How to install the Symantec Critical System Protection (SCSP) agent with out enabling the Intrusion Protection Feature set (IPS) or the Real Time File Integrity Monitoring feature set (RT-FIM)

Products

• Critical System Protection

Issue/Introduction

 

Resolution

The example below is for an interactive install on AIX but for the most part it is the same across all OS's

Please note: It is the options number 12 and 20 below that should be set to disable during installation, this will disable these feature sets from being loaded.

# ./agent-aix.bin -server=xx.xx.xx.xx

 

Checking Required Package Dependencies...

 

Do you agree to the License terms (yes or no)? : y

 

License Agreement accepted.

 

Enter the Primary Management Server hostname or IP address [xx.xx.xx.xx]:

 

Enter Path to Management Server Certificate [/tmp/agent-cert.ssl]:

 

Certificate Issuer OU=SYMC-XXXX, DN=SCSP_Management_Server.

Certificate file /tmp/agent-cert.ssl appears to be valid.

 

Enter Agent Name [localhost]:

 

 ******************************************************************************

 *     Symantec Critical System Protection Agent (Version 5.2.8.xxx)          *

 ******************************************************************************

 *            Name                   |         Setting                        *

 * -------------------------------------------------------------------------- *

 * 1) Installation Directory        | /opt/Symantec/scspagent               *

 * 2) Log Files Directory           | /var/log/scsplog                      *

 * 3) Primary Management Server     | x.x.x.x                               *

 * 4) Alternate Management Servers |                                        *

 * 5) Management Server Certificate | /tmp/agent-cert.ssl                   *

 * 6) Agent Name                    | localhost                             *

 * 7) Agent Locale                  | POSIX                                 *

 * 8) Agent Communication Port      | 443                                   *

 * 9) Polling Interval              | 300 (seconds)                         *

 * 10) Notifications Port            | 2222                                  *

 * 11) Agent Notifications           | Enable                                *

 * 12) Enable Intrusion Prevention   | Enable                                *

 * 13) Set Agent Protocol            | https                                 *

 * 14) Common Config Group           |                                        *

 * 15) Detection Config Group        |                                        *

 * 16) Detection Policy Group(s)     | AIX                                   *

 * 17) Prevention Config Group       |                                        *

 * 18) Prevention Policy Group       |                                        *

 * 19) Util Service Port             | 2323                                  *

 * 20) Enable Real-Time              | Enable                                *

 *     File Integrity Monitoring     |                                        *

 ******************************************************************************

 

Enter a number for more information and to change the setting,

ENTER to continue, or 'q' to quit the installation (1-20,q):

 

Accept these installation settings (Yes/No)? [Yes]:

 

Extracting /var/tmp/SYMCcspxxxxxx/SYMCcsp-5.2.8.xxx.aix.rpm ...

 

Validating RPM File: /var/tmp/SYMCcsp4784372/SYMCcsp-5.2.8.xxx.aix.rpm ...

 

Running native package installation

 

Installing SCSP Agent package SYMCcsp-5.2.8-xxx ...

SYMCcsp-5.2.8-xxx

 

The Symantec Critical System Protection Agent has been successfully installed

 

******************* REBOOT REQUIREMENT ********************

* In order to complete installation of this product, a    *

* system reboot is required. You may reboot now or at    *

* your earliest convenience.                              *

***********************************************************

 

Reboot System Now [shutdown -Fr now] (Yes/No)? [No]: