Configuration of mirror server for Signature update
NetBackup Malware Scanner (Avira) mirror server must be configured for signature update only when scan host does not have access to internet.
Creating local mirror server
- A designated host with NetBackup Malware Scanner must be installed.
- Login with the same user credentials used to install the NetBackup Malware scanner and run the following command:
cd $NB_MALWARE_SCANNER_PATH
./avupdate.bin --mirror --config=avupdate-savapilib-product.conf --install-dir=<update_path>
- Publish the <update_path> over HTTP.
For example, https://<local_mirror_server>/<update_path>.
Note:
Periodically run ./avupdate.bin --mirror command to keep the signature data up-to-date on the mirror server.
Using local mirror server during signature update
- The
update.shscript refers toavupdate-savapilib-product.conffile which is at the same location as that ofupdate.sh, that is$NB_MALWARE_SCANNER_PATH. - Update the
internet-srvsentry in .conf file to point to the URL served by the local mirror server mentioned above.~/savapi-sdk-linux64/bin> cat avupdate-savapilib-product.conf #This configuration updates the entire SAVAPI Library (binaries, engine, signatures) #internet-srvs=https://oem.avira-update.com/update internet-srvs=https://<local_mirror_server>/<update_path> master-file=/idx/master.idx product-file=/idx/savapi4lib-linux64-en.info.gz install-dir=./ temp-dir=./tmp check-product
- In the
update.shfile, comment and uncomment the sentences marked in bold:Old file:
#!/usr/bin/env bash # # Copyright (c) Avira Operations GmbH # # VERSION=1.0.0.8 # Description: Contains the basic update commands for SAVAPI Server and Library # # # SAVAPI Server update # # product update (all modules) ./avupdate.bin --config=avupdate-savapi-product.conf --check-product # engine update (engine binaries and virus definition modules) # ./avupdate.bin --config=avupdate-savapi-engine.conf --check-product # # SAVAPI Library update # # product update (all modules) #./avupdate.bin --config=avupdate-savapilib-product.conf --check-product # engine update (engine binaries and virus definition modules) #./avupdate.bin --config=avupdate-savapilib-engine.conf --check-product
New file (After commenting and uncommenting the sentences in bold above):
#!/usr/bin/env bash # # Copyright (c) Avira Operations GmbH # # VERSION=1.0.0.8 # Description: Contains the basic update commands for SAVAPI Server and Library # # # SAVAPI Server update # # product update (all modules) #./avupdate.bin --config=avupdate-savapi-product.conf --check-product # engine update (engine binaries and virus definition modules) # ./avupdate.bin --config=avupdate-savapi-engine.conf --check-product # # SAVAPI Library update # # product update (all modules) ./avupdate.bin --config=avupdate-savapilib-product.conf --check-product # engine update (engine binaries and virus definition modules) #./avupdate.bin --config=avupdate-savapilib-engine.conf --check-product
- Run the
update.shscript to ensure that the update is working correctly.The
avupdate.logfile displays the following entries:~/savapi-sdk-linux64/bin> head avupdate.log 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Avupdate Version: 2.6.10.36 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Operating System: LINUX X86_64 5.3.18-22-DEFAULT 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Installation Directory: . 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Backup Directory: ./avupdate_backup 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Temp Directory: ./tmp/avupdate_tmp_njoOb5 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Cache Modules Directory: ./idx 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Proxy settings: Direct connection 18/09/2022 23:31:47 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Downloading https://local_mirror_server/<update_path>/idx/master.idx to ./tmp/avupdate_tmp_njoOb5/idx/master.idx 18/09/2022 23:31:48 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Downloading https://<local_mirror_server>/<update_path>/idx/savapi4lib-linux64-en.info.gz to ./tmp/avupdate_tmp_njoOb5/idx/savapi4lib-linux64-en.info.gz 18/09/2022 23:31:49 pndch32bl10-09 avupdate.bin[10929]: UPD: INFO: Downloading https://<local_mirror_server>/<update_path>/idx/xvdf.info.gz to ./tmp/avupdate_tmp_njoOb5/idx/xvdf.info.gz
Manually updating local mirror server during no internet connectivity
- On system with internet connectivity, download the signature database.
Note:
The
NBAntiMalwareClientmust be installed on the system with internet connectivity../avupdate.bin --config=avupdate-savapilib-product.conf --mirror --install-dir=<mirror_dir>
- Copy the contents of
<mirror_dir>from above to the mirror server:./avupdate.bin --config=avupdate-savapilib-product.conf --internet-srvs=<local_copy_of_mirror_dir>