7.3. Editing Parameters of the Dr.Web Enterprise Agent for Windows® OS

To view and edit the configuration of the Dr.Web Enterprise Agent for the necessary station:

1.Select the Network item in the main menu.

2.Select the workstation or group in the hierarchical list (click name of the station or group).

3.Click the Dr.Web Enterprise Agent for Windows item in the control menu (panel on the left).

4.A window for editing the Agent settings will be opened.

 

Any changes incompatible with the Server settings (for example, changes of the encryption and compression modes) will result in disconnection of the Agent from the Server.

 

If any changes in the Agent settings are made via the Dr.Web Control Center, click Save button to accept changes in settings.

General Tab

On the General tab, you can set genaral parameters of the Agent, which were not included in other tabs:

In the Server public key field, specify the path to the public encryption key of Enterprise Server on the user’s computer.

In the Local Dr.Web key file field, specify the path to the local key file of the Dr.Web product, if you want to store the license key file at the station either. Otherwise, the key file is stored at the Server only.

In the Statistics collection period (minutes) field, set the value of the time interval in minutes for the Agent to send all statistics data, collected at the station.

Specify the language for the Agent interface in the Language drop-down list.

Set the Microsoft Network Access Protection flag to enable the support of Microsoft® Network Access Protection (NAT) (for more details see p. NAP Validator).

Set the Synchronize time flag to enable system time synchronization on the Agent machine with the time on the machine with Enterprise Server.

The Protect the HOSTS system file flag forbids modifications of the HOSTS file. The operating system uses this file when connecting to the Internet: for translation DNS names of some web-sites to corresponding IP addresses. Changes to this file may indicate virus infection.

The Protect critical system objects flag protects critical objects of the operating system such as register etc.

Network Tab

On the Network tab, you can find the parameters determining interaction with the Server:

In the Server field, you can set the address of the Enterprise Server. You may leave this field blank, then the Agent will use as the address of Enterprise Server the value of the parameter set on the user’s local machine (the address of the Server from which the installation was initiated).

Either one Server address or several different Servers addresses can be set. To add one more Server, click and specify an address to the added field. Format of Server network addresses is described in Appendix E. The Specification of Network Addresses.

Server address example:

tcp/10.4.0.18:2193

tcp/10.4.0.19

10.4.0.20

 

To set several addresses in Agent settings, the Servers addresses must be separated by space symbol in the Server field in the Settings Connection section, which is called from the context menu of the Agent icon.

 

 

If the Server parameter is set incorrectly, the Agents will disconnect from the Server and will not be able to reconnect. In this case you will have to set the Server address on the stations directly.

 

In the Number of retries field, set the parameter determining the number of attempts to find Enterprise Server via the connection using the Mulicasting mode.

In the Search timeout field, set the interval between attemts to find Enterprise Server in seconds via the connection using the Mulicasting mode.

The Compression mode and Encryption mode fields determine the compression and encryption settings of network traffic correspondingly (also see p. Traffic Encryption and Compression).

In the Network scanner listen field, specify the UDP port for the Dr.Web Control Center to use when searching for working Enterprise Agents in a network. To disable ports listening, enter NONE.

This parameter should be specified in the network addresses format described in Appendix E. The Specification of Network Addresses.

By default, the udp/:2193 is used, which means "all interfaces, port 2193".

Mobility Tab

On the Mobility tab, you can set the Mobile Mode of the Agent:

In the Update period field, specify the time interval between anti-vrirus software updates, in seconds.

Set the Check Internet connection flag to enable checking if there is a connection to the Internet before starting updating.

Set the Use proxy server flag to use an HTTP proxy server to receive updates from the Internet. This will make the fields to set a proxy server available.

Log Сontrol Tab

On the Log control tab, you can set the parameters of Agent logging:

In the Log file name field, specify the path to the log file on the user’s machine.

The Log level parameter determines the level of detail of logging (see also p. Dr.Web Enterprise Server Logging).

The values of the Log rotation fields determine such parameters of logging as the number and size of log files, and old files compression.

The Updater log files parameter determines the maximum number of updater log files.

Interface Tab

On the Interface tab, you can set the parameters of the Agent interface.

In the Welcome message delay field, specify the time for which the welcome message should be delayed, in minutes. Set the value to -1 to disable showing the welcome message.

On the Interface tab, you can select the type of events that the user is to be notified of. For this set the respective flag:

Critical notifications - receive only critical notifications. Such notifications include periodical messages about:

updating errors of the anti-virus software or some of the components;

the necessity to restart a computer after updating.

The notification shows, if the user has administrator rights.

Virus notifications - receive only notifications about viruses. This type of notification includes messages about virus(es) detection by one of the anti-virus software components.

Major notifications - receive only important notifications. Such notifications include messages about:

the launching errors of the anti-virus software or some of the components;

the updating errors of the anti-virus software or some of the components, is displayed right after error of update procedure.

the necessity to restart a computer after updating, is displayed right after update procedure.

necessity of message with reboot requirement to finish components installation.

Minor notifications - receive only minor notifications. Such notifications include messages about

the starting of remote scanning;

the stoping of remote scanning;

the beginning of updating of the anti-virus software or some of the components;

the end of successful updating of the anti-virus software or some of the components.

If you want messages of all groups to be sent, set all the four flags. Ohterwise only message of the specified groups will be displayed.

 

Users can configure all notifications except Critical notifications, which are configured by administrators only.