Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. Copyright 2017 Trend Micro Incorporated. All rights reserved. No part of this publication may be reproduced, photocopied, stored in a retrieval system, or transmitted without the express prior written consent of Trend Micro Incorporated. All other brand and product names are trademarks or registered trademarks of their respective companies or organizations. Released: January 2017

There are four major OSCE environment components that should be identified when designing the deployment. Each component is described below.

OfficeScan Server: A server that provides the OSCE management console and stores information in a local CodeBase database, or a local or remote SQL. It uses standard HTTP or HTTPS protocols for communication and for managed agent updates. The three basic functions of an OfficeScan server are:

Agent configuration (Privileges and Policy settings)

Program, scan engine, and virus pattern file update provider

Centralized logs, report, and quarantine functionality

OfficeScan Agent: A host reporting to a particular OSCE server. It can be configured to get update information from an OfficeScan server, an update agent, or directly from the internet via Trend Micro ActiveUpdate server. Moreover, the OfficeScan agent has the function to protect the system where it is installed. It can be configured to use a standalone or Integrated Smart Protection Server for Smart Scan instead of conventional scan. Through cloud technology, this method minimizes the total amount of pattern download.

Update Agent: A regular OfficeScan agent that is designated to copy update information from an OfficeScan server to distribute these information to other OfficeScan agents. Any OfficeScan agent can be configured as an update agent using the OfficeScan server management console. OfficeScan agent IP address ranges are then assigned to get update information from specific update agents. Update agents can push component updates, setting updates, and program/hotfix updates to agents. Older agent versions can receive program upgrades from OSCE XG update agents as long as they report to the OSCE XG update agents.

Smart Protection Server (SPS): The Smart Protection Server provides the file reputation and web reputation through a local cloud service. When users opt to employ Smart Scan technology, agents send a query to SPS in their scanning files. When they use web reputation protection, agents send URLs to SPS. Thus, SPS works as a local file reputation server and as a local web rating server as well.

These are the two types of Smart Protection Server:

Integrated Smart Protection Server: Installed as part of the OfficeScan server, Integrated Smart Protection Server is managed through OfficeScan management console.

Standalone Smart Protection Server: This server is installed on a VMware or Hyper-V host.

The following sections show the recommended software and hardware specifications for an OfficeScan environment.

For the full list of minimum system requirements, refer to the Installation and Deployment Guide or OfficeScan Readme. For the recommended set up based on number of agents, check the sizing section in Chapter 3.

The OfficeScan agent with the best available resources at a particular site should be designated as an update agent. Since this agent will serve updates to the other agents in the remote office, it must be reliable. This can be a domain controller on the site, a file server, print server, or any endpoint that is always online. To serve its function, this agent should have an additional 700 MB of free disk space for engines and patterns storage, an additional 160 MB for programs/hot fix updates, and an additional 20 KB for every domain setting updates. Minimum requirements for update agents should follow the minimum hardware requirements of OfficeScan agents.

The minimum hardware specifications for this server are the same as the recommended requirements for the OfficeScan server.

The minimum hardware specifications for standalone Smart Protection Server:

Dual 2.0 GHz Intel Core 2 Duo 64-bit processor supporting Intel Virtualization Technology, or equivalent

2 GB of RAM

30 GB for virtualization requirements (35 GB recommended)

Microsoft Windows Server 2008 (Standard, Enterprise, Datacenter, and Web Editions) with Service Pack 1 or 2, 32-bit and 64-bit versions

Windows Server 2008 R2 (Standard, Enterprise, Datacenter, and Web Editions), 64-bit version

Windows Storage Server 2008 (Basic, Standard and Enterprise Edition), 32-bit version

Windows Storage Server 2008 (Basic, Standard, Enterprise and Workgroup Edition), 64-bit version

Windows Storage Server 2008 R2 (Basic, Standard, Enterprise, and Workgroup Editions), 64-bit version

Microsoft Windows HPC Server 2008, 32-bit and 64-bit versions

Microsoft Windows HPC Server 2008 R2, 64-bit version

Windows MultiPoint Server 2010, 64-bit version

Windows MultiPoint Server 2011 (Standard and Premium Editions), 64-bit version

Windows Server 2012 (Standard and Datacenter Editions), 64-bit version

Windows Server 2012 R2 (Standard and Datacenter Editions), 64-bit version

Windows MultiPoint Server 2012 (Standard and Premium Editions), 64-bit version

Windows Storage Server 2012 (Standard and Workgroup Editions), 64-bit version

Windows Server 2016 (Standard and Datacenter Editions), 64-bit version

OfficeScan supports server installation on guest operating systems hosted on the following virtualization applications:

ESX/ESXi Server (Server Edition) 4.0, 4.1, 5.0, 5.15.x , 6.0

Server (Server Edition) 1.0.3, 2

Workstation and Workstation ACE Edition 7.0, 7.1, 8.0, 9.0

ViewTM 4.5, 5.0, 5.1

XenDesktop 5.0, 5.5, 5.6, 7.0

XenServer 5.5, 5.6, 6.0, 6.1, 6.2

XenApp 4.5, 5.0, 6.0, 6.5

XenClient 2.1

VDI-in-a-Box 5.1

Windows Server 2008 64-bit Hyper-V

Windows Server 2008 R2 64-bit Hyper-V

Windows 8 Pro/Enterprise 64-bit Hyper-V

Windows 8.1 Pro/Enterprise 64-bit Hyper-V

Windows Server 2012 64-bit Hyper-V

Windows Server 2012 R2 64-bit Hyper-V

Microsoft Windows XP (Home, Professional, Professional for Embedded Systems Editions, and Tablet PC) with Service Pack 3, 32-bit version

Microsoft Windows XP Professional with Service Pack 2, 64-bit version

Microsoft Windows Vista (Business, Enterprise, Ultimate, Home Premium, Home Basic, Business for Embedded Systems, and Ultimate for Embedded Systems) with Service Pack 1 or Service Pack 2, 32-bit and 64-bit versions

Microsoft Windows 7 (Home Basic, Home Premium, Ultimate, Professional, Enterprise, Professional for Embedded Systems, and Ultimate for Embedded Systems) with or without Service Pack 1, 32-bit and 64-bit versions

Microsoft Windows Embedded POSReady 2009, 32-bit version

Microsoft Windows Embedded POSReady 7, 32-bit and 64-bit versions

Microsoft Windows 8 (Standard, Pro, and Enterprise Editions), 32-bit and 64-bit versions

Microsoft Windows 8.1 (Standard, Pro, and Enterprise Editions), 32-bit and 64-bit versions

Microsoft Windows 10 (Home, Pro, Education and Enterprise Editions), 32-bit and 64-bit versions

Microsoft Windows 10 RS1 (Home, Pro, Education and Enterprise Editions), 32-bit and 64-bit versions

Microsoft Windows Server 2003 (Standard, Enterprise, Datacenter, and Web Editions) with Service Pack 2, 32-bit and 64-bit version

Microsoft Windows Server 2003 R2 (Standard, Enterprise, and Datacenter) with Service Pack 2, 32-bit and 64-bit versions

Microsoft Windows Storage Server 2003 (Basic, Standard, Enterprise, and Workgroup) with Service Pack 2, 32-bit and 64-bit versions

Microsoft Windows Storage Server 2003 R2 (Basic, Standard, Enterprise, and Workgroup) with Service Pack 2, 32-bit and 64-bit versions

Microsoft Windows Compute Cluster Server 2003 (Active/Passive), 32-bit and 64-bit versions

Microsoft Windows Server 2008 (Standard, Enterprise, Datacenter, Web Editions, and Server Core) with Service Pack 1 or Service Pack 2, 32-bit and 64-bit versions

Microsoft Windows Storage Server 2008 (Basic Edition), 32-bit and 64-bit versions

Microsoft Windows Storage Server 2008 (Standard, Enterprise, and Workgroup Editions) with or without Service Pack 1, 64-bit version

Microsoft Windows Server 2008 R2 (Standard, Enterprise, Datacenter, Web Editions, and Server Core), 64-bit version

Microsoft Windows Storage Server 2008 R2 (Basic, Standard, Enterprise, and Workgroup Editions), 64-bit version

Microsoft Windows HPC Server 2008, 32-bit and 64-bit versions

Microsoft Windows HPC Server 2008 R2, 64-bit version

Microsoft Windows Server 2008 Failover Clusters (Active/Passive), 32-bit and 64-bit versions

Microsoft Windows Server 2008 R2 Failover Clusters (Active/Passive), 64-bit version

Microsoft Windows MultiPoint Server 2010, 64-bit version

Microsoft Windows MultiPoint Server 2011 (Standard and Premium Editions), 64-bit version

Microsoft Windows Server 2012 (Standard, Datacenter, and Server Core Editions), 64-bit version

Microsoft Windows Storage Server 2012 (Workgroup and Standard Editions), 64-bit version

Microsoft Windows