Appendix A. Operation in Central Protection Mode

Dr.Web for IBM Lotus Domino for Linux can operate in the central protection mode in a network managed by Dr.Web Control Center. Central protection helps automate and simplify configuring and managing information security of computers within logical structures (for example, company computers that access each other from both inside and outside of company's local networks). Protected computers are united in one anti-virus network which security is monitored and managed from central server (Dr.Web Control Center) by administrators. Connection to centralized anti-virus systems guarantees high level of protection while requiring minimum efforts from end-users.

Logical Structure of Anti-virus Networks

Solutions for central protection from Doctor Web use client-server model.

Workstations and servers are protected by local anti-virus components (clients; herein, Dr.Web for IBM Lotus Domino) installed on them, which provides for anti-virus protection of remote computers and ensures easy connection to central protection server.

Local computers are updated and configured from central server. The stream of instructions, data and statistics in the anti-virus network goes also through the central protection server. The volume of traffic between protected computers and the central server can be quite sizeable, therefore solutions provide options for traffic compression. To prevent leak of sensitive data or substitution of software downloaded onto protected computers, encryption is also supported.

All necessary updates are downloaded to central protection server from Dr.Web Global Update System servers.

Local anti-virus components are configured and managed from central protection server according to commands from anti-virus network administrators. Administrators manage central protection servers and topology of anti-virus networks (for example, validate connections to central protection server from remote computers) and configure operation of local anti-virus components when necessary.

shema3_eng.zoom80

 

Operation of Dr.Web for IBM Lotus Domino in Central Protection Mode

For operation of Dr.Web for IBM Lotus Domino in central protection mode, Dr.Web Agent is required to be installed and operate correctly on the same operating system.

 

warning

Dr.Web for IBM Lotus Domino version 6.0 is compatible with Dr.Web Agent 6.0 or later.

 

Dr.Web for IBM Lotus Domino operating in the central protection mode provides the following possibilities:

Recording the starting/stopping events of IBM Lotus Domino with the installed Dr.Web plug-in. Starting/stopping events display in the Start/End table of Dr.Web Control Center.
Sending statistics for operating of Dr.Web for IBM Lotus Domino. The statistics is displayed in the Statistics and Summary statistics tables of Dr.Web Control Center.
Sending notifications on detected viruses with information on the infection and action of Anti-virus. These events are displayed in the Infection table of Dr.Web Control Center.
Registering Dr.Web for IBM Lotus Domino Web Console with Dr.Web Control Center. This allows displaying the URL for Dr.Web for IBM Lotus Domino administration console in the Dr.Web Control Center Console. URL can be set by administrator or automatically generated on the basis of options of the server document in a server's address book.

To set up URL value:

1.Set  DrWebAdminURL parameter in notes.ini server file. For example:

DrWebAdminURL=http://domino-server.domain.name/drweb/DrWebAdmin.nsf

2.Reboot Lotus Domino server.

To set up URL value without reboot of Lotus Domino server:

1.In the server console execute the following command:

set config DrWebAdminURL=http://domino-server.domain.name/drweb/DrWebAdmin.nsf

2.Transfer of value URL to Dr.Web Control Center server will be executed within a minute.

 

Updating Dr.Web virus databases, anti-virus engine and Anti-spam kernel from Dr.Web Control Center repositories. This action  allows  switching  off  the  standard  updating module of Dr.Web IBM Lotus Domino (Dr.Web Updater), which by default starts according to the schedule. In this case, the updating process starts from Dr.Web Control Center repositories according to its schedule.
Using a license key file for Dr.Web for IBM Lotus Domino that is registered for this station at the Dr.Web Control Center network. To activate this function, switch the plug-in to the Enterprise mode. For this, do the following:
switch Dr.Web Agent to the Enterprise mode by specifying the Yes value for the UseEnterpriseMode parameter in the /etc/drweb/agent.conf configuration file.
execute the following command: /etc/init.d/drweb-monitor restart;
add the DrWebEdition=Enterprise parameter to the notes.ini file on the Lotus Domino server and restart the server.

 

warning

In the Enterprise mode Dr.Web for IBM Lotus Domino does not use the local license key file specified in the /etc/drweb/agent.conf configuration file as LicenseFile parameter value in the StandaloneMode section. In the Enterprise mode the key file is requested from Dr.Web Control Center, and if it is not received, the plug-in does not perform the anti-virus check.