Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

6.4.6 Updating judgment policies for anti-virus products automatically or manually

The following describes how to update a judgment policy for an anti-virus product without using the Edit Judgment Policy (Judgments for anti-virus products) window.

Organization of this subsection

(1) Installing an anti-virus product on a client in order to update judgment policies

(2) Installing an anti-virus product on a remote management server to update judgment policies

(3) Creating a policy import file for anti-virus products to update judgment policies manually

(1) Installing an anti-virus product on a client in order to update judgment policies

When an anti-virus product compatible with automatic judgment policy updating is installed on a client, the judgment policies for the anti-virus products can be updated automatically based on the update information for the virus definition file and engine version.

To update judgment policies by linkage with a client:

1. Install an anti-virus product on the client.
   For details about anti-virus products compatible with automatic judgment policy updating, see 4.6 Installing anti-virus products that link with automatic judgment policy updating.
   
2. Set up JP1/Client Security Control - Manager.
   In the Client Security Control - Manager Setup dialog box, complete the following settings so that judgment policies will be updated automatically:
   
   • In the Additional automatic update information window that is opened from the Automatic updates for anti-virus products page, set automatic update information such as the asset number of the client on which the anti-virus product is installed and the update extension period.
   For details about how to use the Automatic updates for anti-virus products page, see 5.4.3(4) Using the Automatic updates for anti-virus products page.
   
3. Start JP1/Client Security Control - Manager Remote Service, which is the remote service of JP1/CSC - Manager.
   When JP1/CSC - Manager detects an update to the anti-virus product information (virus definition file and engine version), the judgment policy update command (cscpolimport) is automatically executed to automatically update the judgment policies.
   For details about the judgment policy update command (cscpolimport), see cscpolimport (updates judgment policy settings) in 15. Commands.
   

   Reference note

   You can set up the remote service to start automatically when the OS starts. For details about setting up the remote service to start automatically, see 5.4.4 Setting up JP1/CSC - Manager and the remote service to start automatically.

(2) Installing an anti-virus product on a remote management server to update judgment policies

When an anti-virus product compatible with automatic judgment policy updating is installed on a remote management server, the judgment policies for the anti-virus products can be updated automatically whenever the virus definition file or engine version is updated. Alternatively, the administrator can update the judgment policy manually at any time. Updating manually allows you to postpone updating for a set time rather than updating immediately after the updates become available.

The following describes the procedure for updating judgment policies by linkage with a remote management server.

(a) Updating judgment policies automatically by linkage with a remote management server

1. Set up a remote management server.
   In the Client Security Control - Manager Setup dialog box, complete the following settings to update judgment policies automatically:
   
   • In the Basic Settings page, under Policy update information, set Anti-virus products to Update automatically.
   • In the Remote Option page, register the IP address of the remote management server.
   In the Client Security Control - Manager Remote Option Setup dialog box, complete the following settings:
   
   • In the Anti-Virus Products page, under Automatic policy update information, set Automatic policy update to Execute.
   • In the Anti-Virus Products page, under Automatic policy update information, specify a grace period in Extend update time to apply between the acquisition of the latest information about the anti-virus product and the automatic update of the judgment policy definition.
   • In the Anti-Virus Products page, under Linked product information, select the anti-virus product name in Name.
   For details about setting up a remote management server, see 5.4 Installing and setting up JP1/CSC - Manager and 5.5 Installing and setting up JP1/CSC - Manager Remote Option.
   
2. Install the anti-virus product on the remote management server.
   For details about anti-virus products compatible with automatic judgment policy updating, see 4.6 Installing anti-virus products that link with automatic judgment policy updating.
   
3. Start Client Security Control - Manager Remote Service, the remote service of JP1/CSC - Manager.
4. Start Client Security Control - Manager for AntiVirus, the virus definition information monitoring service of JP1/CSC - Manager Remote Option.
   When the remote management server detects an update of anti-virus product information (virus definition file and engine version), the judgment policy update command (cscpolimport) is automatically executed to automatically update the judgment policies.
   For details about the judgment policy update command (cscpolimport), see cscpolimport (updates judgment policy settings) in 15. Commands.
   

Reference note

You can set up the remote service and virus definition information monitoring service to start automatically when the OS starts. For details about setting up the remote service to start automatically, see 5.4.4 Setting up JP1/CSC - Manager and the remote service to start automatically. For details about setting up the virus definition information monitoring service to start automatically, see 5.5.4 Setting up the virus definition information monitoring service to start automatically.

(b) Updating judgment policies manually whenever the administrator chooses

1. Set up a remote management server.
   In the Client Security Control - Manager Setup dialog box, complete the following settings to update judgment policies at any time the administrator chooses:
   
   • In the Basic Settings page, under Policy update information, set Anti-virus products to Do not update automatically.
   • In the Remote Option page, register the IP address of the remote management server.
   In the Client Security Control - Manager Remote Option Setup dialog box, complete the following settings:
   
   • In the Anti-Virus Products page, under Automatic policy update information, set Automatic policy update to Execute.
   • In the Anti-Virus Products page, under Linked product information, select the anti-virus product name in Name.
   For details about setting up a remote management server, see 5.4 Installing and setting up JP1/CSC - Manager and 5.5 Installing and setting up JP1/CSC - Manager Remote Option.
   
2. Install the anti-virus product on the remote management server.
3. Start Client Security Control - Manager Remote Service, the remote service of JP1/CSC - Manager.
4. Start Client Security Control - Manager for AntiVirus, the virus definition information monitoring service of JP1/CSC - Manager Remote Option.
   When the remote management server detects that information about the anti-virus product (for example the version of the virus definition file or detection engine) has been updated, a policy import execution file (manual) (cscmpolimport.dat) is created. For the name and location of this file, see 16.14 Policy import execution file (manual).
   
5. Execute the judgment policy update command (cscpolimport) with the policy import execution file (manual) (cscmpolimport.dat) specified.
   Execute the command as follows:
   

    
   cscpolimport -v JP1/CSC - Manager-installation-folder\spool\cscmpolimport.dat
    

   The judgment policies are updated.
   For details about the judgment policy update command (cscpolimport), see cscpolimport (updates judgment policy settings) in 15. Commands.
   

Reference note

You can set up the remote service and virus definition information monitoring service to start automatically when the OS starts. For details about setting up the remote service to start automatically, see 5.4.4 Setting up JP1/CSC - Manager and the remote service to start automatically. For details about setting up the virus definition information monitoring service to start automatically, see 5.5.4 Setting up the virus definition information monitoring service to start automatically.

(3) Creating a policy import file for anti-virus products to update judgment policies manually

By creating a policy import file for anti-virus products, an administrator can manually update the relevant judgment policies. A policy import file for anti-virus products defines update information (for example information about the version of the virus definition file or detection engine) for anti-virus products. For details about this file, see 16.13 Anti-virus product policy import file.

This method can be used when an administrator wants to update judgment policies with specific information.

To update judgment policies manually:

1. Create a policy import file for anti-virus products.
2. Execute the judgment policy update command (cscpolimport) with the anti-virus product policy import file specified.
   Execute the command as follows:
   

    
   cscpolimport -v anti-virus-product-policy-import-file-name
    

   The judgment policies are updated.
   For details about the judgment policy update command (cscpolimport), see cscpolimport (updates judgment policy settings) in 15. Commands.
   

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated