Air-Gapped Installation of Insite and Powertech Antivirus

Use the following procedure to acquire, transfer, and install Insite and Powertech Antivirus on an air-gapped Windows or Linux server:

  1. On a system with an Internet connection, download the following files and save them to transportable media (such as a thumb drive):
    1. The Insite installer file for your platform from the Insite Download Page
    2. The Powertech Antivirus installer file for your platform from the Powertech Antivirus Download Page
    3. "deployment.json" at https://hsinsite.s3.amazonaws.com/deployment.json
    4. "linux_deployment.json" at https://hsinsite.s3.amazonaws.com/linux_deployment.json

    5. Linux users: you also must download JRE and Postgres files from http://download.helpsystems.com/download/. During installation, Insite detects your OS and references the appropriate file from the "insite_install" folder within your installation folder. The files required depend on your OS distribution:

      JRE

      • jre18_161-Linux-i686.tgz
      • jre18_161-Linux-ppc64.tgz
      • jre18_161-Linux-ppcle.tgz
      • jre18_161-Linux-x86_64.tgz

      Postgres Database

      • postgresql11_2-Linux-ppc64.tar.gz
      • postgresql11_2-Linux-ppc64le-suse-ssl1_1.tar.gz
      • postgresql11_2-Linux-ppc64le-suse.tar.gz
      • postgresql11_2-Linux-ppc64le-ubuntu.tar.gz
      • postgresql11_2-Linux-ppc64le.tar.gz
      • postgresql11_2-Linux-x86_64-suse-ssl1_1.tar.gz
      • postgresql11_2-Linux-x86_64-suse.tar.gz
      • postgresql11_2-Linux-x86_64-ubuntu.tar.gz
      • postgresql11_2-Linux-x86_64.tar.gz
  2. Transfer the Insite installer to a temporary folder on the air-gapped server.
  3. If you are installing Insite on Linux:

    1. Unpack the Insite installer using the following command:

      tar -xzf insite_install.tgz

    2. Place the JRE and Postgres files you downloaded into the "insite_install" folder (created when the install file is unpacked).
  4. Install Insite, including the Powertech Antivirus module (an option within the Insite installation wizard). You can reference instructions for installing, licensing, and configuring Insite on the Insite download page.
  5. Create the following folder:
    • Windows: C:\Program Files\Help Systems\HelpSystems Insite\deployment-import\hsinsite\linux_download\sgav
    • Linux: /opt/insite/deployment-import/hsinsite/linux_download/sgav

  6. Save "deployment.json" and "linux_deployment.json" to the hsinsite folder you just created.

  7. Copy the endpoint Powertech Antivirus installer file or files (e.g. "sgav-5.3.0-743.el7.x86_64.rpm") from your transportable media to the sgav folder you just created.
  8. Open the following "web.properties" file in a text editor:
    • Windows: C:\Program Files\Help Systems\HelpSystems Insite\lib
    • Linux: opt/insite/lib
  9. Change use_filesystem_for_deployment=false to true and save the file.

  10. Restart Insite to use the new configuration files.

    Windows (C:\Program Files\HelpSystems\HelpSystems Insite):

    1. maintenanceStop.bat
    2. maintenanceStart.bat

    Linux:

    ./stopInsite.sh
./startInsite.sh
  11. On Windows, open the Task Manager. Right-click "InsitePTAVService" and choose Restart. (The previous Linux commands restart the PTAV service automatically. )
  12. Update the inbound firewall rules to ensure the ports selected during the installation procedure are open. Additional ports may need to be opened based on the Powertech Antivirus configured. For example:
    • 8023 – HTTP Datrepo PTAV Service
    • 21 – FTP Datrepo PTAV
    • 22 – Insite Deployment Manager
  13. See Updating virus definitions on air-gapped servers to acquire and load the most recent virus definition updates.

 

Related Topics