Jump to contentJump to page navigation: previous page [access key p]/next page [access key n]
Applies to SUSE Linux Enterprise Server for SAP Applications 15 SP1

11 Protecting Against Malware with ClamSAP Edit source

ClamSAP integrates the ClamAV anti-malware toolkit into SAP NetWeaver and SAP Mobile Platform applications. ClamSAP is a shared library that links between ClamAV and the SAP NetWeaver Virus Scan Interface (NW-VSI). The version of ClamSAP shipped with SUSE Linux Enterprise Server for SAP Applications 15 SP1 supports NW-VSI version 2.0.

11.1 Installing ClamSAP Edit source

  1. On the application host, install the packages for ClamAV and ClamSAP. To do so, use the command:

    tux > sudo zypper install clamav clamsap
  2. Before you can enable the daemon clamd, initialize the malware database:

    tux > sudo freshclam
  3. Start the service clamd:

    tux > sudo systemctl start clamd
  4. Check the status of the service clamd with:

    tux > systemctl status clamd
    ● clamd.service - ClamAV Antivirus Daemon
    Loaded: loaded (/usr/lib/systemd/system/clamd.service; enabled; vendor preset: disabled)
    Active: active (running) since Tue 2017-04-11 10:33:03 UTC; 24h ago
    [...]

11.2 Creating a Virus Scanner Group in SAP NetWeaver Edit source

  1. Log in to the SAP NetWeaver installation through the GUI. Do not log in as a DDIC or SAP* user, because the virus scanner needs to be configured cross-client.

  2. Create a Virus Scanner Group using the transaction VSCANGROUP.

    Edit View Scanner Group with editable table
  3. To switch from view mode to change mode, click the button Change View (Change View).

    Confirm the message This table is cross-client by clicking the check mark. The table is now editable.

  4. Select the first empty row. In the text box Scanner Group, specify CLAMSAPVSI. Under Group Text, specify CLAMSAP.

    Make sure that Business Add-in is not checked.

    Edit View Scanner Group with editable table
  5. To save the form, click the button Save (Save).

11.3 Setting Up the ClamSAP Library in SAP NetWeaver Edit source

  1. In the SAP NetWeaver GUI, call the transaction VSCAN.

  2. To switch from view mode to change mode, click the button Change View (Change View).

    Confirm the message This table is cross-client by clicking the check mark. The table is now editable.

  3. Click New entries.

  4. Fill in the form accordingly:

    • Provider Type: Adapter (Virus Scan Adapter)

    • Provider Name: VSA_HOSTNAME (for example: VSA_SAPSERVER)

    • Scanner Group: The name of the scanner group that you set up in Section 11.2, “Creating a Virus Scanner Group in SAP NetWeaver” (for example: CLAMSAPVSI)

    • Server: HOSTNAME_SID_INSTANCE_NUMBER (for example: SAPSERVER_P04_00)

    • Adapter Path: libclamsap.so

    Form New Entries: Details of Added Entries
  5. To save the form, click the button Save.

11.4 Engaging ClamSAP Edit source

To run ClamSAP, go to the transaction VSCAN. Then click Start.

Change View “Virus Scan Provider Definition”
Figure 11.1: Change View Virus Scan Provider Definition

Afterward, a summary will be displayed, including details of the ClamSAP and ClamAV (shown in Figure 11.2, “Summary of ClamSAP Data”).

Summary of ClamSAP Data
Figure 11.2: Summary of ClamSAP Data

11.5 For More Information Edit source

For more information, also see the project home page https://sourceforge.net/projects/clamsap/.

Print this page