Virus Control for Novell Netware (FireBreak)

FireBreak is Norman’s server-based antivirus program for Novell’s NetWare operating system. It ensures that all files stored or accessed from the NetWare server are checked for computer viruses, trojans, and other malicious code - or malware as a collective term. It is invisible to the users and is designed to work with NetWare in a way that takes advantage of both products’ top-notch qualities.

On-access file scanning

Norman SandBox - a revolutionary way to detect new and unknown malware

Multi-CPU and Cluster support

Managing FireBreak

Most of the administrative tasks for FireBreak can be performed in the FireBreak object in the eDirectory (NDS), such as configuration of auto-updates, messaging and eDirectory options. Other tasks, like monitoring real-time actions can be done both at the server console and by browsing in log files.

FireBreak’s console menus follow the conventions for NetWare’s “look and feel", including implementation of “first letter" selection in the menus.

We have also developed a ConsoleOne snap-in module, as we believe that ConsoleOne represents a simplified and consequently more user-friendly approach for configuration and administration of the FireBreak installation.

Scanning

Norman FireBreak offers two types of scanning:

On-access scanning is continuous scanning of files accessed on the server. So if a user tries to copy an infected file to or from your server, infect a file on the server, or run an infected file from the server, Norman FireBreak will detect the file and repair, quarantine, delete, or ignore it. These actions are all configurable. Both NSS and Classic NetWare volumes are supported. This can be done with or without Norman SandBox.
On-demand scanning is used for scanning selected parts or the entire server for possible viruses at your request. This can be done with or without Norman SandBox.

Multi-CPU support

Many large companies use servers with multiple CPUs to increase performance. This has previously been a problem for many antivirus vendors. FireBreak can run perfectly well in a multi-CPU environment.

Clusters

Network servers are often connected to form one or more clusters, to ease administration, increase capacity, reduce load, etc. FireBreak is fully cluster compatible.

FireBreak NetWare WAN

Another strength of Norman FireBreak is Enterprise-wide functioning. If two or more NetWare servers are running Norman FireBreak, one of them can be configured to be a communications hub. The hub can then operate as a central monitoring station, enabling more efficient WAN administration.

For configuration purposes, a configuration object for Norman FireBreak is created in an eDirectory (NDS). From this configuration object all the Norman FireBreak objects can be configured from one central location, thus reducing the administrative burden for the administrator.

Messaging

The messaging module in FireBreak supports messages and alarms received from Norman Virus Control. All messages and alarms can be logged, printed, forwarded as SNMP traps, or broadcasted as NetWare alerts.

Sending messages over SMTP (email)

All messages and alarms can now be sent to selected recipients via email.

Protocol support

FireBreak automatically detects and fully supports the protocol used in its operating environment. It does not matter whether TCP/IP, IPX or both protocols are being used.

Proactive antivirus protection

Unique proactive technology to provide customers with the best possible protection against malicious software

This powerful and unmatched security solution utilizes Norman DNA Matching, Norman Exploit Detection and Norman SandBox®, the world renowned technology to protect businesses.

Norman SandBox® is a revolutionary way to detect new and unknown malware in a proactive way. It is a virtual environment where programs may perform in safe surroundings without interferring with the real processes, program files and network environment. If a program performs actions that the SandBox regards as suspicious, the program is "tagged" as a malicious program.

Norman DNA Matching is a proactive technology and method for identifying the viral profile of all kinds of malicious programs. Inherited or reused programming codes are recognized in new malware, providing unique protection against threats. New malware that looks like a mutation of a previously known malware, is most probably malware of the same family and identified as malicious by Norman DNA Matching.

Norman Exploit Detection is a technology for detecting malware exploiting vulnerabilities in widely used document types like, OLE2 (Office documents), MDB (Access), WMF (Windows Media File), JPEG (pictures), RIFF (Windows media meta-format) and SWF (Flash). The technology allows for more to be added whenever they are being abused by malware. Norman Exploit Detection does not depend of awareness and analysis of a particular vulnerability.

Certifications & Awards

System requirements

NetWare versions 4.11 or later
- NetWare 3.11, 3.12, 3.2 and 4.10 are not supported.
- For NetWare 4, support pack 9 is required.
- For NetWare 5.0, support pack 6 is required.
- For NetWare 5.1 and 6.0 the latest support packs are recommended.
  - On NetWare 5.1 we strongly recommend support pack 6 and on NetWare 6.0 we strongly recommend support pack 3.
    NetWare support packs are available from Novell at http://support.novell.com
NDS v6 or later including eDirectory
ConsoleOne v1.3.x
NseNW v5.40 or later with corresponding virus definition files.