System Requirements and Compatibility

In this section

System Requirements

List of Supported Operating System Versions

Additional Packages and Components

Disclaimer

Supported HTTP Proxy Servers

Compatibility with Security Subsystems

System Requirements

You can use Dr.Web Gateway Security Suite on a computer that meets the following requirements:

Parameter

Requirements

Platform

Processors of the following architectures and command systems are supported:

Intel/AMD: 32-bit (IA-32x86); 64-bit (x86-64x64amd64)

ARM64

E2K (Elbrus)

IBM POWER9, Power10 (ppc64el)

RAM

At least 500 MB of free RAM (1 GB or more is recommended)

Free disk space

At least 2 GB of free disk space on a volume where the product directories are located

Operating system

GNU/Linux (based on kernel version 2.6.37 or later, using glibc library 2.13 or later, systemd initialization system ver. 209 or later), FreeBSD. The supported operating system versions are listed below.

The operating system must support the PAM authentication mechanism

Other

The following valid network connections:

valid Internet connection to enable updates for virus databases and Dr.Web components;

when operating in the centralized protection mode, connection to the server on the local network is enough; connection to the Internet is not required

To enable the correct operation of the Dr.Web Firewall for Linux component, the OS kernel must be built with the following options:

CONFIG_NETLINK_DIAG, CONFIG_INET_TCP_DIAG;

CONFIG_NF_CONNTRACK_IPV4, CONFIG_NF_CONNTRACK_IPV6,
CONFIG_NF_CONNTRACK_EVENTS;

CONFIG_NETFILTER_NETLINK_QUEUE,
CONFIG_NETFILTER_NETLINK_QUEUE_CT, CONFIG_NETFILTER_XT_MARK.

The set of required options from the specified list can depend on the relevant OS version.

To enable the correct operation of Dr.Web Gateway Security Suite, open the following ports:

Purpose

Direction

Port numbers

To receive updates

outgoing

80

To connect to the Dr.Web Cloud service

outgoing

2075 (including those for UDP),
3010 (TCP),
3020 (TCP),
3030 (TCP),
3040 (TCP)

List of Supported Operating System Versions

GNU/Linux

Platform

Supported GNU/Linux versions

x86_64

ALT 8 SP

ALT Server 9, 10

ALT Workstation 9, 10

Astra Linux Common Edition (Orel) 2.12

Astra Linux Special Edition 1.6 (with cumulative patch 20200722SE16), 1.7, 1.8

CentOS 7, 8

Debian 9, 10, 11, 12

Fedora 37, 38

GosLinux IC6

Red Hat Enterprise Linux 7, 8

RED OS 7.2 MUROM, RED OS 7.3 MUROM, RED OS 8

SUSE Linux Enterprise Server 12 SP3

Ubuntu 18.04, 20.04, 22.04, 24.04

x86

ALT 8 SP

ALT Workstation 9, 10

CentOS 7

Debian 10

ARM64

ALT 8 SP

ALT Server 9, 10

ALT Workstation 9, 10

Astra Linux Special Edition (Novorossiysk) 4.7

CentOS 7, 8

Debian 11, 12

Ubuntu 18.04

E2K

ALT 8 SP

ALT Server 10

ALT Workstation 10

Astra Linux Special Edition (Leningrad) 8.1 (with cumulative patch 8.120200429SE81)

Elbrus-D MCST 1.4

GS CS Elbrus 8.32 TVGI.00311-28

ppc64el

CentOS 8

Ubuntu 20.04

In ALT 8 SP, Elbrus-D MCST 1.4 and GosLinux IC6 mandatory access control is not supported.

 

For other GNU/Linux versions that meet the abovementioned requirements, full compatibility with Dr.Web Gateway Security Suite is not guaranteed. If a compatibility issue occurs, contact our technical support.

FreeBSD

Platform

Supported FreeBSD versions

x86

11, 12, 13

x86_64

11, 12, 13

Dr.Web Gateway Security Suite can be installed on FreeBSD only from the universal package.

 

The correct operation of Dr.Web Gateway Security Suite on FreeBSD 13 requires that the compat12x Support Pack is installed.

 

Additional Packages and Components

Dr.Web Gateway Security Suite does not require installation of additional packages and OS components (except for the protected server software, see below).

For convenient work with Dr.Web Gateway Security Suite from the command line, it is recommended to enable command auto-completion in your command shell (if disabled).

 

If you encounter any issue with installation of additional packages and components, refer to the documentation of your operating system version.

Disclaimer
 

SpIDer Gate can have conflicts with other firewalls installed in your operating system (such as Shorewall and SuseFirewall2 in SUSE Linux Enterprise Server and FirewallD in Fedora, CentOS, Red Hat Enterprise Linux). The conflict manifests itself in the SpIDer Gate error message with code x109 or the Dr.Web Firewall for Linux error message with code x102. Methods to resolve the conflict are described in the section Appendix F. Known Errors, see errors x109 and x102.

If the OS includes NetFilter earlier than 1.4.15, SpIDer Gate can operate incorrectly. This issue is related to the internal error of NetFilter, and looks like as follows: after disabling SpIDer Gate, the network becomes unstable. If you encounter this issue, it is recommended that you upgrade your OS to a version that includes NetFilter 1.4.15 or later. The ways to resolve this issue are described in the Appendix F. Known Errors section.

Supported HTTP Proxy Servers

For integration with an HTTP proxy server, the installed and configured HTTP proxy server with Squid 3.0 and later is required. Squid must be built with the support of ICAP (compiled with the --enable-icap-client option).

In the mode of an internet barrier and a transparent proxy, there are no requirements for web servers and HTTP proxy servers.

Internet barrier and transparent proxy modes can be used only on GNU/Linux.

Compatibility with Security Subsystems

By default, Dr.Web Gateway Security Suite does not support the SELinux security subsystem. Moreover, Dr.Web Gateway Security Suite operates by default in a reduced functionality mode on the GNU/Linux systems that use mandatory access models (for example, on the systems distributed with the PARSEC mandatory access subsystem, which assigns different privilege levels, so-called mandatory levels, to users and files).

In case of installing Dr.Web Gateway Security Suite on systems with SELinux (as well as on systems that use mandatory access models), it is necessary to additionally configure the security subsystem, so that Dr.Web Gateway Security Suite would operate in a full functionality mode. For details, refer to the Configuring Security Subsystems section.