Hello silganit,
thanks for your reply and for sharing your experience with Trend Micro (TM) products! Just to check that I really understand the TM architecture:
The jobs of TMCM are:
a) providing signature and product updates for multiple Office Scan Servers
b) providing a central point of configuration for multiple Office Scan Servers
The jobs of Office Scan Server are:
a) providing signature and product updates for their Office Scan Clients as recieved by TMCM
b) providing antivirus policies for their Office Scan Clients as recieved by TMCM
c) sending antivirus events recieved from their Office Scan Clients to TMCM
d) performing Office Scan Client push installations in their LAN as configured in TMCM
The jobs of Office Scan Client are:
a) antivirus and antimalware scanning
b) enforcing the antivirus policies as recieved by their Office Scan Server
c) reporting events to the Office Scan Server
That means: TMCM communicates only with Office Scan Servers and these Office Scan Servers perform all the tasks that were defined in TMCM. Office Scan Clients are always connected to 1 Office Scan Server but never directly to TMCM.
For the TM antivirus architecture: The top hierarchy level will be TMCM (and for redundancy/load sharing one/some child TMCMs), on the second hierarchy level there will be the Office Scan Servers at each site and they will manage their local Office Scan Clients as third hierarchy level. Communication will only take place between neighbour hierarchy levels but not between top level (TMCM) and third level (Office Scan Client).
Is this correct? Did I miss something?
BTW: Do you know the release date for TMCM v5?
Main Topics
Browse All Topics
by: silganitPosted on 2007-12-03 at 08:48:23ID: 20396671
The company I work for has use Trend product for many years with great success. We are a large manufacturing company with location all over the country every location is connect via MPLS WAN. I have setup 2 control manager server one located at the main IT office and one at our corporate office for load balancing. The TMCM server at our main IT office is the main server or the Parent and the TMCM server at our corporate is the child this configuration all me to manage all Trend Micro products from one location. As for Officescan each location has a Domain controller and I have install Officescan at each location That way all the clients can get the updates from the local server instead of going across the WAN to pull the updates down. Each officescan server is register to one of the 2 TMCM servers depend on it location. Office scan allows you to put in multiple sources to get its updates from so depending on what TMCM server it is register with determines which server it will get it updates from but I also put in the second TMCM server just in case that server is offline or the WAN link is down. As for clients they get there update from the local server unless the local server is unavailable then they go to Trend Micro web site for updates. This is for our remote users that have laptop these users travel so this will grantee that they will always have current updates. All of this is reported back to both TMCM server and the system e-mails a daily report everyday tell me the client that are out of date or failed to get the update and who is infected and if the infection was cleaned.
I hope this helps if you need more information Please feel free to contact me.
PS as side note we have been Beta testing TMCM 5 for the last month and as soon as it is released I would suggest upgrading to it which will be a free upgrade as long as you license are current. There are many features that gives more central control and reporting of your Trend Product plus it allow for custom query to be performed on the DB.
Michael Draeger
Field Support Rep
Silgan Containers Corp.