NetBackup™ Security and Encryption Guide

Configuring NetBackup Malware Scanner for Windows

1. Download NetBackup Malware Scanner from Veritas Download Center
2. Extract the downloaded zip files. Extracted files must have the following structure:

   NBAntiMalwareClient_version number 
      Readme.txt
   
       NBAntiMalwareClient_version number_AMD64 
         savapi-sdk-win64.zip
            setup.bat
            cleanup.bat

3. Refer to the Readme.txt file for install, upgrade, or uninstall processes.

   To install or upgrade NetBackup Malware scanner on windows computer:

   • Navigate to NBAntiMalwareClient_version number_AMD64 folder and run the setup.bat file.

   • Enter the target location to install the NetBackup Malware scanner.

   Note:

   If NetBackup Malware Scanner is already installed, then setup.bat/setup.sh will over write the exiting binary files.

   To uninstall NetBackup Malware scanner from windows computer:

   • Run the cleanup.bat file.

4. An optional setting can be used to increase number of threads in scanning.

   Update the aviraconf.txt file. Add the following entry:

   NumThreads = Number of threads for the scanning, where the default value is number of CPU cores.

   Note:

   If number of CPUs on scan host are less than 16, then number of threads would default to the number of CPUs and if they are greater than 16, then the number of threads would default to 16 threads. If NumThreads is configured, then threads would be triggered depending on the value set regardless of the number of CPUs on the scan host (Min value: 1 and max value: 300).

5. To validate if scan is working with NetBackup Malware Scanner on Windows setup, perform the following:

   • Run the ./update.bat command to get the latest signature update.

   • Navigate to NetBackup Malware Scanner installed path and run avira_lib_dir_scan.exe file with the required scan_path and conf_path parameters.

6. Configuration file must be present in NetBackup Malware Scanner installed path.

   For example,

   avira_lib_dir_scan.exe "c:\malwarescample" -log_path "C:\NBMalwareScanner.log" -conf_path "C:\NBMalwareScannerInstallPath\savapi-sdk-win64\bin\aviraconf.txt

   Ensure that the output of the above command is successful. For existing sample malware files, the output must be a list of infected files. Else the output must be empty.

7. (Optional) The MALWARE_LOG environment variable can be used to increase the logging level.

   For example, MALWARE_LOG=2 for setting logging level to warning.

   0 DEBUG
   1 INFO
   2 WARNING
   3 ALERT
   4 ERROR

Configuring NetBackup Malware Scanner for Linux

1. Download NetBackup Malware Scanner from Veritas Download Center.
2. Extract the downloaded zip file. Files must contain the following structure;

   NBAntiMalwareClient_version number_LinuxR_x86
         savapi-sdk-linux64.zip
           setup.sh
           cleanup.sh
   
   NBAntiMalwareClient_version number_LinuxS_x86 -> NBAntiMalwareClient_version number_LinuxR_x86
         savapi-sdk-linux64.zip
           setup.sh
           cleanup.sh

   Warning:

   The setup.sh script modifies the bashrc file on Linux.

3. Refer to the Readme.txt file for install, upgrade, or uninstall processes.

   To install or upgrade NetBackup Malware Scanner on Linux RHEL computer.

   • Navigate to NBAntiMalwareClient_ version number_LinuxR_x86 folder and run the setup.sh script.

   • Enter the target location to install the NetBackup Malware Scanner.

   To install or upgrade NetBackup Malware Scanner on Linux SUSE computer:

   • Navigate to NBAntiMalwareClient_version number_LinuxS_x86 folder and run the setup.shscript.

   • Enter the target location to install the NetBackup Malware Scanner.

   To uninstall NetBackup Malware Scanner from Linux computer:

   • Run the cleanup.sh script.

4. To validate if scan is working with NetBackup Malware Scanner on Linux setup, perform the following:

   • Run the ./update.sh script to get the latest signature update.

   • Navigate to NetBackup Malware Scanner installed path and run the avira_lib_dir_scan binary with the required scan path and conf_path parameters.

   • Configuration file must be present in NetBackup Malware Scanner installed path.

     For example,

     avira_lib_dir_scan "/root/malwareSample" -log_path "/root/NBMalwareScanner.log" -conf_path "/root/NBMalwareScannerInstalledPath/savapi-sdk-linux64/bin/aviraconf.txt

     Ensure that the output of the above command is successful. For existing sample malware files, the output must be a list of infected files. Else the output must be empty.