Change Automatic Update Attributes (AVCHGUPDA)
Transfer method (FROM)
Specifies the transfer method that will be used to retrieve the new virus definition files.
*WGET The files will be downloaded using WGET, a utility that retrieves files using the HTTP protocol. This is the default setting.
*FTP The data will be downloaded using the IBM i FTP client. Please note that Trellix does not provide a FTP server. This option can be used to retrieve virus definitions from an internal server, for example.
*PATH The data will be retrieved from a network path. The path option is typically used in a network environment where you have one or more IBM i servers downloading from an FTP site and saving to a local path. This improves performance and security by using one IBM i server or partition to download the files to a secured share. The remaining servers or partitions can use this option to access the files over the local network.
Path (PATH)
Specifies the network path name that will be used to retrieve the virus definition files. This option applies only if the FROM keyword is *PATH. Use this option when you have another server or partition saving the files to a network path.
WGET string (WGET)
Specifies the base directory followed by any optional WGET/HTTP parameters. This option applies only if the FROM keyword is *WGET.
*DFT The files will be downloaded from http://update.nai.com/products/commonupdater.
WGET/HTTP string Specify the wget base directory followed by optional parameters. For example: http://update.nai.com/products/commonupdater --verbose
Important Notes regarding DAT updates
DAT updates may retrieve the DAT files via HTTPS. In some circumstances, the HTTPS server that provides the DAT files may use a certificate that is invalid. When the *WGET transfer method is used, the default behavior is to then abort the DAT update.
As a workaround, either switch to the *HTTP transfer method, available in Powertech Antivirus 8.09 and higher, or configure Powertech Antivirus for IBM i to ignore the invalid certificate. To do so:
When configuring the DAT updates using the Change DAT Update Attributes (AVCHGUPDA) or the corresponding menu item, add a blank and then the text.
For example:
--no-check-certificate
at the end of the HTTP/WGET string (or "WGET string") parameter value. Note the double hyphen used.
WGET string . . . . . . . . . . https://<PTAV Server>:8023/current --no-check-certificate
FTP location (FTP)
Specifies the host name and path that will be used to obtain the information. This option applies only when the FROM keyword is *FTP. To use a port other than the standard port 21, type a colon and the port number after the host name. For example: ftp.myserver.com:2121 to use port 2121.
NOTE: The system must be able to access the FTP site through any firewalls.
location‑name Specify the host name and path in the format domain/path.
FTP User (FTPUSR)
Specifies the remote user name to use when logging into the FTP server.
*ANONYMOUS The user 'anonymous' will be used.
user‑name Specify the user name to use for the FTP login.
FTP Password (FTPPWD)
The password is stored unencrypted in file AVUPDATE, which has public *EXCLUDE authority. However, the password is sent to the FTP server unencrypted.
Specifies the password for the remote user name when logging into the FTP server. This parameter applies only when the FTP User (FTPUSER) is not *ANONYMOUS.
Schedule (SCHEDULE)
Specifies the type of scheduling for the command or process.
*DAILY Run the update every day (recommended).
*WEEKLY Run the update once per week.
*MONTHLY Run the update once per month.
*NONE When you specify a schedule and press Enter, the product adds the job schedule entry AVUPDATE using the ADDJOBSCDE command. The job runs as user STANDGUARD.
Automatic update is disabled. This setting is not recommended unless you choose to handle automatic updating outside the product.
Day, Days, Time Specifies the specific time period for the automatic update process to run, depending on the choice selected for Schedule. For more information on the values allowed for these parameters, press Help.