CentOS 7にF-Secure Linux Security 11.10をインストールしてみました。
Linux Security
https://www.f-secure.com/ja_JP/web/business_jp/linux-security
Corporate Security ダウンロード
https://www.f-secure.com/ja_JP/web/business_jp/downloads
Linux Security 32/64-bit
https://www.f-secure.com/en/business/downloads/linux-security
Release Notes
https://help.f-secure.com/product.html#business/releasenotes-business/latest/en/fsls-latest-en
検証環境
・CentOS Linux release 7.6.1810 (Core)
・Kernel 3.10.0-957.27.2.el7.x86_64
今回はPolicy Managerの無い環境でインストールしてみました。
- ダウンロード
- 解凍
- 実行権限の設定
- インストール
- 環境設定
- Webアクセス
|
1 2 3 4 5 6 7 |
# curl -O https://download.f-secure.com/corpro/ls-new/ls11.10/fsls-11.10.68-rtm.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 182M 100 182M 0 0 13.6M 0 0:00:13 0:00:13 --:--:-- 14.3M # ls -l fsls-11.10.68-rtm.tar.gz -rw-r--r-- 1 root root 191599992 8月 18 15:25 fsls-11.10.68-rtm.tar.gz |
|
1 2 3 4 |
# tar xvfz fsls-11.10.68-rtm.tar.gz fsls-11.10.68-rtm/ fsls-11.10.68-rtm/fsav_linux_1110_mib.jar fsls-11.10.68-rtm/fsls-11.10.68 |
|
1 2 3 4 |
# cd fsls-11.10.68-rtm # ls fsav_linux_1110_mib.jar fsls-11.10.68 # chmod u+x fsls-11.10.68 |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 |
# ./fsls-11.10.68 F-Secure Linux Security installation Copyright (c) 1999-2015 F-Secure Corporation. All Rights Reserved. Preparing... You must accept following F-Secure license agreement to install F-Secure Linux Security. Press enter to view license agreement. ========================================================================== F-Secure License Terms ========================================================================== (snip) Do you accept this license agreement? yes The license agreement text is available at /opt/f-secure/fsav/LICENSE. Installing RPM packages, please wait... Running /opt/f-secure/fsav/fsav-config Automatic install Configuring........ Checking installation type... Evaluation version, enabling all features Installing Server Edition. Configuring...... Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start) To configure the product, please run /opt/f-secure/fsav/fsav-config. If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser. |
・Policy Managerが無いのでスタンドアロンを選択しています。
・ライセンス(keycode)は無いので評価版でインストールしています。
・localhostからのWebアクセスにはログイン処理を必要としません。
・リモートからのWebアクセスを許可しています。
・リモートからのWebアクセスユーザにmanagerを設定しています。このユーザは事前にLinuxアカウントとして登録しておく必要があります。
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 |
# /opt/f-secure/fsav/fsav-config Select language to use in Web User Interface [1] English (default) [2] Japanese [3] German [4] French Please select 1, 2, 3, or 4 [1]: 2 We will now ask you some questions regarding the installation of this product. A default value will be shown in square brackets after the question. To accept the default, just press enter. Do you want to configure the product to run as standalone, Policy Manager managed or PSB managed? Select [s]tandalone, Policy [M]anager managed, or [P]SB managed [standalone]: Configuring........ Please enter the keycode you have received with your purchase of F-Secure Linux Security. keycode: No keycode entered. You can later upgrade the product to fully licensed by running /opt/f-secure/fsav/sbin/convert_to_full_installation.sh Checking installation type... Evaluation version, enabling all features Installing Server Edition. Configuring..... Allow remote access to the web user interface? [no] yes Allow connections from localhost to the web user interface without login? [yes] Please enter the user name who is allowed to use the web user interface. User name (must be non-root) [nobody]:manager Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start) To configure the product, please run /opt/f-secure/fsav/fsav-config. If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser. |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
# /etc/init.d/fsma status The Policy Manager is running. (14388) FSMA modules F-Secure Alert Database Handler Daemon (/opt/f-secure/fsav/sbin/fsadhd) is running ( 14421 ) F-Secure FSAV Policy Manager Daemon (/opt/f-secure/fsav/bin/fsavpmd) is running ( 14447 14462 ) F-Secure Firewall Daemon (/opt/f-secure/fsav/bin/fsfwd.run) is running ( 14442 ) F-Secure FSAV License Alerter (/opt/f-secure/fsav/libexec/fslmalerter) is running ( 14478 ) F-Secure FSAV On-Access Scanner Daemon (/opt/f-secure/fsav/sbin/fsoasd) is running ( 14503 14628 ) F-Secure FSAV Status Daemon (/opt/f-secure/fsav/bin/fstatusd) is running ( 14500 ) F-Secure Database Update Daemon (/opt/f-secure/fssp/libexec/fsupdated.rc status) fsupdated is running (14531). F-Secure FSAV Web UI (/opt/f-secure/fsav/tomcat/bin/fs-catalina-status.sh) is running ( 14569 ) F-Secure FSAV PostgreSQL daemon (/opt/f-secure/common/postgresql/bin/startup.sh) is running ( 14571 ) |
・localhostからのアクセス
http://localhost:28080/fsecure/webui/
・リモートからのアクセス
https://[host.domain]:28082/
