Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Automatic deployment of virus patterns to a highly secured network using the OfficeScan Update Agent

    • Updated:
    • 24 Nov 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan 11.0
    • OfficeScan XG
    • OfficeScan XG.All
    • Platform:
    • Windows 2000 Advanced Server
    • Windows 2000 Professional
    • Windows 2000 Server
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Server Core
    • Windows 2008 Standard
    • Windows 2012 Enterprise
    • Windows 2012 Web Server Edition
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit

The OfficeScan Client Application will be installed on computers in an isolated network segment with limited network connectivity and no internet access. However, instead of manually updating virus pattern files on each of the machines, an OfficeScan Update Agent can be used to automatically deploy pattern files.

Take the following considerations when implementing this type of setup:

  • OfficeScan client in isolated network must use the conventional scan method.
  • OfficeScan client in isolated network will not show up in the OfficeScan Web Console.
  • The OfficeScan Update Agent must have 2 NICs. One NIC is linked to the isolated network and the other NIC is linked to the network where the OfficeScan Server is located.
  • The NIC that is linked to the isolated network must use a Static IP address.
  • Deploy OfficeScan client to the isolated network using a client packager.

Do the following:

I. Configure and enable the Update Agent

  1. Use an OfficeScan client as an update agent for the isolated network. Install an additional NIC and configure the static IP address.
  2. Connect the NIC to the isolated network and verify if computers in that network can ping the IP address you assigned to it.
  3. Log on to the OfficeScan web console.
  4. For OfficeScan 10.6, go to Networked Computers > Client Management.
    For OfficeScan 11.0/XG, go to Agents > Agent Management.
  5. Search and highlight the OSCE client configured with two NICs and click Settings > Update Agent Settings.
  6. In the Update Agent Settings window, select the Component Updates checkbox and click Save.

II. Configuring the update source

  1. For OfficeScan 10.6, on the web console, go to Updates > Networked Computers > Update Source.
    For OfficeScan 11.0/XG, on the web console, go to Updates > Agents > Update Source.
  2. Select Customized Update Source.
  3. Click Add to add an update source list.
  4. Configure the IP range used in the isolated network.
  5. Select URL: for the Update Source and manually type the Update Source URL.




    IP_UpdateAgent = the static IP Address of the NIC connected to the isolated network.
    Client_LocalServer_Port = 5 digit port number found in the ....PCCSRV\ofcscan.ini file.

  6. Click Save > Notify All Clients.

III. Creating and deploying the OfficeScan client package

  1. On the local OfficeScan Server, go to ...\PCCSRV\Admin\Utility\ClientPackager.
  2. Open the ClnPack.exe file and fill the following fields:
    • Package Type: MSI
    • Scan Method: Conventional Scan
    • Output File: x:\path\filename (you can use any location and filename for the installer package)
  3. Use the installer package to deploy the Officescan client to target computers.

    Make sure that the OfficeScan Client Installer Package creation is done only when "I" and "II" is completed. This is because the package must contain the Update Source information when installing the OfficeScan Client Application to computers in the isolated network.
  4. Install the OfficeScan Client to target machines using the MSI package.
  5. Once complete, issue a manual update via the OfficeScan system tray icon to verify if the update is successful.
Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.