introduction to metascan client
DESCRIPTION
Metascan Client provides a simple solution for scanning endpoint processes, files, folders and drives with multiple anti-malware engines.TRANSCRIPT
Introduction to Metascan® Client
Tony BerningProduct [email protected]
Agenda
Overview of Metascan
Metascan Client Overview
Packages Available
Metascan Remote Client Licenses
Metascan Client and Metascan
Metascan Client Demo
Further Resources
Overview of MetascanMulti-scanning solution
What is Metascan?Multi-scanning engine
An API driven server application that allows customers to incorporate multiple AV engine scanning technologies into their security architecture
Supports 0 to 30 anti-malware engines [and growing!]
Simultaneously scans files with all engines
Scan directories, files, archives, buffers, and boot sector
Automatic online definition updates or manual offline
updates
What is Metascan?Multi-scanning engine
Flexible and scalable API driven solution Many programming Interfaces –
C++ Java PHPC#/ASP.NETRESTful (Web API)/HTTPCLI[command line interface]
Analyzes files locally on a single server or remotely accesses files from Windows, Macintosh, or Linux systems
Metascan ClientEasy endpoint scanning with multiple
engines
What is Metascan Client?Endpoint scanning
A simple executable for scanning Windows systems
Nothing is installed on the endpoint
Can be run from a USB, CD or DVD or local hard drive
No coding required
Scan files, folders, drives, and active processes in memory and files associated with active processes
Requires a Metascan server
Metascan Client Features – Technical details
File processing sequence:
Metascan Client FeaturesOnline Deployment
Multiple Metascan Clients connected to a single Metascan server
The client is run from a USB, CD or DVD, or local drive. It connects to the Metascan server and scans the contents of the endpoint
Updates are automatically downloaded from the internet
Metascan Client FeaturesOffline Deployment
Multiple Metascan Clients connected to a single Metascan server.
The client is run on the endpoints. It connects to the Metascan server and scans the contents of the endpoint.
The Metascan server is offline [not connected to the internet] and updated manually
How should you use Metascan Client?
IT Administrators managing endpoints in their network VPN Authentication Process Schedule Scans IT Troubleshooting
Independent software vendors seeking to proactively address issues with new binaries
False positives
Accidental infections from open source or third party
libraries
Metascan can be integrated as part of the build process Software releases are checked automatically
Metascan Client Packages
Metascan Client
Standalone Executable
File or Process Scanning
GUI or CLI
Windows Only
Metascan Client Connector Windows, Mac, Linux versions File Scanning Functionality CLI
Metascan Client SDK Windows Only Process Scanning Functionality
Metascan Remote Client Licenses
Two types of licensing, concurrent and non-concurrent Concurrent restricts the number of remote clients connected at the same
time Non-concurrent restricts the number of unique remote clients that have
ever connected to the Metascan server
Every Metascan Server license includes 1 concurrent remote client license
Metascan Client and Metascan Server
Metascan Client is included in Metascan 3.7.1
Included download page allows users to download a customized Metascan Client tied to that Metascan Server
Administrators can edit Metascan Client configuration on the Metascan Server and generate the download package
Download is a self-extracting application that runs immediately from the download directory
Metascan Client Demo
Available for download from http://www.opswat.com/metascan-client
Demo is restricted to the ‘lightest’ scan level. Full system and custom scans are disabled.
Scans files using the Metascan Cloud server
Full-featured Metascan Client can be trialed by downloading and installing a trial version of Metascan from https://portal.opswat.com
Further Resources
Metascan Client product details and demo available at http://www.opswat.com/metascan-client
Metascan Server demo installations (including Metascan Client) available at https://portal.opswat.com (requires creation of a free OPSWAT Portal account)
For further questions on Metascan Client, contact [email protected]