Introduction to Metascan Client
Download as PPTX, PDF1 like1,351 views
The document provides an overview of the Metascan client, a multi-scanning solution that allows users to scan files using multiple anti-malware engines. It describes the technical features, deployment options, and licensing types available for the Metascan client, as well as how it can be used by IT administrators and software vendors. Additional resources for downloading demos and product details are also included.
![What is Metascan?
Multi-scanning engine
An API driven server application that allows customers to
incorporate multiple AV engine scanning technologies into
their security architecture
Supports 0 to 30 anti-malware engines [and growing!]
Simultaneously scans files with all engines
Scan directories, files, archives, buffers, and boot sector
Automatic online definition updates or manual offline updates](https://image.slidesharecdn.com/introduction-metascan-client-130425184901-phpapp02/85/Introduction-to-Metascan-Client-4-320.jpg)
![What is Metascan?
Multi-scanning engine
Flexible and scalable API driven solution
Many programming Interfaces –
C++
Java
PHP
C#/ASP.NET
RESTful (Web API)/HTTP
CLI[command line interface]
Analyzes files locally on a single server or remotely
accesses files from Windows, Macintosh, or Linux
systems](https://image.slidesharecdn.com/introduction-metascan-client-130425184901-phpapp02/85/Introduction-to-Metascan-Client-5-320.jpg)
![Metascan Client Features
Offline Deployment
Multiple Metascan
Clients connected to a
single Metascan server.
The client is run on the
endpoints. It connects to
the Metascan server and
scans the contents of the
endpoint.
The Metascan server is
offline [not connected to
the internet] and updated
manually](https://image.slidesharecdn.com/introduction-metascan-client-130425184901-phpapp02/85/Introduction-to-Metascan-Client-10-320.jpg)
Introduction to Metascan Client
- 1. Introduction to Metascan® Client TonyBerning ProductManager [email protected]
- 2. Agenda Overview of Metascan Metascan Client Overview Packages Available Metascan Remote Client Licenses Metascan Client and Metascan Metascan Client Demo Further Resources
- 3. Overview of Metascan Multi-scanning solution
- 4. What is Metascan? Multi-scanning engine An API driven server application that allows customers to incorporate multiple AV engine scanning technologies into their security architecture Supports 0 to 30 anti-malware engines [and growing!] Simultaneously scans files with all engines Scan directories, files, archives, buffers, and boot sector Automatic online definition updates or manual offline updates
- 5. What is Metascan? Multi-scanning engine Flexible and scalable API driven solution Many programming Interfaces – C++ Java PHP C#/ASP.NET RESTful (Web API)/HTTP CLI[command line interface] Analyzes files locally on a single server or remotely accesses files from Windows, Macintosh, or Linux systems
- 6. Metascan Client Easy endpoint scanning with multiple engines
- 7. What is Metascan Client? Endpointscanning A simple executable for scanning Windows systems Nothing is installed on the endpoint Can be run from a USB, CD or DVD or local hard drive No coding required Scan files, folders, drives, and active processes in memory and files associated with active processes Requires a Metascan server
- 8. Metascan Client Features – Technical details File processing sequence:
- 9. Metascan Client Features Online Deployment Multiple Metascan Clients connected to a single Metascan server The client is run from a USB, CD or DVD, or local drive. It connects to the Metascan server and scans the contents of the endpoint Updates are automatically downloaded from the internet
- 10. Metascan Client Features Offline Deployment Multiple Metascan Clients connected to a single Metascan server. The client is run on the endpoints. It connects to the Metascan server and scans the contents of the endpoint. The Metascan server is offline [not connected to the internet] and updated manually
- 11. How should you use Metascan Client? IT Administrators managing endpoints in their network VPN Authentication Process Schedule Scans IT Troubleshooting Independent software vendors seeking to proactively address issues with new binaries False positives Accidental infections from open source or third party libraries Metascan can be integrated as part of the build process Software releases are checked automatically
- 12. Metascan Client Packages Metascan Client Standalone Executable File or Process Scanning GUI or CLI Windows Only Metascan Client Connector Windows, Mac, Linux versions File Scanning Functionality CLI Metascan Client SDK Windows Only Process Scanning Functionality
- 13. Metascan Remote Client Licenses Two types of licensing, concurrent and non- concurrent Concurrent restricts the number of remote clients connected at the same time Non-concurrent restricts the number of unique remote clients that have ever connected to the Metascan server Every Metascan Server license includes 1 concurrent remote client license
- 14. Metascan Client and Metascan Server Metascan Client is included in Metascan 3.7.1 Included download page allows users to download a customized Metascan Client tied to that Metascan Server Administrators can edit Metascan Client configuration on the Metascan Server and generate the download package Download is a self-extracting application that runs immediately from the download directory
- 15. Metascan Client Demo Available for download from http://www.opswat.com/metascan-client Demo is restricted to the ‘lightest’ scan level. Full system and custom scans are disabled. Scans files using the Metascan Cloud server Full-featured Metascan Client can be trialed by downloading and installing a trial version of Metascan from https://portal.opswat.com
- 16. Further Resources Metascan Client product details and demo available at http://www.opswat.com/metascan-client Metascan Server demo installations (including Metascan Client) available at https://portal.opswat.com (requires creation of a free OPSWAT Portal account) For further questions on Metascan Client, contact [email protected]
Editor's Notes
- #2: 1 min
- #3: <why multiscanning>Growth of MalwareMore engines are better than 1OutbreaksVulnerabilities in engines <technology overview of Metascan>What is Metascanwhy use MetascanCurrent feature set <different implementations of Metascan>Out of box solution: MDTADemo of metascanonline.com (local box with wireless access point)Endpoint client (MD4SA)Demo of MD4SA <Managing Metascan>Introduction to the management station
- #4: What is Metascan online? It is just slightly customized version of Metascan. Of course, it is not all of Metascan and lets dig into further to know more about MetascanOnMetascan is multiscanning solution with different layers and various API which overcome the challenge of using multiple antivirous. Flexible integration options from low level integration to out-of-box solution such as slightly modified version of Metascan.