Introduction

When using SAP Mobile documents on Premise, for security reasons it might be a requirement to scan al files for viruses stored in your Mobile document environment. This Blog will guide you to setup a VSI using an Bowbridge VSA and a McAfee  scan engine.

 

Environment setup

  • Netweaver Java 7.40
  • Bowbridge version 3.0.17
  • McAfee Web Gateway 7.6.0
  • IBM AIX 7.1

For more information regarding officially certified products please take a look at SAP Note 1494278

 

Overview

If we take a look at this picture than we see that SAP is sending the files from the VSI to the VSA, in this case we use Bowbridge. Bowbridge will process the files and pass them through to the McAfee scanengine.

VSA.png

 

Installation

 

Steps to setup the VSA- Bowbridge

Download the required software from the Bowbridge website. You can try the software for 30 days.

Create an directory on the filesystem called bowbridge. This is important because bowbridge will default use this name.

Copy the  installation files to the server

 

Run the installer

./install-bowbridge30_AIX.sh

 

/wp-content/uploads/2015/12/1_856348.png

21-12-2015 15-38-22.png

 

/wp-content/uploads/2015/12/3_856349.png

 

/wp-content/uploads/2015/12/4_856350.png

 

/wp-content/uploads/2015/12/5_856351.png

21-12-2015 15-44-44.png

 

 

Steps to setup the Virusscanner in the NWA (VSI)

/wp-content/uploads/2015/12/1_856348.png

 

/wp-content/uploads/2015/12/1_856348.png

Select Groups > Edit > Add

 

/wp-content/uploads/2015/12/1_856348.png

Add group > give any name your like & Continue

 

 

/wp-content/uploads/2015/12/1_856348.png

Select “default Scan Group”

 

/wp-content/uploads/2015/12/1_856348.png

Go to the “Adapter” tab and klik “add”

 

/wp-content/uploads/2015/12/1_856348.png

Give a meaningful name and continue

 

/wp-content/uploads/2015/12/1_856348.png

Provide the setting for the adapter. Make sure that the VSA Library path is correct. You can find the so file in the installation folder of your Bowbridge setup. Make it the default scan Provider.

 

 

Go to the Parameter tab and configure the correct parameters. For details regarding the parameters please have a look in the manual of your VSA provider. In case of Bowbridge go to http://www.bowbridge.net/fileadmin/collateral/Documentation/internal/BowBridge_AntiVirusBridge_installation_config_guide.pdf

 

 

/wp-content/uploads/2015/12/1_856348.png

Activate your adapter, it should be green. If it turns red you can enable the trace function in Adapter configuration.

 

 

Setup scan profiles

 

Create a custom profile and make it default.

/wp-content/uploads/2015/12/1_856348.png

/wp-content/uploads/2015/12/1_856348.png

The following profiles need to be activated

 

 

Setup KM

 

Finaly we need to configure some steps in the KM area.

Go to the enterprise portal page eg:  http://<your-server>:<port>/irj/portal

System Administration > System Configuration > Knowledge Management > Content Management > Show Advanced Options > Virus Scan Service      +

/wp-content/uploads/2015/12/1_856348.png

Consult the SAP Help page voor detail settings
https://help.sap.com/saphelp_nw73ehp1/helpdata/en/b8/f5af401efd8f2ae10000000a155106/frameset.htm

 

Now your environment is ready to scan all documents that are being uploaded to Mobile documents.

 

Log and configuration files:

 

Bowbridge configuration file: (stored on the file system in the bowbridge folder)

  • bbvsa30.cfg

 

Enable logging:

  • Edit the bbvsa30.cfg

 

TRACELEVEL=7

TRACEFILE= <your location > (/tmp for example)

 

Additional logfiles
/usr/sap/<SID>/J43/j2ee/cluster/server<n>/dev_VSI.trc

To report this post you need to login first.

Be the first to leave a comment

You must be Logged on to comment or reply to a post.

Leave a Reply