The Web server scanner must be installed on the computer that has access to the Web sites that you want to scan.
To install the Web server scanner:
1] On the computer that has access to the Web sites that you want to scan, download or copy (as binary) the installation file to a temporary directory. The file is located in the DLPDownloadHome\Symantec_DLP_11_Win\Scanners or DLPDownloadHome/Symantec_DLP_11_Lin/Scanners directory, where DLPDownloadHome is the name of the directory in which you unzipped the Symantec Data Loss Prevention software.
If you install the Web server scanner on a Windows computer, use the following file:
WebServerScanner_windows_x32_11.0.exe
Note: This scanner should only be installed on 32-bit Windows servers.
If you install the Web server scanner on a Linux computer, use the following file:
WebServerScanner_Unix_11.0.sh
2] Start the scanner installation.
3] Select the installation Destination Directory (the directory where you want the Web server scanner installed).
Click Next.
4] Select the Start Menu Folder (shortcut in the Start menu). The default is Vontu WebServer Scanner.
Click Next.
5] Enter the following connection information for the Network Discover Server:
Discover Host (IP or host name of the Network Discover Server)
Discover Port
Click Next.
6] Configure the Web server scanner by entering the following information:
Start URL
Enter the URL where the scan starts.
Include Filter
Only the paths that include all the strings specified here are scanned. Delimit entries with a comma, but do not use any spaces. Wildcards are supported.
Path Exclude Filter
Everything but the paths that contain the strings specified here are scanned. Delimit entries with a comma, but do not use any spaces. Wildcards are supported.
Click Next.
7] The scanner installs.
8] Select the Startup Mode.
While you initially test or verify that the scanner runs successfully, do not select either of these options, but start the scanner manually.
You can select one (or none) of the following options:
Install as a service on a Windows system.
Start after installation.
Click Next.
Click Finish.
9] The Web server scanner installation is complete on the scanner computer.
10] Perform any manual configurations by editing the configuration files and properties files.
11] On the Enforce Server, create a New Target for the scanner Web server type.
12] Start the scan on both the scanner computer and the Enforce Server.
Starting Web server scans :
Make sure that the scanner is installed and configured on the target computer, and a new target is added on the Enforce Server.
Then, you can start the scan.
The procedures are different for each of the following scenarios:
A] One scanner per target (first procedure).
B] Multiple scanners for one target (second procedure).
A] One scanner per target (first procedure).
To start a Web server scan with one scanner for one target:
1] Log on to the Enforce Server.
Go to Manage > Discover Scanning > Discover Targets to navigate to the list of targets.
2] Select the scan target from the target list, then click the Start icon.
3] On the scanner computer, start the Web server scanner.
Click Start > Vontu WebServer Scanner > Vontu WebServer Scanner Console.
4] The scanner starts the process of scanning data.
5] If the scan does not progress normally, you can troubleshoot it.
6] Stop and restart the scanner whenever you make changes to the configuration file. To stop the scanner, type the control-C character in the console window.
B] Multiple scanners for one target (second procedure).
To start a Web server scan with multiple scanners for one target :
1] On each of the scanner computers, start the Web server scanner.
Click Start > Vontu WebServer Scanner > Vontu WebServer Scanner Console.
Make sure that each of the scanners has started, and has posted information. Check the outgoing folder on each of the computers.
2] Log on to the Enforce Server.
Go to Manage > Discover Scanning > Discover Targets to navigate to the list of targets.
3] Select the scan target from the target list, then click the Start icon.
4] The scanner starts the process of scanning data.
5] If the scan does not progress normally, you can troubleshoot it.
6] Stop and restart the scanner whenever you make changes to the configuration file. To stop the scanner, type the control-C character in the console window.