Installing Dr.Web Scanning Server

warning

Dr.Web Scanning server can be installed only on Linux-based OSs and FreeBSD.

A Scanning server and the virtual machines it serves with Dr.Web Agent installed must be located within the same hypervisor.

1.Download the Dr.Web Scanning server installation package from the installation page on the station that you plan to appoint the Scanning server.

2.Download the certificate that will be used by the Scanning server for connecting to the Dr.Web Server. To do this, in the Administration section of the Control Center Menu select the item Encryption keys. Set the check box near the Certificate and press ExportUpload the certificate to the station that you plan to appoint the Scanning server.

info

It is also possible to download the certificate from the installation page. It is located in the same directory as the Scanning server installation package.

3.Go to the directory where the installation package file has been downloaded and allow executing it:

# chmod +x <filename>.run

4.Launch the installation procedure:

# ./<filename>.run

5.Accept the conditions of the License Agreement.

6.After the installation connect to the Dr.Web Server the station that you plan to appoint the Scanning server by executing the following command:

# drweb-ctl esconnect <Dr.Web Server address> --Certificate <path to the certificate file>

After executing this command, the connection should be approved automatically or by the anti-virus network administrator, depending on the settings of Dr.Web Server.

You can also connect to Dr.Web Server in a different way: create the account of the station that you plan to appoint the Scanning server; once the account is created, you will get the login (the station ID) and the password for connection. Perform the following command to connect:

# drweb-ctl esconnect <Dr.Web Server address> --login <station ID> --password <password> --Certificate <path to the certificate file>

info

It is recommended that you use the name of Dr.Web Server in the FQDN format as the Dr.Web Server address.

7. If the connection is successful, the station will be marked in the anti-virus network tree by the treei-meshonline sign indicating that the Scanning server is active and ready for operation.

info

It is not required to install Dr.Web Agent on the station performing the functions of the Scanning server.

8. Make sure that the Scanning server is listening to ports 7090 and 18008 by executing the following command:

# netstat -l

The output must contain the following lines:

tcp 0 0 0.0.0.0:7090 0.0.0.0:* LISTEN
udp 0 0 0.0.0.0:18008 0.0.0.0:*

 

info

For detailed information on configuring the Scanning server and connecting stations to it refer to Dr.Web Enterprise Security Suite Administrator Manual, Chapter Connecting Stations to the Scanning Server.