You are on page 1of 51

FPT Information System

Tng Cc Hi quan Vit nam


D n trin khai h thng AD v Security

Thit k h thng dit virus Quy trnh ci t NAV


v1.0

TCHQ - D n trin khai h thng AD v Security

1. Thng S H Thng
Symantec Norton Anti-virus Corporate: Th mc ci t : C:\Program Files\Symantec Cc thng s cu hnh: Kiu qut: Qut b nh,qut vng khi ng, qut file nn mc 2, qut tt c cc file Thc hin khi tm thy virus: o Backup file trc khi dit o T ng dit o Lch qut: hng ngy 12:00 pm Cc quy nh khi ci t Norton Corporate trn cc my ch: My ch Anti-virus Server(Tongcuc-NAV01) Norton Corporate 9.0

2. Quy trnh ci t v cu hnh Norton Anti-virus Corporate 9.0


2.1. Quy trnh ci t Symantec System Center Console

Cho Disk1 vo CD.

Chn CD->disk1->SSC->setup.exe Nhn p vo file setup.exe bt u ci t.

Quy trnh ci t v cu hnh Anti-Virus

Page 2 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Next >

nh du vo la chn Nhn Next tip tc.

I accept the term in the license agreement

Quy trnh ci t v cu hnh Anti-Virus

Page 3 of 51

TCHQ - D n trin khai h thng AD v Security

Nhn Next tip tc qu trnh ci t.

Chn th mc ci t Symantec System Console Center ri nhn Next.

Quy trnh ci t v cu hnh Anti-Virus

Page 4 of 51

TCHQ - D n trin khai h thng AD v Security

Nhn Back thay i bt k thng s thit lp Nhn Install chng trnh bt u qu trnh ci t.

Qu trnh ci t ang c tin hnh.

Quy trnh ci t v cu hnh Anti-Virus

Page 5 of 51

TCHQ - D n trin khai h thng AD v Security

Qu trnh ci t thnh cng, nhn Finish kt thc.

chng trnh hot ng c, h iu cn khi ng li. Nhn Yes xc nhn khi ng li my.

2.2.

Ci t Symantec Norton Anti-virus Corporate 9.0 Server

Quy trnh ci t ny c tin hnh trn my ch Anti-Virus server(xxx-NAV01) Logon vo my ch chy Windows 2003 vi quyn ca Administrator a a CD ci t Disk1 vo

Quy trnh ci t v cu hnh Anti-Virus

Page 6 of 51

TCHQ - D n trin khai h thng AD v Security

M th mc Disk1->SAV trn CD. Chy chng trnh setup.exe Chng trnh s bt u thc hin vic ci NAV 9.0

Ch n khi vic kim tra h iu hnh kt thc

Quy trnh ci t v cu hnh Anti-Virus

Page 7 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Next >

nh du vo la chn Chn Next

I accept the term in the license agreement

La chn

Server Install v nhn Next > tip tc

Quy trnh ci t v cu hnh Anti-Virus

Page 8 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Next>

nh du vo la chn Chn Next

Complete

Quy trnh ci t v cu hnh Anti-Virus

Page 9 of 51

TCHQ - D n trin khai h thng AD v Security

Trong mc Server Group g vo tn Domain bt k vi quy nh t tn sau, HQ l vit tt ca Hi Quan, cn xxx l tn ca cc Hi Quan, v d: HQHaNoi ch Domain dit virus ca cc Hi Quan H Ni- Domain ny s dng khai bo khi ci t cc bn Norton Anti-Virus Corporate 9.0 Client trn cc Workstation. Ch : Khi khi to bt k mt domain mi no, qu trnh ci t s hi li password confirm rng admin mun to mt domain mi: Nhp Password: navadmin

Nhp li password mt ln na v nhn OK.

Quy trnh ci t v cu hnh Anti-Virus

Page 10 of 51

TCHQ - D n trin khai h thng AD v Security

Nhn Next > tip tc qu trnh ci t B la chn Run LiveUpdate

Nhn vo Install bt u ci t chng trnh

i cho qu trnh ci t hon tt.

Quy trnh ci t v cu hnh Anti-Virus

Page 11 of 51

TCHQ - D n trin khai h thng AD v Security

Qu trnh ci t thnh cng, nhn Finish kt thc. Chuyn vo th mc cha b ci NAV 9.0

M file 20050508-006-i32.exe cp nht bn virus hoc c th cp nht trc tip trn website ca Symantec c c bn cp nht mi nht. Ch : 8 ch s u ch ngy thng nm ca bn cp nht, trong a ci c th c bn mi hn. V d 20050508 l bn chon ngy 08-05-2004.

Quy trnh ci t v cu hnh Anti-Virus

Page 12 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Yes,

Ch chng trnh cp nht

Chn OK, kt thc qu trnh ci t.

2.3. Ci t Symantec Norton Anti-virus Corporate 9.0 Client (p dng cho cc workstation)
Quy trnh ci t ny c tin hnh trn my trm(Windowns Xp, 2000, 2003) Logon vo my trm vi quyn ca Administrator. a CD Disk1 vo CD hoc ci t qua mng

Quy trnh ci t v cu hnh Anti-Virus

Page 13 of 51

TCHQ - D n trin khai h thng AD v Security

Chuyn vo th mc Sav, chy file setup.exe

i cho qu trnh kim tra h iu hnh. Nhn Next > tip tc

Quy trnh ci t v cu hnh Anti-Virus

Page 14 of 51

TCHQ - D n trin khai h thng AD v Security

nh du vo la chn Chn Next

I accept the terms in the license agreement

Client Install La chn Nhn Next > tip tc

Quy trnh ci t v cu hnh Anti-Virus

Page 15 of 51

TCHQ - D n trin khai h thng AD v Security

nh du vo la chn Chn Next

Complete

Quy trnh ci t v cu hnh Anti-Virus

Page 16 of 51

Chn la chn

Managed.

Trong mc Server Name, g vo tn ca my ch chy Norton Anti-virus Corporate 9.0 hoc bm Browse .

TCHQ - D n trin khai h thng AD v Security

Chn XXX-NAV01. Chn OK Bm Next. Nu qu trnh hin ln ca s sau:

M file hosts trong th mc C:\Windows\System32\Drivers\etc i vi WinXP Thm vo cui cng ca file hosts dng lnh : 10.x.224.22 xxx-NAV01 10.x.224.22 l a ch my ch ci NAV xxx-NAV01 l tn my ch ci NAV. Qu trnh ci s tr li bnh thng.

Quy trnh ci t v cu hnh Anti-Virus

Page 18 of 51

TCHQ - D n trin khai h thng AD v Security

i cho qu trnh ci t thnh cng.

Qu trnh ci t thnh cng, nhn Finish kt thc

Quy trnh ci t v cu hnh Anti-Virus

Page 19 of 51

TCHQ - D n trin khai h thng AD v Security

2.4.

Ci t NAV client cho Win9x

M th mc cha b ci NAV, tm file rootsupd.exe. Nhp p vo file rootsupd.exe m chng trnh.

Nu khng bo g ngha l qu trnh ci t thnh cng. M file hosts trong th mc C:\Windows Thm vo cui cng ca file hosts dng lnh : 10.x.224.22 xxx-NAV01 Kch chut phi vao Network Neighbood chn Properties:

Lm theo cc bc nh hnh v:

Quy trnh ci t v cu hnh Anti-Virus

Page 20 of 51

TCHQ - D n trin khai h thng AD v Security

Chn File and Print Sharing.

Chn dng lnh: I want to be able to give others access to my files. Bm OK. Chn ADD

Quy trnh ci t v cu hnh Anti-Virus

Page 21 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Protocol, chn Add..

Chn Microsoft-NetBEUI Chn OK

Khi chng trnh hi a ci t, a a CD1 vo CD, chn ng dn nh trn. Bm OK.

Quy trnh ci t v cu hnh Anti-Virus

Page 22 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Yes restart li my.

Tip tc thc hin qu trnh ci t ging nh ci t cho WinXP Quay li ci tip NAV client cho my trm. Quy trnh ci cc bc sau ging nh ci t cho WinXp

3. Cu hnh Symantec System Central Server.


3.1. Quy trnh ci t cc thng s cu hnh cho ton b h thng Symantec Corporate 9.0 Anti-Virus thng qua Console Center.
Khi ng chng trnh Symantec System Console

Trc ht c th cu hnh Symantec System Console Center, tr n Symantec System Center:

Quy trnh ci t v cu hnh Anti-Virus

Page 23 of 51

TCHQ - D n trin khai h thng AD v Security

Nhn vo

tm System Hierarchy

Chn Server Group thit lp cc policy cho group .Ch mc nh th tt c cc Group Server b Locked(kha), trnh tnh trng cc thng s b thay i bi cc User khng c quyn thay i. Unlock Server Group lm theo cc bc sau:

Quy trnh ci t v cu hnh Anti-Virus

Page 24 of 51

TCHQ - D n trin khai h thng AD v Security

Nhp chut phi vo Server Group cn cu hnh, chn Unlock Server Group

Nhp Password: navadmin Chn OK.

Chn Group HQXXX->XXX-nav01 Bm chut phi vo XXX-nav01, chn Make Server a Primary Server.

Quy trnh ci t v cu hnh Anti-Virus

Page 25 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Yes.

Sau khi chn XXX-nav01 l primary chng trnh hin ra nh trn. Nhp chut vo chn Server Group HQxxx m ta va Unlock.

Quy trnh ci t v cu hnh Anti-Virus

Page 26 of 51

TCHQ - D n trin khai h thng AD v Security

Chn xxx-nav01 All Tasks->LiveUpdate Configure

Chn Sysmantec LiveUpdate Server. Chn OK.

Quy trnh ci t v cu hnh Anti-Virus

Page 27 of 51

TCHQ - D n trin khai h thng AD v Security

Chn All Tasks->Sysmantec Antivirus-> Virus Defintions Manager

Chn Update the Primary Server of this Server Group only. Chn Update virus definitions from parent server. Bm Settings

Quy trnh ci t v cu hnh Anti-Virus

Page 28 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Check for updates every 10 minutes. Chn OK Chn Scheldule client for automatic updates using LiveUpdate Chn Schedule

Chn Advanced

B chn Perform update within plus or minus. B chn Randomize the day of week within the interval Chn OK

Quy trnh ci t v cu hnh Anti-Virus

Page 29 of 51

TCHQ - D n trin khai h thng AD v Security

Chn weekly Chn every Friday, At 12:00PM Chn OK

Chn Download product updates using LiveUpdate. Chn OK

Quy trnh ci t v cu hnh Anti-Virus

Page 30 of 51

TCHQ - D n trin khai h thng AD v Security

Thit lp thng s cho Scheduled Scans(Qut virus nh k)

Quy trnh ci t v cu hnh Anti-Virus

Page 31 of 51

TCHQ - D n trin khai h thng AD v Security

Trc ht ta thit lp cho server scans. Nhp chut vo New...

Thit lp cc thng s nh trn hnh minh ha. Nhp OK confirm. Sau ta thit lp thng s cho client scans.Chn Option Client Scans.

Quy trnh ci t v cu hnh Anti-Virus

Page 32 of 51

TCHQ - D n trin khai h thng AD v Security

Nhp chut vo New

Thit lp cc thng s nh trn hnh minh ha. Nhp OK kt thc.

Quy trnh ci t v cu hnh Anti-Virus

Page 33 of 51

TCHQ - D n trin khai h thng AD v Security

Nhp chut vo Client Administrator Only Options

Quy trnh ci t v cu hnh Anti-Virus

Page 34 of 51

TCHQ - D n trin khai h thng AD v Security

Trong th General thit lp thng s nh trn hnh minh ha.

Trong th Security thit lp nh hnh minh ha, nu mun thay i password cho php Client Users uninstall Norton Corporate 9.0 th nhp chut vo Change

Password mc nh l: Symantec. Nhp OK confirm. Thay i Password trong Server Group:

Quy trnh ci t v cu hnh Anti-Virus

Page 35 of 51

TCHQ - D n trin khai h thng AD v Security

Nhp chut phi Server Group cn thay i password, chn Configure Server Group Password

Nhp password vo cc . Nhp OK confirm.

Quy trnh ci t v cu hnh Anti-Virus

Page 36 of 51

TCHQ - D n trin khai h thng AD v Security

Quy trnh ci t v cu hnh Anti-Virus

Page 37 of 51

TCHQ - D n trin khai h thng AD v Security

Sau khi hon tt qu trnh ci t, nhp chut phi vo Server Group v chon Lock Server Group.

3.2. Ci t NAV 9.0 Clients trn my trm(NT/2000/XP/Server) bng Symantec System Center Console.

Khi ng chng trnh nh sau

Quy trnh ci t v cu hnh Anti-Virus

Page 38 of 51

TCHQ - D n trin khai h thng AD v Security

Chy chng trnh Symantec System Center Console, giao din chnh ca chng trnh.

Chn HQXXX, bm chut phi

Quy trnh ci t v cu hnh Anti-Virus

Page 39 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Unlock Server Group.

Nhp password: tchqadmin. Bm OK Chng trnh hin ra ca s ging sau.

Quy trnh ci t v cu hnh Anti-Virus

Page 40 of 51

TCHQ - D n trin khai h thng AD v Security

Chn HQXXX. Chn XXX-NAV01 Bm chut phi vo XXX-NAV01.

Chn Make Server a Primary Server

Quy trnh ci t v cu hnh Anti-Virus

Page 41 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Yes.

Khi thnh cng biu tng ca XXX-NAV01 chuyn thnh nh trn.

Chng ta s tin hnh ci t Norton Anti-Virus Corporate 9.0 Client trn cc my trm(Workstation) bng chng trnh Symantec System Console Center, tin hnh nh sau.

Quy trnh ci t v cu hnh Anti-Virus

Page 42 of 51

TCHQ - D n trin khai h thng AD v Security

Vo menu Tools la chn NT Client Install.

Nhn Next tip tc.

Quy trnh ci t v cu hnh Anti-Virus

Page 43 of 51

TCHQ - D n trin khai h thng AD v Security

Nhn Next.

Nhn vo

tm cc my trm trong h thng ci t.

Quy trnh ci t v cu hnh Anti-Virus

Page 44 of 51

TCHQ - D n trin khai h thng AD v Security

Tin hnh chn my trm, nu ta chn nhiu my trm trong cng mt domain th gi phm Crtl v chn nhiu my cng mt lc (Note: Cn bo m rng a ci t Norton Corporate 9.0 vn cn trong a.)

Chn my ch AntiVirus Servers trn h thng my ch ci sn Norton Anti-Virus Corporate 9.0 Server (Xin xem lai quy trnh 2.1). Chn my trm cn ci. Nhn Add >.

Quy trnh ci t v cu hnh Anti-Virus

Page 45 of 51

TCHQ - D n trin khai h thng AD v Security

ci t chng trnh ny ta cn User Name v Password ca Administrator. Nhp User name v Password c quyn administrator trn my trm tip tc.

Qu trnh khai bo hon tt, nhn Finish ci t Norton Anti-Virus Corporate 9.0 Client trn h thng my trm la chn. Trong trng hp khng ni n c xp client c th do xpclient ci sp2, default setting trong sp2 ch cho truy cp bng guest. Tham kho quy trnh sa li bn di.

Quy trnh ci t v cu hnh Anti-Virus

Page 46 of 51

TCHQ - D n trin khai h thng AD v Security

Sau khi hon tt chng trnh hin ra nh trn. Nhn Done kt thc

4. Trouble shooting
4.1. Xpclient

Startmenu Run->mmc.exe T menu file chn Add and remove

Quy trnh ci t v cu hnh Anti-Virus

Page 47 of 51

TCHQ - D n trin khai h thng AD v Security

Chn ADD

Chn Group Policy.


Quy trnh ci t v cu hnh Anti-Virus Page 48 of 51

TCHQ - D n trin khai h thng AD v Security

Chn ADD

Chn Finish Chn Close Chn OK T Console root->chn Local Computer Security->Computer configuration->windows setting security setting security options - >network access: sharing and security model

Nhy p

Quy trnh ci t v cu hnh Anti-Virus

Page 49 of 51

TCHQ - D n trin khai h thng AD v Security

Chn Clasic Chn OK Exit khi mmc. T start->run cmd.exe G lnh. Gpupdate.exe

4.2.

Win9x

Cu hnh cho win9x

Chn File and Print Sharing

Quy trnh ci t v cu hnh Anti-Virus

Page 50 of 51

TCHQ - D n trin khai h thng AD v Security

Chn I want to able to give others access to my files Chn OK Chn tip OK.

Quy trnh ci t v cu hnh Anti-Virus

Page 51 of 51

You might also like