Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually applying the latest pattern file to InterScan Web Security Virtual Appliance (IWSVA)

    • Updated:
    • 19 Apr 2019
    • Product/Version:
    • InterScan Web Security Virtual Appliance 5.6
    • InterScan Web Security Virtual Appliance 6.0
    • InterScan Web Security Virtual Appliance 6.5
    • Platform:
    • N/A N/A
Summary

Official Pattern Release (OPR)

The Official Pattern Release or OPR is Trend Micro's latest compilation of patterns for identified viruses. It is guaranteed to have passed a series of critical tests to ensure that customers get optimum protection from the latest virus threats.

The OPR is automatically downloaded via direct Internet connection. You may apply the OPR manually in case you are unable to download the latest pattern files automatically.

Controlled Pattern Release (CPR)

The CPR is a pre-release version of a Trend Micro virus protection database. It is designed to provide you with advanced protection against the latest computer viruses, and to serve as an emergency patch during a virus threat or outbreak. This has received only preliminary testing and has not yet been approved for release in accordance with Trend Micro's quality assurance procedures.

You need to apply the CPR manually.

Details
Public

To apply the OPR or CPR:

  1. Go to the Trend Micro Download Center and click All Pattern Files.
  2. Choose the OPR or CPR to apply, and then download the lpt[xxx].zip file to your local machine.
  3. Open WinSCP.
  4. Select SCP as the File protocol.
  5. Enter the IWSVA hostname or IP in the Host name field.
  6. Type the username and password in the User name and Password fields.
  7. Copy the lpt[xxx].zip file to the /tmp folder of IWSVA.
  8. Log in to the IWSVA CLI.
  9. Go to the /etc/init.d directory and stop IWSVA services using these commands:

    > cd /etc/init.d
    > ./IWSS stop

  10. Go back to the /tmp directory and extract the lpt[xxx].zip file to the /etc/iscan directory by using these commands:

    > cd /tmp
    > unzip lpt[xxx].zip -d /etc/iscan

  11. Start the IWSVA services by running these commands:

    > cd /etc/init.d
    > ./IWSS start

  12. Run this command to verify the updated pattern:

    > /etc/iscan/getupdate INFO

    The pattern version you just uploaded will appear.

    command for verifying pattern file version

To update the pattern version on the IWSVA console:

  1. Verify the permissions of the intscan.ini file.

    1. Log on to IWSVA with SSH (for example Putty) as "root".
    2. Navigate to the /var/iwss/ directory and check the permissions of the intscan.ini file:

      cd /var/iwss

      -rw-r----- 1 root root 94260 Apr 16 09:00 intscan.ini

    3. Enter the following commands one after the other to change the ownership and permissions for intscan.ini.

      chown iscan:iscan /var/iwss/intscan.ini
      chmod 664 /var/iwss/intscan.ini

      -rw-rw-r-- 1 iscan iscan 94260 Apr 16 09:00 intscan.ini

    4. Restart the web console with the following command:

      /etc/iscan/S99IScanHttpd restart

    5. Run a manual pattern update from the web console.
    6. Verify that the pattern version on the web console is identical to the one you get with "/etc/iscan/getupdate INFO".
  2. Modify the entries within the intscan.ini file.

    1. Using WinSCP or the “vi” editor, modify the intscan.ini file under the /etc/iscan directory:

      1. Open intscan.ini and find the entry "[Pattern-Update]".
      2. Modify the values of the following entries under "[Pattern Update]":

        Version=
        Version_utime=

         
        Use the output of "/etc/iscan/getupdate INFO" as reference.
    2. Log in to the IWSVA web console and go to Updates > Manual to see the new pattern version.
Premium
Test Now
Internal
Rating:
Category:
Update
Solution Id:
1103820
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.