eScan BlogeScan Blog    eScan WebsiteeScan Website    eScan ForumeScan Forum    eScan FeedseScan Feeds     
    
Languages:     

From eScan Wiki

Jump to: navigation, search
Image:escan-g.jpg
· eScan  · MailScan  · Technologies   · Technical Info  · Security Awareness  · User Guides
[edit]

eScan Version 11 (and above) Online Help

Back

Contents


[edit]

Managed Computers

This section helps you in creating logical computer groups, defining policies for the created groups, and creating tasks for the desired group of computers. It is recommended that you group all the computers on the network in Logical group; it will help you in defining tasks and policies and monitoring activity on every computer present on the network. These groups can be based on departments, user roles or designations in the company. Let us see the steps towards securing all the computers on the network.
[edit]

User Interface

The Managed Computers page allows you to perform management tasks such as creating and removing groups; installing and uninstalling applications; and viewing the properties of client computers.
This page is organized like a file explorer window; it is divided into two panes. The left pane shows a console tree and the right pane, which is the task pane, shows the information about the selected node in the tree.
[edit]

Console Tree

The console tree displays the hierarchical structure of the eScan servers and client computers in the eScan network. The root node in the console tree is Managed Computers. It stores and displays the configuration information of groups, group policies, group tasks, and client computers in the eScan network. Its three sub nodes are Policies, Group Tasks, and Client Computers.

  1. The Policies page allows you to define new policies as per your requirements and deploy them to client computers. It displays all user defined policies in a table, which displays information regarding the name of the policy and when and to whom it was deployed. You can also view the properties of policy by first selecting it and then clicking Properties. If you do not want to retain an existing policy, you can delete it by first selecting the policy and then clicking Delete.

    2. Warning: Deleting a policy on the server will not affect the configuration on the client computers on which the policy has already been deployed.

  2. The Group Tasks page lists the tasks that can be applied to a particular group of computers. However, to use this feature, first you need to create computer groups. These groups appear as separate nodes under Managed Computers.
  3. The Client Computers page lists all the client computers on the eScan network. You can add computers to this list by using the Unassigned Computers link in the navigation bar.
    4. [edit]

    Task Pane

    Whenever you select a node in the console tree, the corresponding information is displayed in the task pane. The task pane usually displays information in a tabular format. On some pages, it may also display additional buttons or menus.
    Policies Pane
    A policy or a rule set is a collection of eScan rules that can be executed on an individual computer or computer group.
    The Policy task pane is displayed when you click Policies under Managed Computers or under a computer group in the console tree. This pane has three buttons: New Policy, Properties, and Delete.
    The New Policy page is displayed when you click the New Policy button. You can then specify a name for it in the Enter Policy Name box. Next, depending on the rule set that you want to implement, you should select the appropriate check box in the rule set column. If you do not configure the rules by clicking the buttons next to the selected boxes, the default settings will be applied in the newly created rule set. If a policy is no longer applicable, you can remove it by selecting it and then clicking Delete. You can also delete multiple policies at the same time.
    You can select the Merge Rule sets check box only while deploying the Anti Spam, Web Protection, MWL Inclusion list, and MWL Exclusion list rule sets. This option is basically used for appending a new rule-set to an existing rules-set.
    If you need to view the properties of an existing policy, you should select the check box next to the policy in the Policy task pane, and then click Properties. This will open the Properties window. This window displays information about the name of the policy, when it was created, to whom it was deployed, the rules configured, and whether the policy is applied to all subgroups.
    Group Tasks Pane
    The Group Task pane allows you to create and view the tasks that apply to a group of computers. This pane shows the New Task, Start Task, Properties, Results, and Delete buttons.
    You can create a task and enable it to run at a specific time by configuring the options in the New Task Template window. This window is displayed when you click New Task in the Group Tasks pane. You can then specify a name for the task, and then select the actions in the Assigned Tasks section. In this section, you can choose to view the status of modules, start or stop servers, set an update server, perform scans, or force computers to download updates. You can also run the task on subgroups by selecting the Apply for subgroups check box.
    You can configure the task to run either manually or automatically. The tasks can be scheduled to run at a specific time either on a daily or monthly basis or on certain days of the week.
    Client Computers Pane
    The Client Computer pane lists all the managed computers that have not yet been assigned to any particular computer group. You can add computers to this pane with the help of the Network Computers link on the navigation bar.
    [edit]

    Menus

    In addition, the window shows you two menus: Action List and Client Action List. The Action List menu helps you perform tasks such as creating, deleting, and configuring groups, and installing and uninstalling applications. The Client Action List menu helps you perform tasks such as setting the host configuration, installing and uninstalling applications, moving computers to a group, deleting computers from groups, refreshing clients, and viewing the properties of client computers.



    [edit]

    Accessing the Search Feature

    At times, you may need to add a particular computer to a group, but you may not have a clear idea of the workgroup to which it belongs. The Search feature of the eScan Web Console comes handy in such situations.

    To access search feature

    1. On the Managed Computers screen, at the upper left side, click the Search button.
      2.  The Search for Computers window appears.
    2. Under Filter section, in the Computer Name field, type the computer name that you want to search.
      For example, if you are searching for a computer named “Comp20” in your network, you can specify Comp20 in the Computer Name field. However, if you want to find all computers whose names begin with text string “Comp,” you need to specify only Comp* in the Computer Name field.
    3. Click the Find Now button.
      4.  The following field details appear in a tabular format.

      • The name of the computer
      • The name of the group
      • The IP address of the computer
      • The status of eScan, whether it is installed on the computer or not
      • The version of eScan
      • Last connection
      • The directory in which eScan is installed on the computer
      • The status of the eScan monitor
      • The status of the Anti Spam, Mail Anti Virus, Web Protection, Endpoint Security, and Firewall modules
      • The timestamp of the last update
      • The name of the update server
      • The operating system installed on the computer
      • The status of the eScan installation, whether it has all the critical patches and hotfixes installed on it or not

      Note: You can sort the rows in the table by any of the above criteria by clicking on the corresponding heading

      The Managed Computers pane shows you two menus: Action List and Client Action List.

      [edit]

      Action List

      The menu items in the Action List menu are as follows:

      i) New Sub Group

      System administrators often need to perform the same set of tasks on different computers. These tasks may involve deploying policies; installing hotfixes and updates; and installing software. eScan helps you simplify management tasks by allowing you to create subgroups of computers.
      Suppose you are a system administrator of a network that has 50 computers, out of which 25 belong to the Marketing department, 5 belong to the Accounts department, 15 belong to the Sales department, and the remaining belong to Administration department. In this case, each department has its own set of software requirements. For example, the Accounts department will rely heavily on accounting software.
      The steps to create a computer group are as follows:
      1. To create a new sub group, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, on the Action List menu, click New Sub Group.
      3. To specify a name for the new group, on the Creating New Group window, under Create new group, in the New group name box, type the name of the group, and then click Ok.

      ii) Set Group Configuration

      When you create a group, you cannot specify the authentication information for the group. The Set Group Configuration menu item allows you to define a user name and password for each user group. You can use this information to log on to a host in the group.
      NoteIf the computer that you want to log on to is within a domain, you must specify the domain name along with the user name while logging in. For example, if the computer Mrktng1 is within the Marketing domain and you want to log on to the domain as an Administrator, you must specify the user name as Marketing\Administrator when you log on to the computer.
      The steps to set the group configuration settings are as follows:
      1. To create a new group, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, on the Action List menu, click Set Group Configuration.
      3. In the Set Group Configuration window, under Log On Information, check the group name and user name.
      4. In the Remarks box, type your comments, if any, in the Password box, type the password, and then click Save.
      NoteYou can also move multiple computers to a group at the same time by selecting the check boxes next to them and then using the Move to group menu option..

      iii) Deploy / Upgrade Clients

      System Administrators often have to perform deployment tasks within their networks. At times, they may need to deploy applications on remote computers.
      The eScan Management Console allows you to install eScan and other applications on remotely by clicking Install Applications on the Action List menu.

      Select Application for Installation

      A. Install eScan
      The steps to install eScan are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. To install eScan on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Install Applications.
      3. On the Client Installation window, under Select application for installation, ensure that Install eScan is selected.
      4. To install eScan as a client, under Select eScan installation options, ensure that Client is selected. Alternately, to install eScan as a server, click Server.
      5. To reboot the computer after installing eScan, select the Auto Reboot after install check box.
      6. To disable e-mail scanning and Web scanning, select the Disable eMailscan and Webscanning check box.
      7. To select the update server, in the Update Server list, click the name of the update server.
      NoteThe default value is Auto-Detect
      8. To select the setup folder, in the Setup Folder list, click the name of the setup folder.
      Note The default value is <Default>.
      9. To install eScan, click Install.
      10. This will open the Client Installation window, which shows the status of the installation. To close this window, click Close.
      B. Install Another Application
      The steps to install another application are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. To install another application on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Install Applications.
      3. On the Client Installation window, under Select application for installation, ensure that Other is selected.
      4. In the Required files for installation box, type the path of the installation files or click Browse to select the files that you need for installing the application.
      NoteYou can add the paths of all the files needed for installing the application to this box.
      5. In the Executable file list, click the executable file that you need to install the application.
      6. In the Parameters box, type the command-line parameters, if any, and then click Start. This will deploy the file on the client computer.
      NoteFor example, to install the eScan hotfix in the silent mode, in the Command-line Parameters box, type /s This will ensure that no installation screen is displayed on the computer while the software is being installed.
      7. To install the application, click Install.
      8. This will open the Client Installation window, which shows the status of the installation. To close this window, click Close.
      Uninstall eScan Client
      You can also uninstall eScan from another computer by using the Uninstall Applications menu option.
      The steps to uninstall eScan are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. To uninstall eScan on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Uninstall Applications. Alternately, to install eScan on a client computer, on the right pane, on the Client Action

      List menu, click Uninstall Applications.

      3. On the Client Installation window, click Uninstall.

      iv) Active Directory Synchronization

      With Active Directory synchronization, you can synchronize eScan Centralized Console groups with Active Directory containers. New computers and containers discovered in Active Directory are copied into eScan Centralized Console automatically and the notification of the same can be sent to the system administrator. You can also choose to Auto Install or Protect discovered Windows workstations automatically. This allows you to minimize the time in which computers can become infected and reduce the amount of work you need to do to organize and protect computers.
      Note
      • Endpoints running Mac OS, Linux, or Android are not installed automatically. You must install eScan on such computers manually.
      • Ensure that your protect Windows Critical Server Manually if they are a part of Active Directory, before start of the Synchronization.
      • If any computer or container is removed, it will also be removed from eScan Console when it synchronizes with Active Directory.
      • By Default, the synchronization interval is of 60 minutes. You can set it to a minimum of 5 minutes.
      After you have set up synchronization, you can set up email alerts to be sent to your chosen recipients about new computers and containers discovered during future synchronizations. If you choose to protect computers in synchronized Enterprise Console groups automatically, you can also set up alerts about automatic protection failures.
      • Auto installation of clients within Active Directory

      Once the Active Directory is synced with the eScan Server, it will automatically install eScan on all the client machines in the Active Directory.

      How does Active Directory synchronization work?
      In eScan Console, you can have both “normal,” unsynchronized groups that you manage yourself and groups synchronized with Active Directory. When setting up synchronization, you select or create a synchronization point: an eScan Console group to be synchronized with an Active Directory container. All computers and subgroups contained in the Active Directory are copied into eScan Console and kept synchronized with Active Directory.
      Note:Active Directory groups will be denoted by Dark Green Color.

      v) Outbreak Prevention

      This option allows the administrator to Deploy outbreak prevention policies during an outbreak that restricts access to network resources from selected computer groups for a defined period of time.
      Deploy Outbreak Prevention
      Administrator can define following policies:
      • Limit Access to shared folders- After implementing outbreak Prevention policies, all computers in the selected group will have read only access to Shared Folders on their individual computers. The user can access the file but cannot modify it while accessing from any other computer.
      • Deny Write Access to Local Files and folders- All Computers in the selected group will not have permissions to modify or create new file or folder in the selected folders or files as defined by the administrator.

        • </li>Block Specific Ports- Select and Block a Port or a Port Range for TCP/ UDP Protocols. The user will be notified at the start or after restoring original policies through a customizable popup message on client computer if desired.</li>

      • Block All Ports (Other than trusted client-server ports): Select this option and it will block all the ports except the trusted client-server ports in case of a virus outbreak.
      • Automatically restore outbreak prevention: The administrator can set the hours (using the dropdown) after which the system will automatically restore the outbreak prevention settings.
        • Restore Outbreak Prevention
      • Notify Client users after restoring the original Settings:
        • Select this option to send notification to client users after restoring the original Settings.
        Note The above outbreak prevention policies will be enforced on all the selected computers or groups. Incorrect configuration of these policy settings can cause major problems with the computers.

        vi) Customized Client Setup

        eScan allows you to create customized client setup with pre-defined Policy Template. This allows you to implement group policies to the endpoints automatically when eScan Client is installed on the endpoint manually. The major benefit of this feature is that even if the endpoint is not connected to the eScan server, the Policy template will be deployed on to the endpoint while customized eScan Client is installed on the endpoint. On installing this customized setup, the endpoint will be automatically moved to the selected group.
        Note The policy should be already defined for the group.

        vii) Properties

        You can also view the properties of host computers. To do this, you must click the Properties menu option on the Client Action List menu.
        The steps to view the properties of the host computer are as follows:
        1. To set the host configuration settings, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
        2. On the Managed Computers page, on the right pane, in the task pane, select the check box next to the name of the client computer whose properties you want to view, and then on the Client Action List menu, click Properties. The Properties window shows the General, Anti-Virus, and Protection properties of the host computer.
        3. To close the Properties window, click Close.
        [edit]

        Client Action List

        The menu items in the Client Action List menu are as follows:

        i) Setting the Host Configuration

        The Set Host Configuration menu item allows you to define a user name and password for a host computer. You can use this information to log on to a host computer.
        Note: If the computer that you want to log on to is within a domain, you must specify the domain name along with the user name while logging in. For example, if the computer Mrktng1 is within the Marketing domain and you want to log on as an Administrator, you must specify the user name as Marketing\Administrator when you log on to the computer.
        The steps to set the host configuration settings are as follows:
        1. To set the host configuration settings, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
        2. On the Managed Computers page, on the right pane, on the Action List menu, click Set Group Configuration.
        3. In the Set Group Configuration window, under Log On Information, in the User name, specify the user name, and then in the Password box, specify the password.
        4. In the Remarks box, type your comments, if any, in the Password box, type the password, and then click Save.


        ii) Deploy / Upgrade Clients

        System Administrators often have to perform deployment tasks within their networks. At times, they may need to deploy applications on remote computers.
        The eScan Management Console allows you to install eScan and other applications on remotely by clicking Install Applications on the Action List menu.
        [edit]
        Select Application for Installation
        A. Install eScan
        The steps to install eScan are as follows:
        1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
        2. To install eScan on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Install Applications.
        3. On the Client Installation window, under Select application for installation, ensure that Install eScan is selected.
        4. To install eScan as a client, under Select eScan installation options, ensure that Client is selected. Alternately, to install eScan as a server, click Server.
        5. To reboot the computer after installing eScan, select the Auto Reboot after install check box.
        6. To disable e-mail scanning and Web scanning, select the Disable eMailscan and Webscanning check box.
        7. To select the update server, in the Update Server list, click the name of the update server.
        Note: The default value is <Auto-Detect>.
        8. To select the setup folder, in the Setup Folder list, click the name of the setup folder.
        Note: The default value is <Default>.
        9. To install eScan, click Install.
        10. This will open the Client Installation window, which shows the status of the installation. To close this window, click Close.
        B. Install Another Application
        The steps to install another application are as follows:
        1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
        2. To install another application on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Install Applications.
        3. On the Client Installation window, under Select application for installation, ensure that Other is selected.
        4. In the Required files for installation box, type the path of the installation files or click Browse to select the files that you need for installing the application.
        Note: You can add the paths of all the files needed for installing the application to this box.
        5. In the Executable file list, click the executable file that you need to install the application.
        6. In the Parameters box, type the command-line parameters, if any, and then click Start. This will deploy the file on the client computer.
        Note: For example, to install the eScan hotfix in the silent mode, in the Command-line Parameters box, type /s This will ensure that no installation screen is displayed on the computer while the software is being installed.
        7. To install the application, click Install.
        8. This will open the Client Installation window, which shows the status of the installation. To close this window, click Close.

        iii) Uninstall eScan Client

        You can also uninstall eScan from another computer by using the Uninstall Applications menu option.
        The steps to uninstall eScan are as follows:
        1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
        2. To uninstall eScan on a computer group, on the Managed Computers page, on the right pane, on the Action List menu, click Uninstall Applications. Alternately, to install eScan on a client computer, on the right pane, on the Client Action List menu, click Uninstall Applications.
        3. On the Client Installation window, click Uninstall.

        iv) Move to Group

        After you have created a group, you need to add computers to it. To do this, you can either use the Unassigned Computers link on the navigation bar.
        Information:
        For more information using the Search feature, refer to the Unassigned Computers section of this document.
        By Using the Console Tree
        The steps to add a computer to a computer group by using the console tree are as follows:
        1. In the navigation pane, expand Unassigned Computers, and then click Network Computers.
        2. Locate the computer that you want to add to the group by using the console tree.
        3. In the task pane, select the check box next to the computer, and then on the Action List menu, click Move to group.
        4. In the Select Group window, in the Move Computer/s to group box, expand Managed Computers, click the group name, and then click Ok.
        5. If the computer group does not exist, you can create a new computer group by selecting the node in the tree and then clicking New Group. Then, specify the name of the group in the placeholder that appears in the tree.
        By Using the Search Feature
        The steps to add a computer to a computer group by using the Search feature are as follows:
        1. In the navigation pane, expand Unassigned Computers, and then click Network Computers.
        2. Locate the computer that you want to add to the group by using the Search feature.
        3. In the Search window, on the Action List menu, click Move to group.
        4. In the Select Group window, in the Move Computer/s to group box, expand Managed Computers, click the group name, and then click Ok.
        5. If the computer group does not exist, you can create a new computer group by selecting the node in the tree and then clicking New Group. Then, specify the name of the group in the placeholder that appears in the tree.

        v) Remove from Group

        Select desired endpoints in a group and click on this option under Client Action List to remove the selected endpoints from the group.

        vi) Export to Excel

        Select desired endpoints in a group and click on this option under Client Action List to export the captured details of the selected endpoints to excel sheet. It also allows you select the captured details that you specifically wish to include in the exported excel sheet.

        vii) Show installed softwares

        Select desired endpoints in a group and click on this option under Client Action List toview the list of software installed on the endpoint.

        viii) Forced Download

        This option is present under Client Action list in Managed Computer Section. You can update eScan client on any networked computer by using this option. It is required in cases where client has not been updated on the computer for many days. Select the Client Computer and click Force Download in the Action List Menu. It will initiate the Forced download process on selected Client computer.

        ix) Send Message

        Send Message is a new add-on feature implemented in eScan Console, through which you can make broadcast to multiple Endpoints. If System Administrator wants to send an announcement or an alert message asking user to log off the system or contact the System administrator, this can be easily done using eScan console, without installing any third party software on the client system.
        Select the Client computer and then go to Client Action List, now click Send Message and type your message and Click Send. The message will be sent instantly to the selected computer.
        Note: The character limit is 120 only; if the system is not switched on or not connected to network for some reason, you will need to resend the message again to those endpoints.

        x) Outbreak Prevention

        This option allows the administrator to Deploy outbreak prevention policies during an outbreak that restricts access to network resources from selected computer groups for a defined period of time.
        Deploy Outbreak Prevention
        Administrator can define following policies:
        • Limit Access to shared folders- After implementing outbreak Prevention policies, all computers in the selected group will have read only access to Shared Folders on their individual computers. The user can access the file but cannot modify it while accessing from any other computer.
        • Deny Write Access to Local Files and folders- All Computers in the selected group will not have permissions to modify or create new file or folder in the selected folders or files as defined by the administrator.
        • Block Specific Ports- Select and Block a Port or a Port Range for TCP/ UDP Protocols. The user will be notified at the start or after restoring original policies through a customizable popup message on client computer if desired.
        • Block All Ports (Other than trusted client-server ports): Select this option and it will block all the ports except the trusted client-server ports in case of a virus outbreak.
        • Automatically restore outbreak prevention: The administrator can set the hours (using the drop down) after which the system will automatically restore the outbreak prevention settings.
        Restore Outbreak Prevention
      • Notify Client users after restoring the original Settings: Select this option to send notification to client users after restoring the original Settings.
      NoteThe above outbreak prevention policies will be enforced on all the selected computers or groups. Incorrect configuration of these policy settings can cause major problems with the computers.

      xi) Delete All Quarantine Files

      Select desired endpoints and click on this option under Client action List to delete All Quarantined Files.

      xii) Remove from group

      Sometimes, you may need to remove a computer. In such cases, you need to use the Delete menu option in the Action List menu.
      The steps to delete a computer are as follows:
      1. To create a new group, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, in the console tree, select the computer that you want to delete, and then on the Action List menu, click Delete.

      xiii) Export

      The administrator can export the Report for Client Computers of a particular Group Path to excel or .pdf file format as required.

      xiv) Show Installed Softwares

      This will allow the administrator to view the list of all the Software installed on that computer.

      xiv) Force Download

      The administrator can update eScan client on any network computer by using this option. It is required in cases where client has not been updated on the computer for many days.

      xv) Send Message

      The adiministrator can send a broadcase message to multiple endpoints without installing any third party software.

      xvi) Create OTP

      One time password (OTP) restricts user access from violating a security policy deployed in a network. e.g. Administrator has deployed a security policy to block all USB devices, but someone wants to access it for genuine reason. How would an administrator give access without violating the current security policy? OTP delivers the answer for the same by generating one time password for a period of time like 10 minute or one hour for that specified user to disable the module without violating existing policy.

      xiii) Refresh Client

      You can view the latest information about a host computer by selecting the computer name in the task pane and then clicking Refresh Client on the Client Action List menu.
      The steps to refresh the host computer are as follows:
      1. To create a new group, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, in the console tree, select the computer whose information you want to view, and then on the Client Action List menu, click Refresh Client.
      3. In the Client Status window, click Close.
      [edit]

      Policies

      The eScan Management Console helps Administrators simplify the remote administration of client computers on their network by providing features such as policies and group tasks.
      The Policy page displays three buttons: New Policy, Properties, and Delete. They are described as follows:

      New Policy

      You can deploy policies or rules sets to computers based on your requirements. These policies allow to enable or configure certain eScan modules on the eScan client computers on your network.
      For example, if you want to enable the scanning of USB drives when they are accessed by a specific group of users, you can simply create a computer group and add the users to that group. Thereafter, you can create a policy for the Endpoint Security module of eScan and then deploy it to that computer group.
      If you want to create a new policy, you must click the Policies node under Managed Computers or under the appropriate group name in the console tree and then in the task pane, click Create New Policy. This will open a new window that allows you to configure the policy settings.
      For this, you should first specify a name for the policy in the Enter Policy Name box. The Rule Sets section allows you to select the appropriate module. You can click the button next to the module name to configure the rules for the policy. If you simply check a module name without configuring its options, the default rules will be applied.
      Sometimes, a group may have several subgroups within it. If you want to apply a policy to all the subgroups as well, you must select the Apply this to all subgroups check box.
      After you have configured a policy you can click Deploy to create and deploy the policy to the computer group for which it has been created. When a policy is created, it is added to the policies table in the Policy page for the group. This table displays information such as the name of the policies, and the computer group to which it was last deployed and by whom.
      The steps to create and deploy a rule set are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, in the console tree, click Policies. OR To create a policy for a specific computer group, on the right pane, in the console tree, under the node for the specified group, click Policies.
      3. To create a new policy, on the Policy page, click Create New Policy.
      4. On the New Policy page, under Select Rule Sets For Policy, in the Enter Policy Name box, type a name for the policy.
      5. To create a rule set, under Rule Sets, select a check box and then click the button next to it to configure the settings for that option.
      Note: When the button corresponding to a check box is clicked, its related configuration window is displayed. You need to configure the settings on the displayed window.
      For example, to block a particular application from executing, you need to use the Endpoint Security module.
      1. Under Rule Sets, select the Endpoint Security check box, and then click the button next to it.
      2. On the Endpoint Security window, on the Application Control tab, ensure that the Enable Application Control check box is selected.
      3. In the Enter Application to Block box, type the path of the application, and then click Block.
      4. Close the Endpoint Security window.
      5. To apply the policy to all subgroups, select the Apply this for all subgroups check box.
      6. To deploy the policy, click Deploy.

      Properties

      It is often helpful to view the properties of a policy that you have created to evaluate and modify its settings as per your organization’s requirements. To view the properties of a policy, you should select the name of the policy in the policy table on the Policy page, and then click Properties.
      This will open a tabbed window with two tabs: General and Rules.
      The General tab displays the name of the policy, its history, and to whom it has been deployed. The Rule tab displays the rules associated with the policy.
      The steps to view the properties of an existing policy are as follows:
      1. To view the properties an existing policy, in the eScan Management Console, in the left pane, under Dashboard, click Managed Computers.
      2. On the Managed Computers page, on the right pane, in the console tree, click Policies under Managed Computer or under the appropriate group.
      3. In the task pane, select the check box next to the policy whose properties you want to view, and then click Properties.
      • To view the general properties, in the Properties window, click General.
      • To view the rules, in the Properties window, click Rules.
      [edit]

      Group Tasks

      The eScan Management Console manages the computers and computer groups on a network by using tasks. A task may comprise the enabling or disabling or modules, filter, or profiles; starting and stopping of a server; specifying an update server; performing scans on the memory, system drives, or local drives, and forcing the client computer to download updates or forcing them to upgrade.
      A task can be applied to a selected computer or computer group and can be configured to either to run on a schedule or to be started manually.
      This page has the buttons: New Task, Start Task, Properties, Results, and Delete.

      New Task

      You can configure eScan to run specific modules at specific times on specific computers or computer groups by creating tasks. It also allows you to Sync time on managed endpoints with the time on eScan Corporate Server.
      For example, you can create a task for enabling the Web Protection module on a given computer group at a given time on say, every Wednesday and Saturday. On the other hand, you can create a task to run a memory scan on a computer group on a monthly basis.
      These were a couple of examples. Nevertheless, the possibilities are endless.
      To create a new task, you should click the Create New Task button on the Tasks For Specific Computers page of the eScan Management Console. This opens up the New Task Template page. On this page, you need to specify a name for the task, and the select the actions that should be executed when you run the task by selecting the appropriate options and check boxes. Once you have selected the actions, you need to choose the computers and computer groups on which you want to run these tasks.
      Note: You must be careful while selecting groups because when you select a group in the Select Computers/Groups list, its subgroups are selected automatically.
      You can also configure a task to run automatically at a given time on a specified day or week or month by selecting Enable Scheduler in the Task scheduling settings section. If you want to run the task manually, you can do so by selecting the Manual Start option and then clicking Save. After you have created a task, you can run it manually by clicking Start Task on the Tasks For Specific Computers page.
      When you create a new task, a new row is added to the table on the Tasks For Specific Computers page. This table contains information such as the name of the task; status of the task, whether it has been performed or not; the computer to which this task has been assigned, and the schedule type.
      In addition, a View link for the row is created and added to the table. When you click this link, the result of running the task is displayed in the form a pie chart and a summary of this information is displayed below the chart.
      The steps to create a new group task are as follows:
      1. In the New Task Template window, under Task Name, in the Task Name box, type a name for the task.
      2. Under Assigned Tasks, select the modules whose status you want to view. And then, configure the following:
      • To specify an update server, in the Update Server IP box, type its IP address.
      • To scan the computers, select the appropriate scan option.
      • To force clients to update or upgrade themselves, select the Force Client to Download update/upgrade check box.
      • To apply the setting to all subgroups, select Apply for subgroups check box.
      • To schedule the task to run automatically, click Enable Scheduler. Alternately, you can configure the task to be started manually by clicking Manual Start.
      3. Select the days and time at which you want to run the task, and then click Save.

      Start Task

      It may so happen that you have already created a task to run on a group of computers at a scheduled time but for some reason, you may need to shut the computers down for some maintenance work. In such a situation, you can either modify the task, which means that you will have to change it back to the original settings once it has finished executing. Another problem here is that you need to remember all the settings. This is not practically possible.
      This is an example of a situation where you need to run tasks manually. Fortunately, the eScan Management Console provides you with the Start Task option. To run an existing task, all you have to do is select the task in the Tasks For Specific Computers page and then click Start Task.
      The steps to run an existing task manually are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Tasks for Specific Computers.
      2. On the Tasks for Specific Computers page, on the right pane, in the table, select the check box next to the name of the task that you want to run, and then click Start Task.
      3. This will open the Task window. The Task(New Task) window will display the status of the running task.
      4. To close the status window, click Close.

      Properties

      You can view the properties of existing tasks by clicking the task names and then clicking Properties. These properties include the name of the task, the date of creation, date of modification, sort criteria, and the available groups.
      The steps to configure an existing task are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Tasks for Specific Computers.
      2. On the Tasks for Specific Computers page, on the right pane, in the table, select the check box next to the name of the report that you want to configure, and then click Properties.
      3. On the Properties page:
      • The General tab, shows you the name of the task, and details regarding the report such as the date of creation, its status, whether the task is complete, completion status, and time stamp of completion.
      • The Schedule tab displays the date options.
      • The Settings tab displays the template used for creating the task. You can make changes to the settings, if required.
      4. To save and close the Properties page, click Ok.

      Results

      You can view the status of scheduled tasks or the tasks that you have run manually by clicking the Results button. This opens the Results page, which displays the details of the client computer, the group to which it belongs, the status of completion of tasks on it, timestamp, and the description. You can select a computer name in the table to view its status, timestamp of execution of the task, and description of the tasks that have been executed on it in a tabular format.
      The steps to view the result of running a task are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Tasks for Specific Computers.
      2. On the Tasks for Specific Computers page, on the right pane, in the table, select the check box next to the name of the task whose results you want to view, and then click Results.
      3. This will open the Task Results page, which will display the client computer or group on which the task was executed, the name of the group, the status of completion of the task, time at which the task was completed, and the description of the task.

      Delete

      If a task is no longer required, you can delete it from the tasks list by selecting the task and then clicking Delete.
      The steps to configure an existing task are as follows:
      1. In the eScan Management Console, in the left pane, under Dashboard, click Tasks for Specific Computers.
      2. On the Tasks for Specific Computers page, on the right pane, in the table, select the check box next to the name of the task that you want to delete, and then click Delete.

      III) Client Computers

      This page shows a list of client computers and their properties in a tabular format. The table contains the following information.
      a. The name of the computer
      b. The IP address of the computer
      c. The status of eScan, whether it is installed on the computer or not
      d. The version of eScan
      e. The directory in which eScan is installed on the computer
      f. The status of the eScan monitor
      g. The status of the Anti Spam, Mail Anti Virus, Web Protection, Endpoint Security, and Firewall modules
      h. The status of the server
      i. The timestamp of the last update
      j. The name of the update server
      k. The operating system installed on the computer
      l. The status of the eScan installation, whether it has all the critical patches and hotfixes installed on it or not

Retrieved from "https://wiki.escanav.com/wiki/index.php/Escan/english/escan11/eScan_Management_Console/Managed_Computers"

eScan Copyright © 2015 MicroWorld Technologies Inc.- AntiVirus & Content Security.       Send your feedback to solutions@escanav.com eScan Wiki

    Privacy policy  About eScan Wiki  Disclaimers   This page has been accessed 60,075 times.