Read this first

Symantec™ Client

Security

Copyright © 2003 Symantec Corporation.

All rights reserved.

Printed in the U.S.A.

04/03

Symantec and the Symantec logo are U.S. registered trademarks of Symantec Corporation. Symantec AntiVirus is a trademark of Symantec Corporation.

Other brands and products are trademarks of their respective holder/s.

About Symantec™ Client Security

Symantec Client Security is a security solution that integrates antivirus and firewall protection and intrusion detection to provide comprehensive protection against blended threats at the client level.

Symantec Client Security lets you do the following:

■ Manage antivirus, firewall, and intrusion detection deployment, configuration, updating, and reporting from the Symantec System

Center.

■

■

Quickly respond to blended threats such as the Nimda worm, which spread through multiple exploits.

Provide a high level of protection and an integrated response to security threats for all users who connect to your network, including telecommuters with continuous connections and mobile users with intermittent connections to your network.

■

■

Obtain a consolidated view of multiple security components across all of your networked workstations.

Perform a customizable, integrated installation of all of the security components and set policies simultaneously.

Getting started

You should read the following before planning your installation:

■ Readme file: Contains late-breaking information about installing and using Symantec Client Security.

■ Symantec Client Security Installation Guide: Provides the information that you need to plan and execute the installation of Symantec Client

Security on your network.

You may also want to browse the following before making decisions about how to manage client security on your network:

■ Symantec Client Security Administrator’s Guide: Provides the information that you need to manage Symantec Client Security using the Symantec System Center.

■ Symantec Client Security Reference Guide: Contains technical product information, including information on tools that are on the Symantec

Client Security CD.

1

Where to find more information

■

■

■

■

Other sources of information on using Symantec Client

Security include the following:

■ Online Help (includes all of the information contained in the Symantec Client Security Administrator’s Guide, the

Symantec Client Security Reference Guide, and more)

Symantec Client Security Client Guide

Symantec Packager Implementation Guide

LiveUpdate Administrator’s Guide

Symantec Central Quarantine Administrator’s Guide

All of the documentation is available in the Docs folder on the

Symantec Client Security CD. Updates to the documentation are available from the Symantec Technical Support and

Platinum Support Web sites.

Additional information is available from the Symantec Web sites listed in the table.

Types of information Web address

Public knowledge base

Releases and updates

Manuals and documentation

Contact options http://www.symantec.com/ techsupp/enterprise/

Virus information and updates http:// securityresponse.symantec.com

Product news and updates http:// enterprisesecurity.symantec.com

Platinum support Web access https://www-secure.symantec.com/ platinum/

Products and tools

Read about each component to help you decide which ones you want to install, and to plan where you will install them.

Component

The Symantec System

Center console

Description

Lets you administer managed

Symantec products.

Component Description

Alert Management

System

2

(AMS

2

) console

Provides alerts from supported

Symantec Client Security servers that are running on supported NetWare and Windows servers, and supported

Windows workstations.

Symantec AntiVirus snap-in

Symantec Client Firewall snap-in

Lets you roll out firewall policy packages to workstations running the Symantec Client Security firewall client.

NT Client Install tool

Lets you manage the Symantec

Client Security antivirus client on workstations and network servers.

AV Server Rollout tool

Lets you remotely install the

Symantec Client Security antivirus client to one or more 32-bit

Windows NT/2000/XP/2003 computers.

Lets you remotely install the

Symantec Client Security server to the supported Windows and

NetWare servers that you select.

Central Quarantine server

Quarantine Console snap-in

Lets you automatically forward infected items to the Central

Quarantine, where they can be submitted to Symantec Security

Response via email or the Internet for analysis. If a new virus is identified, updated virus definitions are returned to you.

Lets you manage the Central

Quarantine server from the

Symantec System Center.

Symantec Client Firewall

Administrator

Lets you create and edit firewall rules.

Symantec Packager Lets you create and modify custom installation packages.

LiveUpdate

Administrator

Lets you configure one or more intranet FTP, HTTP, or LAN servers to act as internal LiveUpdate servers.

2

What’s new in this release

Symantec Client Security includes new and improved features.

The following table lists and describes what’s new in this release.

Feature Description

Enhanced server group security

You can enhance the security that is provided by server group passwords by creating an access list that restricts inbound communication to only the IP and IPX addresses that are specified in the access list.

For example, you can prevent an attacker who has access to the Symantec System Center console and a valid server group password from making unauthorized changes to the following:

■ Server and client antivirus protection settings

■

■

■

■

■

File system realtime protection settings

Client group member assignments

Primary server assignments

Grc.dat file distribution

Virus definitions file rollbacks

Network audit Computers on your network that do not have antivirus protection leave holes open in your network security. You can run a network audit of remote computers to determine the following:

■

■

Whether a Symantec Client Security antivirus client is installed and running.

The type of protection, such as antivirus server, client, or unmanaged client, that is installed.

■ Whether antivirus software from other vendors or from Symantec (such as a

Symantec AntiVirus consumer version) is installed on the computer. This information includes the type and version of the software.

Feature Description

Firewall log viewing

■

■

The Symantec System Center lets you display log data for one or more Symantec Client

Security firewall clients. Using the Symantec

System Center, you can do the following:

■ View data at the server group, individual server, and individual managed workstation level.

Sort and filter Event Log data.

Export data to Microsoft Access (as an

.mdb file) or in comma-separated value

(CSV) format.

64-bit computer support

The Symantec Client Security antivirus client provides antivirus protection for supported

64-bit clients and servers.

For more information on system requirements, see the Symantec Client Security

Installation Guide.

Windows Server

2003 support

You can install the following components to computers running Windows Server 2003:

■

■

■

Symantec Client Security server (32-bit)

Quarantine Server (32-bit)

Symantec Client Security antivirus client

(32-bit and 64-bit)

NetWare Secure

Console support

Symantec Client Security can be installed on

NetWare servers while NetWare Secure

Console is running.

3