Trend Micro ServerProtect for Linux CentOS / Suse 11 管理者ガイド

Size: px

Start display at page:

Download "Trend Micro ServerProtect for Linux CentOS / Suse 11 管理者ガイド"

あゆみしもとり
4 years ago
Views:

1 Trend Micro ServerProtect for Linux CentOS / Suse 11 管理者ガイド

2 トレンドマイクロへのお客さま情報の送信について (1) Web/URLTrend Web Web URL( IP) URLWeb Web (a) Web WebURLWeb URL IDURL Web (b) Web Web URL Web Web (2) Trend Micro Smart Protection Network < > (3) (4) (5) 輸出規制について複数年契約について Web 著作権について商標について TRENDMICRO On-Line-Scan PC-cillin InterScan INTERSCAN VIRUSWALL ISVW InterScanWebManager ISWM InterScan Message Security Suite InterScan Web Security Suite IWSS TRENDMICRO SERVERPROTECT PortalProtect Trend Micro Control Manager Trend Micro MobileSecurity VSAPI License for Enterprise Information Security LEISec Trend Park Trend Labs InterScan Gateway Security Appliance Trend Micro Network VirusWall Network VirusWall Enforcer Trend Flex Security LEAKPROOF TrendExpert on Guard InterScan Messaging Security Appliance InterScan Web Security Appliance InterScan Messaging Hosted Security DataDNA Trend Micro Threat Management Solution Trend Micro Threat Management Services Trend Micro Threat Management Agent Trend Micro Threat Mitigator Trend Micro Threat Discovery Appliance Trend Micro USB Security InterScan Web Security Virtual Appliance InterScan Messaging Security Virtual Appliance Trend Micro Reliable Security License TRSL Trend Micro Smart Protection Network Smart Protection Network SPN SMARTSCAN Trend Micro Kids Safety Trend Micro Web Security Trend Micro IM Security Trend Micro Encryption Trend Micro Encryption Client Trend Micro Encryption Gateway Trend Micro Collaboration Security Trend Micro Portable Security Portable Security Trend Micro Standard Web Security Trend Micro Hosted Security Hosted Security Trend Micro Deep Security CLOUD Smart Surfing Trend Micro Instant Security Trend Micro Enterprise Security for Gateways Enterprise Security for Gateways Trend Micro Security Platform Trend Smart Protection Vulnerability Management Services Trend Micro Vulnerability Management Services Trend Micro PCI Scanning Service Trend Micro Titanium Trend Micro Titanium AntiVirus Plus Smart Protection Server Deep Security Worry Free Remote Manager HOUSECALL SafeSync SafeSync Trend Micro InterScan WebManager SCC Trend Micro NAS Security Trend Micro Data Loss Prevention TREND MICRO ENDPOINT ENCRYPTION Securing Your Journey to the Cloud Trend Micro Trend Micro Deep Security Anti Virus for VDI Trend Micro Deep Security PCI DSS Trend Micro Deep Security Virtual Patch Trend Micro Threat Discovery Software Appliance SECURE CLOUD Trend Micro VDI Trend Micro Deep Security Deep DiscoveryTCSE Copyright 2012 Trend Micro Incorporated. All rights reserved. P/N: SPLXFF-AE0107_R5_CentOS (2012/09)

3 ServerProtect for Linux / ServerProtect ServerProtect MacroTrap ServerProtect Web iii

4 Trend Micro ServerProtect for Linux Web Web Quick Access ServerProtect ServerProtect ServerProtect CentOS4 CentOS SUSE Linux Enterprise Server/Desktop Control Manager ServerProtect Control Manager (Scan Now) iv

5 ( ) (Scan Now) Web v

6 Trend Micro ServerProtect for Linux Web ServerProtect SUSE Linux syslog-ng logrotate Q&A TrendLabs A Trend Micro Control Manager Control Manager Trend Micro Management Communication Protocol vi

7 NAT NAT HTTPS (SSO) Control Manager Control Manager ServerProtect Control Manager ServerProtect ServerProtect ServerProtect ServerProtect ServerProtect ServerProtect ServerProtect ServerProtect vii

8 Trend Micro ServerProtect for Linux ServerProtect ServerProtect ServerProtect ServerProtect Control Manager viii

9 B man tmsplx.xml [Scan] [ActiveUpdate] [SOURCEINFO] [DESTINFO] [Notification] [Configuration] [GUIPassword] [Logs] [Registration] [WVTP] RemoteInstall.conf splxmain splx splxcore splxhttpd splxcomp CMconfig Apache Apache C ix

10 Trend Micro ServerProtect for Linux x

11 11

12 Trend Micro ServerProtect for Linux ( ) man ( ) splxmain splx tmsplx.xml RemoteInstall CMconfig Readme Q&A 12

13 1. 13

14 Trend Micro ServerProtect for Linux 14

15 15

16 Trend Micro ServerProtect for Linux 16

17 ServerProtect for Linux / 17

18 Trend Micro ServerProtect for Linux.exe.com.lnk.bas.reg.dll.hlp.chm 18

19 Control Manager ServerProtect 19

20 Trend Micro ServerProtect for Linux Control Manager Web 20

21 / 21

22 Trend Micro ServerProtect for Linux 22

23 23

24 Trend Micro ServerProtect for Linux ServerProtect (tmsplx.xml) The splx configuration file /opt/trendmicro/sprotectlinux/tmsplx.xml was previously modified by another program... : : Control Manager : 24

25 (IntelliScan): (ActiveAction): 25

26 Trend Micro ServerProtect for Linux HTTPS (SSL) X Window Quick Access 1 Linux 26

27 27

28 Trend Micro ServerProtect for Linux 64 GPL KHM 28

29 [Summary] (WVTP) 29

30 Trend Micro ServerProtect for Linux SMTP OpenAFS 30

31 ServerProtect 1-1. ServerProtect 31

32 Trend Micro ServerProtect for Linux ServerProtect MacroTrap 32

33 MacroTrap.zip.arj.lzh 制限により検索されなかった圧縮ファイルはそのファイルが解凍されるときにリアルタイム検索によって検索されます 33

34 Trend Micro ServerProtect for Linux 34

35 35

36 Trend Micro ServerProtect for Linux ServerProtect Web Web 36

37 2-1. ServerProtect ホスト名 >:14942/ ホスト名 >:14943/ < > 37

38 Trend Micro ServerProtect for Linux 38

39 Web Web tmsplx.xml /opt/trendmicro/sprotectlinux Configuration SessionTimeout 39

40 Trend Micro ServerProtect for Linux Quick Access 2-2. KDE Quick Access Manual Scan : 40

41 Services : Launch Web Console: Purge Logs: Start Update Now: Stop Scheduled Scan: Tray Icon Notification: ServerProtect ServerProtect ServerProtect 41

42 Trend Micro ServerProtect for Linux /etc/init.d/splx start ~] # /etc/init.d/splx start Starting ServerProtect for Linux: Checking configuration file: [OK] Starting splxcore: Starting Entity: [OK] Loading splx kernel module: [OK] Starting vsapiapp: [OK] ServerProtect for Linux core started. Starting splxhttpd: Starting splxhttpd: [OK] ServerProtect for Linux httpd started. ServerProtect for Linux started. [root@localhost ~] # [OK] [OK] Quick Access ServerProtect ServerProtect ServerProtect /etc/init.d/splx stop [root@localhost ~] # /etc/init.d/splx stop Shutting down ServerProtect for Linux: Shutting down splxcore: Shutting down vsapiapp: [OK] Unloading splx kernel module: [OK] Shutting down entity: [OK] ServerProtect for Linux core stopped normally. [OK] Shutting down splxhttpd: Shutting down splxhttpd: [OK] ServerProtect for Linux httpd stopped normally. [OK] ServerProtect for Linux stopped normally. [root@localhost ~] # 42

43 Quick Access ServerProtect 2-1. /opt/trendmicro/sprotectlinux/splx.tmp /opt/trendmicro/sprotectlinux/splx.vsapiapp virus_catch_monitor 43

44 Trend Micro ServerProtect for Linux 44

45 45

46 Trend Micro ServerProtect for Linux 2-3. Administration:Startup Settings 46

47 CentOS4 CentOS5 system-config-services 2-4. CentOS: setup 47

48 Trend Micro ServerProtect for Linux 2-5. CentOS: SUSE Linux Enterprise Server/Desktop 11 yast2 48

49 yast 49

50 Trend Micro ServerProtect for Linux tmsplx.xml MaxRetrieveCount 50

51 Control Manager ServerProtect CMconfig Web ServerProtect Control Manager 51

52 Trend Micro ServerProtect for Linux 2-6. Control Manager 52

53 53

54 Trend Micro ServerProtect for Linux CMconfig ServerProtect Control Manager /opt/trendmicro/sprotectlinux/splx.util./cmconfig./cmconfig -h Agent.ini /opt/trendmicro/sprotectlinux/ Proxy_Type CMconfig SPLX server name or IP address: Do you wish to connect to Control Manager server using HTTPS?(y/n) [n] y Control Manager server name or IP address: Control Manager server port:[80] 54

55 Do you access Control Manager through a proxy server?(y/n) [n] yn n Please specify the name you would like to display on the Control Manager console:[splx server IP address] Please specify a folder name for this product (for example:/splx) [New entity]: Is the above information correct?(y/n) [n] n n y Control Manager Control Manager 55

56 Trend Micro ServerProtect for Linux 56

57 57

58 Trend Micro ServerProtect for Linux 58

59 59

60 Trend Micro ServerProtect for Linux Incoming files Outgoing files Running applications

62 Trend Micro ServerProtect for Linux /opt/trendmicro/sprotectlinux/splxvsapiapp./splxmain -s 62

63 /opt/trendmicro/sprotectlinux/splx.vsapiapp./splxmain -t (Scan Now)./splxmain -t 63

64 Trend Micro ServerProtect for Linux

65 3-4. /opt/trendmicro/sprotectlinux/splx.vsapiapp./splxmain -m < ディレクトリ > < > /temp1 /temp2./splxmain -m /temp1:/temp2 65

66 Trend Micro ServerProtect for Linux./splxmain -n 66

67 3-5. All directories: Specified directories only: /var/temp/scandirectory 67

68 Trend Micro ServerProtect for Linux /*/home 68

69 3-6. All file types: IntelliScan: uses "true file type" identification: Specified file extensions: 69

70 Trend Micro ServerProtect for Linux Scan Trend Micro recommended extensions : 3-7. Scan selected extensions Other extensions LGL;FIN;ADM LGL:FIN:ADM 70

72 Trend Micro ServerProtect for Linux

73 Use ActiveAction: Use customized scan action: 73

74 Trend Micro ServerProtect for Linux Use the same action for all types:

75 Directories to exclude: Files to exclude: File types to exclude: 75

76 Trend Micro ServerProtect for Linux

77 /opt/trendmicro/sprotectlinux/splx.quarantine 77

78 Trend Micro ServerProtect for Linux /opt/trendmicro/sprotectlinux/splx.backup 78

79 79

80 Trend Micro ServerProtect for Linux 80

81 xxx.xxx.xxx.xxx Trend Micro ActiveUpdate server: Trend Micro Control Manager update server: Other Internet source: 81

82 Trend Micro ServerProtect for Linux 82

83 4-1. [Proxy Settings General] 83

84 Trend Micro ServerProtect for Linux 4-2. [Component Update] 84

85 [Summary] [Manual Update] 85

86 Trend Micro ServerProtect for Linux 4-3. [Manual Update] 86

87 87

88 Trend Micro ServerProtect for Linux 4-4. [Scheduled Update] 88

89 89

90 Trend Micro ServerProtect for Linux Spyware Log ( ): Virus Log ( ): Scan Log ( ): System Log ( ): 90

91 ( ) (Scan Now) 5-1. Scan Now Web 91

92 Trend Micro ServerProtect for Linux Date Range: Start date: End date: Sort by: Entries per page: 92

94 Trend Micro ServerProtect for Linux

95 /var/log/trendmicro/sprotectlinux Web Web 95

96 Trend Micro ServerProtect for Linux

97 Web

98 Trend Micro ServerProtect for Linux

99 Send security risk outbreak notification: Send standard security risk infection notification: Send notification when Real-time Scan configuration was modified: Send notification when ServerProtect starts: Send notification when ServerProtect stops: Send notification when pattern files are outdated: Send notification when pattern update unsuccessful: Send notification when action performed on malware unsuccessful: 99

100 Trend Micro ServerProtect for Linux

101 \ 101

102 Trend Micro ServerProtect for Linux SMTP smtp.server.com または

103 103

104 Trend Micro ServerProtect for Linux SNMP 104

105 105

106 Trend Micro ServerProtect for Linux Web : ServerProtect Apache : Java : 106

107 ServerProtect splx_vsapiapp:[module_name - CXIpc::connectToServer2] errno=2 some error were found while stopping entity.force terminating it : : Control Manager : SUSE Linux syslog-ng 11 # this is for splx debug log filter f_splx { facility(local3); }; # logs for splx debug destination splx_debug_log { file("/var/log/splx.debug"); }; 107

108 Trend Micro ServerProtect for Linux log {source(src); filter(f_splx); destination(splx_debug_log); }; (KernelDebugLevel) (UserDebugLevel * ) Control Manager (ControlManagerDebug ) 6-1. tmsplx.xml 108

109 (KernelDebugLevel) (UserDebugLevel * ) Control Manager (ControlManagerDebug ) 6-1. tmsplx.xml ( ) /opt/trendmicro/sprotectlinux/entitymain.log 109

110 Trend Micro ServerProtect for Linux local3.* /path/splxuserdebug.log kern.debug /path/splxkerndebug.log ps -ef grep syslogd (CentOS4 または CentOS5) ps -ef grep syslog-ng (SLES11 または SLED11) kill -HUP <syslogd PID> (CentOS4 または CentOS5) kill -HUP <syslog-ng PID> (SLES11 または SLED11) 110

111 /etc/init.d/splx restart tmsplx.xml /etc/syslog.conf (CentOS4 または CentOS5) /etc/syslog-ng (SLES11 または SLED11) /etc/init.d/splx restart 111

112 Trend Micro ServerProtect for Linux ps -ef grep syslogd (CentOS4 または CentOS5) ps -ef grep syslog-ng (SLES11 または SLED11) logrotate kill -HUP <syslogd PID> (CentOS4 または CentOS5) kill -HUP <syslog-ng PID> (SLES11 または SLED11) etc/init.d/splx restart logrotate /var/log/messages /{path}/{splxlog} { sharedscripts 112

113 postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null true endscript } ServerProtect 113

114 Trend Micro ServerProtect for Linux 114

115 Q&A Q&A

116 Trend Micro ServerProtect for Linux

117 TrendLabs HotFix Security Patch 117

118 Trend Micro ServerProtect for Linux Patch Service Pack

119 119

120 Trend Micro ServerProtect for Linux 120

121 Trend Micro Control Manager 121

122 Trend Micro ServerProtect for Linux Control Manager A-1. Control Manager 122

123 Trend Micro Control Manager / A-1. Control Manager Trend Micro Management Communication Protocol 123

124 Trend Micro ServerProtect for Linux XML 124

125 Trend Micro Control Manager NAT NAT Agent.ini Product.ini 125

126 Trend Micro ServerProtect for Linux 1: Agent.ini IP /opt/trendmicro/sprotectlinux Agent.ini IPAddressList 2: Product.ini Control Manager /opt/trendmicro/sprotectlinux Product.ini 3: NAT HTTPS 126

127 Trend Micro Control Manager : : : (SSO) 127

128 Trend Micro ServerProtect for Linux Control Manager 128

129 Trend Micro Control Manager UDP: HTTP/HTTPS: 129

130 Trend Micro ServerProtect for Linux (60 ) (60 ) A-2. Control Manager ServerProtect 130

131 Trend Micro Control Manager Control Manager Control Manager ServerProtect 131

132 Trend Micro ServerProtect for Linux : : : 132

133 Trend Micro Control Manager A

134 Trend Micro ServerProtect for Linux ServerProtect A

135 Trend Micro Control Manager 135

136 Trend Micro ServerProtect for Linux ServerProtect 136

137 Trend Micro Control Manager ServerProtect 137

138 Trend Micro ServerProtect for Linux ServerProtect 138

139 Trend Micro Control Manager ServerProtect ServerProtect ServerProtect 139

140 Trend Micro ServerProtect for Linux A

141 Trend Micro Control Manager A-6. ServerProtect 141

142 Trend Micro ServerProtect for Linux ServerProtect ServerProtect A

143 Trend Micro Control Manager A

144 Trend Micro ServerProtect for Linux A

145 Trend Micro Control Manager 145

146 Trend Micro ServerProtect for Linux 146

147 Trend Micro Control Manager ServerProtect ServerProtect ServerProtect ServerProtect 147

148 Trend Micro ServerProtect for Linux 148

149 Trend Micro Control Manager 149

150 Trend Micro ServerProtect for Linux ServerProtect 150

151 Trend Micro Control Manager \ \ \ 151

152 Trend Micro ServerProtect for Linux [ ] ServerProtect 152

153 Trend Micro Control Manager ServerProtect ServerProtect 153

154 Trend Micro ServerProtect for Linux Control Manager 154

155 Trend Micro Control Manager 1: 155

156 Trend Micro ServerProtect for Linux 156

157 Trend Micro Control Manager 157

158 Trend Micro ServerProtect for Linux 2: ( ) 158

159 Trend Micro Control Manager HTTPS SOCKS 159

160 Trend Micro ServerProtect for Linux 3: 160

161 Trend Micro Control Manager 4: - - 5: : : 161

162 Trend Micro ServerProtect for Linux : : 6: 162

163 Trend Micro Control Manager - - : : : 1: 2: 3: 4: 163

164 Trend Micro ServerProtect for Linux 5: 6: 7: 1: 164

165 Trend Micro Control Manager 165

166 Trend Micro ServerProtect for Linux 2: ( ) HTTPS SOCKS 166

167 Trend Micro Control Manager 3: 167

168 Trend Micro ServerProtect for Linux 4: 168

169 Trend Micro Control Manager 5: - - 6: : : 169

170 Trend Micro ServerProtect for Linux : : 7: 170

171 Trend Micro Control Manager [ ] 171

172 Trend Micro ServerProtect for Linux [ ] 172

173 Trend Micro Control Manager \ \ \ \ RTF: 173

174 Trend Micro ServerProtect for Linux PDF: ActiveX: RPT: 174

175 Trend Micro Control Manager [ ] 175

176 Trend Micro ServerProtect for Linux 176

177 Trend Micro Control Manager [ ] : IP : : 177

178 Trend Micro ServerProtect for Linux 1 : : : : : 178

179 Trend Micro Control Manager : : 179

180 Trend Micro ServerProtect for Linux 180

181 Trend Micro Control Manager [ ] 181

182 Trend Micro ServerProtect for Linux 182

183 Trend Micro Control Manager 183

184 Trend Micro ServerProtect for Linux 184

185 185

186 Trend Micro ServerProtect for Linux man man man < コマンド名または設定ファイル名 > man tmsplx.xml tmsplx.xml 186

187 /opt/trendmicro/sprotectlinux/tmsplx.xml " Value="< 値 >"/> 187

188 Trend Micro ServerProtect for Linux /var/tmp:/home/samba:/tmp ServerProtect su root /etc/init.d/splx restart [Scan] RealtimeScan 188

189 0 1 ( ) ( ) 2 ( ) ( ) 6 ( ) 7 ( ) ( ) RealtimeIncludeDirList ScheduledIncludeDirList ManualIncludeDirList RealtimeIntelliScan ScheduledIntelliScan ManualIntelliScan 0 ( ) 1 189

190 Trend Micro ServerProtect for Linux ScheduledMapDriveExclusion ManualMapDriveExclusion 0 1 RealtimeIncludeExtList ScheduledIncludeExtList ManualIncludeExtList RealtimeIncludeTMExtList ScheduledIncludeTMExtList ManualIncludeTMExtList 0 ( ) 1 190

191 RealtimeExcludeDirList ScheduledExcludeDirList ManualExcludeDirList /dev:/proc:/var/spool/mail:/var/mail:/var/spool/mqueue:/var/spool/ mqueue.iscan:/opt/trendmicro/sprotectlinux/splx.quarantine:/opt/tr endmicro/sprotectlinux/splx.backup:/sys RealtimeExcludeFileList ScheduledExcludeFileList ManualExcludeFileList 191

192 Trend Micro ServerProtect for Linux RealtimeExcludeExtList ScheduledExcludeExtList ManualExcludeExtList RealtimeCustomizedAction ScheduledCustomizedAction ManualCustomizedAction B-1. 0 ( ) 1 FileExtentionToRename

193 RealtimeAllTypesAction ScheduledAllTypesAction ManualAllTypesAction B-2. ( 2 ) 0 ( ) 1 FileExtentionToRename

194 Trend Micro ServerProtect for Linux 0 B-3. CustomizedAction AllTypesAction null [Use ActiveAction] RealTimeScanArchived ScheduledScanArchived ManualScanArchived 194

195 RealtimeScanCompressed ScheduledScanCompressed ManualScanCompressed 0 1 ( ) RealtimeCompressionLayer ScheduledCompressionLayer ManualCompressionLayer RealtimeCompressedFileSize ScheduledCompressedFileSize ManualCompressedFileSize 40 195

196 Trend Micro ServerProtect for Linux RealtimeCleanSave ScheduledCleanSave ManualCleanSave 0 1 ( ) ScheduledNice ManualNice DirToMove /opt/trendmicro/sprotectlinux/splx.quarantine DirToSave /opt/trendmicro/sprotectlinux/splx.backup FileExtensionToRename ActionForTimeout 196

197 VirusOutbreak 0 1 ( ) VirusOutbreakPeriod VirusOutbreakCount AlertVirusInfection 0 1 ( ) AlertRealtimeConfigChange 0 197

198 Trend Micro ServerProtect for Linux 1 ( ) AlertServerProtectOn AlertServerProtectOff 0 splx 1 splx ( ) AlertPatternOutOfDate 0 1 ( ) AlertPatternOutOfDatePeriod AlertPatternUpdateFail 0 1 ( ) 198

199 AlertActionFail Schedule ( ) ScheduledTime ScheduledWDay ScheduledMDay 199

200 Trend Micro ServerProtect for Linux AlertInfectionFoundByMS 0 ( ) 1 [ActiveUpdate] EngineType EngineVersion EngineLastUpdateTime PatternType 200

201 PatternVersion PatternDate PatternLastUpdateTime SpywarePatternType SpywarePatternVersion SpywarePatternDate SpywarePatternLastUpdateTime ProductType ProductVersion Language 201

202 Trend Micro ServerProtect for Linux Platform ManualNOption ScheduledNOption Option ( ) Schedule ( )

203 ScheduledTime ScheduledWDay RandomizedUpdate UpdateRetryNum UpdateRetryInterval [SOURCEINFO] 203

204 Trend Micro ServerProtect for Linux DefaultSource Source DigSig 0 204

205 1 SrvAuth 0 HTTPS ( ) 1 HTTPS Merge 0 1 ( ) ProxyUsername ProxyPassword 205

206 Trend Micro ServerProtect for Linux Proxy UseProxy proxy.example.com 0 ( ) 1 ProxyPort ProxyType 0 HTTP ( ) 1 Socks4 2 Socks5 UseGeneralProxy 0 ( ) 206

207 1 [DESTINFO] Destination /opt/trendmicro/sprotectlinux [Notification] Type "" (null) SMTP SMTP SNMP SNMP SMTP:SNMP SmtpServer smtp.example.com 207

208 Trend Micro ServerProtect for Linux SmtpPort SmtpUserID SmtpPassword SmtpAuthType 0 ( ) 1 LOGIN 2 PLAIN 3 CRAM_MD5 SmtpFrom administrator@example.com 208

209 SmtpTo SmtpTimeout SmtpCharset SnmpHostname snmp.example.com 209

210 Trend Micro ServerProtect for Linux SnmpCommunity VirusOutbreakSubject [SPLX] Security risk outbreak subject VIRUSOUTBREAKMESSAGE A security risk outbreak was detected VirusInfectionSubject [SPLX] Security risk outbreak subject VIRUSINFECTIONMESSAGE Security risk infection(s) detected RealtimeConfigChangeSubject [SPLX] Real-time scan configuration modified 210

211 REALTIMECONFIGCHANGEMESSAGE The real-time scan configuration was modified ServerProtectOnSubject [SPLX] ServerProtect was started ServerProtectOffSubject [SPLX] ServerProtect was stopped SERVERPROTECTONMESSAGE ServerProtect was started SERVERPROTECTOFFMESSAGE ServerProtect was stopped 211

212 Trend Micro ServerProtect for Linux PatternOutOfDateSubject [SPLX] Virus pattern file is outdated PATTERNOUTOFDATEMESSAGE Virus pattern file is outdated PatternUpdateFailMessage ActionFailMessage [SPLX] Pattern update unsuccessful MaxItemNumber [SPLX] Action performed on malware unsuccessful [Configuration] 212

213 ThreadNumber UserDebugLevel 0 1 / ( ) 2 1 ID KernelDebugLevel 0 ( ) 1 / 2 1 ID 3 213

214 Trend Micro ServerProtect for Linux ControlManagerDebug MaxCacheItem MaxListItem MaxDirItem MaxExtItem MaxExcDirItem MaxExcFilItem MaxExcExtItem 214

215 WaitqTimeout VsapiTimeout MaxExcPid MaxVscPid MaxPathLen MaxCmdLen Lang SessionTimeout [GUIPassword] user1 215

216 Trend Micro ServerProtect for Linux BypassLocalLogin 0 1 [Logs] Schedule 0 1 ( ) 216

217 ScheduledTime LogDirectory MaxLogDay /var/log/trendmicro/sprotectlinux MaxRetrieveCount 217

218 Trend Micro ServerProtect for Linux [Registration] EnableScheduledOnlineUpdateLicense 0 1 ( ) ScheduledTime PrServerRegisterURL PrServerOnlineUpdateURL PrServerRenewInstrURL 218

219 PrServerUpgradeInstrURL PrServerViewLicenseURL EnableProxy 0 ( ) 1 ProxyServer ProxyType 0 HTTP ( ) 1 Socks4 2 Socks5 219

220 Trend Micro ServerProtect for Linux ProxyPort ProxyUserID ProxyPassword SessionTimeOut [WVTP] EnableWVTP 0 1 ( ) CountryCode 220

221 ServiceURL ScheduledTime /opt/trendmicro/sprotectlinux/splx.util/xmlvalidator 221

222 Trend Micro ServerProtect for Linux RemoteInstall.conf B-1. RemoteInstall.conf 222

223 B-1. RemoteInstall.conf 223

224 Trend Micro ServerProtect for Linux local6.* < > CentOS B-1. RemoteInstall.conf 224

225 splxmain /opt/trendmicro/sprotectlinux/splx.vsapiapp/splxmain splxmain [-a -b -c -e -f -g < 日付 > -i -j -k -l < ポート > -m < ディレクトリ > -n -o -q < アクティベーションコード > -r -s -t -u -v -w < ポート > -W -x -y][-d -E] -a vsapiapp -k -b /etc/cron.d/splx -c /etc/cron.d/splx tmsplx.xml 225

226 Trend Micro ServerProtect for Linux -e tmsplx.xml(5) /etc/cron.d/splx vsapiapp -D vsapiapp -D -f Web ( ) Web -j -g < > ServerProtect < > YYYY-MM-DD./splxmain -g # 2006 年 4 月 21 日より前に書き込まれたログを削除 -i vsapiapp -j Web 2 -k SIGKILL vsapiapp -a -l < > ServerProtect Web ServerProtect HTTP./splxmain -l xxxxx -m < > tmsplx.xml 226

227 (:) /temp1 /temp2./splxmain -m /temp1:/temp2 -n -o /etc/cron.d/splx -p -q < > / -r vsapiapp ServerProtect -s -m /etc/cron.d/splx tmsplx.xml -t cron crond /etc/cron.d/splx -u tmsplx.xml vsapiapp -v -x -w < > ServerProtect Web HTTPS./splxmain -w W (WVTP) yes no 227

228 Trend Micro ServerProtect for Linux -x -y -D vsapiapp -e -E splx man splxmain /etc/init.d/ splx {start stop restart status} start stop restart 228

229 status splxcore /etc/init.d/ splxcore {start stop restart status} start stop restart 229

230 Trend Micro ServerProtect for Linux splxhttpd status /etc/init.d/ splxhttpd {start stop restart status} start stop restart status 230

231 splxcomp splxcomp {-h} {-v} {-i} -h -v -i IWSS CMconfig 231

232 Trend Micro ServerProtect for Linux /opt/trendmicro/sprotectlinux/splx.util CMconfig [-h] [-f] [-Q] [-P] -f < > Control Manager -Q Control Manager -P Control Manager Web / -h 232

233 Apache /opt/trendmicro/sprotectlinux/splx.httpd/conf/splxhttpd.conf Apache /opt/trendmicro/sprotectlinux/splx.httpd/logs/ 233

234 Trend Micro ServerProtect for Linux 234

235 235

236 Trend Micro ServerProtect for Linux 236

237 237

238 Trend Micro ServerProtect for Linux 238

239 239

240 Trend Micro ServerProtect for Linux 240

241 241

242 Trend Micro ServerProtect for Linux 242

243 243

244 Trend Micro ServerProtect for Linux 244

245 245

246 Trend Micro ServerProtect for Linux 246

247 247

248 Trend Micro ServerProtect for Linux 248

249 ActiveUpdate Apache 233 Apache 233 AS/ CMconfig 231 CMconfig [Configuration] 212 Control Manager Control Manager / 154 Control Manager CMconfig 54 Web 51 EPS 22 [GUIPassword] 215 HotFix 117 IBM AS/ InterScan Web Security Suite 231 KDE 26 KHM Konquerer (KDE) 26 Linux 45 logrotate 112 [Logs] 216 MacroTrap MacroTrap Management Communication Protocol (MCP) 51 man 186 man 186 MCP HTTPS [Notification] 207 OPS 22 OS/ Patch 118 Quick Access ServerProtect 42 ServerProtect 43 Readme 12 RemoteInstall RemoteInstall.conf 222 RemoteInstall.conf AliveCountMax

250 Trend Micro ServerProtect for Linux 管理者ガイド AliveInterval 223 ConfigFilePath 222 ConnectRetry 222 ConnectTimeOut 222 Debug 224 DeployOption 222 FailedList 224 FullStatus 224 KHMPath 222 Package Name 222 ResponseTimeOut 224 SerialNumber RemoteInstall.conf 222 StatusFile 224 SuccessList 224 XMLdeployerPath 222 XMLvalidatorPath 222 SAMBA 31 Scan engine Platforms 18 Scan Now 63 [Scan] RealtimeScan ScriptTrap 32 Secure Sockets Layer (SSL) 23 Security Patch 117 ServerProtect ServerProtect 17 ServerProtect 41 ServerProtect 228 Service Pack 118 Simple Network Management Protocol 22 SMTP 102 SNMP Solaris 18 splxcomp 231 splxcomp splxcore splxhttpd splxmain 225 splx SSL 23 tmsplx.xml 186 [ActiveUpdate] 187 EngineLastUpdateTime

251 EngineType 200 EngineVersion 200 Language 201 ManualNOption 202 Option 202 PatternDate 201 PatternLastUpdateTime 201 PatternType 200 PatternVersion 201 Platform 202 ProductType 201 ProductVersion 201 RandomizedUpdate 203 Schedule 202 ScheduledNOption 202 ScheduledTime 203 ScheduledWDay 203 SpywarePatternDate 201 SpywarePatternLastUpdateTime 201 SpywarePatternType 201 SpywarePatternVersion 201 UpdateRetryInterval 203 UpdateRetryNum 203 [Configuration] MaxCmdLen 215 ControlManagerDebug 214 KernelDebugLevel 213 Lang 215 MaxCacheItem 214 MaxDirItem 214 MaxExcDirItem 214 MaxExcExtItem 214 MaxExcFilItem 214 MaxExcPid 215 MaxExtItem 214 MaxListItem 214 MaxPathLen 215 MaxVscPid 215 SessionTimeout 215 ThreadNumber 213 UserDebugLevel 213 VsapiTimeout 215 WaitqTimeout 215 [DESTINFO] Destination 207 [DESTINFO] 187 [GUIPassword] BypassLocalLogin 216 user1 215 [Logs] LogDirectory 217 Schedule Notification Group Key MaxItemNumber 212 [Notification] ActionFailMessage 212 PATTERNOUTOFDATEMESSAGE 212 PatternOutOfDateSubject 212 PatternUpdateFailMessage 212 REALTIMECONFIGCHANGEMESSAGE 211 RealtimeConfigChangeSubject 210 SERVERPROTECTOFFMESSAGE 211 ServerProtectOffSubject 211 SERVERPROTECTONMESSAGE

252 Trend Micro ServerProtect for Linux 管理者ガイド ServerProtectOnSubject 211 SmtpAuthType 208 SmtpCharset 209 SmtpFrom 208 SmtpPassword 208 SmtpPort 208 SmtpServer 207 SmtpTimeout 209 SmtpTo 209 SmtpUserID 208 SnmpCommunity 210 SnmpHostname 209 Type 207 VIRUSINFECTIONMESSAGE 210 VirusInfectionSubject 210 VIRUSOUTBREAKMESSAGE 210 VirusOutbreakSubject 210 [Registration] 187 EnableProxy 219 EnableScheduledOnlineUpdateLicense 218 ProxyPassword 220 ProxyPort 220 ProxyServer 219 ProxyType 219 ProxyUserID 220 PrServerOnlineUpdateURL 218 PrServerRegisterURL 218 PrServerRenewInstrURL 218 PrServerUpgradeInstrURL 219 PrServerViewLicenseURL 219 ScheduledTime 218 SessionTimeOut 220 [Scan] 187 ActionForTimeout 196 AlertActionFail 199 AlertPatternOutOfDate 198 AlertPatternOutOfDatePeriod 198 AlertPatternUpdateFail 198 AlertRealtimeConfigChange 197 AlertServerProtectOff 198 AlertServerProtectOn 198 AlertVirusInfection 197 AllTypesAction 196 CustomizedAction 196 DirToMove 196 DirToSave 196 FileExtensionToRename 196 ManualAllTypesAction 193 ManualCleanSave 196 ManualCompressedFileSize 195 ManualCompressionLayer 195 ManualCustomizedAction 192 ManualExcludeDirList 191 ManualExcludeExtList 192 ManualExcludeFileList 191 ManualIncludeDirList 189 ManualIncludeExtList 190 ManualIncludeTMExtList 190 ManualMapDriveExclusion 190 ManualNice 196 ManualScanArchived 194 ManualScanCompressed 195 RealtimeAllTypesAction 193 RealtimeCleanSave

253 RealtimeCompressedFileSize 195 RealtimeCompressionLayer 195 RealtimeCustomizedAction 192 RealtimeExcludeDirList 191 RealtimeExcludeExtList 192 RealtimeIncludeDirList RealtimeIncludeExtList 190 RealtimeIncludeTMExtList 190 RealtimeIntelliScan 189 RealTimeScanArchived 194 RealtimeScanCompressed 195 Schedule 199 ScheduledAllTypesAction 193 ScheduledCleanSave 196 ScheduledCompressedFileSize 195 ScheduledCompressionLayer 195 ScheduledCustomizedAction 192 ScheduledExcludeDirList 191 ScheduledExcludeExtList 192 ScheduledExcludeFileList 191 ScheduledIncludeDirList 189 ScheduledIncludeExtList 190 ScheduledIncludeTMExtList 190 ScheduledIntelliScan 189 ScheduledMapDriveExclusion 190 ScheduledMDay 199 ScheduledNice 196 ScheduledScanArchived 194 ScheduledScanCompressed 195 ScheduledTime 199 ScheduledWDay 199 VirusOutbreak 197 VirusOutbreakCount 197 VirusOutbreakPeriod 197 [SOURCEINFO] DefaultSource 204 DigSig 204 Merge 205 Proxy 206 ProxyPassword 205 ProxyPort 206 ProxyType 206 ProxyUsername 205 Source 204 SrvAuth 205 UseGeneralProxy 206 UseProxy 206 [WVTP] 187 CountryCode 220 EnableWVTP 220 ScheduledTime 221 ServiceURL tmsplx.xml.tmplate 188 TrendLabs 117 Update Now 85 Web 32 HTTPS 37 HTTP

254 Trend Micro ServerProtect for Linux 管理者ガイド WVTP X Window ( ) (WVTP) (EPS) 22 KHM (KHM) Control Manager

255 [ActiveUpdate] 200 [Configuration] 212 [DESTINFO] 207 [GUIPassword] 215 [Logs] 216 [Notification] 207 [Registration] 218 [Scan] 188 [SOURCEINFO] 203 [WVTP] ServerProtect [Scan Now] Update Now ServerProtect 41 ServerProtect ServerProtect

256 Trend Micro ServerProtect for Linux 管理者ガイド Scan Now 63 Web Q&A URL Apache 233 tmsplx.xml 186 tmsplx.xml syslog.conf tmsplx.xml 187 tmsplx.xml / HotFix 117 Patch 118 Security Patch 117 Service Pack

257 ServerProtect 99 ServerProtect 99 SMTP 102 SNMP InterScan Web Security Suite 231 splxcomp ServerProtect Control Manager CMconfig 54 Web Q&A (OPS)

258 Trend Micro ServerProtect for Linux 管理者ガイド ( ) SMTP

259 ActiveX 174 PDF 174 RPT 174 RTF

260 Trend Micro ServerProtect for Linux 管理者ガイド 260

ServerProtect for Linux 管理者ガイド

Trend Micro ServerProtect for Linux 管理者ガイドトレンドマイクロへのお客様情報の送信について Web ID Web URL ID Web Web 輸出規制について U.S. Export Administration Regulations http:www.treas.gov/ofac/www.bis.doc.gov/complianceandenforcement/liststocheck.htm