product guide revision 1.0 mcafee installation...

McAfee® Installation Designer™

version 8.0

Product GuideRevision 1.0

COPYRIGHTCopyright © 2004 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 5000 Headquarters Drive, Plano, Texas 75024, or call +1-972-963-8000.

TRADEMARK ATTRIBUTIONSActive Firewall, Active Security, ActiveSecurity (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX Certification Certified Network Expert and design, Covert, Design (Stylized E), Design (Stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label, Entercept, Enterprise SecureCast, Enterprise SecureCast (in Katakana), ePolicy Orchestrator, EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HomeGuard, Hunter, IntruShield, Intrusion Prevention Through Innovation, IntruVert Networks, LANGuru, LANGuru (in Katakana), M and Design, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, McAfee VirusScan, NA Network Associates, Net Tools, Net Tools (in Katakana), NetCrypto, NetOctopus, NetScan, NetShield, NetStalker, Network Associates, Network Associates Coliseum, NetXray, NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport, Recoverkey, Recoverkey - International, Registry Wizard, RingFence, Router PM, SecureCast, SecureSelect, Sniffer, Sniffer (in Hangul), SpamKiller, Stalker, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Virus Defense, Trusted Mail, UnInstaller, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, What’s The State Of Your IDS?, Who’s Watching Your Network, WinGauge, Your E-Business Defender, Zip Manager are registered trademarks or trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. Sniffer® brand products are made only by Network Associates, Inc. All other registered and unregistered trademarks herein are the sole property of their respective owners.

LICENSE INFORMATIONLicense AgreementNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICHSETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSEYOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THATACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILEON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOTAGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCTTO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND.

AttributionsThis product includes or may include:

Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). Cryptographic software written by Eric A. Young andsoftware written by Tim J. Hudson. Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or othersimilar Free Software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access tothe source code. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the source codealso be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licensesrequire that Network Associates provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rightsshall take precedence over the rights and restrictions herein. Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer.

Software originally written by Robert Nordier, Copyright © 1996-7 Robert Nordier. Software written by Douglas W. Sauder. Software developed by theApache Software Foundation (http://www.apache.org/). A copy of the license agreement for this software can be found at www.apache.org/licenses/LICENSE-2.0.txt. International Components for Unicode (“ICU”) Copyright © 1995-2002 International Business Machines Corporation and others. Software developedby CrystalClear Software, Inc., Copyright © 2000 CrystalClear Software, Inc. FEAD® Optimizer® technology, Copyright Netopsystems AG, Berlin, Germany.

Outside In® Viewer Technology © 1992-2001 Stellent Chicago, Inc. and/or Outside In® HTML Export, © 2001 Stellent Chicago, Inc. Software copyrighted byThai Open Source Software Center Ltd. and Clark Cooper, © 1998, 1999, 2000. Software copyrighted by Expat maintainers. Software copyrighted by TheRegents of the University of California, © 1989. Software copyrighted by Gunnar Ritter. Software copyrighted by Sun Microsystems®, Inc.© 2003. Softwarecopyrighted by Gisle Aas. © 1995-2003. Software copyrighted by Michael A. Chase, © 1999-2000. Software copyrighted by Neil Winton, © 1995-1996.

Software copyrighted by RSA Data Security, Inc., © 1990-1992. Software copyrighted by Sean M. Burke, © 1999, 2000. Software copyrighted by MartijnKoster, © 1995. Software copyrighted by Brad Appleton, © 1996-1999. Software copyrighted by Michael G. Schwern, © 2001. Software copyrighted byGraham Barr, © 1998. Software copyrighted by Larry Wall and Clark Cooper, © 1998-2000. Software copyrighted by Frodo Looijaard, © 1997. Softwarecopyrighted by the Python Software Foundation, Copyright © 2001, 2002, 2003. A copy of the license agreement for this software can be found at www.python.org.

Software copyrighted by Beman Dawes, © 1994-1999, 2002. Software written by Andrew Lumsdaine, Lie-Quan Lee, Jeremy G. Siek © 1997-2000 University ofNotre Dame. Software copyrighted by Simone Bordet & Marco Cravero, © 2002. Software copyrighted by Stephen Purcell, © 2001. Software developedby the Indiana University Extreme! Lab (http://www.extreme.indiana.edu/). Software copyrighted by International Business Machines Corporation and others,© 1995-2003. Software developed by the University of California, Berkeley and its contributors. Software developed by Ralf S. Engelschall<[email protected]> for use in the mod_ssl project (http://www.modssl.org/). Software copyrighted by Kevlin Henney, © 2000-2002. Softwarecopyrighted by Peter Dimov and Multi Media Ltd. © 2001, 2002. Software copyrighted by David Abrahams, © 2001, 2002. See http://www.boost.org/libs/bind/bind.html for documentation. Software copyrighted by Steve Cleary, Beman Dawes, Howard Hinnant & John Maddock, © 2000. Software copyrighted byBoost.org, © 1999-2002. Software copyrighted by Nicolai M. Josuttis, © 1999. Software copyrighted by Jeremy Siek, © 1999-2001. Software copyrightedby Daryle Walker, © 2001. Software copyrighted by Chuck Allison and Jeremy Siek, © 2001, 2002. Software copyrighted by Samuel Krempp, © 2001. Seehttp://www.boost.org for updates, documentation, and revision history. Software copyrighted by Doug Gregor ([email protected]), © 2001, 2002. Softwarecopyrighted by Cadenza New Zealand Ltd., © 2000. Software copyrighted by Jens Maurer, © 2000, 2001. Software copyrighted by Jaakko Järvi([email protected]), © 1999, 2000. Software copyrighted by Ronald Garcia, © 2002. Software copyrighted by David Abrahams, Jeremy Siek, and DaryleWalker, © 1999-2001. Software copyrighted by Stephen Cleary ([email protected]), © 2000. Software copyrighted by Housemarque Oy <http://www.housemarque.com>, © 2001. Software copyrighted by Paul Moore, © 1999. Software copyrighted by Dr. John Maddock, © 1998-2002. Softwarecopyrighted by Greg Colvin and Beman Dawes, © 1998, 1999. Software copyrighted by Peter Dimov, © 2001, 2002. Software copyrighted by Jeremy Siek andJohn R. Bandela, © 2001. Software copyrighted by Joerg Walter and Mathias Koch, © 2000-2002.

PATENT INFORMATIONProtected by US Patents 6,006,035; 6,035,423; 6,266,811; 6,269,456; 6,496,875; 6,668,289.

Issued July 2004 / McAfee® Installation Designer™ software version 8.0DBN 007-EN

http://www.openssl.org/

http://www.apache.org/

http://www.apache.org/licenses/LICENSE-2.0.txt

http://www.apache.org/licenses/LICENSE-2.0.txt

http://www.python.org

http://www.boost.org/libs/bind/bind.html

http://www.boost.org/libs/bind/bind.html

http://www.boost.org

http://www.housemarque.com

http://www.housemarque.com

Product Guide iii

Contents

1 Introducing McAfee Installation Designer . . . . . . . . . . . . . . . . . . . 7

Using this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Getting product information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Contacting McAfee Security & Network Associates . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2 Installing and Uninstalling the Software . . . . . . . . . . . . . . . . . . . 13

Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Pre-installation recommendations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

System requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Installing the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Uninstalling the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Using Setup to remove the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Using Add/Remove Programs to remove the software . . . . . . . . . . . . . . . . . . . . . . . 17

3 Configuring Installation Packages and Settings Files . . . . . . . . 19

Starting McAfee Installation Designer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Configuring an installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Using an existing installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Setting source and destination folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Setting features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Setting the source for configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Setting installation options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Configuring the On-Access Scanner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Configuring the On-Delivery Scanner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Configuring or scheduling on-demand scans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Adding on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Editing on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Deleting on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Configuring the AutoUpdate schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Contents

iv McAfee® Installation Designer™ software version 8.0

Adding an update task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Editing an update task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Deleting update tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Adding a mirror task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Editing a mirror task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Deleting mirror tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Configuring Alert Manager properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Configuring Alert Manager installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Configuring Desktop Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Configuring user interface properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Setting Add/Remove programs options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Configuring DAT and engine files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Using separate .ZIP files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Including the EXTRA.DAT file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Configuring patch files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Adding patch files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Editing patch files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Deleting patch files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Configuring AutoUpdate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

AutoUpdate repository list file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Setting programs to run after installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Adding programs to run after installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Editing program entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Deleting program entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Setting additional files to install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Adding files to the installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Editing existing additional files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Deleting existing additional files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Setting registry settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Setting McAfee Installation Designer password . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Upgrading the license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Configuring post-installation options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Reviewing and saving your installation configuration . . . . . . . . . . . . . . . . . . . . . . . . 68

Configuring an installation package (Desktop Firewall only) . . . . . . . . . . . . . . . . . . . . . . . 69

Using an existing installation package (Desktop Firewall only) . . . . . . . . . . . . . . . . . 69

Setting destination folder (Desktop Firewall only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 70


Reviewing and saving your installation configuration . . . . . . . . . . . . . . . . . . . . . . . . 73

Product Guide v

Contents

Generating a settings file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Setting source for configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Setting destination options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Setting configuration type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Configuring the On-Access Scanner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Configuring On-Delivery Scanner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Configuring or scheduling on-demand scans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Adding on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Editing on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Deleting on-demand scan tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Configuring the AutoUpdate schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Adding an update task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Editing an update task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Deleting update tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Adding a mirror task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Editing a mirror task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Deleting mirror tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Configuring Alert Manager properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94


Configuring user interface properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Configuring AutoUpdate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

AutoUpdate repository list file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Setting registry settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Setting McAfee Installation Designer password . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

Upgrading the license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Reviewing and saving your installation configuration . . . . . . . . . . . . . . . . . . . . . . . 107

Generating a settings file (Desktop Firewall only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Setting source for configuration (Desktop Firewall only) . . . . . . . . . . . . . . . . . . . . . 109

Setting destination options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

Configuring Desktop Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Reviewing and saving your installation configuration . . . . . . . . . . . . . . . . . . . . . . . 113

What’s next? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

4 Deploying Installation Packages and Settings File . . . . . . . . . 115

The completed installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Deployment tools for installation packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Optimized installation packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Regular installation packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Contents

vi McAfee® Installation Designer™ software version 8.0

Installation packages for Desktop Firewall only . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

The completed settings file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

Deployment tools for settings files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

Settings file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Settings file for Desktop Firewall only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Frequently asked questions (FAQ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

Return codes from optimization of packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Product Guide 7

1Introducing McAfee Installation Designer

The McAfee Installation Designer software allows an administrator to pre-configure a VirusScan Enterprise or Desktop Firewall software package for installation on another computer. This allows you to configure the product for groups of computers all at once. Using a graphical interface, the utility allows you to:

Pre-set any install-time options for VirusScan Enterprise, Desktop Firewall, or both.

Select additional files to copy onto the system during installation.

Set registry keys in addition to those set by the installation.

Install the most current DAT and engine files other than those that shipped with the product.

Modify the configuration of previous VirusScan Enterprise or Desktop Firewall deployments.

Using this guide

Resources

Introducing McAfee Installation Designer

8 McAfee® Installation Designer™ software version 8.0

The ability to create custom installation packages, workstation deployment packages, and server deployment packages for users of VirusScan Enterprise 8.0.

The ability to create stand-alone customized installation packages, workstation deployment packages, and customized server deployment packages for users of Desktop Firewall 8.x.

Support for Alert Manager 4.7.1.

Using this guideThis guide includes the following information:

Detailed instructions for installing the software.

Overview of the product.

Descriptions of product features.

Descriptions of all new features in this release of the software.

Detailed instructions for configuring and deploying the software.

Procedures for performing tasks.

Troubleshooting information.

Glossary of terms.

When using this guide, consider the following:

Audience

Conventions

AudienceThis information is designed for system and network administrators who are responsible for their company’s anti-virus and security program.

Product Guide 9

Using this guide

ConventionsThis guide uses these conventions:

Bold All words from the user interface, including options, menus, buttons, and dialog box names.

ExampleType the User name and Password of the desired account.

Courier The path of a folder or program; a web address (URL); text that represents something the user types exactly (for example, a command at the system prompt).

ExamplesThe default location for the program is:

C:\Program Files\Network Associates\VirusScan

Visit the Network Associates web site at:http://www.networkassociates.com

Run this command on the client computer:C:\SETUP.EXE

Italic For emphasis or when introducing a new term; for names of product manuals and topics (headings) within the manuals.

ExampleRefer to the VirusScan Enterprise Product Guide for more information.

<TERM> Angle brackets enclose a generic term.

ExampleIn the console tree under ePolicy Orchestrator, right-click <SERVER>.

NOTE Supplemental information; for example, an alternate method of executing the same command.

WARNING Important advice to protect a user, computer system, enterprise, software installation, or data.



ResourcesRefer to these sections for additional resources:

Getting product information

Contacting McAfee Security & Network Associates

Getting product information

Installation Guide *† System requirements and instructions for installing and starting the software.

Product Guide * Product introduction and features, detailed instructions for configuring the software, information on deployment, recurring tasks, and operating procedures.

McAfee Installation Designer ™ 8.0 Product Guide

Alert Manager™ 4.7.1 Product Guide

Desktop Firewall™ 8.0 Product Guide

VirusScan® Enterprise 8.0 Product Guide

Help § High-level and detailed information on configuring and using the software.

What’s This? field-level help.

Configuration Guide * For use with ePolicy Orchestrator. Procedures for configuring, deploying, and managing your McAfee Security product through ePolicy Orchestrator management software.

Implementation Guide * Supplemental information for product features, tools, and components.

Release Notes ‡ ReadMe. Product information, resolved issues, any known issues, and last-minute additions or changes to the product or its documentation.

Contacts ‡ Contact information for McAfee Security and Network Associates services and resources: technical support, customer service, AVERT (Anti-Virus Emergency Response Team), beta program, and training. This file also includes phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world.

* An Adobe Acrobat .PDF file on the product CD or the McAfee Security download site.

† A printed manual that accompanies the product CD. Note: Some language manuals may be available only as a .PDF file.

‡ Text files included with the software application and on the product CD.

§ Help accessed from the software application: Help menu and/or Help button for page-level help; right-click option for What’sThis? help.

Product Guide 11

Resources

Contacting McAfee Security & Network Associates

Technical Support

Home Page http://www.networkassociates.com/us/support/

KnowledgeBase Search https://knowledgemap.nai.com/phpclient/homepage.aspx

PrimeSupport Service Portal * http://mysupport.nai.com

McAfee Security Beta Program http://www.networkassociates.com/us/downloads/beta/

Security Headquarters — AVERT (Anti-Virus Emergency Response Team)

Home Page http://www.networkassociates.com/us/security/home.asp

Virus Information Library http://vil.nai.com

Submit a Sample — AVERT WebImmune

AVERT DAT Notification Service

http://vil.nai.com/vil/submit-sample.asp

http://vil.nai.com/vil/join-DAT-list.asp

Download Site

Home Page http://www.networkassociates.com/us/downloads/

DAT File and Engine Updates http://www.networkassociates.com/us/downloads/updates/

ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

Product Upgrades * https://secure.nai.com/us/forms/downloads/upgrades/login.asp

Training

McAfee Security University http://www.networkassociates.com/us/services/education/mcafee/university.htm

Network Associates Customer Service

E-mail [email protected]

Web http://www.nai.com/us/index.asp

http://www.networkassociates.com/us/support/default.asp

US, Canada, and Latin America toll-free:

Phone +1-888-VIRUS NO or +1-888-847-8766

Monday – Friday, 8 a.m. – 8 p.m., Central Time

For additional information on contacting Network Associates and McAfee Security— including toll-free numbers for other geographic areas — see the Contact file that accompanies this product release.

* Logon credentials required.

http://www.networkassociates.com/us/support/

https://knowledgemap.nai.com/phpclient/homepage.aspx

http://mysupport.nai.com

http://www.networkassociates.com/us/downloads/beta/

http://www.networkassociates.com/us/security/home.asp

http://vil.nai.com

http://vil.nai.com/vil/submit-sample.asp

http://vil.nai.com/vil/join-DAT-list.asp

http://www.networkassociates.com/us/downloads/

http://www.networkassociates.com/us/downloads/updates/

ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

https://secure.nai.com/us/forms/downloads/upgrades/login.asp

http://www.networkassociates.com/us/services/education/mcafee/university.htm

http://www.networkassociates.com/us/services/education/mcafee/university.htm

mailto:[email protected]

http://www.nai.com/us/index.asp

http://www.networkassociates.com/us/support/default.asp

Product Guide 13

2Installing and Uninstalling the Software

This section provides instructions to install and remove the McAfee Installation Designer software and contains the following topics:

Before you begin.

Installing the software.

Uninstalling the software.

Before you beginBefore you start the installation, we recommend that you review these topics to ensure that you are prepared:

Pre-installation recommendations.

System requirements.

Pre-installation recommendationsWe recommend that you complete the following items before beginning the installation process:

Product software — Locate the McAfee Installation Designer 8.0 software.

McAfee Security distributes McAfee Installation Designer software in two ways:

On a product CD.

On the McAfee Security download web site. For more information, see Contacting McAfee Security & Network Associates on page 11.

ReadMe — Locate the ReadMe file and read it thoroughly to identify special installation instructions or issues. The ReadMe file can be found in the same location as the software.

Installation rights — Verify that you have the appropriate rights to install the software. You must have local administrator rights for the computer on which you plan to install the software.

Installing and Uninstalling the Software


System requirementsBrowser — Microsoft Internet Explorer 5.0 or later.

Free disk space:

15MB — To perform a complete installation of McAfee Installation Designer.

25MB — To configure an unmodified VirusScan Enterprise installation package.

35MB — To configure an unmodified VirusScan Enterprise and Alert Manager installation package.

20MB — To configure an unmodified Desktop Firewall installation package.

100MB — To configure an optimized VirusScan Enterprise, Alert Manager, and Desktop Firewall installation package.

Operating system (servers):

Windows NT Server 4.0, Service Pack 6 or 6a.

Windows NT Enterprise Server 4.0, Service Pack 6 or 6a.

Windows 2000 Server, Service Pack 2, 3, or 4.

Windows 2000 Advanced Server, Service Pack 2, 3, or 4.

Windows 2000 DataCenter Server, Service Pack 2, 3, or 4.

Windows Server 2003 Standard Edition, Service Pack 1.

Windows Server 2003 Enterprise Edition, Service Pack 1.

Windows Server 2003 Web Edition, Service Pack 1.

Operating system (workstations):

Windows NT Workstation 4.0, Service Pack 6 or 6a.

Windows 2000 Professional, Service Pack 2, 3, or 4.

Windows XP Home, Service Pack 1.

Windows XP Professional, Service Pack 1 or 2.

Windows XP Tablet PC Edition, Service Pack 1.

Other — A CD-ROM drive or Internet connection.

Processor — Intel Pentium-class or compatible; Pentium or Celeron (recommended).

Processor speed — 166MHz or higher.

Product Guide 15

Installing the software

Installing the software1 Insert the CD into the CD-ROM drive of the computer.

2 In the autorun window, select McAfee Installation Designer v8.0.0, then select Install McAfee Installation Designer v8.0.0 to begin the installation.

3 In the McAfee Installation Designer Setup dialog box, read the important notice about the README.TXT file, then open and read the README.TXT file.

4 Click Next to open the License Agreement dialog box.

5 Read the entire license agreement carefully, select I accept the License Agreement to agree to the license terms, then click Next.

NOTEIf the license agreement does not display correctly, read the appropriate license in the NETWORK_ASSOCIATES_LICENSE_AGREEMENT.PDF file supplied with the software.

6 In the Select Installation Folder dialog box, accept the default installation path (C:\PROGRAM FILES\NETWORK ASSOCIATES\INSTALLATION DESIGNER), or click Browse to select a different location.

Figure 2-1. License Agreement dialog box



To verify that the installation location has adequate available space, click Disk Usage to display the amount of available and required disk space on each drive.

7 Click Next to open the Ready to Install dialog box.

8 Click Next to begin the installation.

The Installing McAfee Installation Designer dialog box appears and provides the status of the installation.

9 In the McAfee Installation Designer has been installed successfully dialog box, click Finish to complete the installation.

NOTEYou might need to restart the computer to complete the installation.

Figure 2-2. Disk usage dialog box

Product Guide 17

Uninstalling the software

Uninstalling the softwareUse one of these methods to remove the McAfee Installation Designer program files:

Using Setup to remove the software.

Using Add/Remove Programs to remove the software.

Using Setup to remove the software1 To start the Setup program, double-click the SETUP.EXE file.

2 Click Remove, then Finish.

Using Add/Remove Programs to remove the software1 Use Add/Remove Programs in the Control Panel to remove the software. For

instructions, see the Windows Help file. To open this file, click the Start button, then point to Help.

2 Select McAfee Installation Designer from the list of installed programs, then click Remove.

3 Restart the computer after the removal process completes.

Figure 2-3. Remove the Program dialog box

Product Guide 19

3Configuring Installation Packages and Settings Files

This section provides information on creating custom installation packages for VirusScan Enterprise, Desktop Firewall, or both, and includes these topics:

Starting McAfee Installation Designer.

Configuring an installation package.

Configuring an installation package (Desktop Firewall only).

Generating a settings file.

Generating a settings file (Desktop Firewall only).

What’s next?

Before you begin, make sure that you have these products installed on the computer where you are running McAfee Installation Designer to configure and include them in an installation package or settings file:

Alert Manager 4.7 or later (server software).

VirusScan Enterprise 8.0 or later.

If you do not have these products installed, you cannot configure their settings.

Configuring Installation Packages and Settings Files


Starting McAfee Installation DesignerThe McAfee Installation Designer software allows administrators to create a custom VirusScan Enterprise, Desktop Firewall, or both installation package for later installation on another computer.

NOTEYou must have administrator rights to run McAfee Installation Designer.

1 To start McAfee Installation Designer from the Windows Desktop, click Start, then select Programs | Network Associates | Installation Designer. The Welcome dialog box appears.

2 Choose whether to create a new installation package or modify an existing one. Under Select the package type you would like to create, choose from these options:

Figure 3-1. Welcome dialog box

Product Guide 21

Starting McAfee Installation Designer

Create a new installation package based on an existing packageTo create an installation package similar to an existing package, McAfee Installation Designer allows you to copy an existing package (or modify the default VirusScan Enterprise or Desktop Firewall package). In doing this, you need only modify the settings you want to be different, rather than having to configure all settings. When finished, you can save the new installation package in a new location. To proceed, see Configuring an installation package on page 22 or Configuring an installation package (Desktop Firewall only) on page 69.

Modify an existing installation by generating a new settings fileIf you have already deployed VirusScan Enterprise or Desktop Firewall to a group of destination computers, and would like to modify their configuration, you can generate a new settings (.CAB) file to deploy new configurations to the group. Selecting this option allows you to create a new settings file to deploy to the existing installations. This saves you time by setting and configuring fewer options. When you select this option, notice the reduced set of options in the navigation pane of the McAfee Installation Designer. To proceed, see Generating a settings file on page 74 or Generating a settings file (Desktop Firewall only) on page 108.

3 Choose which products to include in this package. Under Select one or more products to include in this package, select one or both products:

McAfee VirusScan Enterprise (and Alert Manager).

McAfee Desktop Firewall.

4 Click Next to continue with configuration.



Configuring an installation packageWhen you select Create a new installation package based on an existing package, you can perform these actions by selecting the corresponding item in the navigation pane of McAfee Installation Designer:

Using an existing installation package.

Setting source and destination folders.

Setting features.

Setting the source for configuration.

Setting installation options.

Configuring the On-Access Scanner.

Configuring the On-Delivery Scanner.

Configuring or scheduling on-demand scans.

Configuring the AutoUpdate schedule.

Configuring Alert Manager properties.

Configuring Alert Manager installation.

Configuring Desktop Firewall.

Configuring user interface properties.

Setting Add/Remove programs options.

Configuring DAT and engine files.

Configuring patch files.

Configuring AutoUpdate.

Setting programs to run after installation.

Setting additional files to install.

Setting registry settings.

Setting McAfee Installation Designer password.

Upgrading the license.

Configuring post-installation options.

Reviewing and saving your installation configuration.

Product Guide 23

Configuring an installation package

Using an existing installation packageTo use an existing installation package as a basis for a new package:

1 From the Welcome dialog box, select Create a new installation package based on an existing package.

2 Click Next. The Source and Destination dialog box appears, with a list of all configurable components in the navigation pane.

Setting source and destination foldersIf you are modifying an existing installation package, the McAfee Installation Designer wizard asks you to specify both the source folder that contains the existing VirusScan Enterprise installation package to modify, the destination folder where the new installation package should be saved, and whether the new installation package is created as an optimized installation package.

NOTEAn optimized installation package is an installation package that is significantly smaller in size but requires extra time to install on the client computer.

Figure 3-2. Source and Destination dialog box



To specify the source and destination folders:

1 Specify the path to the source folder containing the existing installation package (full or optimized) that you want to modify.

2 Specify the path to the destination folder to which McAfee Installation Designer saves the new package file.

NOTEThe source and destination folders must be different locations.

3 Select Create an optimized installation package to create an optimized package based on the specified source package.

NOTEThe computer you are using must have a minimum of 256MB of RAM to create an optimized package.

This option is available only when you select McAfee VirusScan Enterprise (and Alert Manager) under Select one or more products to include in this package on the Welcome dialog box.

4 Click Next or use the navigation pane to save the configurations and continue setting other installation package features.

Setting featuresThe features of the VirusScan Enterprise program appear, each represented by an icon in a tree diagram.

Figure 3-3. Features dialog box

Product Guide 25


To include all the default features in the installation package, click Next.

To customize the installation:

1 Select the desired feature to display an options menu.

2 Use these menu options to include or exclude specific features in the installation.

You cannot make all features invisible. At least one feature (Console) must remain visible for the installation to proceed.

Install Feature — Includes the selected feature in the installation package.

Install Feature and Sub-Features — Includes the selected feature and its sub-features in the installation package.

Do Not Install Feature — Excludes the selected feature and its sub-features from the installation package.

Make Feature Invisible During Setup — Includes the selected feature in the package, but does not allow the end user to see it during installation. This is useful when the administrator does not want users to know that a feature of the software program exists, or is available for selection. If a feature is set to invisible, it appears in this dialog box with the label: <<Not Visible>>.

3 Click Next or use the navigation pane to save the configurations and continue.

Figure 3-4. Features options menu



Setting the source for configurationIdentify the source for configuration to be used for the settings file.

NOTEIf the source is an already modified package that was created by McAfee Installation Designer, Configuration file is selected and [IN_PACKAGE] appears in the box, because this type of source contains the McAfee Installation Designer generated settings file.

Figure 3-5. Source for Configuration dialog box

Product Guide 27


1 Select the source for the configuration settings:

Existing VirusScan Enterprise settings on local system — Select this option to use the configuration settings from the VirusScan Enterprise installation on the system where you are running McAfee Installation Designer.

If you select this option, the package being modified must be in the same language as the VirusScan Enterprise version on the local system.

Configuration file — Select this option to use the configuration settings from an existing configuration file. If you select this option, you must browse to the desired settings (.CAB) file.

None. (Allows you to configure the registry settings, Installation Designer password, and the license key only — no VirusScan Enterprise settings.) — Select this option to configure the registry settings, McAfee Installation Designer password, or the license key. This allows you to create a smaller package.


Setting installation optionsUse the Installation Options dialog box to set the installation options that define how the product installs on the destination computer:

Figure 3-6. Installation Options dialog box



1 Choose whether to use the default VirusScan Enterprise installation folder, or to specify a custom installation folder.

2 Select Install product silently if you want VirusScan Enterprise to install on the destination computer without being visible to the end user.

3 Select Preserve settings if VirusScan or NetShield has previously been installed to use the settings of a previous installation.

4 Select Do not display the VirusScan shortcuts on the Start menu to hide these shortcuts.

5 Click Next or use navigation pane to save the configurations and continue.

Configuring the On-Access Scanner Configure these options to specify how on-access scanning functions once the package is installed on the client computer.

Figure 3-7. On-Access Scanner dialog box

Product Guide 29


To configure on-access scanning:

1 From the On-Access Scanner dialog box, click Configure On-Access Scan Properties. The VirusScan On-Access Scan Properties dialog box appears.

The title bar includes (MID) to identify dialog boxes that are being accessed via the McAfee Installation Designer, and not directly through VirusScan Enterprise.

2 Use the options on these tabs (for each of the items in the list view) to configure the on-access scanner. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.

3 Click OK to return to the McAfee Installation Designer wizard.

Figure 3-8. VirusScan On-Access Scan Properties dialog box



4 Click Configure Access Protection Properties to open the Access Protection Properties dialog box.

5 Use the options on these tabs to configure the access protection properties. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.


Figure 3-9. Access Protection Properties dialog box

Product Guide 31


7 Click Configure Buffer Overflow Protection Properties to open the Buffer Overflow Protection Properties dialog box.

8 Use the options on these tabs to configure the buffer overflow protection properties. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.


Figure 3-10. Buffer Overflow Protection Properties dialog box



10 Click Configure Unwanted Programs Policy to open the Unwanted Programs Policy dialog box.

11 Use the options on these tabs to configure the unwanted programs policy. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.



Figure 3-11. Unwanted Programs Policy dialog box

Product Guide 33


Configuring the On-Delivery Scanner Configure these options to specify how e-mail scanning functions once the package is installed on the client computer.

The On-Delivery E-mail Scanner is enabled by default. To disable the scanner, deselect Enable On-Delivery E-mail Scanner.

Figure 3-12. On-Delivery Scanner dialog box



To configure the On-Delivery Scanner:

1 From the On-Delivery Scanner dialog box, click Configure On-Delivery Scan Properties. The On Delivery E-mail Scan Properties dialog box from the VirusScan Console appears.

The title bar includes (MID) to identify that the dialog box is being accessed via the McAfee Installation Designer, and not directly through VirusScan Enterprise.

2 Use the options on these tabs to configure the e-mail scan settings. For more information, see the VirusScan Enterprise 8.0 Product Guide.

3 Click OK.


Figure 3-13. On-Delivery E-mail Scan Properties dialog box

Product Guide 35


Configuring or scheduling on-demand scansConfigure these options to set and schedule on-demand scans to run on the destination computers once the package is installed.

Adding on-demand scan tasks.

Editing on-demand scan tasks.

Deleting on-demand scan tasks.

Adding on-demand scan tasks1 Click Add. The Add Scheduled Scan Task dialog box appears.

Figure 3-14. Scheduled Scans dialog box

Figure 3-15. Add Scheduled Scan Task dialog box



2 Name the task in the Task name box.

NOTEThe OK button is not enabled until after you configure the scan task.

3 Click Configure Scheduled Scan Properties. The VirusScan On-Demand Scan Properties dialog box appears.


4 Use the options on this dialog box to configure and schedule the scan task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

5 When finished configuring and scheduling the task, click OK to return to the Add Scheduled Scan Task dialog box.

6 Click OK to save the scan task and return to the McAfee Installation Designer wizard.

7 When finished, choose whether to Add these to existing tasks on the target system, or to Replace the existing tasks with these tasks.

8 When you complete adding, editing and deleting tasks, click Next or use the navigation pane to save the configurations and continue.

Figure 3-16. VirusScan On-Demand Scan Properties dialog box

Product Guide 37


Editing on-demand scan tasks1 Select the desired on-demand scan task in the Scheduled Scans dialog box,

then click Edit. The Edit Scheduled Scan Task dialog box appears.

2 Edit the task name, if desired, then click Configure Scheduled Scan Properties. The VirusScan On-Demand Scan Properties dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the scan task.

Figure 3-17. Edit Scheduled Scan Task dialog box






4 When finished configuring and scheduling the task, click OK to return to the Edit Scheduled Scan Task dialog box.



7 When you complete adding, editing, and deleting tasks, click Next or use the navigation pane to save the configurations and continue.

Deleting on-demand scan tasks1 Select the desired on-demand scan task in the Scheduled Scans dialog box,

then click Delete.

2 Click Yes when prompted to verify that you want to delete the task.



Product Guide 39


Configuring the AutoUpdate scheduleConfigure these options to set and schedule update and mirror tasks to run from the destination computers once the package is installed.

Adding an update task.

Editing an update task.

Deleting update tasks.

Adding a mirror task.

Editing a mirror task.

Deleting mirror tasks.

Adding an update task1 Click Add Update Task. The Add AutoUpdate Task dialog box appears.


NOTEThe OK button is not enabled until after you configure and schedule the update task.

3 Click Configure AutoUpdate Properties. The VirusScan AutoUpdate Properties dialog box appears.

Figure 3-19. AutoUpdate Schedule dialog box




4 Use the options on this dialog box to configure and schedule the update task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

5 When finished configuring and scheduling the task, click OK to return to the Add AutoUpdate Task dialog box.

6 Click OK to save the update task and return to the McAfee Installation Designer wizard.

7 When finished configuring update tasks, choose whether to Add these to existing tasks on the target system, or to Replace the existing tasks with these tasks.


Editing an update task1 Select the desired update task in the AutoUpdate Schedule dialog box, then

click Edit. The Edit AutoUpdate Task dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the update task.

2 Edit the task name, if desired, then click Configure AutoUpdate Properties. The VirusScan AutoUpdate Properties dialog box appears.

The title bar includes (MID) to identify that the dialog is being accessed via the McAfee Installation Designer, and not directly through VirusScan Enterprise.

3 Use these options to configure and schedule the update task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

4 When finished configuring and scheduling the task, click OK to return to the Edit AutoUpdate Task dialog box.


6 When you complete configuring update tasks, choose whether to add this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination computer with this list of tasks.


Product Guide 41


Deleting update tasks1 Select the desired update task in the AutoUpdate Schedule dialog box, then

click Delete.


3 When you complete configuring the update tasks, choose whether to add this list of tasks to the existing tasks on the destination system, or to replace the existing tasks on the destination system with this list of tasks.


Adding a mirror task1 Click Add Mirror Task. The Add Mirror Task dialog box appears.


NOTEThe OK button is not enabled until after you configure and schedule the mirror task.

3 Click Configure Mirror Properties. The VirusScan AutoUpdate Properties dialog box appears.

Figure 3-20. VirusScan AutoUpdate Properties dialog box




4 Use the options on this dialog box to configure and schedule the mirror task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

5 When finished configuring and scheduling the task, click OK to return to the Add Mirror Task dialog box.

6 Click OK to save the mirror task and return to the McAfee Installation Designer wizard.

7 When you complete configuring mirror tasks, choose whether to add this list of tasks to the existing tasks on the destination system, or to replace the existing tasks.


Editing a mirror task1 Select the desired mirror task in the AutoUpdate Schedule dialog box, then click

Edit. The Edit Mirror Task dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the mirror task.

2 Edit the task name, if desired, then click Configure Mirror Properties. The VirusScan AutoUpdate Properties dialog box appears.


3 Use these options to configure and schedule the mirror task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

4 When finished configuring and scheduling the task, click OK to return to the Edit Mirror Task dialog box.


6 When you complete configuring scheduled mirror tasks, choose whether to add this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination system with this list of tasks.


Product Guide 43


Deleting mirror tasks1 Select the desired mirror task in the AutoUpdate Schedule dialog box, then click

Delete.

2 Click Yes when prompted to verify you want to delete the task.

3 When you complete configuring the tasks, choose whether to add the this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination computer with this list of tasks.


Configuring Alert Manager propertiesConfigure these options to specify how VirusScan Enterprise notifies Alert Manager once the package is installed on the client computer.

Figure 3-21. Alert Manager Properties dialog box



To configure VirusScan Enterprise alerting:

1 From the Alert Manager Properties dialog box, click Configure Alert Manager Properties. The Alert Properties dialog box from the VirusScan Console appears.


2 Use the options on this tab to configure the alerting settings. For more information, see the VirusScan Enterprise 8.0 Product Guide.

3 Click OK.


Figure 3-22. Alert Properties dialog box

Product Guide 45


Configuring Alert Manager installationConfigure the Alert Manager installation options to specify location and service account options.

To configure Alert Manager installation options:

1 Select Install Alert Manager.

NOTEIf you do not want to install Alert Manager, make sure that Install Alert Manager is deselected, then click Next.

2 Choose whether to install to servers only, or to both servers and workstations.

3 In Source folder, specify the path to the location of the source Alert Manager files.

NOTEIf the VirusScan Enterprise source contains an Alert Manager (AMG) subfolder, the path to this subfolder appears in Source folder by default.

4 Choose whether to install to the default installation folder, or specify a custom installation folder. To specify a custom folder, you must browse to the desired location.

Figure 3-23. Alert Manager Installation dialog box



5 Under Alert Manager Service Account:

Select Use system account if you want Alert Manager to use the local account on the computer where you are installing Alert Manager.

Deselect Use system account if you want Alert Manager to use a specific account. If you deselect Use system account, you must type the User Name and Password of the desired account.


Configuring Desktop FirewallConfigure Desktop Firewall installation options and properties to specify the installation location and the settings of the firewall, application, intrusion detection, and administrative options.

NOTEThis dialog box appears only if you selected McAfee Desktop Firewall on the Welcome dialog box. If you do not want to install Desktop Firewall, deselect Install McAfee Desktop Firewall, then click Next.

Figure 3-24. McAfee Desktop Firewall dialog box

Product Guide 47


To configure Desktop Firewall installation options:

1 Select Install McAfee Desktop Firewall.

2 Type the path to, or browse to the location of, the Desktop Firewall installation file.

3 Choose whether to use the default installation folder, or specify a custom installation folder.

4 Select Install product silently if you want Desktop Firewall to install on the destination computer without being visible to the end user.

5 Select This package will be managed by ePolicy Orchestrator, if you plan to manage Desktop Firewall with ePolicy Orchestrator™.

NOTEWhen This package will be managed by ePolicy Orchestrator is selected, the Desktop Firewall policies that are added or modified with McAfee Installation Designer can only be managed by ePolicy Orchestrator — the user at the destination computer cannot modify the settings. If the option is not selected, the user at the destination computer can modify the settings.



To configure Desktop Firewall properties:

1 Click Configure McAfee Desktop Firewall Properties. The McAfee Desktop Firewall Configuration dialog box appears.

2 Configure the options as desired on the four tabs: Firewall Configuration, Application Configuration, Intrusion Configuration, and Administrative Configuration.

NOTEFor information about the options on these tabs, see the Desktop Firewall 8.0 Product Guide.

3 Click OK when you finish configuring the options on these tabs.


Figure 3-25. McAfee Desktop Firewall Configuration dialog box

Product Guide 49


Configuring user interface propertiesConfigure the user interface properties to specify which parts of the VirusScan Enterprise user interface are available on the client computers.

Figure 3-26. User Interface Properties dialog box



To configure user interface options:

1 From the User Interface Properties dialog box, click Configure user interface properties. The User Interface Options dialog box from the VirusScan Console appears.


2 Use the options of the User Interface Options dialog box to configure the user interface options. For more information, see the VirusScan Enterprise 8.0 Product Guide.


4 Select Enable Error Reporting to track and log issues in the software.


Figure 3-27. User Interface Options dialog box

Product Guide 51


Setting Add/Remove programs optionsConfigure the add/remove options to specify which information and options appear in the Control Panel for Add/Remove Programs.

For all Windows versions

Select Allow user to uninstall to give the end user on the client computer the ability to use the Control Panel to uninstall the program manually. Deselecting this option prevents the end user from uninstalling the program manually from the Control Panel.

Figure 3-28. Add/Remove Options dialog box



For Windows 2000, Windows XP, and Windows Server 2003

For installations on Windows 2000, Windows XP, and Windows Server 2003 client computers, specify additional configuration options. Type any information that you want the user to see when the Add/Remove Options dialog box is visible.

1 Type the information in the appropriate boxes:

Contact

Comments

Home Page URL

Update Information URLThe URL that VirusScan Enterprise uses to check for updates.

Technical Support URLThe URL for VirusScan Enterprise technical support.

Technical Support TelephoneThe telephone number for VirusScan Enterprise technical support.

2 Select Allow user to modify features to give the end user on the client computer the ability to modify VirusScan Enterprise through the Add/Remove Programs dialog box of the Control Panel.

3 Click Show on control panel to allow the user to see and select VirusScan Enterprise through the Add/Remove Programs dialog box of the Control Panel.


Product Guide 53


Configuring DAT and engine filesConfigure the DAT and engine file options to specify which DAT files and engine files to use with the installation.

You can use the DAT and engine files provided in the original package, or use updated DAT and engine files. If you want updated DAT and engine files, you must choose a separate .ZIP file for DAT files and a separate .ZIP file for engine files; see . You may also choose to include the latest EXTRA.DAT file with the installation package.

Using separate .ZIP files To use two separate .ZIP files for the DAT files and engine files:

1 Select Separate ZIP files for DAT files and engine files.

2 Browse to and select the .ZIP file containing DAT files.

3 Browse to and select the .ZIP file containing the updated engine files.

4 Click Next or use the navigation pane to save the configurations and continue when finished configuring the options on this dialog box.

Figure 3-29. DAT and Engine Files dialog box



Including the EXTRA.DAT fileTo include an EXTRA.DAT file in the installation package:

1 Select Include EXTRA.DAT in the installation package.

2 Browse to and select the desired file.

3 Click Next or use the navigation pane to save the configurations and continue when finished configuring the options on this dialog box.

Configuring patch filesSelect any patch files that may be necessary and add them to the VirusScan Enterprise installation package.

Configure the patch file options to set and specify which patch files to include in the installation on the destination computers.

Adding patch files.

Editing patch files.

Deleting patch files.

Figure 3-30. Patch Files dialog box

Product Guide 55


Adding patch filesTo add patch files to the installation package:

1 Click Add.

2 Browse to the desired patch file.

3 Select the file and click Open. The full name and path of the file appears in the patch file list.

4 When finished adding, editing, and deleting patch files, click Next or use the navigation pane to save the configurations and continue.

Editing patch filesTo edit a patch file already listed in the patch file list:

1 Click the file name in the list to select it.

2 Click Edit.

3 Use the Select Patch File to Install dialog box to edit the patch file.

4 Click Open. The changed file name and path appear in the patch file list.


Deleting patch filesTo delete a patch file already listed in the patch file list:


2 Click Delete.




Configuring AutoUpdateConfigure these options to specify how AutoUpdate functions once the package is installed on the destination computer.

You may configure any of the following by browsing to a configuration file. The files you are using depend on the location that AutoUpdate uses to retrieve updates.

AutoUpdate repository list file; see AutoUpdate repository list file on page 57.

Agent installation file — Browse to the agent installation file.

Figure 3-31. AutoUpdate Configuration dialog box

Product Guide 57


AutoUpdate repository list fileThe repository list allows you to define the different repository sites from which computers using this installation update its DAT and engine files. You can also define the priority of the repository sites. To edit the list of repositories in the repository list file for this package:

1 If you want to specify the AutoUpdate repository list to use, click Read AutoUpdate repository list to select a SITELIST.XML file. If you don’t specify a file, the one found in the configuration source folder is used; otherwise, the one found on the local computer is used.

2 Click Edit AutoUpdate repository list and the Edit AutoUpdate Repository List dialog box appears. The options on this dialog box are divided among two tabs: Repositories and Proxy settings.

Figure 3-32. Edit AutoUpdate Repository List dialog box



3 To add a repository site to the list on the Repositories tab, click Add. The Repository Settings dialog box appears.

Type the name of the new site in the Repository description box.

Under Retrieve files from, select the type of the desired repository site.

Under Repository details, define the location, port (if applicable), and the credentials for the repository site.

Repeat as necessary until all desired sites have been defined, then click OK.

4 To edit the settings for a repository site that is already in the list, select the site and click Edit in the Repository Settings dialog box, make any changes, then click OK.

Figure 3-33. Repository Settings dialog box

Product Guide 59


5 Select the Proxy settings tab.

6 Select the appropriate option:

Don’t use a proxy

Use Internet Explorer proxy settings

Manually configure the proxy settingsIf you select this option, you must type the HTTP or FTP address and port. If the proxy settings require authentication, type the authentication in the appropriate authentication boxes.

7 If you need to identify exceptions to the proxy settings, click Exceptions.

8 Type the exceptions.

NOTEWhen entering multiple exceptions, you must separate the entries with a semicolon.

9 Click OK.

10 Click OK in the Edit AutoUpdate Repository List dialog box when you have finished editing the repository list.

Figure 3-34. Proxy settings tab in the Edit AutoUpdate Repository List dialog box



Setting programs to run after installationConfigure the options that specify which programs you want to run on the destination computers once the package is installed.

Adding programs to run after installation.

Editing program entries.

Deleting program entries.

Adding programs to run after installationTo add programs to run after the installation package finishes installing:

1 Click Add.

2 In the Add Program dialog box, click Browse to open the Select Program dialog box and select a program file.

3 Type the command line arguments into the Command line arguments text box. These define the parameters for how you want the program to run.

4 Click OK to return to the McAfee Installation Designer wizard. The program is added to the program list.

5 When finished adding, editing, and deleting programs to run, click Next or use the navigation pane to save the configurations and continue.

Figure 3-35. Programs dialog box

Product Guide 61


Editing program entriesTo edit an entry already listed in the program file list:


2 Click Edit.

3 In the Add Program dialog box, type any changes into the Program and Command line arguments boxes as required.

4 Click OK to return to the McAfee Installation Designer wizard. The changed program configuration information is displayed in the program list.

5 When finished adding, editing, and deleting programs to run, click Next or use the navigation pane to save the configurations and continue.

Deleting program entriesTo delete an entry already listed:


2 Click Delete.

3 Click Yes when asked if you are sure you want to delete the program.

4 When finished adding, editing, and deleting programs, click Next or use the navigation pane to save the configurations and continue.



Setting additional files to installConfigure these options to include additional files in the installation package. This feature is useful to include company-specific files, such as a custom readme file.

Adding files to the installation package.

Editing existing additional files.

Deleting existing additional files.

Adding files to the installation packageTo add extra files to the installation package:

1 Click Add.

2 In the Additional File dialog box, click Browse to open the Select Extra File to Install dialog box and browse to and select the source file to include it in Source File.

3 Select a destination folder from the Destination Folder list. This is the folder where the extra files are installed on the destination computer.

4 Type an optional subfolder in the Subfolders box, if desired.

5 Click OK.

6 When finished adding, editing, and deleting additional files, click Next or use the navigation pane to save the configurations and continue.

Figure 3-36. Additional Files dialog box

Product Guide 63


Editing existing additional filesTo edit the source file path, the destination folder, or subfolder of a file already listed in the additional file list:

1 Click the file in the additional file list to select it.

2 Click Edit.

3 In the Additional File dialog box, click Browse to open the Select Extra File to Install dialog box and browse to and select a different source file to include it in Source File.

4 Change the destination folder from the Destination Folder list, if desired.

5 Type a different optional subfolder in the Subfolders box, if desired.

6 Click OK.


Deleting existing additional filesTo delete an additional file already listed in the Source File list:

1 Click the file in the additional file list to select it.

2 Click Delete.

3 Click Yes when asked if you are sure you want to delete the file.

NOTEIf you uninstall the VirusScan Enterprise software package, any files that you added to the installation are removed when the software is removed.




Setting registry settingsCreate a single .REG file for all Windows versions, or create separate .REG files for installations on Windows NT, Windows 2000, and Windows XP if you need to modify system-specific settings.

NOTEUsing this configuration dialog box requires that you understand the REGEDIT.EXE program and registry keys well enough to create, use, change and delete them or their values. Instruction in the use and management of registry keys is beyond the scope of this guide.

See the appropriate section, depending on whether you want to use a single .REG file for all Windows installations or separate .REG files for each version of Windows.

To use one .REG file for all Windows versions:

1 Select Use one .REG file for all operating systems.

2 Specify an existing .REG file to be used in the installation package. Do this by either typing the full file name and path into the text box, or clicking Browse and selecting a .REG file.


Figure 3-37. Registry Settings dialog box

Product Guide 65


To use separate .REG files for different Windows versions:

1 Select Use a separate .REG file for each operating system.

2 For each version of Windows, browse to and select the desired .REG file to be used in the installation package.


Setting McAfee Installation Designer passwordThe Installation Designer Password dialog box allows you to use a current password, or specify and confirm a new password to prevent others with McAfee Installation Designer rights from re-configuring the settings that you are specifying.

NOTEUsing a configuration password is strongly recommended when creating a new package.

If you are modifying a previously modified package or settings file, you may want to use the current password.

To use the current password:

1 Deselect Enter a new password to secure the configurations.


Figure 3-38. Installation Designer Password dialog box



To create a new password for the configurations:

1 Select Enter a new password to secure the configurations.

2 Type the desired password in the New password and Confirm new password boxes.


Upgrading the licenseSelect Upgrade an evaluation version of VirusScan Enterprise to a registered version to upgrade to a licensed version if you are modifying an evaluation version of the software.

NOTEThis configuration takes place in the .CAB file and not in the LICENSE.TXT. file. When this installation package is used, the evaluation installation dialog boxes are displayed. Once running, the change to licensed version occurs when VirusScan Enterprise locates the .CAB file in the folder. The About dialog box then displays Licensed.

Figure 3-39. Upgrade License dialog box

Product Guide 67


Configuring post-installation optionsSpecify additional functions that the installation should perform after the package has installed VirusScan Enterprise on the destination computer.

1 Select the options to include in the installation package:

Force reboot after installation — Automatically restarts the client computer after installing the package. The end user is prompted to save any unsaved work, but does not have the option to restart later.

Always display this warning message when a reboot is required — Displays a message that a restart is required when the installation is complete. If you select this option, type the text to display in the warning message.

Start On-Access Scanner after installation — Automatically starts the on-access scanner, which begins running in the background immediately after installation is complete.

Perform a system scan after installation — VirusScan automatically runs an on-demand scan on the client computer immediately after installation is complete. This option applies only if you select to install the product silently.

Update virus definition files after installation — VirusScan automatically goes out to the update site to download new DAT and engine files. This option applies only if you select to install the product silently.

Figure 3-40. Post-Installation Options dialog box



NOTEYou can use the DAT and Engine Files dialog box to include the most recent updates with the installation package. If your network is large, including the updates with the package can save network resources.


Reviewing and saving your installation configurationThe Finish dialog box lists all the configurations for the current package. Review them to make sure they are correct. To change any of the configurations, use the navigation pane to return to the appropriate dialog box, and edit those features.

Click Save to save the package when the configurations are to your liking. For information on deploying the customized package, see The completed installation package on page 115.

Figure 3-41. Finish dialog box

Product Guide 69

Configuring an installation package (Desktop Firewall only)


When you select Create a new installation package based on an existing package, you can perform these actions by selecting the corresponding item in the navigation pane of McAfee Installation Designer:

Using an existing installation package (Desktop Firewall only).

Setting destination folder (Desktop Firewall only).



Using an existing installation package (Desktop Firewall only)To use an existing installation package as a basis for a new package:

1 From the Welcome dialog box, select Create a new installation package based on an existing package.

2 Under Select one or more products to include in the package, deselect McAfee VirusScan Enterprise (and Alert Manager), then select McAfee Desktop Firewall.

3 Click Next to open the Source and Destination dialog box.




Setting destination folder (Desktop Firewall only)If you are modifying an existing installation package, the McAfee Installation Designer wizard asks you to specify the destination folder where the new installation package should be saved.

To specify the destination folder:

1 Specify the path to the destination folder to which McAfee Installation Designer saves the new package file.

2 Click Next or use the navigation pane to save the configurations and continue setting other installation package features.

Figure 3-43. Source and Destination dialog box

Product Guide 71




1 Type the path to, or browse to the location of, the Desktop Firewall installation file.

2 Choose whether to use the default installation folder, or specify a custom installation folder.

3 Select Install product silently if you want Desktop Firewall to install on the destination computer without being visible to the end user.




4 Select This package will be managed by ePolicy Orchestrator, if you plan to manage Desktop Firewall with ePolicy Orchestrator™.




Figure 3-45. McAfee Desktop Firewall Configuration dialog box

Product Guide 73






Reviewing and saving your installation configurationThe Finish dialog box lists all the configurations for the current package. Review them to make sure they are correct. To change any of the configurations, use the navigation pane to return to the appropriate dialog box, and edit those features.

Click Save to save the package when the configurations are to your liking. For information on deploying the customized package, see The completed installation package on page 115.




Generating a settings fileTo generate a settings file:

1 From the Welcome dialog box, select Modify an existing installation by generating a settings file.

2 Choose which products to include in this package. Under Select one or more products to include in this package, select one or both products:

McAfee VirusScan Enterprise (and Alert Manager)

McAfee Desktop Firewall

3 Click Next. The Source for Configuration dialog box appears, with a list of all configurable components in the navigation pane.

You can perform these functions by selecting the corresponding item in the navigation pane of the McAfee Installation Designer wizard:

Setting source for configuration.

Setting destination options.

Setting configuration type.

Configuring the On-Access Scanner.

Configuring On-Delivery Scanner.

Configuring or scheduling on-demand scans.

Configuring the AutoUpdate schedule.

Configuring Alert Manager properties.


Configuring user interface properties.

Configuring AutoUpdate.

Setting registry settings.

Setting McAfee Installation Designer password.

Upgrading the license.


Product Guide 75

Generating a settings file

NOTETo create workstation- or server-specific settings files you need to run McAfee Installation Designer twice. To deploy the settings files with McAfee AutoUpdate Architect, you must choose the same destination folder for each of both the workstation- and server-specific settings files. However, if you are configuring settings files for different languages, you cannot mix the different languages in the same destination folder.

Setting source for configurationIdentify the source settings file to be used for configuration.





Existing VirusScan Enterprise settings on local system — Select this option to use the configuration settings from the VirusScan Enterprise installation on the system where you are running McAfee Installation Designer.

NOTEIf you select this option, the package being modified must be in the same language as the VirusScan Enterprise version on the local system.

This option is available only when you select McAfee VirusScan Enterprise (and Alert Manager) under Select one or more products to include in this package on the Welcome dialog box.

Configuration file — Select this option to use the configuration settings from an existing configuration file. If you select this option, you must browse to the desired settings (.CAB) file.

None. (Allows you to configure the registry settings, license key, and the Installation Designer password only — no VirusScan Enterprise settings.) — Select this option only to configure the registry settings, license key, or McAfee Installation Designer password. This allows you to create a smaller package.


Product Guide 77


Setting destination optionsConfigure the options of the Destination dialog box to specify the location where the settings file is saved, and whether to create the configuration package for servers, workstations, or both.

1 Browse to the desired folder where you want to save the settings file when the configuration is complete. If creating a new folder to save the file, type in the path with the name of the new folder in New configuration folder.

2 Choose whether to:

Create one configuration package for both servers and workstations

Create server configuration package

Create workstation configuration package


Figure 3-48. Destination dialog box



Setting configuration typeSpecify the configuration type on the Type dialog box.

1 Select one of the following:

Save the entire configuration creates and saves a new complete configuration file.

Save only the differences from the source configuration saves only the differences that you specify during the configuration. Select this option to reduce the size of the deployment package, or to deploy only certain settings while not affecting the rest of the settings on the destination computers. (Certain settings might be configured differently among the destination systems.)

If you select Save only the differences from the source configuration, you are not able to use the resulting settings file as a source for a future configuration.


Figure 3-49. Type dialog box

Product Guide 79


Configuring the On-Access Scanner Configure these options to specify how on-access scanning functions once the package is installed on the client computer.

Figure 3-50. On-Access Scanner dialog box



To configure on-access scanning:

1 From the On-Access Scanner dialog box, click Configure On-Access Scan Properties. The VirusScan On-Access Scan Properties dialog box appears.

The title bar includes (MID) to identify dialog boxes that are being accessed via the McAfee Installation Designer, and not directly through VirusScan Enterprise.

2 Use the options on these tabs (for each of the items in the list view) to configure the on-access scanner. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.


Figure 3-51. VirusScan On-Access Scan Properties dialog box

Product Guide 81


4 Click Configure Access Protection Properties to open the Access Protection Properties dialog box.

5 Use the options on these tabs to configure the access protection properties. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.


Figure 3-52. Access Protection Properties dialog box



7 Click Configure Buffer Overflow Protection Properties to open the Buffer Overflow Protection Properties dialog box.

8 Use the options on these tabs to configure the buffer overflow protection properties. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.


Figure 3-53. Buffer Overflow Protection Properties dialog box

Product Guide 83


10 Click Configure Unwanted Programs Policy to open the Unwanted Programs Policy dialog box.

11 Use the options on these tabs to configure the unwanted programs policy. For more information on these options, click Help or see the VirusScan Enterprise 8.0 Product Guide.



Figure 3-54. Unwanted Programs Policy dialog box



Configuring On-Delivery Scanner Configure these options to specify how e-mail scanning functions once the package is installed on the client computer.

Figure 3-55. On-Delivery Scanner dialog box

Product Guide 85


To configure the On-Delivery Scanner:

1 From the On-Delivery Scanner dialog box, click Configure On-Delivery Scan Properties. The On Delivery E-mail Scan Properties dialog box from the VirusScan Console appears.


2 Use the options on these tabs to configure the e-mail scan settings. For more information, see the VirusScan Enterprise 8.0 Product Guide.

3 Click OK.


Figure 3-56. On-Delivery E-mail Scan Properties dialog box



Configuring or scheduling on-demand scansConfigure these options to set and schedule on-demand scans to run on the destination computers once the package is installed.

From the Scheduled Scans dialog box, you can:

Adding on-demand scan tasks.

Editing on-demand scan tasks.

Deleting on-demand scan tasks.

Adding on-demand scan tasks1 Click Add. The Add Scheduled Scan Task dialog box appears.

Figure 3-57. Scheduled Scans dialog box

Figure 3-58. Add Scheduled Scan Task dialog box

Product Guide 87



NOTEThe OK button is not enabled until after you configure the scan task.

3 Click Configure Scheduled Scan Properties. The VirusScan On-Demand Scan Properties dialog box appears.



5 When finished configuring and scheduling the task, click OK to return to the Add Scheduled Scan Task dialog box.



8 When you complete adding, editing and deleting tasks, click Next or use the navigation pane to save the configurations and continue.




Editing on-demand scan tasks1 Select the desired on-demand scan task in the Scheduled Scans dialog box,

then click Edit. The Edit Scheduled Scan Task dialog box appears.

2 Edit the task name, if desired, then click Configure Scheduled Scan Properties. The VirusScan On-Demand Scan Properties dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the scan task.

Figure 3-60. Edit Scheduled Scan Task dialog box


Product Guide 89




4 When finished configuring and scheduling the task, click OK to return to the Edit Scheduled Scan Task dialog box.




Deleting on-demand scan tasks1 Select the desired on-demand scan task in the Scheduled Scans dialog box,

then click Delete.






Configuring the AutoUpdate scheduleConfigure these options to set and schedule update and mirror tasks to run from the destination computers once the package is installed.

Adding an update task.

Editing an update task.

Deleting update tasks.

Adding a mirror task.

Editing a mirror task.

Deleting mirror tasks.

Adding an update task1 Click Add Update Task. The Add AutoUpdate Task dialog box appears.


NOTEThe OK button is not enabled until after you configure and schedule the update task.

3 Click Configure AutoUpdate Properties. The VirusScan AutoUpdate Properties dialog box appears.

Figure 3-62. AutoUpdate Schedule dialog box

Product Guide 91



4 Use the options on this dialog box to configure and schedule the update task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

5 When finished configuring and scheduling the task, click OK to return to the Add AutoUpdate Task dialog box.


7 When finished configuring update tasks, choose whether to Add these to existing tasks on the target system, or to Replace the existing tasks with these tasks.


Editing an update task1 Select the desired update task in the AutoUpdate Schedule dialog box, then

click Edit. The Edit AutoUpdate Task dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the update task.

2 Edit the task name, if desired, then click Configure AutoUpdate Properties. The VirusScan AutoUpdate Properties dialog box appears.


3 Use these options to configure and schedule the update task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

4 When finished configuring and scheduling the task, click OK to return to the Edit AutoUpdate Task dialog box.


6 When you complete configuring update tasks, choose whether to add this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination computer with this list of tasks.




Deleting update tasks1 Select the desired update task in the AutoUpdate Schedule dialog box, then

click Delete.


3 When you complete configuring the update tasks, choose whether to add the this list of tasks to the existing tasks on the destination system, or to replace the existing tasks on the destination system with this list of tasks.


Adding a mirror task1 Click Add Mirror Task. The Add Mirror Task dialog box appears.


NOTEThe OK button is not enabled until after you configure and schedule the mirror task.

3 Click Configure Mirror Properties. The VirusScan AutoUpdate Properties dialog box appears.

Figure 3-63. VirusScan AutoUpdate Properties dialog box

Product Guide 93



4 Use the options on this dialog box to configure and schedule the mirror task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

5 When finished configuring and scheduling the task, click OK to return to the Add Mirror Task dialog box.


7 When you complete configuring mirror tasks, choose whether to add this list of tasks to the existing tasks on the destination system, or to replace the existing tasks.


Editing a mirror task1 Select the desired mirror task in the AutoUpdate Schedule dialog box, then click

Edit. The Edit Mirror Task dialog box appears.

NOTEThe OK button is not enabled until after you configure, schedule, or rename the mirror task.

2 Edit the task name, if desired, then click Configure Mirror Properties. The VirusScan AutoUpdate Properties dialog box appears.


3 Use these options to configure and schedule the mirror task. For information about these options, see the VirusScan Enterprise 8.0 Product Guide.

4 When finished configuring and scheduling the task, click OK to return to the Edit Mirror Task dialog box.


6 When you complete configuring scheduled mirror tasks, choose whether to add this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination system with this list of tasks.




Deleting mirror tasks1 Select the desired mirror task in the AutoUpdate Schedule dialog box, then click

Delete.

2 Click Yes when prompted to verify you want to delete the task.

3 When you complete configuring the tasks, choose whether to add the this list of tasks to the existing tasks on the destination computer, or to replace the existing tasks on the destination computer with this list of tasks.


Configuring Alert Manager propertiesConfigure these options to specify how VirusScan Enterprise notifies Alert Manager once the package is installed on the client computer.

Figure 3-64. Alert Manager Properties dialog box

Product Guide 95


To configure VirusScan Enterprise alerting:

1 From the Alert Manager Properties dialog box, click Configure Alert Manager Properties. The Alert Properties dialog box from the VirusScan Console appears.


2 Use the options on this tab to configure the alerting settings. For more information, see the VirusScan Enterprise 8.0 Product Guide.

3 Click OK.


Figure 3-65. Alert Properties dialog box




NOTEThis dialog box appears only if you selected McAfee Desktop Firewall on the Welcome dialog box.


Select This package will be managed by ePolicy Orchestrator, if you plan to manage Desktop Firewall with ePolicy Orchestrator.



Product Guide 97








Figure 3-67. McAfee Desktop Firewall Properties dialog box



Configuring user interface propertiesConfigure the user interface properties to specify which parts of the VirusScan Enterprise user interface are available on the client computers.

Figure 3-68. User Interface Properties dialog box

Product Guide 99


To configure user interface options:

1 From the User Interface Properties dialog box, click Configure user interface properties. The User Interface Options dialog box from the VirusScan Console appears.


2 Use the options of the User Interface Options dialog box to configure the user interface options. For more information, see the VirusScan Enterprise 8.0 Product Guide.


4 Select Enable Error Reporting to track and log issues in the software.


Figure 3-69. User Interface Options dialog box



Configuring AutoUpdateConfigure these options to specify how AutoUpdate functions once the package is installed on the destination computer.

Figure 3-70. AutoUpdate Configuration dialog box

Product Guide 101


AutoUpdate repository list fileThe repository list allows you to define the different repository sites from which computers using this installation update its DAT and engine files. You can also define the priority of the repository sites. To edit the list of repositories in the repository list file for this package:

1 If you want to specify the AutoUpdate repository list to use, click Read AutoUpdate repository list to select a SITELIST.XML file. If you don’t specify a file, the one found in the configuration source folder is used; otherwise, the one found on the local computer is used.

2 Click Edit AutoUpdate repository list and the Edit AutoUpdate Repository List dialog box appears. The options on this dialog box are divided among two tabs: Repositories and Proxy settings.

Figure 3-71. Edit AutoUpdate Repository List dialog box



3 To add a repository site to the list on the Repositories tab, click Add. The Repository Settings dialog box appears.

Type the name of the new site in the Repository description box.

Under Retrieve files from, select the type of the desired repository site.

Under Repository details, define the location, port (if applicable), and the credentials for the repository site.

Repeat as necessary until all desired sites have been defined, then click OK.

4 To edit the settings for a repository site that is already in the list, select the site and click Edit in the Repository Settings dialog box, make any changes, then click OK.

Figure 3-72. Repository Settings dialog box

Product Guide 103


5 Select the Proxy settings tab.

6 Select the appropriate option:

Don’t use a proxy

Use Internet Explorer proxy settings

Manually configure the proxy settingsIf you select this option, you must type the HTTP or FTP address and port. If the proxy settings require authentication, type the authentication in the appropriate authentication boxes.

7 If you need to identify exceptions to the proxy settings, click Exceptions.

8 Type the exceptions.

NOTEWhen entering multiple exceptions, you must separate the entries with a semicolon.

9 Click OK.

10 Click OK in the Edit AutoUpdate Repository List dialog box when you have finished editing the repository list.

Figure 3-73. Proxy settings tab in the Edit AutoUpdate Repository List dialog box



Setting registry settingsCreate a single .REG file for all Windows versions, or create separate .REG files for installations on Windows NT, Windows 2000, and Windows XP if you need to modify system-specific settings.

NOTEUsing this configuration dialog box requires that you understand the REGEDIT.EXE program and registry keys well enough to create, use, change and delete them or their values. Instruction in the use and management of registry keys is beyond the scope of this guide.

See the appropriate section, depending on whether you want to use a single .REG file for all Windows installations or separate .REG files for each version of Windows.

To use one .REG file for all Windows versions:

1 Select Use one .REG file for all operating systems.

2 Specify an existing .REG file to be used in the installation package. Do this by either typing the full file name and path into the text box, or clicking Browse and selecting a .REG file.


Figure 3-74. Registry Settings dialog box

Product Guide 105


To use separate .REG files for different Windows versions:

1 Select Use a separate .REG file for each operating system.

2 For each version of Windows, browse to and select the desired .REG file to be used in the installation package.


Setting McAfee Installation Designer passwordThe Installation Designer Password dialog box allows you to use a current password, or specify and confirm a new password to prevent others with McAfee Installation Designer rights from re-configuring the settings that you are specifying.

NOTEUsing a configuration password is strongly recommended when creating a new package.

If you are modifying a previously modified package or settings file, you may want to use the current password.

Figure 3-75. Installation Designer Password dialog box



To use the current password:

1 Type the password in the Enter the password currently used to secure the configurations box.


To create a new password for the configurations:

1 Select Enter a new password to secure the configurations.

2 Type the desired password in the New password and Confirm new password boxes.


Upgrading the licenseSelect Upgrade an evaluation version of VirusScan Enterprise to a registered version to upgrade to a licensed version if you are modifying an evaluation version of the software.

NOTEOnce the settings file is deployed, the About dialog box displays Licensed.

Figure 3-76. Upgrade License dialog box

Product Guide 107


Reviewing and saving your installation configurationThe final Finish dialog box lists all the configurations for the current package. Review them to make sure they are correct. To change any of the configurations, use the navigation pane to return to the appropriate dialog box, and edit those features.

Click Save to save the package when the configurations are to your liking. For information on deploying the settings file, see The completed settings file on page 122.




Generating a settings file (Desktop Firewall only)To generate a settings file:

1 From the Welcome dialog box, select Modify an existing installation by generating a settings file.

2 Under Select one or more products to include in this package, deselect McAfee VirusScan Enterprise (and Alert Manager), and select McAfee Desktop Firewall.

3 Click Next to open the Source for Configuration dialog box.

You can perform these functions by selecting the corresponding item in the navigation pane of the McAfee Installation Designer wizard:

Setting source for configuration (Desktop Firewall only).

Setting destination options.




Product Guide 109

Generating a settings file (Desktop Firewall only)

Setting source for configuration (Desktop Firewall only)Identify the source settings file to be used for configuration.


Configuration file — Select this option to use the configuration settings from an existing configuration file. If you select this option, you must browse to the desired settings (.CFG) file.

Default settings — Select this option to use the default Desktop Firewall settings.





Setting destination optionsConfigure the options of the Destination dialog box to specify the location where the settings file is saved, and whether to create the configuration package for servers, workstations, or both.

1 Browse to the desired folder where you want to save the settings file when the configuration is complete. If creating a new folder to save the file, type in the path with the name of the new folder in New configuration folder.

2 Choose whether to:

Create one configuration package for both servers and workstations

Create server configuration package

Create workstation configuration package


Figure 3-80. Destination dialog box

Product Guide 111




Select This package will be managed by ePolicy Orchestrator, if you plan to manage Desktop Firewall with ePolicy Orchestrator.











Figure 3-82. McAfee Desktop Firewall Properties dialog box

Product Guide 113


Reviewing and saving your installation configurationThe final Finish dialog box lists all the configurations for the current package. Review them to make sure they are correct. To change any of the configurations, use the navigation pane to return to the appropriate dialog box, and edit those features.

Click Save to save the package when the configurations are to your liking. For information on deploying the settings file, see The completed settings file on page 122.




What’s next?To create an additional customized installation package, start over with the instructions on page 19.

To prepare the customized VirusScan Enterprise package for deployment, see Deploying Installation Packages and Settings File on page 115.

Product Guide 115

4Deploying Installation Packages and Settings File

This section contains these topics:

The completed installation package.

The completed settings file.

The completed installation packageDepending on the settings you specified in the installation package and which deployment tool you are using, the files you need to deploy varies.

Deployment tools for installation packages.

Optimized installation packages.

Regular installation packages.

Installation packages for Desktop Firewall only.

Deployment tools for installation packagesPackages created with McAfee Installation Designer are deployable across networks by several tools and methods including the following. For instructions, see the product documentation for the tool you use.

McAfee ePolicy Orchestrator.

IBM Tivoli.

Novadigm Radia.

Novell ZENworks.

Microsoft Systems Management Server.

Command line.

NOTEWhen setting up the installation of the new custom VirusScan Enterprise package, always use the SETUP.EXE program to launch installation, because the VirusScan Enterprise installer has custom actions that require the use of SETUP.EXE.

Deploying Installation Packages and Settings File


Optimized installation packagesIf you created an optimized installation package for VirusScan Enterprise, the following files are saved to the destination folder you specified. If you also selected to install Alert Manager or Desktop Firewall, additional files may be saved to the destination folder.

Table 4-1. Files in Optimized Installation Packages

File name Description Usage

* AMG<VERSION>.NAP Policy page for Alert Manager 4.7 or later.

For ePolicy Orchestrator policy management — Add to the Repository.

CONTACT.TXT Contact file for McAfee Security and Network Associates, if available in source folder.

Informational only.

EXAMPLE.SMS Sample SMS script. For SMS deployment — Review and modify.

† MCAFEEFIRE80.NAP Policy page for Desktop Firewall 8.0.


MID.LOG Contents of the Finish dialog box. Informational only.

PACKING.LST List of the package contents, if available in source folder.

Informational only.

PKGCATALOG.Z Package file of VirusScan Enterprise 8.0 for use with ePolicy Orchestrator 3.0 or later.

For ePolicy Orchestrator deployment — Add to master repository.

README.TXT Release Notes for VirusScan Enterprise 8.0, if available in source folder.

Informational only.

‡ SETUP.EXE Setup program for VirusScan Enterprise 8.0 and Alert Manager 4.7 or later or Desktop Firewall 8.0.

For product installation — Execute on computers to install the corresponding products.

SIGNLIC.TXT Legal disclaimers for OpenSSL technology, if available in source folder.

Informational only.

VS800DET.MCS Detection script for VirusScan Enterprise 8.0.

For ePolicy Orchestrator deployment — Added to master repository when package file is checked in.

VSE800.NAP Policy page for VirusScan Enterprise 8.0.


Product Guide 117

The completed installation package

__________

* This file is saved to the destination folder only if you selected to install Alert Manager on the Alert Manager Installation dialog box.

† These files are saved to the destination folder only if you selected to manage the package by ePolicy Orchestrator on the McAfee Desktop Firewall dialog box.

‡ This file also installs Alert Manager only if you selected to install Alert Manager on the Alert Manager Installation dialog box. This file also installs Desktop Firewall only if you selected to install Desktop Firewall on the Welcome and McAfee Desktop Firewall dialog boxes.

VSE800REPORTS.NAP Report templates for VirusScan Enterprise 8.0.

For ePolicy Orchestrator reporting — Add to the Report Repository.

† VSE800UPDATEFOREPO30.EXE Program that provides compatibility between ePolicy Orchestrator 3.0 and VirusScan Enterprise 8.0.

For ePolicy Orchestrator 3.0 compatibility — Execute on ePolicy Orchestrator 3.0.

Table 4-1. Files in Optimized Installation Packages (Continued)




Regular installation packagesIf you created a regular installation package for VirusScan Enterprise, the following files are saved to the destination folder you specified. If you also selected to install Alert Manager or Desktop Firewall, additional files may be saved to the AMG and DFW folders, respectively, in the destination folder.

Table 4-2. VirusScan Enterprise Files in Destination Folder


* AMG<VERSION>.NAP Policy page for Alert Manager 4.7 or later.



Informational only.

EXAMPLE.SMS Sample SMS script. For SMS deployment — Review and modify.

INSTMSIW.EXE Setup program for MSI 2.0. Automatically executed by SETUP.EXE if needed.

† MCAFEEFIRE80.NAP Policy page for Desktop Firewall 8.0.




Informational only.




Informational only.

SETUP.EXE Setup program for VirusScan Enterprise 8.0.

For product installation — Execute on computers to install VirusScan Enterprise 8.0.

SETUP.INI Custom installation settings. Used by SETUP.EXE.

SIGNLIC.TXT Legal disclaimers for OpenSSL technology, if available in source folder.

Informational only.

UNINST.DLL Uninstallation application extension file.

Used by SETUP.EXE.

UNINST.INI Uninstallation settings. Used by UNINST.DLL.

Product Guide 119


__________

* This file is saved to the destination folder only if you selected to install Alert Manager on the Alert Manager Installation dialog box.

† These files are saved to the destination folder only if you selected to manage the package by ePolicy Orchestrator on the McAfee Desktop Firewall dialog box.



VSE800.MSI MSI Setup program for VirusScan Enterprise 8.0.

Can be executed by running SETUP.EXE.

VSE800.NAP Policy page for VirusScan Enterprise 8.0.


VSE800REPORTS.NAP Report templates for VirusScan Enterprise 8.0.

For ePolicy Orchestrator reporting — Add to the Report Repository.

† VSE800UPDATEFOREPO30.EXE Program that provides compatibility between ePolicy Orchestrator 3.0 and VirusScan Enterprise 8.0.

For ePolicy Orchestrator 3.0 compatibility — Execute on ePolicy Orchestrator 3.0 server.

Table 4-2. VirusScan Enterprise Files in Destination Folder (Continued)


Table 4-3. Alert Manager Files in AMG folder in Destination Folder


AMG<VERSION>.MSI MSI Setup program for Alert Manager 4.7 or later.

Can be executed by running SETUP.EXE.

AMG<VERSION>DET.MCS Detection script for Alert Manager 4.7 or later.


AMG<VERSION>.NAP Policy page for Alert Manager 4.7 or later.



Informational only.

INSTALL.PKG Package file of Alert Manager 4.7 or later for use with ePolicy Orchestrator 2.0, 2.5, or 2.5.1.

For ePolicy Orchestrator deployment — Add to Repository.

INSTMSIW.EXE Setup program for MSI 2.0. Automatically executed by SETUP.EXE if needed.



__________

* These files are saved to the destination folder only if you selected to manage the package by ePolicy Orchestrator on the McAfee Desktop Firewall dialog box.

LICENSE.TXT Licensing file, if available in source folder.

Informational only.

MCINSTWI.EXE An executable used by the installer to test the user privileges.

Used by SETUP.EXE.


Informational only.




Informational only.

SETUP.EXE Setup program for Alert Manager 4.7 or later.

For product installation — Execute on computers to install Alert Manager 4.7 or later.

SETUP.INI Custom installation settings. Used by SETUP.EXE.

UNINST.DLL Uninstallation application extension file.

Used by SETUP.EXE.

UNINST.INI Uninstallation settings. Used by UNINST.DLL.

Table 4-3. Alert Manager Files in AMG folder in Destination Folder (Continued)


Table 4-4. Desktop Firewall Files in DFW Folder in Destination Folder


* FIREWALLDET.MCS Detection script for Desktop Firewall 8.0.


* INSTALL_<LANGUAGE>.PKG Package file of Desktop Firewall 8.0 for use with ePolicy Orchestrator 2.0, 2.5, or 2.5.1.


MCAFEEFIRE.EXE Setup program for Desktop Firewall 8.0.

For product installation — Execute on computers to install Desktop Firewall 8.0.

* PKGCATALOG.Z Package file of Desktop Firewall 8.0 for use with ePolicy Orchestrator 3.0 or later.


Product Guide 121


Installation packages for Desktop Firewall onlyIf you created a regular installation package for Desktop Firewall only, the following files are saved to the destination folder you specified.

__________

* These files are saved to the destination folder only if you selected to manage the package by ePolicy Orchestrator on the McAfee Desktop Firewall dialog box.

Table 4-5. Files in Desktop Firewall Installation Packages


* FIREWALLDET.MCS Detection script for Desktop Firewall 8.0.


* INSTALL_<LANGUAGE>.PKG Package file of Desktop Firewall 8.0 for use with ePolicy Orchestrator 2.0, 2.5, or 2.5.1.


MCAFEEFIRE.EXE Setup program for Desktop Firewall 8.0.

For product installation — Execute on computers to install Desktop Firewall 8.0.

* MCAFEEFIRE80.NAP Policy page for Desktop Firewall 8.0.



* PKGCATALOG.Z Package file of Desktop Firewall 8.0 for use with ePolicy Orchestrator 3.0 or later.


* VSE800UPDATEFOREPO30.EXE Program that provides compatibility between ePolicy Orchestrator 3.0 and VirusScan Enterprise 8.0.

For ePolicy Orchestrator 3.0 compatibility — Execute on ePolicy Orchestrator 3.0 server.



The completed settings fileDepending on the settings you specified in the installation package and which deployment tool you are using, the files you need to deploy varies.

Deployment tools for settings files.

Settings file.

Settings file for Desktop Firewall only.

Deployment tools for settings filesSettings files created with McAfee Installation Designer are deployable across networks by several products, tools, and methods including the following. For instructions, see the product documentation for the tool you use.

McAfee AutoUpdate Architect.

IBM Tivoli.

Novadigm Radia.

Novell ZENworks.

Microsoft Systems Management Server.

Command line.

Product Guide 123

The completed settings file

Settings fileIf you generated a settings file for VirusScan Enterprise, the following files are saved to the destination folder you specified. The same files are saved whether or not you also selected to configure Desktop Firewall.

__________

* Depending on whether you selected to create a settings file for both servers and workstations, servers only, or workstations only in the Destination dialog box, a VSECFG.CAB, VSECFG_S.CAB, or VSECFG_W.CAB file (respectively) is saved to the destination folder.

Table 4-6. Settings File



MIDINSTALL.MCS Custom settings detection script for VirusScan Enterprise 8.0.

For McAfee AutoUpdate Architect deployment — Added to master repository when package file is checked in.

PKGCATALOG.Z Package file of VirusScan Enterprise 8.0 for use with McAfee AutoUpdate Architect.

For McAfee AutoUpdate Architect deployment — Add to master repository.



* VSECFG.CAB, VSECFG_S.CAB, or VSECFG_W.CAB

Custom settings for VirusScan Enterprise 8.0.

For custom settings deployment — Deploy via McAfee AutoUpdate Architect, or copy this file to the MID folder in the VirusScan Enterprise folder on each destination computer via another deployment tool.



Settings file for Desktop Firewall onlyIf you generated a settings file for Desktop Firewall only, the following files are saved to the destination folder you specified.

Table 4-7. Desktop Firewall Only Settings File


DFWAPP.EXE Setup program for Desktop Firewall 8.0 custom settings.

For custom settings deployment — Deploy via McAfee AutoUpdate Architect, or copy this file and FIRENETPREFS.CFG on each destination computer via another deployment tool, then execute DFWAPP.EXE.

FIREDATDET.MCS Custom settings detection script for Desktop Firewall 8.0.


FIRENETPREFS.CFG Custom settings for Desktop Firewall 8.0.

For custom settings deployment — Deploy via McAfee AutoUpdate Architect, or copy this file and DFWAPP.EXE on each destination computer via another deployment tool, then execute DFWAPP.EXE.


PKGCATALOG.Z Package file of Desktop Firewall 8.0 for use with McAfee AutoUpdate Architect.

For McAfee AutoUpdate Architect deployment — Add to master repository.

Product Guide 125

ATroubleshooting

While using McAfee Installation Designer, you may have some questions about the software or about any messages that might appear.

Frequently asked questions (FAQ).

Messages.

Return codes from optimization of packages.

Frequently asked questions (FAQ)

Can the McAfee Installation Designer import security settings?

Yes. McAfee Installation Designer can also create a smaller package if incremental changes only are occurring. However, it does not override the policy enforcement of ePolicy Orchestrator.

Can McAfee Installation Designer support engine, DAT file, and service pack upgrades to the product?

Yes. These additions or changes can be added either before or after the initial deployment. However, post-installation deployment of DAT files, engine files, and service packs is not supported by McAfee Installation Designer.

Can McAfee Installation Designer bundle service packs without doubling files to deploy?

Yes, because McAfee Installation Designer uses Microsoft Patch technology.

Can McAfee Installation Designer specify a repository list (SITELIST.XML) for ePolicy Orchestrator?

Although you cannot create a repository list with McAfee Installation Designer, you can select and include in the installation package a SITELIST.XML file created with McAfee AutoUpdate Architect.

If so, is it modifiable once it is deployed?

Yes. Modify the settings (.CAB OR .CFG) file of the original installation package withMcAfee Installation Designer, and deploy the settings file to the desired destination computers.

Troubleshooting


MessagesTable A-1. Messages

Message Text Description

<FILE NAME> does not appear to be a valid Alert Manager Server installation file. Please verify you have provided a valid installation file.

You either selected an incorrect folder, or the .MSI file has been corrupted. Try again, and ensure the AMG.MSI file is in the selected folder.

An error occurred while creating McAfee Desktop Firewall settings package.

Installation Designer cannot continue.

Make sure you have enough disk space.

An error occurred while repackaging Alert Manager installation file.


Make sure you have a valid installation package and enough disk space.

An error occurred while repackaging AutoUpdate repository list.



An error occurred while repackaging DAT and engine files.



An error occurred while repackaging McAfee Desktop Firewall installation file.


Make sure you have a valid installation package and enough disk space

An error occurred while repackaging patch files.



Configuring AutoUpdate failed. Please make sure that VirusScan Enterprise is installed properly.

Try to run and configure VirusScan Enterprise on the computer where you are using McAfee Installation Designer. If there are problems, reinstall VirusScan Enterprise and try to configure the installation package again with McAfee Installation Designer.

Configuring Scheduled Scan task <TASK NAME> failed. Please make sure that VirusScan Enterprise is installed properly.


Configuring the Alert Manager Properties failed. Please make sure that VirusScan Enterprise is installed properly.


Product Guide 127

Messages

Configuring the On-Access-Scan Properties failed. Please make sure that VirusScan Enterprise is installed properly.


Configuring user interface properties failed. Please make sure that VirusScan Enterprise is installed.


Could not commit the temporary .msi file <FILE NAME><ERROR NUMBER>. Installation Designer cannot continue.

The .MSI file may be corrupted in either the source package or the new package. Begin with a different .MSI file.

Could not copy install.pkg template file. You will be unable to add this installation package to the ePolicy Orchestrator repository.

Check to see you have enough disk space available.

Could not copy settings file. VirusScan Enterprise application settings cannot be added to the package.

Recreate the installation package with McAfee Installation Designer.

Could not copy source file <FILE NAME>.

McAfee Installation Designer could not copy the .MSI file to the destination folder. Make sure there is enough available space on the drive where the destination folder is located.

Could not copy the AutoUpdate configuration files.

Make sure you have enough disk space available.

Could not copy the optimized file to the destination.


There is either not enough disk space, or the destination is write-protected.

Could not copy the Siteinfo file <FILE NAME>.


Could not create a temporary folder for extracted engine .zip file.


Could not create a temporary folder for extracting dat .zip file.


Could not create pkgcatalog.xml file, template file may be corrupted. You will be unable to add this installation package to the ePolicy Orchestrator site manager.

Make sure Microsoft Internet Explorer 4.01 or later is installed.

Could not decompress .zip file. Make sure you have enough disk space available.

Could not decrypt configuration file. The selected configuration settings (.CAB) file may have been corrupted. Select a different settings file.

Table A-1. Messages (Continued)


Troubleshooting


Could not decrypt McAfee Desktop Firewall configuration file.

The configuration package that you specified contains a corrupt Desktop Firewall configuration file. Please select another source or use the default.

Could not decrypt McAfee Desktop Firewall configuration file. You may configure the Desktop Firewall on the McAfee Desktop Firewall page.

The configuration package that you specified contains a corrupt Desktop Firewall configuration file. However, you can configure the Desktop Firewall settings on the McAfee Desktop Firewall dialog box of the McAfee Installation Designer wizard.

Could not delete the folder where extracted engine files are stored temporarily.

Other programs may be using the folder, or the folder may be open.

Could not find McAfee Desktop Firewall installation file. You may configure McAfee Desktop Firewall installation options on the Desktop Firewall Firewall page.

You have selected to include McAfee Desktop Firewall on the Welcome page, but have not configured the installation options. Please configure McAfee Desktop Firewall installation options before clicking Finish.

Could not load pkgcatalog.xml file, template file may be corrupted. You will be unable to add this installation package to the ePolicy Orchestrator site manager.

Make sure McAfee Installation Designer is installed correctly and create a new installation package.

Could not optimize the VirusScan Enterprise installation package. Error code: <& retval & >.

An un-optimized package was created successfully in <& Destination Directory & >.

This error occurs when optimization fails. A package without optimization is still present in the destination folder.

The error is most likely due to insufficient physical or virtual memory. You can add more memory and try to create an optimized package from the un-optimized package.

Could not read dat date from the pkgdesc.ini file.

Make sure you selected the appropriate file.

Could not read dat version from the pkgdesc.ini file.

Make sure you selected the appropriate file.

Could not rename the customized .msi file from <OLD FILE NAME> to <NEW FILE NAME>.


Could not rename the customized setup.ini file from <OLD FILE NAME> to <NEW FILE NAME>.


If you delete this item, VirusScan Enterprise will be unable to perform a system scan after installation.

Task name: <NAME OF TASK>

Scheduled: <SCHEDULED TIME>

You tried to delete the default Scan All Fixed Disks task from the scheduled tasks list.

Click OK and the Perform a system scan after the installation on the Post-Installation Options dialog box is disabled.



Product Guide 129

Messages

InstallFinalize action is missing. The installation package may be corrupted. Please specify another source.

You must provide a different installation package as a source for McAfee Installation Designer.

Internal Error 2356 Cabs.w1.cab This error occurred because you attempted to install VirusScan Enterprise from a McAfee Installation Designer modified package to a destination computer that already has VirusScan Enterprise installed.

When deploying to target computers that are already running VirusScan Enterprise, McAfee recommends deploying a settings file rather than an entire installation package.

However, if it is necessary to deploy an entire installation package to computers already running VirusScan Enterprise, and you do not have a method in place in your environment for uninstalling software:

1 Open the UNINST.INI file in the new modified installation package.

2 Locate the section, “Uninstall steps for VSE 8.0.”

3 Change the flag bSkipProduct=1 to bSkipProduct=0.

4 Close the file.

This change removes all versions of VirusScan Enterprise and competitors’ products during the VirusScan Enterprise installation process from a modified installation package.

Invalid configuration file. The selected configuration settings (.CAB) file may have been corrupted. Select a different settings file.

license.dat, mcscan32.dll, messages.dat, or signlic.txt files missing from the engine .zip file.

You must download the latest engine .ZIP file from the Network Associates web site.

Please enter a valid VirusScan Enterprise executable to continue.

The path to the optimized VirusScan Enterprise installation package you specified is not valid, or the executable is not a VirusScan Enterprise installation package file.

Ensure that the path is correct and that the file is valid.

Please enter the path to a McAfee Desktop Firewall installation file.

You typed or selected an invalid path to the Desktop Firewall installation file. Type or select the path again.

The Alert Manager Server installation file <FILE NAME> could not be opened. Please verify that you have provided a valid installation file.

You either selected an incorrect folder, or the .MSI file has been corrupted. Try again, and ensure the AMG.MSI file is in the selected folder.

The configuration file is corrupted. The selected configuration settings (.CAB) file may have been corrupted. Select a different settings file.



Troubleshooting


This configuration package does not contain VirusScan Enterprise settings.

Please select another source.

You must select a settings (.CAB) file that contains the full VirusScan Enterprise settings as Source for Configuration.

This installation package contains another set of McAfee Desktop Firewall configurations. Click OK to replace your changes with these settings, or Cancel to keep your changes.

You have previously configured Desktop Firewall, and are now specifying a different Desktop Firewall installer that contains a different Desktop Firewall settings file.

Version of the configuration file does not match VirusScan Enterprise on your system.

Make sure that the version of VirusScan Enterprise on your system matches the version of the configuration file.

Version of the source package does not match VirusScan Enterprise on your system. Please specify another package.

You have a different version of VirusScan Enterprise installed than the one that you are trying to configure. Either install the appropriate version, or configure an installation package of the version installed.

You have not configured custom McAfee Desktop Firewall settings.

Custom McAfee Desktop Firewall settings have not been created. You must configure the settings before clicking Finish.

You may only run the Installation Designer with IE4 or later. The program will now exit.

Go to the Microsoft download web site and download the most current version of Microsoft Internet Explorer.



Product Guide 131

Return codes from optimization of packages

Return codes from optimization of packagesWhen creating optimized packages you may receive one of the following numeric return codes. This section describes the return codes:

-1

Unknown error.

0

Optimization has succeeded.

6663

Internal error. Do not deploy.

6669

Source directory cannot be found.

6670

The source installation package does not contain an .MSI file, which is necessary for optimization.

6671

The source installation package does not contain an .MSI file, which is necessary for optimization.

6672

The source installation package contains more than one .MSI file. Optimization cannot proceed.

6673

The .MSI file within the source installation package does not belong to VirusScan Enterprise.

6674

The optimized package cannot be built because a directory with the same name does not exist.

6675

You may not have the necessary privileges to delete the existing installation package.

Troubleshooting


6676

A file with the same name as the optimized installation package exists, but you chose not to delete it.

6680

Any of the given parameters for the source directory or the optimized installation package name contains wildcard characters.

6681

The language file cannot be opened. You might not have the necessary privileges or the file does not exist.

6685

The language file is corrupt. The file is missing the required TEXT section.

6687

The language file is corrupt. The file is missing the required RECOMPOSING section.

6690

Internal error — the source package has changed too much and cannot be optimized.

6691

Internal error — the source package has changed too much and cannot be optimized.

6700

Not enough available memory.

6704

The language file cannot be opened. You may not have the necessary privileges, or the file may not exist.

6710

You may not have the necessary privileges to create the optimized installation package file. The name may contain invalid characters.

6720

The operating system requirements have not been fulfilled.

Product Guide 133

Return codes from optimization of packages

6750

The language file does not contain the UNICODE [DIALOG] section.

6767

Not enough available memory.

6777

The system requirements for RAM have not been fulfilled. (256MB is required.)

6790

You may not have the necessary privileges to access the files of the source installation package.

6792

Internal error — do not distribute.

6793


6794

The source package has changed so that the installation package cannot be reduced optimally. This is not an error. The optimized installation package can be used.

6980

You must finish running any other instance of FEAD before beginning another one.

6990

You do not have the required privileges to read the source installation package or write to the temporary folder. Or no space is left in the temporary folder.

6993


6994

Internal error — do not distribute.\

Troubleshooting


6995


6997


6998

The .MSI file in the source installation package is too large to optimize.

6999

You must specify a local file name for the optimized installation package.

7000

No more RAM is available.

Product Guide 135

Glossary

.MSI fileA Microsoft Windows Installer package that includes installation and configuration instructions for the software being deployed.

action takenHow McAfee Security anti-virus or security products responded to detected infections; for example, “cleaned” indicates that the detected infection was successfully removed from the corresponding file.

Alert ManagerMcAfee Security alert notification utility that can be configured to use various notification methods when it receives an alert, such as a pager message or e-mail message. The utility allows you to select which events, such as a virus detection, trigger alert messages.

alertA message or notification regarding computer activity such as virus detection. It can be sent automatically according to a predefined configuration, to system administrators and users, via e-mail, pager, or phone.

See also Alert Manager.

anti-virus policySee policy.

AutoUpdateThe automatic program in the McAfee Security software that updates that software program with the latest virus definition (DAT) files and scanning engine.

AVERTAnti-Virus Emergency Response Team, a division of Network Associates, Inc.; an anti-virus research center that supports the computing public and Network Associates customers by researching the latest threats, and by uncovering threats that may arise in the future.

clean, cleaningAn action taken by the scanner when it detects a virus, a Trojan horse or a worm. The cleaning action can include removing the virus from a file and restoring the file to usability; removing references to the virus from system files, system .INI files, and the registry; ending the process generated by the virus; deleting a macro or a Microsoft Visual Basic script that is infecting a file; deleting a file if it is a Trojan horse or a worm; renaming a file that cannot be cleaned.

client computerA computer on the client-side of the program.

client tasksTasks that are executed on the client-side of the software.

command-line scannerThe McAfee Security anti-virus scanner that runs from the Command Prompt.

Glossary


computersThe physical computers on the network.

configuration settingsSee policy.

DAT filesVirus definition files, sometimes referred to as signature files, that allow the anti-virus software to recognize viruses and related potentially unwanted code embedded in files.

See also extra.dat file, incremental dat files, and Superdat.

deploy, deploymentThe act of distributing and installing Setup programs to client computers from a central location.

distributed software repositoriesA collection of web sites or computers located across the network in such a way as to provide bandwidth-efficient access to client computers. Distributed repositories store the files that client computers need to install supported products and updates to these products.

download siteThe McAfee Security web site from which you retrieve product or DAT updates.

See also update site.

EICAR test fileEuropean Institute of Computer Anti-Virus Research has developed a file consisting of a string of characters that can be used to test the proper installation and operation of anti-virus software.

error reporting utilityA utility specifically designed to track and log failures in the Network Associates software on your system. The information that is obtained can be used to help analyze problems.

EXTRA.DAT fileSupplemental virus definition file that is created in response to an outbreak of a new virus or a new variant of an existing virus.

See also dat files, incremental dat files, and Superdat.

firewallA program that acts as a filter between your computer and the network or Internet. It can scan all traffic arriving at your computer (incoming traffic) and all traffic sent by your computer (outgoing traffic). It scans traffic at the packet level, and either blocks it or allows it, based on rules that you set up.

HotFix releases (now Patches)Intermediate releases of the product that fix specific issues.

incremental DAT filesNew virus definitions that supplement the virus definitions currently installed. Allows the update utility to download only the newest DAT files rather than the entire DAT file set.

See also dat files, extra.dat file and Superdat.

incremental virus definition (DAT) filesSee incremental dat files

Product Guide 137

log fileA record of the activities of a component of McAfee Security anti-virus software. Log files record the actions taken during an installation or during the scanning or updating tasks.

See also events.

on-access scanningAn examination of files in use to determine if they contain a virus or other potentially unwanted code. It can take place whenever a file is read from the disk and/or written to the disk.

Compare to on-demand scanning.

on-demand scanningA scheduled examination of selected files to determine if a virus or other potentially unwanted code is present. It can take place immediately, at a future scheduled time, or at regularly scheduled intervals.

Compare to on-access scanning.

package catalog fileA file that contains details about each update package, including the name of the product for which the update is intended, language version, and any installation dependencies.

packed executableA file that, when run, extracts itself into memory only, never to disk.

Patch releases (previously HotFixes)Intermediate releases of the product that fix specific issues.

PKGCATALOG.ZSee package catalog file.

propertiesAttributes or characteristics of an object used to define its state, appearance, or value.

quarantineEnforced isolation of a file or folder — for example, to prevent infection by a virus or to isolate a spam e-mail message — until action can be taken to clean or remove the item.

repository list (SITELIST.XML)The SITELIST.XML file that is used by those McAfee Security anti-virus products that include the AutoUpdate program; it is used to access distributed repositories and retrieve packages.

RepositoryThe location that stores policy pages used to manage products.

scan actionThe action that takes place when an infected file is found.

scan taskA single scan event.

scan, scanningAn examination of files to determine if a virus or other potentially unwanted code is present.

See on-access scanning and on-demand scanning.

scanning engineThe mechanism that drives the scanning process.

Glossary


signature filesSee dat files.

silent installationAn installation method that installs a software package onto a computer silently, without need for user intervention.

SITELIST.XMLSee repository list.

SuperDATA utility that installs updated virus definition (SDAT*.EXE) files and, when necessary, upgrades the scanning engine.

See also dat files, extra.dat file, and incremental dat files.

SuperDAT (SDAT*.EXE) filesA standard application that you can double-click to start from within Microsoft Windows. The Microsoft version of the Installer includes a wizard that provides instructions in a series of panels.

SuperDAT Package InstallerAn installation program that upgrades McAfee Security software programs. It automatically shuts down any active scans, services, or other memory-resident components that could interfere with the upgrade, then copies new files to their proper locations so that your software can use them immediately.

supplemental virus definition fileSee extra.dat file.

system scanA scan of the designated system.

task An activity (both one-time such as on-demand scanning, and routine such as updating) that is scheduled to occur at a specific time, or at specified intervals.

Compare to policy.

update packagePackage files from Network Associates that provide updates to a product. All packages are considered product updates with the exception of the product binary (Setup) files.

update siteThe repository from which you retrieve product or DAT updates.

See also download site.

updatingThe process of installing updates to existing products or upgrading to new versions of products.

virus definition (DAT) filesSee dat files.

virusA program that is capable of replicating with little or no user intervention, and the replicated program(s) also replicate further.

VirusScan Enterprise consoleThe control point for the program’s activities.

Product Guide 139

Glossary


Product Guide 141

Index

Aadd/remove options, configuring, 51adding

additional files to install, 62mirror tasks, 41, 92patch files, 55programs to run after installation, 60update tasks, 39, 90

additional files to installadding, 62configuring, 62deleting, 63editing, 63

Alert Manager installationconfiguring, 45

Alert Manager propertiesconfiguring, 43, 94

Alert Properties, 44, 95audience for this manual, 8AutoUpdate

configuring, 56, 100AutoUpdate repository list file, 57, 101AutoUpdate schedule, configuring, 39, 90AVERT (Anti-Virus Emergency Response Team),

contacting, 11

Bbefore you begin, 13beta program, contacting, 11

Cconfiguration type, setting, 78configuring

additional files to install, 62Alert Manager installation, 45Alert Manager properties, 43, 94AutoUpdate, 56, 100

AutoUpdate schedule, 39, 90DAT and engine files, 53engine files, 53On-Access Scanner, 28, 79On-Delivery Scanner, 33, 84password, 65, 105patch files, 54post-installation options, 67programs to run after installation, 60registry settings, 64, 104user interface properties, 49, 98

contacting McAfee Security, 11creating

password, 66customer service, contacting, 11

DDAT and engine files

.ZIP files, 53configuring, 53

DAT fileupdates, web site, 11

definition of terms (See Glossary)deleting


deployinginstallation packages, 115

deployment toolsinstallation packages, 115settings file, 122

Desktop Firewall in installation packagesconfiguring, 46configuring for Desktop Firewall only, 71

Index


Desktop Firewall in settings fileconfiguring, 96configuring for Desktop Firewall only, 111

destination in installation packagesconfiguring, 23configuring for Desktop Firewall, 70

destination in settings fileconfiguring, 77configuring for Desktop Firewall only, 110

documentation for the product, 10download web site, 11

Eediting


engine files, configuring, 53

FFAQs, 125features

customizing, 25menu, 25

features to installsetting, 24

Finish, 68, 73, 107, 113

Ggenerating a settings file

defined, 21getting information, 10glossary, 135 to 139

IInstallation Designer Password, 65, 105installation options, setting, 27installation packages, 116, 118, 121

based on an existing package, 21creating, 21 to 22creating for Desktop Firewall only, 69

deployment tools, 115

KKnowledgeBase search, 11

Llicense, upgrading to a registered version, 66, 106list of files in optimized packages, 116list of files in packages for Desktop Firewall

only, 121list of files in regular packages, 118

Mmanuals, 10McAfee Desktop Firewall

properties, 97, 112McAfee Installation Designer

creating VirusScan Enterprise installation packages and settings files, 19

defined, 7installing, 15password, 65, 105starting, 20

McAfee Security University, contacting, 11messages, 126mirror tasks

adding, 92deleting, 43, 94editing, 42, 93

OOn-Access Scanner, configuring, 28, 79On-Delivery Scanner, configuring, 33, 84on-demand scan tasks

adding, 35, 86configuring, 35, 86deleting, 38, 89editing, 37, 88scheduling, 35, 86

operating systems supportedservers, 14workstations, 14

optimized installation package, 23

Product Guide 143

Index

Ppassword

creating, 66modifying, 65

patch filesadding, 55configuring, 54deleting, 55editing, 55

post-installation options, configuring, 67PrimeSupport, 11product documentation, 10product training, contacting, 11programs to run after installation

adding, 60configuring, 60deleting, 61editing, 61

proxy settings, 59, 103

RREG files, 64, 104registry settings, configuring, 64, 104Repository Settings, 58, 102requirements, 14reviewing and saving installation configuration, 68,

73, 107, 113

Sscan tasks

adding, 35, 86configuring, 35, 86deleting, 38, 89editing, 37, 88scheduling, 35, 86

security headquarters, contacting AVERT, 11service portal, PrimeSupport, 11setting

configuration type, 78features to install, 24installation options, 27password, 65, 105source for configuration, 26

type, 78setting features, 24setting source and destination folders, 23, 70settings file

deployment tools, 122generating, 74generating for Desktop Firewall only, 108

SITELIST.XML file, 57, 101source for configuration

setting, 75setting for Desktop Firewall only, 109

source for configuration, setting, 26source in installation packages

configuring, 23starting McAfee Installation Designer, 20submitting a sample virus, 11system requirements, 14

Ttechnical support, 11training web site, 11Troubleshooting

frequently asked questions, 125messages, 126

Type, setting, 78

Uupdate tasks

adding, 39, 90deleting, 41, 92editing, 40, 91

upgrade web site, 11upgrading license, 66, 106user interface properties, configuring, 49, 98

VVirus Information Library, 11virus, submitting a sample, 11VirusScan, deploying the installation package, 115

Index


product guide revision 1.0 mcafee installation...

Documents