• No results found

Configurable prodsett.ini settings

You can edit edit the settings described here in theprodsett.inifile.

Common settings [F-Secure common]

Enter the subscription key of the installation package here.

CD-Key=XXXX-XXXX-XXXX-XXXX-XXXX

Enforced Installation language.

SetupLanguage=ENG

If the setting is empty or defined asAUTO, the installation language is automatically chosen at the host based on the default system locale. The chioce is limited by the set of supported languages (see SupportedLanguages).

1= Network client (default). IfSetupMode=1, the corresponding centralized management settings should be defined in the [PMSUINST.DLL] section.

SetupMode=1

2= Stand-alone setup mode.

List of languages supported by the installation package.

SupportedLanguages=ENG FRA DEU FIN SVE ITA

You can make the set of languages smaller by leaving out some unnecessary languages and repacking the package.

When you add support for a new language to the package you should add that language here to make it effective.

List of languages being installed at the host. This setting typically equalsSupportedLanguages.

InstallLanguages=ENG FRA DEU FIN SVE ITA

You can make the set of languages smaller if you want some unnecessary languages not to be installed.

When you add new language support to the package you should add that language here to make it effective for the installed software.

The language files of the language defined by the SetupLanguage setting are always installed independently of the InstallLanguages setting.

The files and folders installed to NTFS and the product’s registry keys are protected with the NT SecurityPolicy=0 | 1 | 2

security permissions according to the defined SecurityPolicy:

0= no special policy applied; files and folders inherit the security permissions from the parent.

130 | F-Secure Client Security | Modifying prodsett.ini

Common settings [F-Secure common]

1= less strict policy; files and folders are protected with permissions granting full access to administrators, and read-only access to other users.

2= strict policy; files and folders are protected with permissions granting full access to administrators, read-only access to other users, and no access to everyone.

Note: WhenSecurityPolicy = 1or2, setup overwrites the access control lists (ACLs) of existing files, folders ,and registry keys. If you have specifically configured ACLs, for example, by adding users to them, you need to reconfigure them after the installation.

Settings for unattended automatic installation [Silent Setup]

Default destination path. Do not change this setting unless your company follows a specific installation policy.

DestinationDirUnderProgramFiles=F-Secure

1= Reboot automatically after installation.

Reboot=2

Attention: This option executes a forced reboot at the host without prompting the user to save his/her work. Do not use this option until you are absolutely sure about the safety of this type of reboot for the target computer.

2= Reboot after prompting the user for a confirmation (default).

Note: This choice executes a normal reboot at the host, and therefore in some cases the user could delay the restart or completely prevent it.

3= Do not reboot after installation.

Settings for Management Agent [FSMAINST.DLL]

This component is always installed when you are installing a networked client. You do not need to edit RequestInstallMode=1

theRequestInstallModeorInstallModesettings for this component.

Location of the management public key.

ManagementKey=\\server\path\admin.pub

Meaningful only in stand-alone installations.

ManagedStandAlone=

0= Normal stand-alone installation, no policy files can be imported (default).

1= Installed components can be managed with manually imported policies.

Settings for Management Agent [FSMAINST.DLL]

Do not modify these settings!

win2000renamefiles=fsrec.2k|fsrec.sys;fsfilte

0= Management Agent only uses all available identities (DNS name, IP address, WINS name, Unique UseOnlyUID=

Identity) to identify itself for the first time to the Policy Manager Server.

1= Management Agent only uses its unique identity to identify itself to the Policy Manager Server.

0= Do not generate debug information (default).

Debug=1

1= Write debug information into the debug log during installation and uninstallation.

This component is always installed when you are installing a networked client. You do not need to edit InstallMode=0 | 1

theRequestInstallModeorInstallModesettings for this component.

Settings for Policy Manager support [PMSUINST.DLL]

This component is always installed when you are installing a networked client. You do not need to edit RequestInstallMode=0

theRequestInstallModeorInstallModesettings for this component.

URL to Policy Manager Server.

FsmsServerUrl=http://fsmsserver

Do not change this setting.

FsmsExtensionUri=/fsms/fsmsh.dll

Do not change this setting.

FsmsCommdirUri=/commdir

0= Do not generate debug information (default).

Debug=1

1= Write debug information into the debug log during installation and uninstallation.

This component is always installed when you are installing a networked client. You do not need to edit InstallMode=0 | 1

132 | F-Secure Client Security | Modifying prodsett.ini

Settings for Policy Manager support [PMSUINST.DLL]

theRequestInstallModeorInstallModesettings for this component.

Settings for Client Security - virus protection [FSAVINST.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Disable real-time scanning EnableRealTimeScanning=1

1= Enable real-time scanning (default).

0= Do not generate debug information (default).

Debug=1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

Settings for conflict detection and removal module [FSSGSUP.DLL]

This component is always run during the installation.

You do not need to edit theRequestInstallMode orInstallModesettings for this component RequestInstallMode=1

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

This component is always run during the installation.

You do not need to edit theRequestInstallMode orInstallModesettings for this component InstallMode=0 | 1

0= Remove all found conflicts automatically (default).

SidegradeAction=0

1= Cancel installation if any conflicting software is found installed.

Settings for the installation of e-mail scanning [ES_Setup.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

Settings for the installation of e-mail scanning [ES_Setup.DLL]

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

Settings for internal common component FWES.

[FWESINST.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

Settings for Client Security - Internet Shield [FWINST.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

0= Do not install Dial-up Control (default).

InstallDC=0 | 1

134 | F-Secure Client Security | Modifying prodsett.ini

Settings for Client Security - Internet Shield [FWINST.DLL]

1= Install Dial-up Control

0= Do not install Network Quarantine (default).

InstallNetworkQuarantine=0 | 1

1= Install Network Quarantine.

0= Do not disable Windows Firewall (on XP SP2 or later) (default).

DisableWindowsFirewall=0 | 1

1= Disable Windows Firewall after Internet Shield installation.

Settings for Automatic Update Agent [FSBWINST.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

Settings for Client Security - Network Scanner [FSPSINST.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

Disables Network Scanning for certain executables.

DisableScanningForApps= Wget.exe,mplayer.exe

This is a comma-separated list of executable names without paths.

Note: No spaces are allowed between the items.

Settings for Client Security - Network Scanner [FSPSINST.DLL]

0= HTTP Scanning disabled EnableHTTPScanning=1

1= HTTP Scanning enabled

This setting defines which executables should start HTTP scanning immediately. Other processes will go StartImmediatelyForApps= iexplore.exe,firefox.exe,

netscape.exe,opera.exe, msimn.exe,outlook.exe,

mozilla.exe in scanning mode only after the first access to an

external server port 80.

This is a comma-separated list of executable names without paths.

Note: No spaces are allowed between the items.

Settings for Cisco NAC Plugin [FSNACINS.DLL]

0= Install this component as defined in the InstallModesetting.

RequestInstallMode=1

1= Install this component if newer, or not installed (default).

2= Install this component if there is no existing version of it installed, or if the same or an older version exists.

CTAversiondefines the version of the Cisco Trust Agent included in the package. Cisco Trust Agent CTAversion=1.0.55

installation package can be updated by replacing the ctasetup.msifile in the directory where

prodsett.iniresides.

0= Do not generate debug information (default).

Debug=0 | 1

1= Write debug information into the debug log during installation and uninstallation.

0= Do not install this component (default).

InstallMode=0 | 1

1= Install this component, except if a newer version already exists.

136 | F-Secure Client Security | Modifying prodsett.ini

15

E-mail scanning alert and error messages

You will find information on e-mail scanning alert and error messages here.

Topics:

Alert and error messages

This section provides a list of the alert and error messages that e-mail scanning can generate.

Related documents