You are on page 1of 14

Sirrix AG security technologies

Browser in the Box Short installation instructions for Windows


A virtual surf environment for authorities, enterprises and private users Version 2.2

Sirrix.CopyrightNotice
2007-2012 by Sirrix AG security technologies. All rights reserved. This document is for informational purposes only. SIRRIX MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Sirrix AG. Sirrix AG may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Sirrix AG, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. TURAYA, TrustedVPN, TrustedDesktop and TrustedChannel are either registered trademarks or trademarks of Sirrix AG in the Germany and/or other countries.

Content
1. Minimal System Requirements 2. Browser in the Box Architecture 3. Installation of Browser in the Box 2.2 4. Uninstallation of Browser in the Box 2.2 3 4 5 11

22

1. Minimal System Requirements


To run Browser in the Box you need to meet the following hard- and software requirements: Operating system: Microsoft Windows

Microsoft Windows XP at least service pack 2 , Microsoft Windows Vista Mircosoft Windows 7
VirtualBox 4.0.16 Hardware: Minimal:

2 GB memory 1.6 GHz CPU (e.g. Core2Duo) At least 1,5 GB free disk space Internet connection

Recommended: 2 GB memory 2 GHz Dualcore CPU or more Windows XP 64Bit or Windows 7 64Bit Support for virtualization technologies (Intel VT-X or AMD-V)

Minimal System Requirements

2. Browser in the Box Architecture


In Browser in the Box the browser is executed within a virtual machine (Oracle VirtualBox). Attacks from the Internet are thus confined to the virtual machine and do not affect the host system (Windows). Additionally the virtual machine is executed within an additional user account, separated from the account of the user.

Fig.1: Browser in the Box Architecture

Browser in the Box Architecture

22 4

3. Installation of Browser in the Box 2.2.0


Installation Procress The automated installation is started by double clicking on the installer Browser_in_the_ Box_Setup.2.2.0.exe. You need administrative privileges to run the installer. First Browser in the Box will extract the installation files and then call the setup procedure Browser_in_the_Box_Setup.2.2.0.exe.

Fig.2: Extracting the Browser in the Box installation files

Installation of VirtualBox
In case of Oracle VirtualBox has not been installed in the required version, the Browser in the Box installer will offer you to start the VirtualBox installation. During the installation of VirtualBox some Windows device drivers are installed. Before the installation of a device driver, Windows will ask for confirmation by showing a dialog.

Installation Browser in the Box

Here you have to press the Continue Anyway button to permit the installation.

Fig.3: Installation of the VirtualBox device drivers

Installation of Browser in the Box (Standard mode)


After the installation of VirtualBox the installation of Browser in the Box pro ceeds. First you have to accept the license agreement. Then you can decide bet ween the Standard mode and the Expert mode. In Standard mode the first step is to choose the installation folder of Browser in the Box .

Fig.4: License agreement and installation mode

Installation Browser in the Box

22 6

Installation in Expert Mode In expert mode you have additional options compared to the standard mode.

13

Fig.5: Setup options in Expert Mode

Printing from Browser in the Box If this option is enabled, printing is always allowed. If it is disabled, printing is only allowed if file-download is also enabled (can be configured in expert mode). Data Transfer

Fig.6 Settings for data transfer

Installation Browser in the Box

Due to the isolation of the browser within Browser in the Box the clipboards of Windows and of the browser are isolated too. Here the options for Copy/Paste and Downlaod/Upload of files between Browser in the Box and Windows can be configured. Here you have to take the trade-offs between security and usability into account. Only allow data transfer if you really need to. You can allow or completely disable data transfer or select that a user confirmation is required. For Downloads a virus check can be configured, which scans the file for malware, before copying it into the standard download folder. Scanning of Downloads You should activate the option Scan for virus which will use your existing virus scanner. Currently Avira Antivir and Symantec are supported. For both programs you need special command line scanners besides the standard installation, which will be employed by Browser in the Box:

Avira You can download Avira AntiVir from the following website: http://www.avira.com/en/ support-download-free-antivirus. And the command line scanner scancl.exe can be downloaded from: http://www.avira.com/en/download?product=avira-command-linescanner-scancl.
For the installation of the command line scanner it first has to be extracted. The file scancl.exe and all other files have to be moved to the installation folder of AntiVir Desktop. To do this you may have to deactivate the manipulation protection of Antivir. You can do this by right-clicking on the Antivir-icon in the task bar and by choosing the menu item Antivir configuration. Here you have to enable the expert mode. Then under General Security deactivate Protect files and registry entries against manipulation. After that you can copy the files into that folder. Afterward you should enable the file protection again, analogous to the procedure of disabling just described.

Installation Browser in the Box

22 8

Symantec Similar to Avira we need the command line tool nss.exe for Symantec. This is shipped within an archive and is extracted to a folder SymSupport. This folder has to be moved to the installation folder of Symantec, typically: C:\Program Files (x86)\Symantec. Afterwards the file nss.exe should be reachable from the path: C:\Program Files (x86)\ Symantec\SymSupport\nss.exe.
Persistent storage of Data Now you have the possibility to configure which Browser in the Box data should be stored persistently. You have the following choices:

All (configuration and bookmarks) Bookmarks only None

Fig.7: Browser in the Box persistency settings

Installation Browser in the Box

Proxy/DNS settings In the following window you can configure Proxy and DNS servers to connect the browser with the internet.

Fig.8 Configuration of Proxy and DNS settings

Account for executing Browser in the Box Browser in the Box is not executed within the account of the user but in an additional account. Here you can select the name and password of this additional account. It is not valid to use an existing account that is used for other purposes. Access rights of VirtualBox folder With the option Restrict access to VirtualBox folder you can restrict the access to the VirtualBox folder. For ordinary users direct access to VirtualBox is prohibited.

Installation Browser in the Box

22 10

4. Uninstallation of Browser in the Box 2.2.0


To uninstall Browser in the Box you need administrative privileges. There are two ways to start the uninstaller. In the installation folder of Browser in the Box you can run the file uninstaller by clicking on it:
All Programs Browser in the Box Uninstall Browser in the Box

The following window shows the installation folder of Browser in the Box:

Fig.9: Uninstall Browser in the Box under Windows (1)

11

Uninstallation Browser in the

In the next Window you can choose whether to delete the additional user for running Browser in the Box.

Fig.10 Uninstall Browser in the Box under Windows (2)

After a click on uninstall Browser in the Box will be removed from the system.

12 Uninstallation Browser in the Box22

Sirrix AG P.O. Box 1652 66407 Homburg/Saar Germany Headquarters Saarbrcken Campus Building D3.2 66123 Saarbrcken Phone: +49(0) 681 / 959 86 - 0 Fax: +49(0) 681 / 959 86 - 500 Email: info@sirrix.com Bochum Branch Lise-Meitner-Allee 4 44801 Bochum Phone: +49 (0) 234 / 610071 - 0 Fax: +49 (0) 234 / 610071 - 500

Sirrix AG security technologies

You might also like