outside_server_management

Outside Server Management

Ensure security compliance for computers within the network domains, but not managed by the OfficeScan server. Use Active Directory and IP addresses to query and determine non-compliant computers.

After querying Active Directory or IP addresses, the Web console displays the security status of computers. The security status can be any of the following:

To use Outside Server Management, ensure that the OfficeScan server computer is part of the network to query Active Directory domains and IP addresses.

To enforce security compliance, perform the following tasks:

1. Define Active Directory/IP Address Scope and Query.

2. Check unprotected computers from the Query Result.

3. Install the OfficeScan client. Refer to Installing with Security Compliance.

4. Configure Scheduled Query.

Active Directory/IP Address Scope and Query

When using Outside Server Management for the first time, define the Active Directory/IP address scope, which includes Active Directory objects and IP addresses that the OfficeScan server will query on demand or periodically. After defining the scope, start the query process.

To configure the scope and start the query process: >>>

• Security Compliance > Outside server Management

1. On the Active Directory/IP Address Scope section, click Define.

2. In the screen that opens, use Active Directory and/or IP address to query:

• From Active Directory Scope, select the objects to query.

• If querying for the first time, select an object with less than 1000 accounts and then record how much time it took to complete the query. Use this data as your performance benchmark.
  
  Optionally enable on-demand assessment to perform real-time queries for more accurate results. If you disable on-demand assessment, OfficeScan queries the database instead of each client. This option might be quicker but produces less accurate results.

• From IP Address Scope, specify a range of IP addresses to query.

Click the plus () or minus () button to add or delete IP address ranges.

3. Under Advanced Setting, specify ports used by OfficeScan servers to communicate with clients. Setup randomly generates the port number during OfficeScan server installation.

• To view the communication port used by the OfficeScan server, go to Networked Computers > Client Management and select a domain. The port displays next to the IP address column. Trend Micro recommends keeping a record of port numbers for your reference.

1. Click Specify ports.

2. Type the port number and click Add. Repeat this step until you have all the port numbers you want to add.

3. Click Save.

4. Choose whether to check a computer’s connectivity using a particular port number. When connection is not established, OfficeScan immediately treats the computer as unreachable. The default port number is 135.

• Enabling this setting speeds up the query. When connection to a computer cannot be established, the OfficeScan server no longer needs to perform all the other connection verification tasks before treating a computer as unreachable.

5. To save the scope and start the query, click Save and re-assess. To save the settings only, click Save only.

The Outside Server Management screen displays the result of the query.

• The query may take a long time to complete, especially if the query scope is broad. Do not perform another query until the Outside Server Management screen displays the result. Otherwise, the current query session terminates and the query process restarts.

Query Result

The Security Status section classifies computers as:

• Managed by another OfficeScan server

• No OfficeScan client installed

• Unreachable

• Unresolved Active Directory assessment

Refer to Computer protection status.

Recommended tasks: >>>

1. On the Security Status section, click a number link to display all affected computers.

2. Use the search and advanced search functions to search and display only the computers that meet the search criteria.

If you use the advanced search function, specify the following items:

• IP address

• Computer name

• OfficeScan server name

• Active Directory tree

• Security status

OfficeScan will not return a result if the name is incomplete. Use the wildcard character (*) if unsure of the complete name.

3. To save the list of computers to a file, click Export.

4. For clients managed by another OfficeScan server, use the Client Mover tool to have these clients managed by the current OfficeScan server. For more information about this tool, see Client Mover.

Scheduled Query

Configure Outside Server Management to periodically query the Active Directory and IP addresses to ensure that security guidelines are implemented.

To configure scheduled assessments for outside server management: >>>

• Security Compliance > Outside Server Management > Settings

1. Enable scheduled query.

2. Specify the schedule.

3. Click Save.

See also:

• Security Compliance

• Compliance Report