Remote Configuration of the Proxy Server

After connecting Dr.Web Proxy server to Dr.Web Server, you will be able to configure the Proxy server via the Control Center remotely.

Detailed information on connection settings is given in the Installation manual, p. Connecting the Proxy Server to Dr.Web Server.

The Proxy server can accept settings only from a specific set of connected Servers that are marked as managing. If none of the Servers is marked as managing, when Proxy server connects to all the Servers by rotation till the first valid (not empty) configuration.

1.Select the Anti-virus network item in the main menu of the Control Center, in the hierarchical list of the opened window, click the name of the Proxy server or the Proxies group and its subgroups.

2.In the opened control menu, select Dr.Web Proxy server. Settings section opens.

3.On the Certificate tab, you can set the list of Dr.Web Server certificates. You must set all certificates of all Servers to which the Proxy server connects and to which the client traffic is forwarded.

•The Server certificate is required to connect to the Server for remote settings configuration and to support the traffic encryption between the Server and the Proxy server.

•The Proxy server certificate is signed by the Server certificate and private key (the procedure is performed automatically on the Server after connection, and no administrator interception is required) and is required to connect Agents and to support the traffic encryption between the Agents and the Proxy server.

4.On the Listen tab, you can specify the parameters of traffic receiving and forwarding by the Proxy server.

For single network listening settings, you can specify single settings for all clients connections, and settings specified separately for each Server.

For each block you can separately specify the following parameters of the Proxy server operation:

•In the Address to listen field, specify the IP address that will be "listened" by the Proxy server. The 0.0.0.0 value means "listen" for all interfaces.

Addresses should be specified in the network addresses format described in the Appendices document, p. Appendix E. The Specification of Network Addresses.

•In the Port field, specify the number of port that will be "listened" by the Proxy server. By default, it is the 2193 port.

•Set the Discovery flag to enable the Server imitation mode. This mode allows clients to detect the Proxy server as Dr.Web Server during its search via multicast requests.

•Set the Multicasting flag so that the Proxy server replies to multicast requests addressed to the Server.

•In the Multicast group field, specify an IP address of a multicast group to include the Proxy server. Specified interface will be listened by the Proxy server for interaction with clients during active Dr.Web Servers searching. If you leave this field blank, the Proxy server will not be included in any of multicast groups. Default multicast group to which the Server is included is 231.0.0.1.

•In the Encryption drop-down list, select the encryption mode of traffic for channels between Proxy server and served clients: Agents and Agent installers.

•In the Compression drop-down list, select the compression mode of traffic for channels between Proxy server and served clients: Agents and Agent installers. In the Compression level field, select the compression level (from 1 to 9).

c)In the Settings for connection with Dr.Web Servers section, you can specify the list of Servers to which the traffic will be forwarded:

The Servers order in the list defines the order to forward client traffic and the order to connect the Proxy server to the Servers for receiving the settings. To change the Servers order, drag required lines with a mouse.

When editing and adding the settings for connection with the Server, the opened window provides the following options:

•In the Proxy server settings can be managed from this Server drop-down list, select one of the following to set the Server managing:
Yes—the Server is explicit managing. You can assign managing to any number of Servers; Proxy server connects to all the managing Servers by their order in the settings until it gets the first valid (not empty) configuration.
No—the Server will not be managing under any conditions. Also, you can assign none of the Servers managing. In this case, the Proxy server parameters (including the assignment of managing Servers) can be configured only locally via the Proxy server configuration file (see the Appendices document, section G4. Proxy Server Configuration File).
Possible—the Server will be managing only if there are no explicit managing Servers (with the Yes value for this option).

•In the Redirection address field, specify an address of Dr.Web Server to which the connections that are established by the Proxy server, will be forwarded.

If the Redirection address field is not specified or the udp/ value is set, the Proxy server uses detection service to find Dr.Web Server by sending the multicast requests (see step 9).

Addresses should be specified in the network addresses format described in the Appendices document, p. Appendix E. The Specification of Network Addresses.

•In the Encryption drop-down lists, select the encryption mode of traffic for channels between Proxy server and specified Dr.Web Server.

•In the Compression drop-down lists, select the compression mode of traffic for channels between Proxy server and specified Dr.Web Server. In the Compression level field, select the compression level (from 1 to 9).

In the table, you can specify the traffic restriction settings in the same way as the Server settings given in the Updates and Installations sections.

Set the Enable caching flag to cache the data transferred by the Proxy server, and specify the following parameters:

•In the Revisions deleting interval (min) field, specify the interval for deleting old revisions from the cache if their number exceeds the maximum number of revisions to remain. The value is set in minutes. Default is 60 minutes.

▫In the Number of revisions to remain field, specify the maximum number of each product revisions to remain in the cache after the cleanup. By default, 3 last revisions are stored, the older revisions are deleted.

•In the Unload interval of unused files (min) field, specify the time interval in minutes for unloading unused files from the memory. Default is 10 minutes.

•In the Integrity check mode drop-down list, select the integrity check mode for data stored in the cache:

•Set the Use proactive caching flag to load new revisions for the selected products to the Proxy server from Dr.Web Server according to the schedule below. For this time period, revisions are loaded to the Proxy server as soon as they are received by Dr.Web Server from GUS. If the flag is cleared, new revisions are loaded to the Proxy server only when the Agent requests these revisions from the Server.

▫In the Repository synchronization timetable section, specify the schedule to load the updates for the selected products.
To change the mode of limitations on data transmission, click the corresponding block of the table. Also, you can select several time blocks using drag-and-drop.
Cells color is changed in cycle according to the color scheme under the table: data transmission is allowed without traffic limitations or data transmission is forbidden.

•Set the Cache events flag to cache events received from the Agents. At this, the events are sent to the Server every 15 minutes for the time period that is allowed for the events sending in the timetable below. If the caching is disabled, events will be sent to the Server immediately after receiving by the Proxy server.

•In the Events sending timetable section, specify the schedule to send events received from the Agents.
To change the mode of limitations on data transmission, click the corresponding block of the table. Also, you can select several time blocks using drag-and-drop.
Cells color is changed in cycle according to the color scheme under the table: events transmission is allowed without traffic limitations or events transmission is forbidden.

•Set the Create memory dumps flag to create memory dumps if critical errors occur in the Proxy server operation.

•In the Maximum number of dumps field, specify the maximum number of memory dumps. When the specified value is reached, the oldest dumps are deleted when creating new ones. Memory dumps setup is available for Windows OS only.

8.On the DNS tab, you can configure the parameters of DNS server usage. Settings are similar to the DNS settings for Dr.Web Server.

9.On the Discovery tab, you can configure the settings to store responses on multicast requests when searching for Dr.Web Servers for redirecting clients (see step 4c).

•For positive responses, sec.—the storage time (in seconds) of the list of Servers that responded to the multicast request when searching for Dr.Web Servers. After the specified period, the request is resent.

•For negative responses, sec.—the storage time (in seconds) of the information that none of Dr.Web Servers has responded to the multicast request. After the specified period, the request is resent.

10.On the Updates tab, you can configure the parameters of the Proxy server automatic update from Dr.Web Server:

•Set the Enable automatic update flag to download for Dr.Web Server and install new Proxy server revisions automatically. The update schedule depends on the settings of proactive caching of the Proxy server (see step 5):

a)If the Proxy server is not included into the list for the proactive caching (including if the caching is not used), when the Proxy server updates will be downloaded and installed according to the automatic updates schedule.

b)If the Proxy server is included into the list for the proactive caching, the Proxy server updates will be automatically downloaded according to the proactive caching schedule. When a new revision of the Proxy server is received, the update to this revision is performed according to the automatic updates schedule.

•In the Automatic update schedule section, specify the schedule according to which the automatic updates will be performed.
To change the mode of limitations on data transmission, click the corresponding block of the table. Also, you can select several time blocks using drag-and-drop.
Cells color is changed in cycle according to the color scheme under the table: updates transmission is allowed without traffic limitations or updates transmission is forbidden.