Integrated Smart Protection Server Tool

The Trend Micro OfficeScan Integrated Smart Protection Tool helps administrators to install or uninstall an Integrated Smart Protection Server after the OfficeScan server installation is completed. The current OfficeScan version does not permit administrators to install/remove an Integrated Smart Protection Server once the OfficeScan server installation is complete. This tool enhances the flexibility of installation features from previous versions of OfficeScan.

Before installing the integrated Smart Protection Server, import the following to your upgraded OfficeScan 11.0 SP1 server:

  • Domain structures

  • The following root and domain level settings:

    • Scan configurations for all scan types (Manual, Real-time, Scheduled, Scan Now)

    • Web Reputation settings

    • Behavior Monitoring settings

    • Device Control settings

    • Data Loss Prevention settings

    • Privileges and other settings

    • Additional service settings

    • Spyware/grayware approved list

  • Global agent settings

  • Endpoint location

  • Firewall policies and profiles

  • Smart protection sources

  • Server update schedule

  • Agent update source and schedule

  • Notifications

  • Proxy settings

  1. Open a command prompt and go to the <Server installation folder>\PCCSRV\Admin\Utility\ISPSInstaller directory where ISPSInstaller.exe is located.
  2. Run ISPSInstaller.exe using one of the following commands:
    Table 1. Installer Options

    Command

    Description

    ISPSInstaller.exe /i

    Installs the integrated Smart Protection Server using default port settings.

    For details on the default port settings, see the table below.
    ISPSInstaller.exe /i /f:[port number] /s:[port number] /w:[port number]

    Installs the integrated Smart Protection Server using the ports specified.

    Note:

    You can only configure the ports when using an Apache web server.

    Where:

    • /f:[port number] represents the HTTP file reputation port

    • /s:[port number] represents the HTTPS file reputation port

    • /w:[port number] represents the web reputation port

    Note:

    An unspecified port is automatically assigned the default value.

    ISPSInstaller.exe /u

    Uninstalls the integrated Smart Protection Server

    Table 2. Ports for the Integrated Smart Protection Server’s Reputation Services

    Web Server and Settings

    Ports for File Reputation Services

    HTTP Port for Web Reputation Services

    HTTP

    HTTPS (SSL)

    Apache web server with SSL enabled

    8082

    4345 (not configurable)

    5274 (not configurable)

    Apache web server with SSL disabled

    8082

    4345 (not configurable)

    5274 (not configurable)

    IIS default website with SSL enabled

    80

    443 (not configurable)

    80 (not configurable)

    IIS default website with SSL disabled

    80

    443 (not configurable)

    80 (not configurable)

    IIS virtual website with SSL enabled

    8080

    4343 (configurable)

    8080 (configurable)

    IIS virtual website with SSL disabled

    8080

    4343 (configurable)

    8080 (configurable)

  3. After the installation completes, open the OfficeScan web console and verify the following:
    • Open the Microsoft Management Console (by typing services.msc in the Start menu) and check that the Trend Micro Local Web Classification Server and Trend Micro Smart Scan Server are listed with a “Started” status.

    • Open Windows Task Manager. In the Processes tab, check that iCRCService.exe and LWCSService.exe are running,

    • On the OfficeScan web console, check that the menu item Administration > Smart Protection > Integrated Server appears.