introduction to metascan client

16
Introduction to Metascan ® Client Tony Berning Product Manager [email protected]

Upload: opswat

Post on 09-Jun-2015

538 views

Category:

Technology


1 download

DESCRIPTION

Metascan Client provides a simple solution for scanning endpoint processes, files, folders and drives with multiple anti-malware engines.

TRANSCRIPT

Page 1: Introduction to Metascan Client

Introduction to Metascan® Client

Tony BerningProduct [email protected]

Page 2: Introduction to Metascan Client

Agenda

Overview of Metascan

Metascan Client Overview

Packages Available

Metascan Remote Client Licenses

Metascan Client and Metascan

Metascan Client Demo

Further Resources

Page 3: Introduction to Metascan Client

Overview of MetascanMulti-scanning solution

Page 4: Introduction to Metascan Client

What is Metascan?Multi-scanning engine

An API driven server application that allows customers to incorporate multiple AV engine scanning technologies into their security architecture

Supports 0 to 30 anti-malware engines [and growing!]

Simultaneously scans files with all engines

Scan directories, files, archives, buffers, and boot sector

Automatic online definition updates or manual offline

updates

Page 5: Introduction to Metascan Client

What is Metascan?Multi-scanning engine

Flexible and scalable API driven solution Many programming Interfaces –

C++ Java PHPC#/ASP.NETRESTful (Web API)/HTTPCLI[command line interface]

Analyzes files locally on a single server or remotely accesses files from Windows, Macintosh, or Linux systems

Page 6: Introduction to Metascan Client

Metascan ClientEasy endpoint scanning with multiple

engines

Page 7: Introduction to Metascan Client

What is Metascan Client?Endpoint scanning

A simple executable for scanning Windows systems

Nothing is installed on the endpoint

Can be run from a USB, CD or DVD or local hard drive

No coding required

Scan files, folders, drives, and active processes in memory and files associated with active processes

Requires a Metascan server

Page 8: Introduction to Metascan Client

Metascan Client Features – Technical details

File processing sequence:

Page 9: Introduction to Metascan Client

Metascan Client FeaturesOnline Deployment

Multiple Metascan Clients connected to a single Metascan server

The client is run from a USB, CD or DVD, or local drive. It connects to the Metascan server and scans the contents of the endpoint

Updates are automatically downloaded from the internet

Page 10: Introduction to Metascan Client

Metascan Client FeaturesOffline Deployment

Multiple Metascan Clients connected to a single Metascan server.

The client is run on the endpoints. It connects to the Metascan server and scans the contents of the endpoint.

The Metascan server is offline [not connected to the internet] and updated manually

Page 11: Introduction to Metascan Client

How should you use Metascan Client?

IT Administrators managing endpoints in their network VPN Authentication Process Schedule Scans IT Troubleshooting

Independent software vendors seeking to proactively address issues with new binaries

False positives

Accidental infections from open source or third party

libraries

Metascan can be integrated as part of the build process Software releases are checked automatically

Page 12: Introduction to Metascan Client

Metascan Client Packages

Metascan Client

Standalone Executable

File or Process Scanning

GUI or CLI

Windows Only

Metascan Client Connector Windows, Mac, Linux versions File Scanning Functionality CLI

Metascan Client SDK Windows Only Process Scanning Functionality

Page 13: Introduction to Metascan Client

Metascan Remote Client Licenses

Two types of licensing, concurrent and non-concurrent Concurrent restricts the number of remote clients connected at the same

time Non-concurrent restricts the number of unique remote clients that have

ever connected to the Metascan server

Every Metascan Server license includes 1 concurrent remote client license

Page 14: Introduction to Metascan Client

Metascan Client and Metascan Server

Metascan Client is included in Metascan 3.7.1

Included download page allows users to download a customized Metascan Client tied to that Metascan Server

Administrators can edit Metascan Client configuration on the Metascan Server and generate the download package

Download is a self-extracting application that runs immediately from the download directory

Page 15: Introduction to Metascan Client

Metascan Client Demo

Available for download from http://www.opswat.com/metascan-client

Demo is restricted to the ‘lightest’ scan level. Full system and custom scans are disabled.

Scans files using the Metascan Cloud server

Full-featured Metascan Client can be trialed by downloading and installing a trial version of Metascan from https://portal.opswat.com

Page 16: Introduction to Metascan Client

Further Resources

Metascan Client product details and demo available at http://www.opswat.com/metascan-client

Metascan Server demo installations (including Metascan Client) available at https://portal.opswat.com (requires creation of a free OPSWAT Portal account)

For further questions on Metascan Client, contact [email protected]