Installing and using Trial-ENSLTP10.2.2 for Ubuntu16.04 on Azure

[Former Member]

This is how I installed and tested ENSLTP(Trial version 10.2.2) for Ubuntu on Azure.

Azure上のUbuntuに、Trial版のENSLTPをインストールしました。

※なお、サポートされている環境については、KBを参照してください。

その大まかな流れをわかっていただければと思います。

なお、管理サーバ（ePO）を使わない、スタンドアロンの場合です。

=>LOGIN / ログイン

===

Welcome to Ubuntu 16.04.5 LTS (GNU/Linux 4.15.0-1037-azure x86_64)

* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage

Get cloud support with Ubuntu Advantage Cloud Guest:
http://www.ubuntu.com/business/services/cloud

0 packages can be updated.
0 updates are security updates.

The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.

To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$ sudo su -
root@ubuntu1604:~#
root@ubuntu1604:~#
root@ubuntu1604:~# date
Wed Mar 6 08:02:44 UTC 2019
root@ubuntu1604:~#
root@ubuntu1604:~# uname -a
Linux ubuntu1604 4.15.0-1037-azure #39~16.04.1-Ubuntu SMP Tue Jan 15 17:20:47 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
root@ubuntu1604:~#
root@ubuntu1604:~# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:0d:3a:52:62:0d
inet addr:10.0.0.7 Bcast:10.0.0.255 Mask:255.255.255.0
inet6 addr: fe80::20d:3aff:fe52:620d/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4497 errors:0 dropped:0 overruns:0 frame:0
TX packets:2749 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4199596 (4.1 MB) TX bytes:576855 (576.8 KB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:164 errors:0 dropped:0 overruns:0 frame:0
TX packets:164 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:12104 (12.1 KB) TX bytes:12104 (12.1 KB)

root@ubuntu1604:~#
root@ubuntu1604:~# id
uid=0(root) gid=0(root) groups=0(root)
root@ubuntu1604:~#

=> Confirming resource for install /　インストール資源を確認する。

===

root@ubuntu1604:~#
root@ubuntu1604:~# su - mcafee
mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$ pwd
/home/mcafee
mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$ ls
ENSL1022_Eval.zip
mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$

=> Installing unzip to decompress resources / 資源解凍の為にunzipをインストールする。

===

mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$ unzip ENSL1022_Eval.zip
The program 'unzip' is currently not installed. You can install it by typing:
sudo apt install unzip
mcafee@ubuntu1604:~$
mcafee@ubuntu1604:~$ exit
logout
root@ubuntu1604:~#
root@ubuntu1604:~# unzip /home/mcafee/ENSL1022_Eval.zip
The program 'unzip' is currently not installed. You can install it by typing:
apt install unzip
root@ubuntu1604:~#
root@ubuntu1604:~#
root@ubuntu1604:~# apt install unzip
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
zip
The following NEW packages will be installed:
unzip
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 158 kB of archives.
After this operation, 530 kB of additional disk space will be used.
Get:1 http://azure.archive.ubuntu.com/ubuntu xenial/main amd64 unzip amd64 6.0-20ubuntu1 [158 kB]
Fetched 158 kB in 0s (1,532 kB/s)
Selecting previously unselected package unzip.
(Reading database ... 53376 files and directories currently installed.)
Preparing to unpack .../unzip_6.0-20ubuntu1_amd64.deb ...
Unpacking unzip (6.0-20ubuntu1) ...
Processing triggers for mime-support (3.59ubuntu1) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up unzip (6.0-20ubuntu1) ...
root@ubuntu1604:~#

=>Decompressing resource / 資源を解凍する。

===

root@ubuntu1604:~#
root@ubuntu1604:~# unzip /home/mcafee/ENSL1022_Eval.zip
Archive: /home/mcafee/ENSL1022_Eval.zip
creating: ENSL1022_Eval/
inflating: ENSL1022_Eval/ensl-tp_1022_rn_0-00_en-us.pdf
inflating: ENSL1022_Eval/ensl-tp_1022_rn_0-16_ja-jp.pdf
extracting: ENSL1022_Eval/ISecTP-10.2.2-1098-Eval-standalone.tar.gz
creating: ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)/
inflating: ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)/MFEma.x86_64.deb
inflating: ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)/MFEma.x86_64.rpm
inflating: ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)/MFErt.i686.deb
inflating: ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)/MFErt.i686.rpm
inflating: ENSL1022_Eval/MCAFEE_LLC.PUB
root@ubuntu1604:~#
root@ubuntu1604:~# pwd
/root

root@ubuntu1604:~# ls
ENSL1022_Eval
root@ubuntu1604:~# cd ENSL1022_Eval/
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecTP-10.2.2-1098-Eval-standalone.tar.gz MCAFEE_LLC.PUB
ensl-tp_1022_rn_0-16_ja-jp.pdf MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
root@ubuntu1604:~/ENSL1022_Eval#

=>Importing certificate / 証明書をインポートする。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# gpg --import MCAFEE_LLC.PUB
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 7A9DA814: public key "McAfee LLC" imported
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)

root@ubuntu1604:~/ENSL1022_Eval#

root@ubuntu1604:~/ENSL1022_Eval#

==> Decompressing resources / 資源を解凍する。

===

root@ubuntu1604:~/ENSL1022_Eval# tar zxvf ISecTP-10.2.2-1098-Eval-standalone.tar.gz
./install-isectp.sh
./ISecTP-10.2.2-1098-standalone.linux.tar.gz
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecTP-10.2.2-1098-Eval-standalone.tar.gz MCAFEE_LLC.PUB
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecTP-10.2.2-1098-standalone.linux.tar.gz
install-isectp.sh MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# tar -zxvf ISecTP-10.2.2-1098-standalone.linux.tar.gz
./ISecTP-10.2.2-1098.x86_64.rpm
./ISecTP-10.2.2-1098.deb
license.txt
install-esp.sh
ESP-10.2.2-1105-Full.linux.tar.gz
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf install-isectp.sh ISecTP-10.2.2-1098.x86_64.rpm
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecTP-10.2.2-1098.deb license.txt
ESP-10.2.2-1105-Full.linux.tar.gz ISecTP-10.2.2-1098-Eval-standalone.tar.gz MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
install-esp.sh ISecTP-10.2.2-1098-standalone.linux.tar.gz MCAFEE_LLC.PUB
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# tar zxvf ESP-10.2.2-1105-Full.linux.tar.gz
./ISecRt-10.2.2-1105.linux.tar.gz
./ISecESP-10.2.2-1105.linux.tar.gz
./ISecESPFileAccess-10.2.2-1105.linux.tar.gz
./ISecGRt-10.2.2-1105.linux.tar.gz
./McAfeeFMP-10.2.2-1105.linux.tar.gz
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecESPFileAccess-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098.x86_64.rpm
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecGRt-10.2.2-1105.linux.tar.gz license.txt
ESP-10.2.2-1105-Full.linux.tar.gz ISecRt-10.2.2-1105.linux.tar.gz MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
install-esp.sh ISecTP-10.2.2-1098.deb McAfeeFMP-10.2.2-1105.linux.tar.gz
install-isectp.sh ISecTP-10.2.2-1098-Eval-standalone.tar.gz MCAFEE_LLC.PUB
ISecESP-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098-standalone.linux.tar.gz
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecESP-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098-Eval-standalone.tar.gz
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecESPFileAccess-10.2.2-1105.deb ISecTP-10.2.2-1098-standalone.linux.tar.gz
ESP-10.2.2-1105-Full.linux.tar.gz ISecESPFileAccess-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098.x86_64.rpm
install-esp.sh ISecESPFileAccess-10.2.2-1105.x86_64.rpm license.txt
install-isectp.sh ISecGRt-10.2.2-1105.linux.tar.gz MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
ISecESP-10.2.2-1105.deb ISecRt-10.2.2-1105.linux.tar.gz McAfeeFMP-10.2.2-1105.linux.tar.gz
ISecESP-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098.deb MCAFEE_LLC.PUB
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# tar zxvf ISecRt-10.2.2-1105.linux.tar.gz
./ISecRt-10.2.2-1105.x86_64.rpm
./ISecRt-10.2.2-1105.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#

==> Sigining to debfiles / debファイルに署名する。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls | grep deb
ISecESP-10.2.2-1105.deb
ISecESPFileAccess-10.2.2-1105.deb
ISecRt-10.2.2-1105.deb
ISecTP-10.2.2-1098.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls | grep deb | grep ESP-
ISecESP-10.2.2-1105.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls | grep deb | grep ESPF
ISecESPFileAccess-10.2.2-1105.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls | grep deb | grep Rt
ISecRt-10.2.2-1105.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls | grep deb | grep TP
ISecTP-10.2.2-1098.deb
root@ubuntu1604:~/ENSL1022_Eval#

==> Installing dpkg-sig command / dpkg-sig コマンドをインストールする。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# apt install dpkg-sig
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
libconfig-file-perl
Suggested packages:
ssh libterm-readkey-perl
The following NEW packages will be installed:
dpkg-sig libconfig-file-perl
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 44.4 kB of archives.
After this operation, 215 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://azure.archive.ubuntu.com/ubuntu xenial/universe amd64 libconfig-file-perl all 1.50-3 [9,722 B]
Get:2 http://azure.archive.ubuntu.com/ubuntu xenial/universe amd64 dpkg-sig all 0.13.1+nmu2 [34.7 kB]
Fetched 44.4 kB in 1s (24.6 kB/s)
Selecting previously unselected package libconfig-file-perl.
(Reading database ... 53394 files and directories currently installed.)
Preparing to unpack .../libconfig-file-perl_1.50-3_all.deb ...
Unpacking libconfig-file-perl (1.50-3) ...
Selecting previously unselected package dpkg-sig.
Preparing to unpack .../dpkg-sig_0.13.1+nmu2_all.deb ...
Unpacking dpkg-sig (0.13.1+nmu2) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up libconfig-file-perl (1.50-3) ...
Setting up dpkg-sig (0.13.1+nmu2) ...
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# history
1 date
2 uname -a
3 ifconfig -a
4 id
5 su - mcafee
6 unzip /home/mcafee/ENSL1022_Eval.zip
7 apt install unzip
8 unzip /home/mcafee/ENSL1022_Eval.zip
9 pwd
10 cd /home/mcafee
11 ls
12 pwd
13 ls
14 cd /root
15 ls
16 cd ENSL1022_Eval/
17 ls
18 gpg --import MCAFEE_LLC.PUB
19 tar zxvf ISecTP-10.2.2-1098-Eval-standalone.tar.gz
20 ls
21 tar -zxvf ISecTP-10.2.2-1098-standalone.linux.tar.gz
22 ls
23 tar zxvf ESP-10.2.2-1105-Full.linux.tar.gz
24 ls
25 history
26 tar zxvf ESP-10.2.2-1105-Full.linux.tar.gz
27 tar zxvf ISecESP-10.2.2-1105.linux.tar.gz
28 tar zxvf ISecESPFileAccess-10.2.2-1105.linux.tar.gz
29 ls
30 tar zxvf ISecRt-10.2.2-1105.linux.tar.gz
31 ls | grep deb
32 ls | grep deb | grep ESP-
33 ls | grep deb | grep ESPF
34 ls | grep deb | grep Rt
35 ls | grep deb | grep TP
36 dpkg-sig -verify
37 apt install dpkg-sig
38 history
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# !36 `!32`
dpkg-sig -verify `ls | grep deb | grep ESP-`
Processing ISecESP-10.2.2-1105.deb...
GOODSIG _gpgorigin 93596A314235C784B87F1CE78952BFA77A9DA814 1506343991
root@ubuntu1604:~/ENSL1022_Eval#

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# dpkg-sig -verify `ls | grep deb | grep ESPF`
Processing ISecESPFileAccess-10.2.2-1105.deb...
GOODSIG _gpgorigin 93596A314235C784B87F1CE78952BFA77A9DA814 1506343992
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# dpkg-sig -verify `ls | grep deb | grep Rt`
Processing ISecRt-10.2.2-1105.deb...
GOODSIG _gpgorigin 93596A314235C784B87F1CE78952BFA77A9DA814 1506343995
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# dpkg-sig -verify `ls | grep deb | grep TP`
Processing ISecTP-10.2.2-1098.deb...
GOODSIG _gpgorigin 93596A314235C784B87F1CE78952BFA77A9DA814 1506429889
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# pwd
/root/ENSL1022_Eval
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecESPFileAccess-10.2.2-1105.deb ISecTP-10.2.2-1098-Eval-standalone.tar.gz
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecESPFileAccess-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098-standalone.linux.tar.gz
ESP-10.2.2-1105-Full.linux.tar.gz ISecESPFileAccess-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.x86_64.rpm
install-esp.sh ISecGRt-10.2.2-1105.linux.tar.gz license.txt
install-isectp.sh ISecRt-10.2.2-1105.deb MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
ISecESP-10.2.2-1105.deb ISecRt-10.2.2-1105.linux.tar.gz McAfeeFMP-10.2.2-1105.linux.tar.gz
ISecESP-10.2.2-1105.linux.tar.gz ISecRt-10.2.2-1105.x86_64.rpm MCAFEE_LLC.PUB
ISecESP-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.deb
root@ubuntu1604:~/ENSL1022_Eval#

==> Installing McAfee Agent / McAfee Agent をインストールする。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# cd MA-*
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)# ls
MFEma.x86_64.deb MFEma.x86_64.rpm MFErt.i686.deb MFErt.i686.rpm
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)#

root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)# dpkg -i MFErt.i686.deb
Selecting previously unselected package mfert.
(Reading database ... 53433 files and directories currently installed.)
Preparing to unpack MFErt.i686.deb ...
Available space : 27983412 KB
Required size : 6144 KB
Unpacking mfert (2.0) ...
Setting up mfert (2.0) ...
Writing conf file ...
Updating linker cache ...
Runtime installed successfully
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)#
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)#
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)# dpkg -i MFEma.x86_64.deb
Selecting previously unselected package mfecma.
(Reading database ... 53483 files and directories currently installed.)
Preparing to unpack MFEma.x86_64.deb ...
Available space : 27977260 KB
Required size : 27648 KB
Creating user(mfe) and group (mfe)
sent invalidate(passwd) request, exiting
sent invalidate(group) request, exiting
sent invalidate(group) request, exiting
sent invalidate(passwd) request, exiting
sent invalidate(group) request, exiting
sent invalidate(passwd) request, exiting
sent invalidate(group) request, exiting
Stopping dependent services...
******************************
stopping ma service...
Unpacking mfecma (5.0.5) ...
Setting up mfecma (5.0.5) ...
Registering the start up script...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
update-rc.d: warning: stop runlevel arguments (2 3 4 5) do not match ma Default-Stop values (none)
Updating linker cache...
Backing up signature files
Restoring signature files
Deleting temporary directories
starting ma service...

Starting McAfee Agent services... [ OK ]
Starting McAfee common services... [ OK ]
Starting McAfee Agent compat service. [ OK ]

Starting dependent services...
no crontab for root
MA health check cron job registered
Agent Successfully Installed
Processing triggers for systemd (229-4ubuntu21.15) ...
Processing triggers for ureadahead (0.100.0-19) ...
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)#

root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)# ls
MFEma.x86_64.deb MFEma.x86_64.rpm MFErt.i686.deb MFErt.i686.rpm
root@ubuntu1604:~/ENSL1022_Eval/MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)# cd ..
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecESPFileAccess-10.2.2-1105.deb ISecTP-10.2.2-1098-Eval-standalone.tar.gz
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecESPFileAccess-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098-standalone.linux.tar.gz
ESP-10.2.2-1105-Full.linux.tar.gz ISecESPFileAccess-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.x86_64.rpm
install-esp.sh ISecGRt-10.2.2-1105.linux.tar.gz license.txt
install-isectp.sh ISecRt-10.2.2-1105.deb MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
ISecESP-10.2.2-1105.deb ISecRt-10.2.2-1105.linux.tar.gz McAfeeFMP-10.2.2-1105.linux.tar.gz
ISecESP-10.2.2-1105.linux.tar.gz ISecRt-10.2.2-1105.x86_64.rpm MCAFEE_LLC.PUB
ISecESP-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#

==> Installing ENSLTP / ENSLTP をインストールする。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ./install-isectp.sh

BY DOWNLOADING, INSTALLING, COPYING, ACCESSING OR USING THIS SOFTWARE, YOU AGREE TO THE TERMS OF THIS END USER LICENSE AGREEMENT. IF YOU ARE ACCEPTING
THESE TERMS ON BEHALF OF ANOTHER PERSON OR COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE FULL AUTHORITY TO BIND THAT PERSON,
COMPANY OR LEGAL ENTITY TO THESE TERMS.

~~~~~~~

routine operational communications) shall be sent to:
the applicable entity address in Section 1(f) of this Agreement addressed to Attention: Legal Department.

McAfee Corporate End User License Agreement (April 2017)

Enter accept or reject: accept
Detected deb based distribution
Installing ISecTP as it is currently not installed
install-esp.sh execution time: Wed Mar 6 08:19:22 UTC 2019
Detected deb based distribution
MFEcma(x86_64) 5.0.5.658 is installed.
Installing ISecRt as it is currently not installed
Installing ISecESPFileAccess as it is currently not installed
Installing ISecESP as it is currently not installed
Installing ISecGRt as it is currently not installed
Installing McAfeeFMP as it is currently not installed
Selecting previously unselected package isecrt.
(Reading database ... 53834 files and directories currently installed.)
Preparing to unpack .../ISecRt-10.2.2-1105.deb ...
Unpacking isecrt (10.2.2-1105) ...
Setting up isecrt (10.2.2-1105) ...
Successfully installed ISecRt-10.2.2-1105.deb
Selecting previously unselected package isecesp.
(Reading database ... 53888 files and directories currently installed.)
Preparing to unpack .../ISecESP-10.2.2-1105.deb ...
Validating that McAfee Agent 5.0.5.658 or above is installed
Unpacking isecesp (10.2.2-1105) ...
Setting up isecesp (10.2.2-1105) ...
Successfully installed ISecESP-10.2.2-1105.deb
Selecting previously unselected package isecespfileaccess.
(Reading database ... 53939 files and directories currently installed.)
Preparing to unpack .../ISecESPFileAccess-10.2.2-1105.deb ...
Unpacking isecespfileaccess (10.2.2-1105) ...
Setting up isecespfileaccess (10.2.2-1105) ...
Successfully installed ISecESPFileAccess-10.2.2-1105.deb
Selecting previously unselected package isecgrt.
(Reading database ... 53981 files and directories currently installed.)
Preparing to unpack .../ISecGRt-10.2.2-1105.deb ...
Unpacking isecgrt (10.2.2-1105) ...
Setting up isecgrt (10.2.2-1105) ...
Successfully installed ISecGRt-10.2.2-1105.deb
Selecting previously unselected package mcafeefmp.
(Reading database ... 53994 files and directories currently installed.)
Preparing to unpack .../McAfeeFMP-10.2.2-1105.deb ...
Unpacking mcafeefmp (10.2.2-1105) ...
Setting up mcafeefmp (10.2.2-1105) ...
Successfully installed McAfeeFMP-10.2.2-1105.deb
Selecting previously unselected package isectp.
(Reading database ... 54021 files and directories currently installed.)
Preparing to unpack .../ISecTP-10.2.2-1098.deb ...
Validating that McAfee Agent 5.0.3-272 or above is installed
Unpacking isectp (10.2.2-1098) ...
Setting up isectp (10.2.2-1098) ...
Processing triggers for man-db (2.7.5-1) ...
Successfully installed ISecTP-10.2.2-1098.deb
Schedule for Default DAT and Engine update task was successfully added
Enabling OAS, please wait for some time
OAS was successfully enabled
ISecTP is ready for use now
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ps -ef | grep isec
root 7082 1 0 08:19 ? 00:00:00 /opt/isec/ens/esp/bin/isecespd
root 7614 1 2 08:20 ? 00:00:02 /opt/isec/ens/threatprevention/bin/isectpd
root 7857 7614 84 08:20 ? 00:01:21 /opt/isec/ens/threatprevention/bin/isectpd
root 7955 7857 0 08:21 ? 00:00:00 /opt/isec/ens/threatprevention/bin/isectpd
root 7965 7857 2 08:21 ? 00:00:00 /opt/isec/ens/threatprevention/bin/isectpd
root 8008 2506 0 08:21 pts/0 00:00:00 grep --color=auto isec
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# date
Wed Mar 6 08:21:55 UTC 2019
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#

==> Testing ENSLTP On-Access-Scanning by downloading eicar file

        / eicarテストファイルでENSLTP（のオンアクセススキャン）をテストする。

===

root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# curl -OL http://2016.eicar.org/download/eicar.com.txt
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 68 100 68 0 0 33 0 0:00:02 0:00:02 --:--:-- 33
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval# ls
ensl-tp_1022_rn_0-00_en-us.pdf ISecESPFileAccess-10.2.2-1105.deb ISecTP-10.2.2-1098-Eval-standalone.tar.gz
ensl-tp_1022_rn_0-16_ja-jp.pdf ISecESPFileAccess-10.2.2-1105.linux.tar.gz ISecTP-10.2.2-1098-standalone.linux.tar.gz
ESP-10.2.2-1105-Full.linux.tar.gz ISecESPFileAccess-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.x86_64.rpm
install-esp.sh ISecGRt-10.2.2-1105.linux.tar.gz license.txt
install-isectp.sh ISecRt-10.2.2-1105.deb MA-GENLNX 5.0.5 Build 658 Package #1 (ENU-LICENSED-RELEASE-MAIN)
ISecESP-10.2.2-1105.deb ISecRt-10.2.2-1105.linux.tar.gz McAfeeFMP-10.2.2-1105.linux.tar.gz
ISecESP-10.2.2-1105.linux.tar.gz ISecRt-10.2.2-1105.x86_64.rpm MCAFEE_LLC.PUB
ISecESP-10.2.2-1105.x86_64.rpm ISecTP-10.2.2-1098.deb
root@ubuntu1604:~/ENSL1022_Eval#
root@ubuntu1604:~/ENSL1022_Eval#

==> Confirming log file / ログファイルを確認する。

===
root@ubuntu1604:~/ENSL1022_Eval# cd /opt
root@ubuntu1604:/opt# ls
isec McAfee
root@ubuntu1604:/opt# cd McAfee/
root@ubuntu1604:/opt/McAfee# ls
agent cma fmp isecgrt runtime shared
root@ubuntu1604:/opt/McAfee# cd ../isec
root@ubuntu1604:/opt/isec# ls
ens runtime
root@ubuntu1604:/opt/isec# cd ens
root@ubuntu1604:/opt/isec/ens# ls
esp threatprevention
root@ubuntu1604:/opt/isec/ens# cd threatprevention/
root@ubuntu1604:/opt/isec/ens/threatprevention# ls
3rdpartylicenses.txt bin config lib license.txt var
root@ubuntu1604:/opt/isec/ens/threatprevention# cd var
root@ubuntu1604:/opt/isec/ens/threatprevention/var# ls
engine isecav.log isecoasmgr.log isecscanactionmgr isecscanfactory isectpd migrateISecTP.log prefs.xml vsel
etc isecoasmgr isecodscollector isecscanactionmgr.log isecscanfactory.log isectpd.log odsreport tmp
root@ubuntu1604:/opt/isec/ens/threatprevention/var# ls -ltra
total 112
drwx------ 2 root root 4096 Sep 26 2017 vsel
drwxr-xr-x 2 root root 4096 Sep 26 2017 odsreport
drwx------ 2 root root 4096 Sep 26 2017 isectpd
drwx------ 2 root root 4096 Sep 26 2017 isecscanfactory
drwx------ 2 root root 4096 Sep 26 2017 isecscanactionmgr
drwx------ 2 root root 4096 Sep 26 2017 isecodscollector
drwx------ 2 root root 4096 Sep 26 2017 isecoasmgr
drwx------ 5 root root 4096 Mar 6 08:19 engine
drwxr-xr-x 6 root root 4096 Mar 6 08:20 ..
-rw------- 1 root root 209 Mar 6 08:20 migrateISecTP.log
drwx------ 2 root root 4096 Mar 6 08:20 etc
drw------- 2 root root 4096 Mar 6 08:20 tmp
-rw------- 1 root root 37933 Mar 6 08:21 prefs.xml
-rw------- 1 root root 935 Mar 6 08:21 isecscanfactory.log
-rw------- 1 root root 2856 Mar 6 08:21 isectpd.log
-rw------- 1 root root 2946 Mar 6 08:21 isecav.log
drwxr-xr-x 12 root root 4096 Mar 6 08:21 .
-rw------- 1 root root 309 Mar 6 08:24 isecoasmgr.log
-rw------- 1 root root 448 Mar 6 08:24 isecscanactionmgr.log
root@ubuntu1604:/opt/isec/ens/threatprevention/var#

root@ubuntu1604:/opt/isec/ens/threatprevention/var# date
Wed Mar 6 08:24:57 UTC 2019
root@ubuntu1604:/opt/isec/ens/threatprevention/var#

root@ubuntu1604:/opt/isec/ens/threatprevention/var# tail isecoasmgr.log
Mar 06 08:21:37 ubuntu1604 INFO OASManager [7965] Starting OAS Manager
Mar 06 08:24:02 ubuntu1604 ERROR AMOASScanner [7965] Infection caught File Name: /root/ENSL1022_Eval/eicar.com.txt File Size: 68 Infection Name: EICAR test file Time: 1551860642 Process Name: /usr/bin/curl User Name: root Profile Type: 1
root@ubuntu1604:/opt/isec/ens/threatprevention/var#
root@ubuntu1604:/opt/isec/ens/threatprevention/var#
root@ubuntu1604:/opt/isec/ens/threatprevention/var#

root@ubuntu1604:/opt/isec/ens/threatprevention/var# cat isecscanactionmgr.log
Mar 06 08:21:37 ubuntu1604 INFO ScanActionMgr [7955] Scan Action Manager is starting
Mar 06 08:24:02 ubuntu1604 INFO AMScanActionManager [7955] Cleaning failed for the file: /root/ENSL1022_Eval/eicar.com.txt
Mar 06 08:24:02 ubuntu1604 INFO AMScanActionManager [7955] Failed to perform primary action trying secondary action
Mar 06 08:24:02 ubuntu1604 INFO AMScanActionManager [7955] Successfully deleted the file: /root/ENSL1022_Eval/eicar.com.txt
root@ubuntu1604:/opt/isec/ens/threatprevention/var#
root@ubuntu1604:/opt/isec/ens/threatprevention/var#
root@ubuntu1604:/opt/isec/ens/threatprevention/var#

■もしこのエントリがお役に立てたなら、ぜひ「Kudo (イイネ！)」を押してくださいね。

■If this entry helps you, please click [Kudo] !