Operation Modes

Dr.Web for Linux can operate both in Standalone mode and as a part of an anti-virus network managed by a central protection server. Operation in Central protection mode does not require installation of additional software or Dr.Web for Linux re-installation or removal.

In Standalone mode, the protected computer is not connected to an anti-virus network and its operation is managed locally. In this mode, configuration and license key files reside on local disks and Dr.Web for Linux is fully controlled from the protected computer. Updates to virus databases are received from Doctor Web update servers.

In Central Protection mode, protection of the computer is managed by the central protection server. In this mode, some functions and settings of Dr.Web for Linux can be adjusted in accordance with the general (corporate) anti-virus protection policy implemented on the anti-virus network. The license key file used for operating in Central protection mode is received from the central protection server. The key file stored on the local computer, if any, is not used. Statistics on virus events is sent to the central protection server. Updates to virus databases are also received from the central protection server.

In Mobile modeDr.Web for Linux receives updates from Doctor Web update servers, but operation of Dr.Web for Linux is managed with the local settings. The used key file is received from the central protection server.

When Dr.Web for Linux is operating in Central protection mode or Mobile mode, the following options are blocked:

1.Deletion of a license key file in License Manager

2.Manual start of an update process and adjustment of update settings

3.Configuration of file system scanning parameters

Configuration of SpIDer Guard settings as well as an option to enable or disable SpIDer Guard checks are allowed in dependence on permissions specified on the server.

Note that if launch of scanning at user request is prohibited on the used central protection server, the page for starting scanning and Scanner button of the Dr.Web for Linux window will be disabled. Moreover, in this case Scanner will not launch scheduled scans.

 

Logical Structure of Anti-Virus Networks

Doctor Web solutions for central protection use client-server model (see the picture below).

Workstations and servers are protected by local anti-virus components (herein, Dr.Web for Linux) installed on them, which provides for anti-virus protection of remote computers and allows connection between the workstations and the central protection server.

Central protection server

Network based on TCP, NetBIOS

Dr.Web anti-virus network administrator

Management via HTTP/HTTPS

Protected local computer

Transmitting updates via HTTP

Doctor Web update server

 

 

Picture 1. Logical structure of the Anti-Virus Network

Local computers are updated and configured from the central protection server. The stream of instructions, data and statistics in the anti-virus network goes also through the central protection server. The volume of traffic between protected computers and the central server can be quite sizeable, therefore solutions provide options for traffic compression. To prevent leak of sensitive data or substitution of software downloaded onto protected computers, encryption is also supported.

All necessary updates are downloaded to the central protection server from Doctor Web update servers.

Local anti-virus components are configured and managed from the central protection server according to commands from anti-virus network administrators. Administrators manage central protection servers and topology of anti-virus networks (for example, validate connections to the central protection server from remote computers) and configure operation of local anti-virus components when necessary.

Local anti-virus components are not compatible with anti-virus products of other companies or anti-virus solutions of Dr.Web if the latter do not support operation in Central protection mode (for example, version 5.0 of Dr.Web for Linux). Installation of two anti-virus programs on the same computer can cause a system crash and loss of important data.

Connecting to Anti-Virus Network

Dr.Web for Linux can be connected to an anti-virus network in one of the following ways:

During Dr.Web for Linux activation – in the License Manager

On the Mode tab of the settings window in the Dr.Web for Linux graphical interface

Using the esconnect command of the command-line management tool – drweb-ctl

Disconnecting from Anti-Virus Network

Dr.Web for Linux can be disconnected from the anti-virus network in one of the following ways:

On the Mode tab of the settings window in the Dr.Web for Linux graphical interface

Using the esdisconnect command of the command-line management tool – drweb-ctl