another Dr.Web Server or using the Repository Loader, before installing or updating products with the Update on demand only option enabled, you need to first manually download these products to the repository.

c.The Administration → Dr.Web Server page contains information about the Dr.Web Server version. If a new version is available, update Dr.Web Server as described in the Administrator Manual, section Updating Dr.Web Server and Restoring it from Backup.

d.If necessary, set up Network connections to change the default network settings used for interaction of all anti-virus network components.

e.If necessary, set up the list of Dr.Web Server administrators. External authentication of administrators is also available. For more details, see Administrator Manual, Chapter 6: Anti-Virus Network Administrators.

f.Before using the anti-virus software, it is recommended to change the settings of the backup folder for the Dr.Web Server critical data (see the Administrator Manual, section Setting Dr.Web Server Schedule). It is recommended to keep the backup folder on a different local disk to reduce the risk of losing the Dr.Web Server files and backup copies at the same time.

8.Specify settings and configuration of anti-virus software for stations (for a detailed description of how to set up groups and stations see the Administrator Manual, Chapter 7: Integrated Workstations Management and Chapter 8: Administration of Workstations):

a.If necessary, create user groups on the protected stations.

b.Configure settings of the Everyone group and created user groups. In particular, configure the section with the components to be installed.

9.Install Dr.Web Agent software on the stations.

In the Installation Files section, review the list of files provided for the Dr.Web Agent installation. Select an installation option that is suitable for you based on the station's operating system, remote installation support, Dr.Web Server settings specified during Dr.Web Agent installation, etc. For example:

If users install the anti-virus manually, use personal installation packages which are created using the Control Center separately for each station. This type of packages can also be sent to users by email directly from the Control Center. The stations will automatically connect to Dr.Web Server once the installation is complete.

If you need to install the anti-virus on several stations within a user group, you can use the group installation package which is created using the Control Center in a single copy for several stations of a particular group.

For remote installation over the network on one or more stations running Windows or Linux, use the network installer. The installation is performed from the Control Center.

You can also perform the remote installation over the network to one or more stations simultaneously using the Active Directory service. To do this, use the Dr.Web Agent installer for networks with Active Directory, which is included in the Dr.Web Enterprise Security Suite distribution kit; however, it is not included in the Dr.Web Server installer.

If you need to reduce the load on network connection between Dr.Web Server and stations during the installation, you can use the full installer which will install Dr.Web Agent and protection components simultaneously.

Installation on stations running Android OS and macOS can be performed locally according to general practices. It is also possible to connect an already installed standalone product to Dr.Web Server using an appropriate configuration.

warning

To ensure proper operation of Dr.Web Agent on server editions of Windows OS starting with Windows Server 2016, make sure to manually disable Windows Defender using group policies.

10.Dr.Web Agents connect to Dr.Web Server immediately after installation. Anti-virus stations are authorized by Dr.Web Server according to the policy defined by the administrator (see the Administrator Manual, section New Stations Approval Policy):

a.When installing using installation packages and selecting automatic approval on Dr.Web Server, the stations are automatically registered when they first connect to Dr.Web Server, and no additional approval is required.

b.When installing using the installer and selecting manual access approval, new stations should be manually approved by the administrator to be registered with Dr.Web Server. In this case, new stations are not connected automatically, instead they are placed by Dr.Web Server into a group of newbies.

11.After connecting to Dr.Web Server and receiving the settings, a corresponding set of anti-virus components specified in the primary group settings is installed on the station.

info

Restart the computer to finish the installation of station components

12.The stations and anti-virus software can also be configured after the installation (detailed description is given in the Administrator Manual, New Stations Approval Policy).