nacpsrvin

Policy Server for Cisco NAC Installation

There are two ways to install Policy Server:

• The Policy Server installer located on the Enterprise DVD

• The OfficeScan server’s master installer (this installs both OfficeScan server and the Policy Server on the same computer)

• The master installer installs both the OfficeScan server and Policy Server web console on an IIS or Apache web server. If the installer does not find an Apache server on the system, or if an existing Apache server installation is not version 2.0, the installer automatically installs Apache version 2.0.
  
  The ACS server, Policy Server, and OfficeScan server must be on the same network segment to ensure effective communication.

Before installing the Apache web server, refer to the Apache website for the latest information on upgrades, patches, and security issues at:

http://www.apache.org

To install Policy Server for Cisco NAC using the Policy Server installer:

1. Log on to the computer to which you will install Policy Server for Cisco NAC.

2. Locate the Policy Server for Cisco NAC installer package on the Enterprise CD.

3. Double-click setup.exe to run the installer.

4. Follow the installation instructions.

You can install the Policy Server to the OfficeScan server computer.

To install Policy Server for Cisco NAC from the OfficeScan server master installer:

1. In the Install Other OfficeScan Programs screen of the OfficeScan server master installer, select Policy Server for Cisco NAC.

2. Click Next.

3. Continue with OfficeScan server installation until the Welcome screen for Trend Micro Policy Server for Cisco NAC appears.

4. Click Next. The Policy Server for Cisco NAC License Agreement screen appears.

5. Read the agreement and click Yes to continue. The Choose Destination Location screen appears.

6. Modify the default destination location if necessary by clicking Browse... and selecting a new destination for the Policy Server installation.

7. Click Next. The Web Server screen appears.

8. Choose the web server for the Policy Server:

• IIS server: Click to install on an existing IIS web server installation

• Apache 2.0 Web server: Click to install on an Apache 2.0 web server

9. Click Next. The Web Server Configuration screen appears.

10. Configure the following information:

1. If you selected to install Policy Server on an IIS server, select one of the following:

• IIS default Web site: Click to install as an IIS default website

• IIS virtual Web site: Click to install as an IIS virtual website

2. Next to Port, type a port that will serve as the server listening port. When the Policy Server and OfficeScan server are on the same computer and uses the same web server, the port numbers are as follows:

• Apache Web server/IIS Web server on default Web site: Policy Server and OfficeScan server share the same port

• Both on IIS Web server on virtual Web site: Policy Server default listening port is 8081 and the SSL port is 4344. The OfficeScan server default listening port is 8080 and the SSL port is 4343.

3. If you selected to install Policy Server on an IIS server, you can use Secured Socket Layer (SSL). Type the SSL port number and the number of years to keep the SSL certificate valid (the default is 3 years). If you enable SSL, this port number will serve as the server’s listening port. The Policy Server’s address is as follows:

• http://<Policy Server name>:<port number> or

• https://<Policy Server name>:<port number> (if you enable SSL)

11. Click Next.

12. Specify the Policy Server console password and click Next.

13. Specify the ACS Server authentication password and click Next.

14. Review the installation settings. If satisfied with the settings, click Next to start the installation. Otherwise, click Back to go to the previous screens.

15. When the installation completes, click Finish. The OfficeScan server master installer will continue with the rest of the OfficeScan server installation.