1. Trend Micro Control Manager 5.0
Managing Clients and Groups
@ NC State

2. Background (people) Roles for Malware client deployments
Neal McCorkle – OIT Security
Tim Gurganus – OIT Security
Joe Wells – OIT Systems and Hosted Services
Ed Lee – OIT Learning Space Support

3. Background (Malware product line)
Trend Micro Products in use:
OfficeScan 8.0 for Windows
Control Manager 5.0
ServerProtect (NetWare / Linux)
Web Threat Protection for Desktops
Web Threat Protection for Servers
Damage Cleanup Services

4. Trend Micro’s free products
TrendMicro Housecall
TrendMicro™ HijackThis
TrendMicro sysclean (NCSU bundled)
TrendMicro TMVS (who’s running TMOS)

5. Key points to the workshop
Background
Client review
Dashboard
Portal to OS vs CM
Searching within OS
Clients and “Domains”
Logs from groups
Settings
CM Ad Hoc Queries
CM Reports
CM Templates
Contact & listserv
Q/A

6. Obtaining the TMOS client (campus)

7. TMOS Client “Update Now” akin to running SAV LiveUpdate
Services (automatic): tmlisten, ntrtscan
Processes: ntrtscan, pccntmon, tmlisten, tmproxy, {random name in %TEMP%} with “Scottish Terrier”-like icon as OfcDog application
TMOS icon’s status indicator:

8. Client Review Version. GUID. Parent. Firewall ports & communications:
TCP and TCP 8080 for general client communications.
TCP 443 and 4343 for administrative interaction; TCP 139, 1025 & 1026: AD Login

9. Trend Micro Officescan Local Console

10. Dashboard Getting there: Restrictions:
Restrictions:
IE only, due to ActiveX coding.
Campus and VPN address range only.

12. Portal to OfficeScan parent vs Control Manager
Layout of services
AVCM - Control Manager.
AV08 and AV09 – “On-Campus” parents.
AV05, AV06 and AV07 – Off-Campus parents.

13. Portal to AV0? Searching for your client PCs.
What is a Domain and how to use them.
Moving clients to Domains.
Moving clients to other TMOS servers (use Port 8080)
Logs from Domains.
Settings for Domains.

14. Control Manager
Ad Hoc Queries.
Reports.
Templates.

15. Contact and communications
Durpal site:
Mj2 list: antivirusadmin
Remedy: OIT_ANTIVIRUS
Trend Micro Help and documents: