RE: sbsb2003 premium and ISA



DO THIS

1. Decide whether you want to use the Adminstrator account for CSM, or
another account. If you don't want to use the Administrator account, create
an account. (I use the Administrator account.)

2. Run setup - install on IIS is generally the only selection available.
3. Enter the FQDN server.domain.local OR the IP of the SBS. I prefer the IP,
it seems to work better.
4. Install into IIS Virtual Web Site (NOT the default web site).
5. Use port 8085 for communication.
6. Deselect SSL.
7. Use Administrator account - If ISA enter proxy info, if no ISA enter
nothing in proxy.
8. If you don't have the activation code - register now, the email with the
code comes real quick. (note that you can go this far prior to the actual
install if you like, and get the activation code so you don't have to do this
while installing).
9. Accept the server/client port.
10. Accept the client installation for the SBS (installs the Officescan
client on the server)
11. The install proceeds, then open the admin console.

- This completes Officescan installation, now on to Scanmail.

12. Go to the Scanmail link on the left, and install Scanmail to the IP of
your SBS. Scanmail and eManager are installed.

- This completes the installation of CSM SMB. Now you need to make some
settings.

1. In the CSM console, click on the Clients view so you can see the
Officescan 'domain'. Your SBS will be listed there.
2. Create a new Officescan 'domain', and move your SBS computer to the new
domain. The original domain will be used for workstations.
3. Click on your SBS computer icon, and set the client priveliges to your
liking.
4. Click on Scan options | Real time Scan settings, and find the Exclusions
link.
5. Put <drive> pagefile.sys in the lower 'file' exclusion list.
6. Put <these are default locations>

c:\Program files\exchsrvr
\trend,
\trend micro in the directory exclusion area.
Note that if you have moved your exchange data and or logs somewhere, be
sure to exclude them. Note also you can be more granular with your exclusions
if you want - you don't have to exclude the entire directory.

Another note - there is a tick box for excluding Trend product directories,
but I do it manually anyway.
Yet another note - On all screens make sure you APPLY the settings by
scrolling down to the bottom and clicking the button.

What you've done with the two Officescan 'domains', is enabled different
settings for the server versus the clients. Now when you add client
machines, you can set the options on that domain (rather than each
workstation) so they apply to all workstations, but not the server. Sometime
this is useful.

7. Click on Updates, Server updates, Automatic Update, check the options and
set the frequency to hourly.

8. Click on Manual Update, select the options you want, and update now to
get the lates files and make sure connectiviy is there.

9. Log off Officescan console.

Scanmail

1. Use the non HTML console from start | all programs.
2. Log on, click on Scheduled Update.
3. Enable scheduled update, and set it to hourly, select pattern file and
engine.
4. If you use ISA, click on the Proxy Settings button and enter the proxy
info.
5. Click on Update Now, select the options, set proxy info if you use ISA,
and click on Update now.

Those are the basics to get protection. You can learn the fine tuning and
option stuff (including eManager) as you go.


"Gabriel C. Stan" wrote:

I will have to see the IIS list to see ports and virual servers. Also can you
open companyweb?
At one point you will have to make sure that TrendMicroConsole was published
properly in ISA

"BrianMultiLanguage" wrote:

Yes the server CAN access the internet again.
IE can not open 10.0.0.2:4343, TrendMicro SMB/messaging console.
I uninstalled/reinstalled the TrendMicro as the ISA install recommends.
172.16.3.1 is gw 172.16.3.2(router) which has a public ip for the internet.
10.0.0.2 is for LAN only, and does not Gateway


"Gabriel C. Stan" wrote:

Sorry Brian your info it is a bit cryptic.
It is for me to understand that you have restored acces to internet?
And nw you are having problems with TrendMicro?
Is the TrendMicro Product ?? Version ?? Antivirus ?? AntiSpyware ??
Groupware ??
Why is the server 10.0.0.2 is ther another GW on the network.
And 172.16.3.1 is connected to ??


"BrianMultiLanguage" wrote:

Ok that established the internet BUT
the TrendMicro Console 10.0.0.2:4343 can not display. I unistalled it,
reinstalled it, no go.
The Lan uses 10.0.0.2, 255.255.255.0, no gateway
The WAN uses 172.16.3.1 , GW to router 172.16.3.1
I thought this would be a bad idea.
Thanks

"Gabriel C. Stan" wrote:

Run Connect to Internet Wizard. Beyond that we need more info on your network
topology, like routers, clients, service pack level etc.

"BrianMultiLanguage" wrote:

So I setup the server and against mywill, aka we can't afford to train you,
ISA was installed.
Now the server can not even go to microsoft update land.
I would just say; help.
thank you
.


Loading