CentOS 7にF-Secure Linux Security 11.10をインストール

CentOS 7にF-Secure Linux Security 11.10をインストールしてみました。

Linux Security
https://www.f-secure.com/ja_JP/web/business_jp/linux-security

Corporate Security ダウンロード
https://www.f-secure.com/ja_JP/web/business_jp/downloads

Linux Security 32/64-bit
https://www.f-secure.com/en/business/downloads/linux-security

Release Notes
https://help.f-secure.com/product.html#business/releasenotes-business/latest/en/fsls-latest-en

検証環境
・CentOS Linux release 7.6.1810 (Core)
・Kernel 3.10.0-957.27.2.el7.x86_64

今回はPolicy Managerの無い環境でインストールしてみました。

1. ダウンロード
Shell

# curl -O https://download.f-secure.com/corpro/ls-new/ls11.10/fsls-11.10.68-rtm.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 182M 100 182M 0 0 13.6M 0 0:00:13 0:00:13 --:--:-- 14.3M # ls -l fsls-11.10.68-rtm.tar.gz -rw-r--r-- 1 root root 191599992 8月 18 15:25 fsls-11.10.68-rtm.tar.gz

1 2 3 4 5 6 7

# curl -O https://download.f-secure.com/corpro/ls-new/ls11.10/fsls-11.10.68-rtm.tar.gz   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current                                  Dload  Upload   Total   Spent    Left  Speed 100  182M  100  182M    0     0  13.6M      0  0:00:13  0:00:13 --:--:-- 14.3M   # ls -l fsls-11.10.68-rtm.tar.gz -rw-r--r-- 1 root root 191599992  8月 18 15:25 fsls-11.10.68-rtm.tar.gz

2. 解凍
Shell

# tar xvfz fsls-11.10.68-rtm.tar.gz fsls-11.10.68-rtm/ fsls-11.10.68-rtm/fsav_linux_1110_mib.jar fsls-11.10.68-rtm/fsls-11.10.68

1 2 3 4

# tar xvfz fsls-11.10.68-rtm.tar.gz fsls-11.10.68-rtm/ fsls-11.10.68-rtm/fsav_linux_1110_mib.jar fsls-11.10.68-rtm/fsls-11.10.68

3. 実行権限の設定
Shell

# cd fsls-11.10.68-rtm # ls fsav_linux_1110_mib.jar fsls-11.10.68 # chmod u+x fsls-11.10.68

1 2 3 4

# cd fsls-11.10.68-rtm # ls fsav_linux_1110_mib.jar  fsls-11.10.68 # chmod u+x fsls-11.10.68

4. インストール
Shell

# ./fsls-11.10.68 F-Secure Linux Security installation Copyright (c) 1999-2015 F-Secure Corporation. All Rights Reserved. Preparing... You must accept following F-Secure license agreement to install F-Secure Linux Security. Press enter to view license agreement. ========================================================================== F-Secure License Terms ========================================================================== (snip) Do you accept this license agreement? yes The license agreement text is available at /opt/f-secure/fsav/LICENSE. Installing RPM packages, please wait... Running /opt/f-secure/fsav/fsav-config Automatic install Configuring........ Checking installation type... Evaluation version, enabling all features Installing Server Edition. Configuring...... Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start) To configure the product, please run /opt/f-secure/fsav/fsav-config. If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46

# ./fsls-11.10.68 F-Secure Linux Security installation Copyright (c) 1999-2015 F-Secure Corporation. All Rights Reserved.   Preparing...   You must accept following F-Secure license agreement to install F-Secure Linux Security. Press enter to view license agreement.   ==========================================================================                           F-Secure License Terms ========================================================================== (snip) Do you accept this license agreement? yes The license agreement text is available at /opt/f-secure/fsav/LICENSE.   Installing RPM packages, please wait...   Running /opt/f-secure/fsav/fsav-config   Automatic install   Configuring........   Checking installation type...   Evaluation version, enabling all features   Installing Server Edition.   Configuring......   Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed   Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled   Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start)   To configure the product, please run /opt/f-secure/fsav/fsav-config.   If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser.

5. 環境設定

・Policy Managerが無いのでスタンドアロンを選択しています。
・ライセンス(keycode)は無いので評価版でインストールしています。
・localhostからのWebアクセスにはログイン処理を必要としません。
・リモートからのWebアクセスを許可しています。
・リモートからのWebアクセスユーザにmanagerを設定しています。このユーザは事前にLinuxアカウントとして登録しておく必要があります。

Shell

# /opt/f-secure/fsav/fsav-config Select language to use in Web User Interface [1] English (default) [2] Japanese [3] German [4] French Please select 1, 2, 3, or 4 [1]: 2 We will now ask you some questions regarding the installation of this product. A default value will be shown in square brackets after the question. To accept the default, just press enter. Do you want to configure the product to run as standalone, Policy Manager managed or PSB managed? Select [s]tandalone, Policy [M]anager managed, or [P]SB managed [standalone]: Configuring........ Please enter the keycode you have received with your purchase of F-Secure Linux Security. keycode: No keycode entered. You can later upgrade the product to fully licensed by running /opt/f-secure/fsav/sbin/convert_to_full_installation.sh Checking installation type... Evaluation version, enabling all features Installing Server Edition. Configuring..... Allow remote access to the web user interface? [no] yes Allow connections from localhost to the web user interface without login? [yes] Please enter the user name who is allowed to use the web user interface. User name (must be non-root) [nobody]:manager Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start) To configure the product, please run /opt/f-secure/fsav/fsav-config. If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54

# /opt/f-secure/fsav/fsav-config Select language to use in Web User Interface         [1] English (default)         [2] Japanese         [3] German         [4] French   Please select 1, 2, 3, or 4 [1]: 2   We will now ask you some questions regarding the installation of this product. A default value will be shown in square brackets after the question. To accept the default, just press enter.   Do you want to configure the product to run as standalone, Policy Manager managed or PSB managed? Select [s]tandalone, Policy [M]anager managed, or [P]SB managed [standalone]:   Configuring........   Please enter the keycode you have received with your purchase of F-Secure Linux Security. keycode: No keycode entered. You can later upgrade the product to fully licensed by running /opt/f-secure/fsav/sbin/convert_to_full_installation.sh Checking installation type...   Evaluation version, enabling all features   Installing Server Edition.   Configuring.....   Allow remote access to the web user interface? [no] yes   Allow connections from localhost to the web user interface without login? [yes]   Please enter the user name who is allowed to use the web user interface. User name (must be non-root) [nobody]:manager   Running /opt/f-secure/fsav/bin/fsav-compile-drivers Dazuko not needed   Feature summary: - Real-time virus protection enabled - Integrity checking enabled - Firewall enabled   Installation completed successfully. Starting F-Secure Linux Security modules (/etc/init.d/fsma start)   To configure the product, please run /opt/f-secure/fsav/fsav-config.   If you want to completely disable some of the product modules, please run /opt/f-secure/fsav/sbin/fschooser.

Shell

# /etc/init.d/fsma status The Policy Manager is running. (14388) FSMA modules F-Secure Alert Database Handler Daemon (/opt/f-secure/fsav/sbin/fsadhd) is running ( 14421 ) F-Secure FSAV Policy Manager Daemon (/opt/f-secure/fsav/bin/fsavpmd) is running ( 14447 14462 ) F-Secure Firewall Daemon (/opt/f-secure/fsav/bin/fsfwd.run) is running ( 14442 ) F-Secure FSAV License Alerter (/opt/f-secure/fsav/libexec/fslmalerter) is running ( 14478 ) F-Secure FSAV On-Access Scanner Daemon (/opt/f-secure/fsav/sbin/fsoasd) is running ( 14503 14628 ) F-Secure FSAV Status Daemon (/opt/f-secure/fsav/bin/fstatusd) is running ( 14500 ) F-Secure Database Update Daemon (/opt/f-secure/fssp/libexec/fsupdated.rc status) fsupdated is running (14531). F-Secure FSAV Web UI (/opt/f-secure/fsav/tomcat/bin/fs-catalina-status.sh) is running ( 14569 ) F-Secure FSAV PostgreSQL daemon (/opt/f-secure/common/postgresql/bin/startup.sh) is running ( 14571 )

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

# /etc/init.d/fsma status The Policy Manager is running. (14388) FSMA modules   F-Secure Alert Database Handler Daemon (/opt/f-secure/fsav/sbin/fsadhd)      is running ( 14421 )   F-Secure FSAV Policy Manager Daemon (/opt/f-secure/fsav/bin/fsavpmd)      is running ( 14447 14462 )   F-Secure Firewall Daemon (/opt/f-secure/fsav/bin/fsfwd.run)      is running ( 14442 )   F-Secure FSAV License Alerter (/opt/f-secure/fsav/libexec/fslmalerter)      is running ( 14478 )   F-Secure FSAV On-Access Scanner Daemon (/opt/f-secure/fsav/sbin/fsoasd)      is running ( 14503 14628 )   F-Secure FSAV Status Daemon (/opt/f-secure/fsav/bin/fstatusd)      is running ( 14500 )   F-Secure Database Update Daemon (/opt/f-secure/fssp/libexec/fsupdated.rc status)     fsupdated is running (14531).   F-Secure FSAV Web UI (/opt/f-secure/fsav/tomcat/bin/fs-catalina-status.sh)      is running ( 14569 )   F-Secure FSAV PostgreSQL daemon (/opt/f-secure/common/postgresql/bin/startup.sh)      is running ( 14571 )

6. Webアクセス

・localhostからのアクセス
http://localhost:28080/fsecure/webui/
・リモートからのアクセス
https://[host.domain]:28082/