Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 Installation Guide

Audience

The IWSVA documentation is written for IT managers and system administrators working in enterprise environments. The documentation assumes that the reader has in-depth knowledge of networks schemas, including details related to the following:

• HTTP, HTTPS, FTP and other Internet protocols used by an enterprise

• VMware ESX administration experience when installing on VMware ESX and

Microsoft Hyper-V experience when installing on Hyper-V virtual platforms.

The documentation does not assume the reader has any knowledge of antivirus or Web security technology.

How to Use this Guide

This guide contains the information you need to understand and use IWSVA.

If you are an advanced user, you might want to go directly to Chapter 3, Installing

InterScan Web Security Virtual Appliance

. If you are installing IWSVA on VMware ESX, see

Appendix E, Creating a New Virtual Machine Under VMware ESX for IWSVA . If you are

installing IWSVA on Microsoft Hyper-V, see Appendix F, Creating a New Virtual Machine

Under Microsoft Hyper-V for IWSVA .

Chapter 1, Preinstallation Planning

Chapter 2, Deployment Primer

Chapter 3, Installing InterScan

Web Security Virtual Appliance

This chapter describes the tasks you need to do before installing IWSVA. This includes planning for network traffic and HTTP and FTP service flows and ensuring that your server meets specific requirements.

This chapter provides an overview of the different topologies in which IWSVA can be installed and helps you plan your server placement and network protection with HTTP and FTP service flows.

This chapter describes how to obtain either a evaluation or production version of IWSVA and how to install the application.

1-x

Preface

Chapter 4,

Scan Web Security Virtual Appliance

Appendix A, gration

Appendix B, bleshooting

Migrating to Inter-

Appendix C,

Deployment Inte-

Tuning and Trou-

IWSVA Installation and Deployment

Appendix D,

Best Practices for

Maintenance and

Technical Support

This chapter describes the different migration scenarios and how to complete a migration to

IWSVA.

This appendix describes deployment scenarios for

IWSVA, involving several technologies such as

LDAP, Cisco routers using WCCP, ICAP, and

Transparent Bridge.

This appendix describes performance tuning involving URL filtering and LDAP performance.

Also, this appendix provides general troubleshooting tips and possible installation and feature issues.

This appendix describes the installation and deployment best practices that Trend Micro recommends for IWSVA

This appendix describes the maintenance agreement and the aspects of the Trend Micro Technical Support Center.

This appendix describes how to create a new virtual machine for IWSVA under VMware ESX.

Appendix E, Creating a New

Virtual Machine Under VMware

ESX for IWSVA

Appendix F,

Creating a New

Virtual Machine Under Microsoft Hyper-V for IWSVA

This appendix describes how to create a new virtual machine for IWSVA under Microsoft

Hyper-V.

1-xi

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 Installation Guide

IWSVA Documentation

In addition to the Trend Micro™ InterScan Web Security Virtual Appliance 6.5 Installation

Guide, the documentation set includes the following:

• Administrator’s Guide—this guide provides detailed information about all

IWSVA configuration options. Topics include how to update your software to keep protection current against the latest risks, how to configure and use policies to support your security objectives, and using logs and reports.

• Readme file—the Readme file contains late-breaking product information that is not found in the online or printed documentation. Topics include a description of new features, installation tips, known issues, and release history.

The latest versions of the Installation Guide, Administrator’s Guide, and readme file are available in electronic form at: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkv al=1747&regs=NABU&lang_loc=1#undefined

DVD ISO creation document—Entitled, How to Use the Trend Micro IWSVA ISO

File, this document describes how to create a bootable installation DVD from an

ISO file.

Online Help—Helps you configure all features through the user interface. You can access the online help by opening the Web console and then clicking the help icon.

The purpose of Online Help is to provide “how to’s” for the main product tasks, usage advice, and field-specific information such as valid parameter ranges and optimal values. Online Help is accessible from the IWSVA management console.

• Knowledge Base—The Knowledge Base is an online database of problem-solving and troubleshooting information. It provides the latest information about known product issues. To access the Knowledge Base, open: http://esupport.trendmicro.com/support

• TrendEdge—a program for Trend Micro employees, partners, and other interested parties that provides information on unsupported, innovative techniques, tools, and best practices for Trend Micro products. The TrendEdge database contains numerous documents covering a wide range of topics. http://trendedge.trendmicro.com

1-xii

Preface

Document Conventions

To help you locate and interpret information easily, the InterScan Web Security Virtual

Appliance documentation uses the following conventions.

T ABLE 1-1.

Document Conventions

C ONVENTION

ALL CAPITALS

Bold

Italics

Monospace

D ESCRIPTION

Acronyms, abbreviations, and names of certain commands and keys on the keyboard

Menus and menu commands, command buttons, tabs, options, and ScanMail tasks

References to other documentation

Examples, sample command lines, program code, Web URL, file name, and program output

Configuration notes

Note:

Recommendations

Tip:

WARNING!

Reminders on actions or configurations that should be avoided

About Trend Micro

Trend Micro, Inc. is a global leader in network antivirus and Internet content security software and services. Founded in 1988, Trend Micro led the migration of virus protection from the desktop to the network server and the Internet gateway-gaining a reputation for vision and technological innovation along the way.

Today, Trend Micro focuses on providing customers with comprehensive security strategies to manage the impacts of risks to information, by offering centrally controlled server-based virus protection and content-filtering products and services. By protecting

1-xiii

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 Installation Guide information that flows through Internet gateways, email servers, and file servers, Trend

Micro allows companies and service providers worldwide to stop viruses and other malicious code from a central point, before they ever reach the desktop.

For more information, or to download evaluation copies of Trend Micro products, visit our award-winning Web site: http://www.trendmicro.com

1-xiv

Preinstallation Planning

This chapter describes the following:

•

Server Requirements on page 1-2

•

Information Needed to Install IWSVA on page 1-6

•

Planning Network Traffic Protection on page 1-9

Chapter 1

1-1