1 前言

一个问题，一篇文章，一出故事。
笔者今天需要在sftp服务器上部署Symantec杀毒软件，于是整理此文。

2 最佳实践

2.1 安装应用

chmod u+x LinuxInstaller
./LinuxInstaller

另外，如果服务器无法直接上网需要使用反向代理安装，请使用如下命令，

./LinuxInstaller -- --local-repo https://repository.cmdschool.org/repository/yum-symantec/sep_linux/14.3RU3/

需要注意的是，代理实现如下两个映射关系，
Internal: https://repository.cmdschool.org/repository/yum-symantec/sep_linux/14.3RU3/latest.txt
Internet: https://linux-repo.us.securitycloud.symantec.com/sep_linux/14.3RU3/latest.txt
如果你希望了解如何实现映射关系，请参阅如下章节，

如何企业二进制部署NXRM？

安装完成后，你可以使用如下命令查看赛门铁克服务，

systemctl | grep -i symantec

可见如下输出，

cafdaemon.service           loaded active running   Symantec Agent for Linux CAF daemon                                          
sisamddaemon.service        loaded active running   Symantec Agent for Linux Antimalware daemon                                  
sisidsdaemon.service        loaded active running   Symantec Agent for Linux IDS daemon                                          
sisipsdaemon.service        loaded active running   Symantec Agent for Linux IPS daemon                                          
sdcss-amd.slice             loaded active active    Symantec Agent for Linux AMD service CGroup slice                            
sdcss.slice                 loaded active active    Symantec Agent for Linux CGroup slice

2.2 手动更新病毒库（无网络适用）

wget https://definitions.symantec.com/defs/20231112-002-core15unix.sh
sh 20231112-002-core15unix.sh

更新的病毒库，请从如下连接下载，
https://www.broadcom.com/support/security-center/definitions/download/detail?gid=sep14
如果遇到如下错误提示，

Validating available tools...
which: no uudecode in (/usr/sbin:/usr/bin:/bin)
ERROR: Required utility missing: uudecode. Please install this
utility before using this Intelligent Updater package.

A transcript of this installation has been saved as /var/log/iu-install.log

你可以使用如下命令解决依赖关系，

yum install -y sharutils

如果遇到如下错误提示，

Validating available tools...
ERROR: /etc/Symantec.conf file not found. Please confirm that
       there a Symantec product installed on this system.

A transcript of this installation has been saved as /var/log/iu-install.log

你可以使用如下命令解决，

ln -s /opt/Symantec/sdcssagent/AMD/sef/config/lux.logging.conf /etc/Symantec.conf

如果遇到如下错误提示，

Validating available tools...
ERROR:  /virusdefs not found.
        This directory must exist in order to update the definitions.
        Please confirm that a Syamntec product is installed on this
        system. See -help for more information.


A transcript of this installation has been saved as /var/log/iu-install.log

你可以使用如下命令解决，

ln -s /opt/Symantec/sdcssagent/AMD/sef/definitions/virusdefs /virusdefs

如果看到如下提示则安装成功，

Validating available tools...
Decoding Intelligent Updater package...
Checking distribution integrity...
Extracting distribution files...
Installing virus defintions to /virusdefs/incoming/
Copying definition files...
Removing temporary files...

Virus definitions installed successfully.

A transcript of this installation has been saved as /var/log/iu-install.log

2.3 手动扫描病毒

如何使用Symantec手动扫描病毒？

参阅文档
=========================

安装赛门铁克杀毒软件
——————–
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/getting-up-and-running-on-for-the-first-time-v45150512-d43e1033/installing-clients-with-save-package-v16194723-d21e1502/installing-the-client-for-linux-v95193124-d21e2986.html

如何设置存储库
————————–
https://knowledge.broadcom.com/external/article/231710