Trend Micro InterScan Web Security Suite Windows版管理者ガイド

Size: px

Start display at page:

Download "Trend Micro InterScan Web Security Suite Windows版管理者ガイド"

みちしげよせ
7 years ago
Views:

1 Trend Micro InterScan Web Security Suite Windows

2 注意事項トレンドマイクロへのお客様情報の送信について URLWeb URL URLWeb Web ID Web URL ID Web Web /TrendCare/ /Web URL 輸出規制について U.S. Export Administration Regulations 著作権について TRENDMICRO On-Line-Scan PC-cillin InterScan INTERSCAN VIRUSWALL ISVW InterScanWebManager ISWM InterScan Message Security Suite InterScan Web Security Suite IWSS TRENDMICRO SERVERPROTECT PortalProtect Trend Micro Control Manager Trend Micro MobileSecurity VSAPI Trend Micro Policy Server License for Enterprise Information Security LEISec Trend Park Trend Labs Trend Micro Enterprise Protection Strategy InterScan Gateway Security Appliance Trend Micro Network VirusWall Network VirusWall Enforcer Trend Flex Security EPS Trend Micro EPS LEAKPROOF Trend Expert on Guard InterScan Messaging Security Appliance InterScan Web Security ApplianceInterScan Messaging Hosted Security Copyright Trend Micro Incorporated. All rights reserved. P/N: IWSSNT-AE0300 (2008/11)

3 Web IntelliTunnel URL ICAP AAxS FTP X ICAP HTTP FTP Web iii

4 Trend Micro InterScan Web Security Suite ICAP Web Cache Communication Protocol HTTP /ActiveX URL URL FTP IWSS IWSS iv

5 IWSS IWSS IWSS Web Web IWSS HTTP EICAR IWSS ( ) v

6 Trend Micro InterScan Web Security Suite IP HTTP Java /ActiveX /ActiveX URL URL IntelliTunnel URL FTP FTP vi

7 IP / (LDAP) HTTP HTTP HTTP Web Web URL HTTP /ActiveX /ActiveX /ActiveX /ActiveX ActiveX vii

8 Trend Micro InterScan Web Security Suite 8 URL IntelliTunnel URL URL URL URL URL URL IntelliTunnel URL URL URL URL FTP FTP FTP FTP FTP FTP FTP IP IP viii

9 (LDAP ) ICAP Web (HTTPS) IWSS URL /ActiveX IWSS Trend Micro Control Manager / ix

10 Trend Micro InterScan Web Security Suite / CSV A MIME x

11 B C OpenLDAP OpenLDAP LDIF xi

12 Trend Micro InterScan Web Security Suite xii

13 13

14 Trend Micro InterScan Web Security Suite Readme Q&A Web 14

15 15

16 Trend Micro InterScan Web Security Suite 16

17 17

18 Trend Micro InterScan Web Security Suite Web 18

19 Web 19

20 Trend Micro InterScan Web Security Suite IntelliTunnel URL 20

21 ICAP 21

22 Trend Micro InterScan Web Security Suite AAxS FTP X ICAP [ ] [ ]: 22

23 ( ): [ ] [ ]: [ ] [ ]: HTTP FTP 23

24 Trend Micro InterScan Web Security Suite Web 24

25 25

26 Trend Micro InterScan Web Security Suite ICAP 1.0 Web Cache Communication Protocol 26

27 HTTP /ActiveX URL 27

28 Trend Micro InterScan Web Security Suite URL 28

29 FTP 29

30 Trend Micro InterScan Web Security Suite IWSS 30

31 IWSS IntelliTunnel 31

32 Trend Micro InterScan Web Security Suite URL 32

33 lpt$vpn.### 33

34 Trend Micro InterScan Web Security Suite lpt$vpn.### \Program Files\Trend Micro\InterScan Web Security Suite\phishB.ini 34

35 \Program Files\Trend Micro\InterScan Web Security Suite\ssaptn.### ### ssaptn.### 35

36 Trend Micro InterScan Web Security Suite 36

37 37

38 Trend Micro InterScan Web Security Suite 38

39 39

40 Trend Micro InterScan Web Security Suite 40

41 IWSS IWSS HTTP FTP URL /ActiveX 41

42 Trend Micro InterScan Web Security Suite SNMP IWSS Control Manager Trend Micro InterScan Web Security Suite Console (tomcat5.exe) Trend Micro InterScan Web Security Suite for FTP (iwssd.exe) Trend Micro InterScan Web Security Suite for HTTP (iwssd.exe) Trend Micro IWSS Log Import (logtodb.exe) Trend Micro IWSS Notification Delivery Service (isdelvd.exe) Trend Micro SNMP Service (snmpmonitor.exe) Trend Micro IWSS TMCM Agent Service (En_Main.exe) Trend Micro IWSS Metric Management Service (metricmanage.exe) 42

43 purgefile.exe schedulereport.exe scheduledprupdate.exe scheduledau.exe cleanfile.exe DbOldDataCleanup.exe 43

44 Trend Micro InterScan Web Security Suite 44

45 45

46 Trend Micro InterScan Web Security Suite

47 IWSS Web IWSS Web IWSS Web >:1812/index.jsp >:1812/index.jsp 47

48 Trend Micro InterScan Web Security Suite Web admin adminiwss IWSS < >\quarantine 48

49 2-2. IWSS 49

50 Trend Micro InterScan Web Security Suite 2-2. IWSS 50

51 2-2. IWSS \ 51

52 Trend Micro InterScan Web Security Suite 2-2. IWSS iscan_web_server iscan_web_server= :1812 hosts 52

53 IWSS 53

54 Trend Micro InterScan Web Security Suite HTTP HTTP EICAR IWSS EICAR

55 \ 55

56 Trend Micro InterScan Web Security Suite 56

57 57

58 Trend Micro InterScan Web Security Suite ( ) 58

59 59

60 Trend Micro InterScan Web Security Suite URL 60

61 lpt$vpn.400 lpt$vpn

62 Trend Micro InterScan Web Security Suite 62

63 63

64 Trend Micro InterScan Web Security Suite HTTP Java /ActiveX URL 64

65 IntelliTunnel 65

66 Trend Micro InterScan Web Security Suite 66

67 IP 67

68 Trend Micro InterScan Web Security Suite HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\User Agent\Post Platform 68

69 < >\ieagent\ register_user_agent_header.exe 69

70 Trend Micro InterScan Web Security Suite 70

71 / IP ( HTTP ) 71

72 Trend Micro InterScan Web Security Suite 4-1. LDAP (Active Directory ) 72

73 4-1. BASIC NTLM BASIC NTLM 73

74 Trend Micro InterScan Web Security Suite 4-1. BASIC NTLM ( ) BASIC NTLM 74

75 IWSS LDAP LDAP Kerberos NTLM 4-2. LDAP 75

76 Trend Micro InterScan Web Security Suite LDAP 4-2. Kerberos LDAP 76

77 77

78 Trend Micro InterScan Web Security Suite 4-3. BASIC NTLM BASIC NTLM 78

79 LDAP 79

80 Trend Micro InterScan Web Security Suite Active Directory 80

81 HTTP 81

82 Trend Micro InterScan Web Security Suite 82

83 Java /ActiveX 4-3. Java 83

84 Trend Micro InterScan Web Security Suite /ActiveX 1: /ActiveX ActiveX 4-4. ActiveX 84

85 Java 2: Java 85

86 Trend Micro InterScan Web Security Suite 3: 4: 86

87 URL 87

88 Trend Micro InterScan Web Security Suite URL 88

89 89

90 Trend Micro InterScan Web Security Suite IntelliTunnel 90

91 Google Jabber IM 91

92 Trend Micro InterScan Web Security Suite URL 92

93 93

94 Trend Micro InterScan Web Security Suite FTP FTP 94

95 < > FTP 95

96 Trend Micro InterScan Web Security Suite FTP 96

97 97

98 Trend Micro InterScan Web Security Suite IP IP intscan.ini [user-identification] use_mac_address=no use_mac_address=yes 98

99 register_user_agent_header.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform 99

100 Trend Micro InterScan Web Security Suite register_user_agent_header.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\User Agent\Post Platform IWSS:< >/<MAC > < > <MAC > / (LDAP) LDAP Kerberos NTLM 5-1. LDAP 100

101 LDAP / IWSS 101

102 Trend Micro InterScan Web Security Suite 102

103 (KDC) (KDC) 103

104 Trend Micro InterScan Web Security Suite 104

105 105

106 Trend Micro InterScan Web Security Suite 106

107 HTTP 107

108 Trend Micro InterScan Web Security Suite HTTP HTTP HTTP HTTP 108

109 HTTP Web Web 109

110 Trend Micro InterScan Web Security Suite Web Web Web / Web 110

111 HTTP Web Web 111

112 Trend Micro InterScan Web Security Suite ( ) ( ) 112

113 HTTP URL URL 113

114 Trend Micro InterScan Web Security Suite HTTP 114

115 HTTP 115

116 Trend Micro InterScan Web Security Suite HTTP 116

117 HTTP 6-1. IWSS DoS [ ] [ ] 117

118 Trend Micro InterScan Web Security Suite

119 HTTP HTTP xx % 119

120 Trend Micro InterScan Web Security Suite

121 HTTP

122 Trend Micro InterScan Web Security Suite < インストールディレクトリ >\quarantine 122

123 HTTP

124 Trend Micro InterScan Web Security Suite 124

125 /ActiveX 125

126 Trend Micro InterScan Web Security Suite /ActiveX HTTP /ActiveX /ActiveX 126

127 /ActiveX Java 127

128 Trend Micro InterScan Web Security Suite 128

129 /ActiveX Java 129

130 Trend Micro InterScan Web Security Suite 130

131 /ActiveX 131

132 Trend Micro InterScan Web Security Suite ActiveX (*.cab) (PE) (*.exe *.ocx ) /ActiveX Java ActiveX 132

133 /ActiveX IWSS 133

134 Trend Micro InterScan Web Security Suite (CRL) 134

135 /ActiveX 135

136 Trend Micro InterScan Web Security Suite ActiveX ActiveX 136

137 /ActiveX 137

138 Trend Micro InterScan Web Security Suite 138

139 /ActiveX 139

140 Trend Micro InterScan Web Security Suite

141 /ActiveX

142 Trend Micro InterScan Web Security Suite 142

143 URL IntelliTunnel 143

144 Trend Micro InterScan Web Security Suite URL URL URL 144

145 URL IntelliTunnel 145

146 Trend Micro InterScan Web Security Suite 146

147 URL IntelliTunnel URL URL URL 147

148 Trend Micro InterScan Web Security Suite URL URL URL URL 148

149 URL IntelliTunnel URL < >\URLFilteringExceptions.ini URLFilteringExceptions.ini < >\IWSSPIUrlFilter.dsc filtering_exception_list URL 149

150 Trend Micro InterScan Web Security Suite URL Filtering Import File [approved] * *

151 URL IntelliTunnel URL 151

152 Trend Micro InterScan Web Security Suite IntelliTunnel IntelliTunnel 152

153 URL IntelliTunnel 153

154 Trend Micro InterScan Web Security Suite 154

155 URL 155

156 Trend Micro InterScan Web Security Suite 156

157 URL URL URL intscan.ini [URL-trusting], normallists 157

158 Trend Micro InterScan Web Security Suite [block] [allow] URL Blocking Import File { このタイトルは無視されます } [block] unwanted.com* urlkeyword banned.com/file banned.com/downloads/ [allow] URL 158

159 URL URL URL 159

160 Trend Micro InterScan Web Security Suite < >\URLB.ini URLB.ini intscan.ini 160

161 URL URL charity charity 161

162 Trend Micro InterScan Web Security Suite URL [block] [allow] URL Blocking Import File { このタイトルは無視されます } [block] unwanted.com* urlkeyword banned.com/file banned.com/downloads/ [allow] [block] [allow] 162

163 URL URL 163

164 Trend Micro InterScan Web Security Suite URL URL 164

165 URL URL 165

166 Trend Micro InterScan Web Security Suite 166

167 FTP 167

168 Trend Micro InterScan Web Security Suite FTP FTP FTP 168

169 FTP FTP FTP FTP FTP FTP 169

170 Trend Micro InterScan Web Security Suite FTP FTP ファイルタイプと MIME コンテントタイプの対応 170

171 FTP 171

172 Trend Micro InterScan Web Security Suite FTP 172

173 FTP IP IP FTP IP IP IP 173

174 Trend Micro InterScan Web Security Suite IP IWSS FTP 174

175 FTP 175

176 Trend Micro InterScan Web Security Suite 176

177 177

178 Trend Micro InterScan Web Security Suite HTTP ICAP 178

179 ( ) ( ) 179

180 Trend Micro InterScan Web Security Suite IWSS 180

181 WCCP 181

182 Trend Micro InterScan Web Security Suite WCCP IWSS 182

183 HTTP 183

184 Trend Micro InterScan Web Security Suite HttpsConnectACL.ini FTP over HTTP FTP over HTTP intscan.ini max_concurrent_connections 184

185 (LDAP ) 185

186 Trend Micro InterScan Web Security Suite ICAP ICAP 186

187 187

188 Trend Micro InterScan Web Security Suite < >\quarantine 188

189 Web 189

190 Trend Micro InterScan Web Security Suite (HTTPS) < >\jre\bin C:\Program Files\Trend Micro\InterScan Web Security Suite 1 keytool -genkey -keyalg RSA -alias tomcat-server -keystore mykeystore 190

191 mykeystore mykeystore mykeystore >:< > >: >:8443 HTTPS IWSS

192 Trend Micro InterScan Web Security Suite SERVER-IP HTTPS HTTPS < >\tomcat\conf\server.xml <Connector port="1812" connectionlinger="60000" maxhttpheadersize="8192" maxthreads="75" enablelookups="true" acceptcount="100" connectiontimeout="900000" disableuploadtimeout="true" minsparethreads="3" maxsparethreads="8" /> 192

193 [http] iscan_web_server=1812 iscan_web_protocol=http [http] iscan_web_server=8443 iscan_web_protocol=https 193

194 Trend Micro InterScan Web Security Suite IWSS URL /ActiveX 194

195 195

196 Trend Micro InterScan Web Security Suite < >\intscan.ini IWSS 196

197 Trend Micro Control Manager Control Manager 197

198 Trend Micro InterScan Web Security Suite MCP Control Manager 198

199 199

200 Trend Micro InterScan Web Security Suite 200

201 / HTTP トラフィックでウイルスが検出されました %Y に IWSS がファイル %F でセキュリティリスク %V を検出しました %N が %U からファイルをダウンロードしようとしました 07/01/23 8:36 AM に IWSS がファイル eicar.com でセキュリティリスク Eicar_test_file を検出しましたがからファイルをダウンロードしようとしました 201

202 Trend Micro InterScan Web Security Suite

203 203

204 Trend Micro InterScan Web Security Suite HTML 204

205 HTTP HTTP 205

206 Trend Micro InterScan Web Security Suite HTTP HTTP 206

207 URL URL FTP FTP 207

208 Trend Micro InterScan Web Security Suite FTP FTP 208

209 IntelliTunnel IntelliTunnel ActiveX 209

210 Trend Micro InterScan Web Security Suite ActiveX 210

211 URL URL 211

212 Trend Micro InterScan Web Security Suite SNMP SNMP 212

213 /URL / IWSS 213

214 Trend Micro InterScan Web Security Suite 214

215 215

216 Trend Micro InterScan Web Security Suite / 216

217 / 217

218 Trend Micro InterScan Web Security Suite 218

219 219

220 Trend Micro InterScan Web Security Suite 220

221 221

222 Trend Micro InterScan Web Security Suite

223 223

224 Trend Micro InterScan Web Security Suite 224

225 < >\report < >\report 225

226 Trend Micro InterScan Web Security Suite 226

227 227

228 Trend Micro InterScan Web Security Suite 228

229 229

230 Trend Micro InterScan Web Security Suite URL URL 230

231 URL IWSS ( URL ) URL URL (OPP) ID OPP ID 231

232 Trend Micro InterScan Web Security Suite URL 232

233 URL HTTP Requests Processed HTTP Responses Processed Number of HTTP threads HTTP CPU Utilization 233

234 Trend Micro InterScan Web Security Suite FTP Get FTP Get FTP Put FTP Put 234

235 235

236 Trend Micro InterScan Web Security Suite MSSQL$IWSS 1 236

237 < >\log 237

238 Trend Micro InterScan Web Security Suite < >\log virus.log

239 14-2. URL URL FTP HTTP Control Manager Java SNMP IWSS / tb_url_usage 239

240 Trend Micro InterScan Web Security Suite IWSS / tb_report_by tb_violation tb_performance_value CSV intscan.ini csvcharformat 240

241 MIME afc audio/aiff audio/x-aiff MIME MIME MIME 241

242 Trend Micro InterScan Web Security Suite MIME MIME MIME 242

243 MIME MIME MIME MIME 243

244 Trend Micro InterScan Web Security Suite MIME MIME MIME 244

245 < > {IWSS root} \Program Files\Trend Micro\InterScan Web Security Suite\ intscan.ini {IWSS root}\iwsspiscanvsapi.dsc {IWSS root}\iwsspiprotocolicap.pni {IWSS root}\iwsspiprotocolhttpproxy.pni {IWSS root}\iwsspiurlfilter.dsc {IWSS root}\report.ini < インストールディレクトリ >\urlfcmapping.ini 245

246 Trend Micro InterScan Web Security Suite {IWSS root}\clientacl_http.ini および {IWSS root}\clientacl_ftp.ini {IWSS root}\httpportpermission_http.ini および {IWSS root}\httpportpermission_ftp.ini {IWSS root}\httpsconnectacl_http.ini {IWSS root}\serveripwhitelist_http.ini および {IWSS root}\serveripwhitelist_ftp.ini.ini 246

247 intscan.ini main protocol_config_path.dsc intscan.ini scan plugin_dir.dsc 247

248 Trend Micro InterScan Web Security Suite 248

249 OpenLDAP 249

250 Trend Micro InterScan Web Security Suite OpenLDAP /etc/openldap/ldap.conf /etc/openldap/slapd.conf 250

251 OpenLDAP ldap.conf # # System-wide ldap configuration files. See ldap.conf(5) for # details # This file should be world readable but not world writable. # OpenLDAP supports the ldap.conf file. You could use this file to # specify a number of defaults for OpenLDAP clients. Normally this # file can be found under /etc/openldap based on /etc/init.d/ldap # start script's setting # Set host IP address or fully qualified domain name HOST example.peter.com #HOST # Set the default BASE DN where LDAP search will start off BASE dc=peter,dc=com # Set the default URI URI ldap://example.peter.com # SASL options # specify the sasl mechanism to use. This is a user-only option. # SASL_MECH <mechanism> # specify the realm. This is a user-only option # SASL_REALM <realm> # specify the authentication identity. # SASL_AUTHCID <authcid> 251

252 Trend Micro InterScan Web Security Suite slapd.conf # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # # Enforce all changes to follow the defined schemas loaded via # include statements in the conf file # NOTE 1 # All the OpenLDAP config files and backend databases are accessed # and created by "ldap", so if you touch these config files by # "root", "a Permission Denied" error will occur. Please modify # ownership accordingly. # NOTE 2 # krb5-kdc.schema fails to work with current OpenLDAP 2.2.x distro # krb5validstart, krb5validend, krb5passwordend need to have # "EQUALITY generalizedtimematch" inserted before the ORDERING # statement. # # Enforce all changes to follow the defined schemas loaded via # include statements in the conf file schemacheck on # Included schemas include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/krb5-kdc.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/nis.schema include /usr/local/etc/openldap/schema/java.schema # Do not enable referrals since IWSS 2.5 has its own implementation # referral ldap://root.openldap.org # Directives say where to write out slapd's PID and arguments # started with pidfile /usr/local/var/run/slapd.pid argsfile /usr/local/var/run/slapd.args # Load dynamic backend modules: # modulepath/usr/local/libexec/openldap # moduleloadback_bdb.la 252

253 OpenLDAP # moduleloadback_ldap.la # moduleloadback_ldbm.la # moduleloadback_passwd.la # moduleloadback_shell.la # Sample security restrictions #Require integrity protection (prevent hijacking) #Require 112-bit (3DES or better) encryption for updates #Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: #Root DSE: allow anyone to read it #Subschema (sub)entry DSE:allow anyone to read it #Other DSEs: #Allow self write access #Allow authenticated users read access #Allow anonymous users to authenticate #Directives needed to implement policy: # access to dn.base="" by * read # access to dn.base="cn=subschema" by * read # access to * #by self write #by users read #by anonymous auth # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn.(e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! access to dn.base="" by * read access to dn.base="cn=subschema" by * read access to * by self write by users read by anonymous auth by * none # We have found this gives a useful amount of information about # directory loglevel 256 #Specify the number of threads used in slapd, default = 16 #Increasing or decreasing the number of threads used can #drastically affect performance, we found 20 threads to be optimal #for our setup, but it can be different under other operating #systems threads

254 Trend Micro InterScan Web Security Suite #Tell slapd to close connections that have been idle for 30 seconds #or more idletimeout 30 # Enable LDAPv2 support. This option is disabled by default. allow bind_v2 # Disable anonymous bind disallow bind_anon # Comment this section to enable simple bind #disallow bind_simple # NOTE 3 # SASL Configuration # Caution: make sure you use the canonical name of the machine # in sasl-host. Otherwise, OpenLDAP wont be able to offer GSSAPI # authentication # Set the SASL realm and canonical name of the host sasl_hostexample.peter.com sasl_realmpeter.com # Allow proxy authentication if it's configured sasl-authz-policyboth # NOTE 4 # Mapping of SASL authentication identities to LDAP entries # The sasl-regexp line are particularly critical. They are what # rewrite incoming connections who have SASL formatted DNs to the # DNs that are in the directory DB. It's important to remember that # they are processed in order, so you want to write them from most # specific to most general # NOTE 5 # We set the cn=.* since we are going to adopt different security # mechanisms. If Kerberos v5 is the only one used, change wildcard # to cn=gssapi,cn=auth #sasl-regexp uid=(.*),cn=gssapi,cn=auth #uid=$1,ou=people,dc=peter,dc=com sasl-regexp uid=(.*),cn=.*,cn=auth 254

255 OpenLDAP uid=$1,ou=people,dc=peter,dc=com # ldbm database definitions # NOTE 6 # Correctly configuring the backend Berkeley DB is very critical # follow the guideline at # # Cleartext passwords, especially for the rootdn, should # be avoided. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. databasebdb # These options specify a DN and passwd that can be used to # authenticate as the super-user entry of the database. The DN and # password specified here will always work, regardless of whether # the entry named actually exists or has the password given. # This solves the chicken-and-egg problem of how to authenticate and # add entries before any entries yet exist suffix"dc=peter,dc=com" rootdn"cn=admin,dc=peter,dc=com" rootpwadmin # NOTE 7 # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd/tools. Mode 700 # recommended. directory/usr/local/var/openldap-data #Tell the slapd to store the most accessed entries in memory #Having a properly configured cache size can drastically affect #performance cachesize # Indices to maintain # Some versions of OpenLDAP don't support the index of uniquemember # "pres" indexing allows you to see a filter that asks if the # attribute is present in an entry # "eq" indexing allows to ask if an attribute has an exact value # "apporx" indexing allows to ask if an attribute value sounds like # something # This option is tied to --enable-phonetic compile option in # OpenLDAP # "sub" indexing allows to do substring search on an attribute's 255

256 Trend Micro InterScan Web Security Suite # values index default eq,pres index objectclass eq,pres index cn,sn,givenname,mail eq,pres,approx,sub index uideq,pres index uidnumber,gidnumber,memberuid eq,pres /usr/sbin/slapadd [-v] [-c] [-d level] [-b suffix] [-n dbnum] [-f slapd.conf] [-l ldif-file] /usr/sbin/slapcat [-v] [-c] [-d level] [-b suffix] [-n dbnum] [-f slapd.conf] [-l ldif-file] 256

257 OpenLDAP /usr/sbin/slapcat [-v] [-c] [-d level] [-b suffix] [-n dbnum] [-f slapd.conf] /usr/sbin/slaptest [-v] [-d level] [-f slapd.conf] 257

258 Trend Micro InterScan Web Security Suite ldapsearch [-D binddn] [-W] [-w bindpasswd] [-H ldapuri] [-h ldaphost] [-p ldap- port] [-b searchbase] [-s base one sub] [-x] [-Y mech] [-Z[Z]] filter [attrs...] ldapsearch -x -D "cn=admin,dc=peter,dc=com" -w admin -b "dc=peter,dc=com" -s sub "uid=petery" mail SASL/OpenLDAP/Kerberos v5 の認証を確認するには 1. KRB5_CONFIG="/etc/heimdal/krb5.conf"./ldapsearch -v -x \ -D "cn=admin,dc=peter,dc=com" -W -b "" -s base -LLL \ -H ldap://example.peter.com/ supportedsaslmechanisms 2. KRB5_CONFIG="/etc/heimdal/krb5.conf"./ldapsearch -b "dc=peter,dc=com" \ -H ldap://example.peter.com/ 3. KRB5_CONFIG="/etc/heimdal/krb5.conf"./ldapwhoami -H ldap://example.peter.com 258

259 OpenLDAP C-1. OpenLDAP 259

260 Trend Micro InterScan Web Security Suite /usr/local/sbin slapcat l [output_file_name] 260

261 OpenLDAP LDIF dn:uid=petery,ou=people,dc=client,dc=us,dc=trendnet,dc=org givenname: Peter telephonenumber: sn: Peter ou: All of IWSS Developer Team ou: People#Corporate User field mail: objectclass: top objectclass: person objectclass: organizationalperson objectclass: inetorgperson uid: petery cn: Peter Yen dn: cn=all of IWSS Developer Team,ou=Engineering,ou=Groups,dc=client,dc=us,dc=trendnet,dc=org ou: Groups #Corporate Group field ou: Engineering description: All of IWSS Developer Team objectclass: top objectclass: groupofuniquenames uniquemember: uid=petery,ou=people,dc=client,dc=us,dc=trendnet,dc=org cn: All of IWSS Developer Team 261

262 Trend Micro InterScan Web Security Suite C-2. OpenLDAP 262

263 OpenLDAP dn: uid=petery,ou=people,dc=client,dc=us,dc=trendnet,dc=org givenname: Peter telephonenumber: sn: Peter ou: All of IWSS Developer Team ou: Employee#Corporate User field mail: objectclass: top objectclass: person objectclass: organizationalperson objectclass: inetorgperson uid: petery cn: Peter Yen dn: cn=all of IWSS Developer Team,ou=Engineering,ou=Groups,dc=client,dc=us,dc=trendnet,dc=org ou: Teams #Corporate Group field ou: Engineering description: All of IWSS Developer Team objectclass: top objectclass: groupofuniquenames teammember: Peter Yen cn: All of IWSS Developer Team 263

264 Trend Micro InterScan Web Security Suite 264

265 ActiveX Control Manager CSV 29 cyrus-sasl DCS EICAR 54 ESMTP 201 FTP over HTTP 120 / FTP Get 234 FTP get 234 FTP Put 234 FTP put 234 FTP 172 FTP IP FTP 168 heimdal HTTP 114 / HTTPS Web HTTP URL

266 Trend Micro InterScan Web Security Suite 管理者ガイド / HTTP / 54 ICAP ICAP 186 ICSA 37 IntelliTunnel Internet Caching Acceleration Protocol ICAP iscan_web_protocol 193 iscan_web_server 193 IWSS IWSSPIUrlFilter.dsc 149 Java Kerberos 249 LDAP 25 AD Global ldapsearch 257 LDIF 260 lpt$vpn.xyz 61 MIME OpenLDAP 249 ldap.conf 251 slapd.conf openldap openssl-0.9.7d 250 Readme 14 RealAudio

267 register_user_agent_header.exe 100 slapadd 256 slapcat 256 slapd.conf 252 slapindex 257 slaptest 257 SNMP SolutionBank - Q&A Web 14 Tomcat 190 HTTP 192 Trend Micro Control Manager 197 TrendLabs 26 uniquemember 260 URL 38 Q&A 14 URLFilteringExceptions.ini 149 URL URL URL 232 URL 28 URL 27 URL URL 230 URL Web Web FTP

268 Trend Micro InterScan Web Security Suite 管理者ガイド FTP (FTP) 175 /ActiveX 132 /ActiveX ActiveX (CSV) Cisco

269 Network Appliance (TTL) ICSA URL HTTP (CRL) URL Q&A 14 URL (OPP) 230 ID

270 Trend Micro InterScan Web Security Suite 管理者ガイド ESMTP 201 HTML 204 SNMP FTP 184 (DCS) FTP (FTP) URL URL ( )

271 / (LDAP) 185 ID IP / DNS CSV 240 FTP get 234 FTP put 234 URL 232 URL /

272 Trend Micro InterScan Web Security Suite 管理者ガイド FTP Get 234 FTP Put 234 URL

Trend Micro Mobile Security 5.1 管理者ガイド

Trend Micro Mobile Security 5.1 トレンドマイクロへのお客様情報の送信について URLWeb URL URLWeb Web ID Web URL ID Web Web /TrendCare/ /Web URL 輸出規制について U.S. Export Administration Regulations http://www.treas.gov/ofac/http://www.bis.doc.gov/complianceandenforcement/liststocheck.htm

Trend Micro InterScan Web Security Suite Windows版 管理者ガイド

Trend Micro InterScan Web Security Suite Windows版管理者ガイド