Introduction
When using SAP Mobile documents on Premise, for security reasons it might be a requirement to scan al files for viruses stored in your Mobile document environment. This Blog will guide you to setup a VSI using an Bowbridge VSA and a McAfee scan engine.
Environment setup
- Netweaver Java 7.40
- Bowbridge version 3.0.17
- McAfee Web Gateway 7.6.0
- IBM AIX 7.1
For more information regarding officially certified products please take a look at SAP Note 1494278
Overview
If we take a look at this picture than we see that SAP is sending the files from the VSI to the VSA, in this case we use Bowbridge. Bowbridge will process the files and pass them through to the McAfee scanengine.
Installation
Steps to setup the VSA- Bowbridge
Download the required software from the Bowbridge website. You can try the software for 30 days.
Create an directory on the filesystem called bowbridge. This is important because bowbridge will default use this name.
Copy the installation files to the server
Run the installer
./install-bowbridge30_AIX.sh
Steps to setup the Virusscanner in the NWA (VSI)
Select Groups > Edit > Add
Add group > give any name your like & Continue
Select "default Scan Group"
Go to the "Adapter" tab and klik "add"
Give a meaningful name and continue
Provide the setting for the adapter. Make sure that the VSA Library path is correct. You can find the so file in the installation folder of your Bowbridge setup. Make it the default scan Provider.
Go to the Parameter tab and configure the correct parameters. For details regarding the parameters please have a look in the manual of your VSA provider. In case of Bowbridge go to http://www.bowbridge.net/fileadmin/collateral/Documentation/internal/BowBridge_AntiVirusBridge_installation_config_guide.pdf
Activate your adapter, it should be green. If it turns red you can enable the trace function in Adapter configuration.
Setup scan profiles
Create a custom profile and make it default.
The following profiles need to be activated
Setup KM
Finaly we need to configure some steps in the KM area.
Go to the enterprise portal page eg: http://<your-server>:<port>/irj/portal
System Administration > System Configuration > Knowledge Management > Content Management > Show Advanced Options > Virus Scan Service +
Consult the SAP Help page voor detail settings
https://help.sap.com/saphelp_nw73ehp1/helpdata/en/b8/f5af401efd8f2ae10000000a155106/frameset.htm
Now your environment is ready to scan all documents that are being uploaded to Mobile documents.
Log and configuration files:
Bowbridge configuration file: (stored on the file system in the bowbridge folder)
- bbvsa30.cfg
Enable logging:
- Edit the bbvsa30.cfg
TRACELEVEL=7
TRACEFILE= <your location > (/tmp for example)
Additional logfiles
/usr/sap/<SID>/J43/j2ee/cluster/server<n>/dev_VSI.trc