Configure the NetBackup Malware Scanner for Windows and Linux
Note:
Ensure that scan jobs are cancelled before upgrading NetBackup Malware Scanner or restarting the master server.
To configure the NetBackup Malware Scanner for Windows
- Download the NetBackup Malware Scanner from Veritas Download Center.
- Extract the downloaded zip files. Extracted files must have the following structure:
NBAntiMalwareClient_version number Readme.txt NBAntiMalwareClient_version number_AMD64 savapi-sdk-win64.zip setup.bat cleanup.bat - Refer to the
Readme.txtfile for install, upgrade, or uninstall processes.To install or upgrade the NetBackup Malware scanner on a Windows computer:
Navigate to
NBAntiMalwareClient_version number_AMD64folder and run thesetup.batfile.Enter the target location to install the NetBackup Malware scanner.
Note:
If NetBackup Malware Scanner is already installed, then
setup.bat/setup.shoverwrites the existing binary files.To uninstall NetBackup Malware scanner from Windows computer:
Run the
cleanup.batfile.
- An optional setting can be used to increase number of threads in scanning.
Update the
aviraconf.txtfile. Add the following entry:NumThreads = Number of threadsWhere Number of threads is the number of threads for the scanning. The default value is the number of CPU cores. (Minimum value is 1. Maximum value is 300).
Note:
If the number of CPUs on the scan host is less than 16, then number of threads defaults to the number of CPUs. If greater than 16, then the number of threads defaults to 16 threads. If
NumThreadsis configured, that value determines the number of threads for scanning. - To validate that the scan works with NetBackup Malware Scanner on a Windows setup, perform the following:
Run the ./update.bat command to get the latest signature update.
Navigate to the NetBackup Malware Scanner installed path and run the avira_lib_dir_scan.exe file with the required
scan_pathandconf_pathparameters.
- Configuration file must be present in NetBackup Malware Scanner installed path.
For example:
avira_lib_dir_scan.exe "c:\malwarescample" -log_path "C:\NBMalwareScanner.log" -conf_path "C:\NBMalwareScannerInstallPath\savapi-sdk-win64\bin\aviraconf.txtEnsure that the output of the command is successful. For the existing sample malware files, the output must be a list of infected files. Else the output must be empty.
- (Optional) The MALWARE_LOG environment variable can be used to increase the logging level.
For example, the setting
MALWARE_LOG=2sets the logging level toWARNING.0 DEBUG 1 INFO 2 WARNING 3 ALERT 4 ERROR
To configure a proxy server on Windows
- Add the proxy server entry in the environment variable with the http_proxy name and the <proxy_server> value.
For example:
http_proxy=http://<username>:<password>@proxy_server_ip:<port> - Add the proxy server details in the
avupdate-savapilib-product.conffile which is available at NetBackup malware scanner installed path.For example:
proxy-username=<username> proxy-password=<password_paintext> proxy-host=<proxy_server_ip> proxy-port=<proxy_server_port> update-auth-type=any receive-timeout=600000 connect-timeout=600000
To configure a NetBackup Malware Scanner for Linux
- Download NetBackup Malware Scanner from Veritas Download Center.
- Extract the downloaded zip file. Files must contain the following structure;
NBAntiMalwareClient_version number_LinuxR_x86 savapi-sdk-linux64.zip setup.sh cleanup.sh NBAntiMalwareClient_version number_LinuxS_x86 -> NBAntiMalwareClient_version number_LinuxR_x86 savapi-sdk-linux64.zip setup.sh cleanup.shWarning:
The
setup.shscript modifies thebashrcfile on Linux. - Refer to the
Readme.txtfile for install, upgrade, or uninstall processes.To install or upgrade NetBackup Malware Scanner on Linux RHEL computer.
Navigate to
NBAntiMalwareClient_ version number_LinuxR_x86folder and run thesetup.shscript.Enter the target location to install the NetBackup Malware Scanner.
To install or upgrade NetBackup Malware Scanner on Linux SUSE computer:
Navigate to
NBAntiMalwareClient_version number_LinuxS_x86folder and run thesetup.shscript.Enter the target location to install the NetBackup Malware Scanner.
Note:
For Linux SUSE computer, if
.bashrcfile is not present then create an emtpy.bashrcfile in users home directory.To uninstall NetBackup Malware Scanner from Linux computer:
Run the
cleanup.shscript.
- To validate that the scan works with the NetBackup Malware Scanner on a Linux setup, perform the following:
Run the ./update.sh script to get the latest signature update.
Navigate to NetBackup Malware Scanner installed path and run the avira_lib_dir_scan binary with the required scan path and
conf_pathparameters.Configuration file must be present in NetBackup Malware Scanner installed path.
For example,
avira_lib_dir_scan "/root/malwareSample" -log_path "/root/NBMalwareScanner.log" -conf_path "/root/NBMalwareScannerInstalledPath/savapi-sdk-linux64/bin/aviraconf.txt
Ensure that the output of the command is successful. For existing sample malware files, the output must be a list of infected files. Else the output must be empty.
To configure a proxy server on Linux
Add proxy server entry in the environment variable with name.
For example:
http_proxy=http://<username>:<password>@proxy_server_ip:<port>This variable should be added in the
.bashrcfile of the scan host.Add the proxy server details in the
avupdate-savapilib-product.conffile.For example:
proxy-username=<username> proxy-password=<password_paintext> proxy-host=<proxy_server_ip> proxy-port=<proxy_server_port> update-auth-type=any receive-timeout=600000 connect-timeout=600000
In the
savapilogs, verify if the correct proxy settings are used for malware scanning.