Frequently Asked Questions
Frequently Asked Questions » AVG 8.5 Technical FAQ » Business Security
Search by criteria
Please select the Product version and pick the Product name, operating system, Area and Issue that matches the topic you are searching for. Then click the Search button to show all results for the combination you have selected.
Please let us inform you, that the search is being made in both FAQ and Knowledge Base topics.
Fields marked with * are required
Search by keywords
1183
The migration from AVG Admin 7.5 to AVG Remote Administration 8.5 consists of several steps. This is a guide to this process, additional information about AVG 8.5 can be found in the documentation, or in other FAQ topics.
Before following this guide, please make sure that all clients that will be upgraded to AVG 8.5 comply with the AVG 8.5 system requirements.
Important note:
All stations that will be upgraded to AVG 8.5 will be restarted during the remote installation. Please see FAQ topic 1185 for more details. Please uninstall an old e-mail plugin if you upgrade AVG 7.5 to AVG 8.5 on your e-mail server. More information can be found in FAQ topic 1201.
1. Prepare a list of stations that will be reinstalled and moved to AVG Remote Administration 8.5
- Open AVG Admin 7.5.
- Export the list of stations that you wish to upgrade to AVG 8.5.
- Select stations that you wish to upgrade.
- Right-click on the selected stations and choose Export stationlist option.
- You can export list of all stations, or create several lists - e.g. one for each group.
2. Export AVG Datacenter 7.5:
- Open AVG Admin 7.5.
- Open Program upper menu.
- Select the Export.. option.
- Choose folder where the database will be saved.
3. Installation of AVG 8.5 Remote Administration
- Download the latest AVG Remote Administration 8.5 installation file.
- Please select the AVG Edition based on your license.
- Download the file AVG Admin 8.5 for Windows.
- Install the AVG Remote Administration 8.5
- Your valid AVG Licence Number will be required during the installation.
- After the installation, follow the AVG Admin Server Deployment Wizard.
- Import the previously exported AVG DataCenter 7.5 in the Data import step. More information on what configuration will be transferred can be found in FAQ 1672.
- The AVG Admin Server will be started after the wizard.
- Admin Server is listening on port 4158 by default, AVG Admin 7.5 and 8.5 can be running at the same time with no risk of collisions or conflicts.
4. Install AVG 8.5 onto the stations using AVG Network Installer Wizard
- Run AVG Network Installer Wizard from menu Start -> (All) Programs -> AVG 8.5 Remote Administration.
- Follow the wizard and configure all options according to your needs.
- The default settings are sufficient in most cases and will ensure that the stations will connect to AVG Remote Administration 8.5 after the installation.
- AVG 8.5 installation file will be required in the process. In case the AVG Network Installer Wizard fails to download it automatically, please download it from our website.
- Select Import stations from file option in the Network Scanning step.
- Browse to the previously created list of stations.
- In case you created multiple lists, please repeat the whole step 5 for each of the lists. All advanced settings will be remembered.
- Confirm the list of stations and proceed with the installation.
- The last screen of the AVG Network Installer Wizard allows you to decide, if you wish to remove all successfully installed stations from AVG Admin 7.5.
As a result, you will have installed 2 different AVG DataCenters on the server:
- AVG Remote Administration 8.5 - all upgraded stations will log into the new DataCenter, and can be managed using AVG Admin Console.
- AVG Admin 7.5 - should the upgrade process fails on some stations, these stations will be still managable using the old AVG Admin 7.5.
Uninstallation of AVG Admin 7.5
- Once the migration is finished, it is possible to uninstall AVG Admin 7.5. Its removal does not have any effect neither on the AVG Remote Administration 8.5, nor on the clients.
1207
When installing AVG 8.5 on a Terminal Server, it is generally not needed to proceed differently than on workstations. There is only one component in AVG which will run separately for each user - the AVG Tray application - and its effect on the system performance is minimal even when running in multiple instances. However, in case there are some other server applications running on the Terminal Server, it is recommended to skip installation of the AVG component that could affect their functionality:
AVG Online Shield
This component affects all HTTP, HTTPS and PROXY communication, since it scans communication on all respective ports/sockets. If there is a web server, proxy server or ISA server running on the Terminal Server, please install AVG without the Online Shield component.
AVG Personal E-mail Scanner
The Personal E-mail Scanner captures and scans all communication on ports 110 and 25 (POP3 and SMTP) by default. In case there is a POP3/SMTP E-mail Server installed on the Terminal Server (or any other application communicating on these ports), it is recommended to skip installation of this component.
AVG Firewall
AVG Firewall was not designed for the server's solutions same as the components mentioned above. Please skip installation of this component.
To install AVG without these components, you can either run the Custom installation and manually choose which components you wish to install, or use the following parameters:
- installation without Online Shield
avg_*.exe /REMOVE_FEATURE fea_AVG_HttpScanner - installation without Personal E-mail Scanner
avg_*.exe /REMOVE_FEATURE fea_AVG_EMC - installation without AVG Firewall
avg_*.exe /REMOVE_FEATURE fea_AVG_Firewall
These parameters can be combined to achieve an installation that suits your Terminal Server use.
1371
When installing AVG on a server it is generally not needed to proceed differently than on workstations. However, it is necessary to install AVG with some small modifications in specific cases. Below you can find some general information and recommendations for the installation of the AVG program on your server.
Note: If you need to install AVG Remote Administration please refer to FAQ 1375.
General information and recommendations
- A server-based operating system is required for the installation of AVG server editions. The list of all supported platforms can be found here.
- For the proper function of all server applications (ISA server, PROXY server, Terminal services) we do not recommend you to install some AVG components. More information about these components and their list can be found in FAQ 1337.
- Installation of the AVG program on a server operating system will be not allowed without the network edition license number. If you do not have such a product please refer the Business Security section and choose a suitable solution for your network.
Terminal Server
Closer specifications of the AVG installation on the Terminal server can be found in FAQ 1207.
File Server
Except for the above mentioned recommendations it is not necessary to take any other actions to install AVG on such a server. However, we would recommend you to install the AVG program using the latest installation of AVG File Server Edition 8.5.
E-mail Server
Closer specifications of the AVG installation on the E-mail server can be found in FAQ 1373.
In case of any further issues with the installation of the AVG program, please do not hesitate to contact our AVG Technical Support team.
1337
The following AVG components are designed only for a use on workstations:
- AVG Firewall
- AVG Online Shield
- AVG Personal E-mail Scanner
The above components were not tested under a system load. If installed on a server operating system (such as ISA, proxy, mail server, terminal server, etc.) the components might cause issues with server communication. To avoid these issues it is not recommended to install the mentioned components on a server operating system.
Note: This does not apply in case that you use the computer with some server operating system installed (e.g. Windows Server 2000, 2003 etc.) as a standard computer without the server features enabled.
More information about the AVG installation on specific servers can be found in these FAQs:
871
If you would like to change a license number for all computers in the network, please do the following:
- Run AVG Admin Console.
- From the left navigation tree select Licenses -> Shared settings.
- Double-click "Shared settings" option in the Shared settings area.
- Fill the new license number and press Enter key.
- Right-click the "Shared settings" option and from context menu select "Mandatory".
- Ask all stations for synchronization (select all needed stations and click on some of them by right mouse button, then please select the "Synchronize settings" option).
- Restart of clients' stations is recommended after this change.
Please let us inform you, that if you use also AVG Email Server Edition and this e-mail server is connected to the AVG Remote Administration as well, it is needed to create a special group for your e-mail server and do not change license numbers in "Shared settings" but for group of stations. If you use AVG Network Edition license number on your e-mail server, the e-mail server edition functionality will not be supported.
Note: When reactivating AVG in your network with the new AVG License Number, please do not forget to enter the new AVG License Number also into the AVG Admin Server. Using the expired AVG License Number in Admin Server would limit the funtionality of the Remote Administration (centralized updates, management of stations, etc.).
You can reactivate the AVG Admin Server with the new AVG License Number as follows: Run the AVG Admin Server Monitor -> Server settings -> General tab -> Click on the Change button.
918
To enable the update mirroring (centralized update) support, please run the AVG Admin Server Deployment Wizard from menu Start - Programs - AVG 8.5 Remote administration.
On the second page of the wizard selectboth DataCenter role and UpdateProxy role, then proceed further with the wizard:
- you can backup your current database, although its contents will not be affected in any way
- select Keep existing DataCenter database
- specify which folder you wish to use for storing the downloaded update files on the server
- adjust or confirm the order of the update servers - this configuration will be transferred to the clients once the wizard is completed
- the order of the servers specifies their priority - if one is not available, the next one is used
- the central update files will be available at http://[server_name_or_IP]:4158/avgupdate
- click Deploy to store all the settings and restart the AVG Admin Server automatically
From now on, the clients will be able to update from this AVG Admin Server. In case of any problems, you can test the availability of the AVG Admin Server by opening the following website from one of the clients:
http://[server_name_or_IP]:4158/
Note:
In case you wish to use only the UpdateProxy function of the AVG Admin Server, please:
- skip the DataCenter role settings
- set the clients manually (or using another DataCenter / AVG Admin Server) to update from the server http://[server_name_or_IP]:4158/avgupdate
1368
AVG Remote Administration supports several database systems. Their specifics and installation's recommendations can be found below:
Firebird
This solution is appropriate for smaller networks with up to 150 stations. The database is a standard part of AVG Remote Administration. In case that this database system is selected, there are no further settings needed.
Microsoft SQL Server 2005 Express Edition
A reduced version of the Microsoft SQL Server, it can serve up to 1000 stations. The product is not a standard part of AVG Remote Administration. Its usage is not limited by any commercial license.
If you choose such type of the database systems, two options will be presented to you:
- Keep existing DataCenter database
- Please select this option in case that SQL Server 2005 Express is already installed on your computer. AVG DataCenter will be created automatically when you fill in the database parameters.
- Create new empty DataCenter database
- Please use this option if you want to install the AVG DataCenter on a new instance of Microsoft SQL Server 2005 Express. In the next step please fill in the database parameters. Afterwards you will be provided parameters for the server installation. Please use these parameters for the installation of Microsoft SQL Server 2005 Express on your computer/server.
- In order to install SQL Server 2005 Express Edition properly, you need to download and install Microsoft .NET Framework version 2.0 or higher. You can download it from the Microsoft website on the following link:
http://go.microsoft.com/fwlink/?linkid=45988 - After successful installation of .NET Framework, please download the installation package of SQL Server 2005 Express Edition from the Microsoft web site:
http://go.microsoft.com/fwlink/?LinkId=64064
Microsoft SQL Server 2000/2005
This engine can serve over 1000 stations in large networks. It is not a standard part of AVG Remote Administration and its usage is bound to the Microsoft SQL Server license. In order to deploy AVG DataCenter on such database system, please fill in the database parameters and finish the AVG Admin Server Deployment Wizard.
Database parameters' description:
- Computer name
Defines the name of the station, on which the database system is/will be installed. - Instance name
Refers to a particular installation, if there are more than one instances installed on the station. - Administrator’s username
Predefined automatically, you do not need to change it. - Administrator’s password
Password for the database administrator. - Database name
Shows predefined database name. - Username
Type in a preferred new login name for the database (to be used for AVG Admin Server connection). - User password
Type in a preferred new password for the database (to be used for AVG Admin Server connection).
Oracle 10g
AVG DataCenter on Oracle engine is recommended for very large networks (more than 1000 stations). It is not a standard part of AVG Remote Administration and its usage is bound to a commercial license. In case the Oracle 10g database is running on different computer than AVG Admin Server, it is necessary to install the client part of Oracle database on that server. Additionally, please see FAQ 1437 in case the Oracle 10g database is running on 64bit server.
Database parameters' description:
- Computer name
Defines the name of the station, on which the database system is/will be installed. - Instance name
Refers to a particular installation, if there are more than one instances installed on the station. - Administrator’s username
Predefined automatically, you do not need to change it. - Administrator’s password
Password for the database administrator. - Username
Type in a preferred new login name for the database (to be used for AVG Admin Server connection). - User password
Type in a preferred new password for the database (to be used for AVG Admin Server connection).
1375
In order to install and use AVG Remote Administration, which allows the network administrator to remotely install, update, and configure AVG across the computer network, it is necessary to meet the following conditions:
- Network edition license number. If you do not own such product please refer to the Business Security section and choose the suitable solution for your network.
- Supported operating system. Their list can be found the Supported Platforms section.
- Remote Administration component must be installed on all client's stations. You can check its presents this way: run AVG program -> choose Advanced Settings option from the Tools menu -> find the Remote Administration item in the left tree menu.
If you meet all the conditions above please perform installation of AVG Remote Administration on your server this way:
- Please download the latest installation file of the appropriate edition that you have ordered from the AVG 8.5 Downloads section.
- Please choose the AVG Admin 8.5 for Windows installation file.
- When you are prompted, please do not open this file directly from the Internet, but click "Save" button and choose location where installation file should be stored. We recommend saving the file to the Desktop.
- Locate the downloaded AVG installation file (it has a four color square icon and its name starts with AVG...) and launch the installation by double-clicking on it.
- Follow the installation wizard and choose the suitable installation type. In order to install all components of AVG Remote Administration we would recommend you to choose the Full Installation option.
- Enter your license number when you are asked (we recommend that you use copy&paste method to enter this license number into the installation form).
As soon as the installation of AVG Remote Administration is finished AVG Admin Server Deplyment Wizard will be started automatically. Please proceed as follows:
- Please choose required roles for your AVG Admin Server (in case of the Full Installation type we would recommend you to choose both roles).
- DataCenter role - allows central management of AVG stations configurations and collects scan results from stations.
- UpdateProxy role - performs mirroring of downloaded update files for AVG stations.
- Please choose the appropriate database type. For more information about supported database types please refer to FAQ 1368.
- In case that you have already created an export/back-up of your AVG DataCenter 8.5 you can import it during this step.
- Please choose a folder where the downloaded update files will be stored. We recommend you to use the default folder C:\Documents and Settings\All Users\Application Data\avg8\Admin Server Data\update or C:\ProgramData\avg8\Admin Server Data\update
- Check the list of AVG update servers - these servers will be used on stations.
- Check your settings of AVG Admin Server and finish the Deployment Wizard by clicking the Deploy button.
In case of any further questions or issues with installation of AVG Remote Administration please feel free to contact our AVG Technical Support team.
1450
Ports that need to be allowed in firewall for remote administration are listed below:
1. Communication on TCP port number 80
For downloading AVG updates from the internet to the AVG Admin Server UpdateProxy, it is necessary to permit outgoing communication for these components on TCP port 80.
For successful connection between AVG Admin Server and stations, you also need to allow other ports on your router/firewall/hub/VPN or other type of relevant connection type, hardware or software:
2. TCP Port 4158
For basic communication between the AVG Admin Server, the AVG clients and the AVG Admin console, you need to allow TCP port 4158 (predefined by default).
This port can be changed in the AVG Admin Server configuration and in the AVG User Interface on the station (via upper menu Tools -> Advanced Settings –> Remote Administration).
3. TCP Port 6051
This port is used for seding of messages between the AVG Admin Console and the AVG client. This port can be changed within the AVG User Interface on the station (via upper menu Tools -> Advanced Settings –> Remote Administration group).
4. TCP Port 6054
This port is used for sending of messages between the AVG Admin Console and the AVG Admin Server. This port is not configurable. AVG Admin Console tries to open this port automatically for listening, if the port is not available, it tries to open subsequent ports (6055, 6056, …) until it successfully finds an available one.
Note:
Please note that it is necessary to allow the communication in both directions.
1013
It is recommended to exclude the following folders from AVG scanning (on the server where AVG for MS Exchange is installed) :
M:\ (for MS Exchange 2000 only)
C:\Program Files\Exchsrvr\Mailroot
C:\Program Files\Exchsrvr\CONNDATA
C:\Program Files\Exchsrvr\MDBDATA
C:\Program Files\Exchsrvr\MTADATA
C:\Program Files\Exchsrvr\SCHEMA
C:\Program Files\Microsoft\Exchange Server\Mailbox (MS Exchange 2007)
Please exclude these folders in AVG Resident Shield settings (AVG -> AVG Resident Shield component -> Manage exceptions button) and also in the configuration of the scheduled AVG test which you run on that server (AVG -> Tools menu -> Advanced settings option -> Schedules -> Scheduled scan -> What to scan tab -> choose "Scan specific files and folders" and exclude folders mentioned above).
Please bear in mind that it is needed to exclude these folders for a specific scan if you would like to launch the scan manually (AVG-> Computer scanner -> Scan specific files and folders -> Change scan settings).
For more information please see the following Microsoft webpage: http://support.microsoft.com/kb/245822/en-us
1705
When upgrading AVG 8.0 to 8.5 version on the e-mail server, no special steps are required. It is just recommended to use the latest AVG E-mail Server Edition 8.5 installation package. After executing the installation package choose the Repair installation option and finish the wizard.
The AVG Anti-Spam server plug-in is not added automatically when using the standard AVG 8.5 installation package or when updating from AVG 8.0 to AVG 8.5 via program update. In order to add this plug-in, please perform the repair installation using the latest AVG E-mail Server edition 8.5 installation package.
Note:
Anti-Spam plug-in supports MS Exchange e-mail servers, thus can be installed only on such servers. For more information about the AVG installation on the e-mail servers please refer to FAQ topic 1373.
1373
Installation of the AVG program on an Email server does not differ much from the client's installation. However, below you can find some specificities of such AVG installation along with the general recommendations.
1. Supported Email servers:
AVG program can filter your e-mails on the following Email servers:
- AVG for MS Exchange 2000/2003 Server
- MS Exchange 2000 Server (with Service Pack 1 or higher), and MS Exchange 2003 Server versions.
- Note: for Exchange 2000 Server - Service Pack 1 (or higher) needs to be applied before you can use the AVG engine; AVG for MS Exchange 2000/2003 Server uses the VSAPI 2.0 (or 2.5 with Exchange 2003 Server) application interface which is covered in this Service Pack. - AVG for MS Exchange 2007 Server
- MS Exchange 2007 Server version - AVG for Lotus Notes/Domino Server
- Lotus Notes/Domino Server version 5.0 and higher
- please refer to FAQ 1670 for information about future support and availability of AVG for this product. - AVG for Kerio MailServer
- Kerio MailServer 6.5 and higher
2. General information:
The following components are not designed to operate on Email servers: Online Shield, AVG Firewall, Personal E-mail Scanner.
- AVG Online Shield
- This component affects all HTTP, HTTPS and PROXY communication, since it scans communication on all respective ports/sockets. Component was not designed nor tested on servers and may affect some specific server's communication. Its installation is not recommended.
- AVG Personal E-mail Scanner
- The Personal E-mail Scanner captures and scans all communication on ports 110 and 25 (POP3 and SMTP) by default. This component was not tested nor designed for servers. Its installation may cause some issues while processing of e-mails on your email server.
- AVG Firewall
- AVG Firewall was not designed for the server's solutions same as the components mentioned above.
These components will not be installed on Email server by default.
3. Installation
To install AVG E-mail Server Edition on MS Exchange server, it is only needed to download and run the AVG E-mail Server Edition installation package from our website, and follow the instructions. If MS Exchange is detected during the installation, the appropriate plugin will be installed automatically. Please note that restart of Store will be required.
When installing AVG E-mail Server Edition on Lotus Notes/Domino Server, please download the installation package for both AVG E-mail Server Edition, and the AVG for Lotus Domino from our website. Then install AVG first, and AVG for Lotus Domino second, to ensure correct functionality.
