{"id":10493,"date":"2024-07-06T23:26:37","date_gmt":"2024-07-06T21:26:37","guid":{"rendered":"https:\/\/www.bowbridge.net\/?page_id=10493"},"modified":"2024-07-06T23:26:38","modified_gmt":"2024-07-06T21:26:38","slug":"quickstart-guide-anti-virus-cloud","status":"publish","type":"page","link":"https:\/\/www.bowbridge.net\/en\/quickstart-guide-anti-virus-cloud\/","title":{"rendered":"Quickstart Guide – Anti-Virus Cloud"},"content":{"rendered":"
 \n \n<\/pre>\n\n\n\n
  <\/span><\/a><\/span>
<\/div>
<\/div><\/div>
bowbridge Anti-Virus - Cloud - Quickstart Guide<\/h2><\/div>
\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t<\/span>
  1. Overview<\/a><\/li>
  2. Preparations<\/a><\/li>
  3. OS-level installation<\/a><\/span>
    1. Linux\/UNIX<\/a><\/li><\/ol><\/li>
    2. Customer Portal<\/a><\/span>
      1. Set up a realm<\/a><\/li>
      2. Create a SID object<\/a><\/li>
      3. Assign a license instance<\/a><\/li><\/ol><\/li>
      4. AS-ABAP Configuration<\/a><\/span>
        1. Set up a Virus Scanner Group<\/a><\/li>
        2. Virus Scan Provider<\/a><\/li>
        3. Configure Virus Scan Profiles<\/a><\/li>
        4. SAP Gateway Virus Scan Profile Configuration<\/a><\/li>
        5. Validate the configuration<\/a><\/li><\/ol><\/li>
        6. AS-Java Configuration<\/a><\/span>
          1. Set up a virus scanner group<\/a><\/li>
          2. Set up a virus scan provider<\/a><\/li>
          3. Set up Virus Scan Profiles<\/a><\/li><\/ol><\/li>
          4. Logs, Alerts, Quarantine<\/a><\/li><\/ol><\/div><\/div>
             1.<\/span>Overview<\/span>  
            <\/div><\/h3>
            bowbridge Anti-Virus – Cloud is the first and only Hybrid-SaaS content security solution for SAP’s VSI API. Based on the de-facto standard solution for VSI, it combines bowbridge’s almost 20 years of VSI-experience with latest cloud-technology and delivers a solution that is lighweight on the SAP application server, fast and easy to deploy and manage, and built from the ground up for SAP workloads in the cloud.<\/p>\n
            bowbridge Anti-Virus – Cloud consists of a lightweight client part, called the “VSA client”, which is deployed on individual SAP application servers – within 30 seconds.<\/p>\n
            The client connects to a bowbridge-operated scan-cluster of your choosing to perform the scans according to your individual security policy. bowbridge operates scan clusters in several regions on every major hyperscaler infrastructure. All configurations, licenses and logs are managed and accessed via the bowbridge customer portal.<\/p>\n
            This Quickstart Guide will illustrate the process of setting up the solution for an imaginary organization “ACME Laboratories”.<\/p>\n
            Integration with on-premise systems, such as SIEM or quarantines for forensic analysis is possible. Please refer to the “Optional integrations” part of this guide for instructions on how to set them up.<\/p>\n
            \u00a0<\/p>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             2.<\/span>Preparations<\/span>  
            <\/div><\/h3>
            Download the installer script<\/h3>\n
            bowbridge Anti-Virus requires a one-time OS-level installation of the VSA-client.<\/p>\n
            Download the bowbridge-anti-virus Cloud Client installer from the bowbridge Web-site Download Section<\/a>\u00a0and transfer it to the application server(s) it needs to be installed to.<\/p>\n
             <\/p>\n
            Check the bowbridge Customer Portal<\/h3>\n
            Verify access to the bowbridge Customer Portal and ensure the tiles “Scan Clusters” and “Logs” are visible.<\/p>\n
            \"\"<\/a><\/p>\n
            If they are not, please reach out to support@bowbridge.net.<\/p>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             3.<\/span>OS-level installation<\/span>  
            <\/div><\/h3>
            <\/div><\/div><\/div>
             3.1.<\/span>Linux\/UNIX<\/span>  
            <\/div><\/h3>
            Install the VSA client<\/h3>\n
            Installing the VSA-client as SIDadm into a folder that is writable for that user. We recommend installing it to \/usr\/sap\/<SID>\/bowbridge.<\/p>\n
            If a different location is preferred, please ensure the SIDadm user can access it or run the installer as the root user.<\/p>\n
            Interactive installation<\/h4>\n
            Extract the installer with<\/p>\n
            gunizp install_bowbridge_anti-virus_client_4*.sh.gz<\/em> ,<\/p>\n
            the run the installer with<\/p>\n
            sh install_bowbridge_anti-virus_client_4*.sh<\/em><\/p>\n
            and follow the instructions of the installer:<\/p>\n
            \"\"<\/a><\/p>\n
            Confirm the splash screen.<\/p>\n
            \"\"<\/a><\/h3>\n
            Choose “Install”<\/p>\n
            \"\"<\/a><\/p>\n
            Enter the target directory for the installation.<\/p>\n
            \"\"<\/a><\/p>\n
            Select the option “Cloud”<\/p>\n
            \"\"<\/a><\/p>\n
            \"\"<\/a><\/p>\n
            View and accept the EULA<\/p>\n
            \"\"<\/a><\/h3>\n
            Installation complete.<\/p>\n
            Silent-mode installation<\/h4>\n
            Alternatively, deploy the VSA client to \/usr\/sap\/<SID>\/bowbridg<\/em>e silently with a single command:<\/p>\n
            executed as SIDadm:<\/p>\n
            sh install_bowbridge_anti-virus_client_4*.sh --silent --install --targetdir \/usr\/sap\/$SAPSYSTEMNAME\/bowbridge --install_pattern Cloud --accept_EULA<\/pre>\n
            or executed as root to create an installation in a folder not yet accessible to SIDadm:<\/p>\n
            sh install_bowbridge_anti-virus_client_4*.sh --silent --install --targetdir \/usr\/sap\/$SAPSYSTEMNAME\/bowbridge --install_pattern Cloud --accept_EULA --sidadm<\/pre>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             4.<\/span>Customer Portal<\/span>  
            <\/div><\/h3>
            Before configuring the SAP level, a few steps are required in the customer portal.<\/p>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             4.1.<\/span>Set up a realm<\/span>  
            <\/div><\/h3>
            Set up a realm<\/h3>\n
            Realms are namespaces for configurations and SIDs. Customers may freely choose how they would like to group SAP systems (identified by the SID) in realms. Typically, system lines, geographical locations, departments, or topological proximity are good choices.<\/p>\n
            From the Launchpad, access the “Realms” tile. For existing bowbridge customers, the overview page may already show an on-premises Realm named “Initial,” containing the on-premises SIDs and licenses.<\/p>\n
            Create a new realm by clicking the “Create New” button.<\/p>\n
            \"\"<\/a><\/p>\n
            Specify a name and an optional description and choose the deployment type.<\/p>\n\n\n\n\n\n\n\n
            Deployment Type<\/strong><\/td>\nExplanation<\/strong><\/td>\n<\/tr>\n
            On-Premises<\/td>\nAll components are self-hosted and managed using local configuration files<\/td>\n<\/tr>\n
            Hybrid<\/td>\nSelf-hosted Scan Clusters managed by bowbridge’s cloud management interface via the customer portal<\/td>\n<\/tr>\n
            Cloud – Public<\/td>\nFully managed, shared scan clusters, operated by bowbridge, managed via the customer portal.<\/td>\n<\/tr>\n
            Cloud – Private<\/td>\nFully managed scan clusters, dedicated to individual customers, operated by bowbridge, managed via the customer portal.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
            For the Hybrid and Cloud Options, a Realm access password must be provided.<\/p>\n
            \"\"<\/a><\/p>\n
            For the Cloud options, administrators must further choose a hyperscaler to which the Realm should be deployed.<\/p>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             4.2.<\/span>Create a SID object<\/span>  
            <\/div><\/h3>
            To use the bowbridge Cloud Scan service, a system must also be registered by its SAP SID, which in turn must be assigned to a Realm.<\/p>\n
            Access the SIDs tile from the Launchpad or via the “Go To” menu and click on “Create New” to register a new SID.<\/p>\n
            \"\"<\/a><\/p>\n
            Enter the SID and select the realm from the pulldown. An optional description of the SID may be provided, for example a description of the system’s main application.<\/p>\n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             4.3.<\/span>Assign a license instance<\/span>  
            <\/div><\/h3>
            Only licensed application servers can use the bowbridge Cloud Scan service. An application server is uniquely identified by a realm, a SID, and a hostname. Hence, license instances must be assigned to such a parameter triad.<\/p>\n
            Access the Licenses tile via the Launchpad or via the “Go To” menu.<\/p>\n
            From the Licenses Overview (also referred to as License Pool) select the license you would like to assign. On the License Details page, use the “Assign” button to assign an instance of this license to an application server.<\/p>\n
            \"\"<\/a><\/p>\n
            \"\"<\/a><\/p>\n
            \n
            \"\"<\/p>\n
            NOTE:<\/p>\n
            If you are unsure what hostname to use, defer this step until after the Virus Scan Provider configuration. The error message displayed on the then unlicensed application server will include the hostname to use for the license assignment.<\/p>\n
            \"\"<\/a><\/p>\n
            \n<\/div>
            \n\t\t\t\t\t<\/div>
            <\/div><\/div><\/div><\/div>
             5.<\/span>AS-ABAP Configuration<\/span>  
            <\/div><\/h3>
            To make content scanning transparent and highly available to any ABAP application, the SAP VSI configuration introduces three abstraction layers:<\/p>\n