AVG ANTI-VIRUS BUSINESS EDITION 2011 - REV... User manual

A V G Email Server Edition 2 01 1 © 20 1 0 C opyright A V G Tec hnologies C Z, s.r.o. A ll rights res erved. 1
Document revision 2011.01 (22. 9. 2010)
Copyright AVG Technologies CZ, s.r.o. All rights reserved.
All other trademarks are the property of their respective owners.
This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, Copyright (C) 1991-2, RSA Data
Security, Inc. Created 1991.
This product uses code from C-SaCzech library, Copyright (c) 1996-2001 Jaromir Dolecek
([e-mail]).
This product uses compression library zlib, Copyright (c) 1995-2002 Jean-loup Gailly and Mark Adler.
AVG Email Server Edition 2011
User Manual

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 2
Contents
........................................................................................................................ 4
1. Introduction
........................................................................................................................ 5
2. AVG Installation Requirements
.......................................................................................................... 5
2.1 Operation Systems Supported
.......................................................................................................... 5
2.2 Email Servers Supported
.......................................................................................................... 5
2.3 Hardware Requirements
.......................................................................................................... 5
2.4 Uninstall Previous Versions
.......................................................................................................... 6
2.5 MS Exchange Service Packs
........................................................................................................................ 7
3. AVG Installation Process
.......................................................................................................... 7
3.1 Installation Launch
.......................................................................................................... 8
3.2 Activate Your License
.......................................................................................................... 9
3.3 Select Installation Type
.......................................................................................................... 10
3.4 Custom Install - Custom Options
.......................................................................................................... 11
3.5 Installation Completion
........................................................................................................................ 13
4. E-mail Scanner for MS Exchange Server 2007/2010
.......................................................................................................... 13
4.1 Overview
.......................................................................................................... 16
4.2 E-mail Scanner for MS Exchange (routing TA)
.......................................................................................................... 17
4.3 E-mail Scanner for MS Exchange (SMTP TA)
.......................................................................................................... 18
4.4 E-mail Scanner for MS Exchange (VSAPI)
.......................................................................................................... 20
4.5 Technical Notice
.......................................................................................................... 22
4.6 Detection Actions
.......................................................................................................... 23
4.7 Mail Filtering
........................................................................................................................ 24
5. E-mail Scanner for MS Exchange Server 2003
.......................................................................................................... 24
5.1 Overview
.......................................................................................................... 27
5.2 E-mail Scanner for MS Exchange (VSAPI)
.......................................................................................................... 30
5.3 Detection Actions
.......................................................................................................... 31
5.4 Mail Filtering
........................................................................................................................ 32
6. AVG for Kerio MailServer
.......................................................................................................... 32
6.1 Configuration
.......................................................................................................... 32
6.1.1 Antivirus
.......................................................................................................... 32
6.1.2 Attachment Filter
........................................................................................................................ 37
7. Anti-Spam Configuration

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 3
.......................................................................................................... 37
7.1 Anti-Spam Interface
.......................................................................................................... 39
7.2 Anti-Spam Principles
.......................................................................................................... 39
7.3 Anti-Spam Settings
.......................................................................................................... 39
7.3.1 Anti-Spam Training Wizard
.......................................................................................................... 39
7.3.2 Select Folder with Messages
.......................................................................................................... 39
7.3.3 Message filtering options
.......................................................................................................... 44
7.4 Performance
.......................................................................................................... 46
7.5 RBL
.......................................................................................................... 47
7.6 Whitelist
.......................................................................................................... 48
7.7 Blacklist
.......................................................................................................... 49
7.8 Advanced Settings
........................................................................................................................ 50
8. AVG Settings Manager
........................................................................................................................ 53
9. FAQ and Technical Support

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 4
1. Introduction
This user manual provides comprehensive documentation for AVG Email Server
Edition 2011.
Congratulations on your purchase of AVG Email Server Edition 2011!
AVG Email Server Edition 2011 is one of a range of award winning AVG products
designed to provide you with peace of mind and total security for your PC. As with all
AVG products AVG Email Server Edition 2011 has been completely re-designed, from
the ground up, to deliver AVG’s renowned and accredited security protection in a new,
more user friendly and efficient way.
AVG has been designed and developed to protect your computing and networking
activity. Enjoy the experience of full protection from AVG.
Note: This documentation contains description of specific E-mail Server Edition
features. Should you require information about other AVG features, please consult the
user guide to Internet Security edition, which contains all the necessary details. You
can download the guide from the http://www.avg.com.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 5
2. AVG Installation Requirements
2.1. Operation Systems Supported
AVG Email Server Edition 2011 is intended to protect e-mail servers running under
the following operating systems:
·Windows 2008 Server Edition (x86 and x64)
·Windows 2003 Server (x86, x64) SP1
2.2. Email Servers Supported
The following e-mail servers are supported:
·MS Exchange 2003 Server version
·MS Exchange 2007 Server version
·MS Exchange 2010 Server version
·AVG for Kerio MailServer – version 6.7.2 and higher
2.3. Hardware Requirements
Minimum hardware requirements for AVG Email Server Edition 2011 are:
·Intel Pentium CPU 1.5 GHz
·500 MB of free hard drive space (for installation purposes)
·512 MB of RAM memory
Recommended hardware requirements for AVG Email Server Edition 2011 are:
·Intel Pentium CPU 1.8 GHz
·600 MB of free hard drive space (for installation purposes)
·512 MB of RAM memory
2.4. Uninstall Previous Versions
If you have an older version of AVG Email Server installed, you will need to uninstall it
manually before installing AVG Email Server Edition 2011. You must manually perform
the uninstallation of the previous version, using the standard windows functionality.
·From the start menu Start/Settings/Control Panel/Add or Remove

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 6
Programs select the correct program from the list of installed software. Be
careful to select the correct AVG program for uninstallation. You need to
uninstall the Email Server Edition before uninstalling the AVG File Server Edition.
·Once you have uninstalled the Email Server Edition, you can proceed to uninstall
your previous version of AVG File Server Edition. This can be done easily from the
start menu Start/All Programs/AVG/Uninstall AVG
·If you have previously used the AVG 8.x or older version, do not forget to
uninstall also individual server plug-ins.
Note: It will be necessary to restart the store service during the uninstallation
process.
Exchange plug-in - run setupes.exe with the /uninstall parameter from the
folder where the plug-in was installed.
e.g. C:\AVG4ES2K\setupes.exe /uninstall
Lotus Domino/Notes plug-in - run setupln.exe with the /uninstall parameter
from folder where the plug-in was installed:
e.g. C:\AVG4LN\setupln.exe /uninstall
2.5. MS Exchange Service Packs
There is no service pack required for MS Exchange 2003 Server; however, it is
recommended to keep your system as up to date with the latest service packs and
hotfixes as possible in order to obtain maximal available security.
Service Pack for MS Exchange 2003 Server (optional):
http://www.microsoft.com/exchange/evaluation/sp2/overview.mspx
At the beginning of the setup, all system libraries versions will be examined. If it is
necessary to install newer libraries, the installer will rename the old ones with a .delete
extension. They will be deleted after the system restart.
Service Pack for MS Exchange 2007 Server (optional):
http://www.microsoft.com/downloads/details.aspx?FamilyID=44c66ad6-f185-4a1d-
a9ab-473c1188954c&displaylang=en

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 7
3. AVG Installation Process
To install AVG on your computer, you need to get the latest installation file. You can
use the installation file from the CD that is a part of your box edition but this file might
be out-of-date. Therefore we recommended getting the latest installation file online.
You can download the file from the AVG website (at http://www.avg.com/download?
prd=msw)
Note: There are two installation packages available for your product - for 32bit
operating systems (marked as x86) and for 64bit operating systems (marked as x64).
Be sure to use the correct installation package for your specific operating system..
During the installation process you will be asked for your license number. Please make
sure you have it available before starting the installation. The number can be found in
the CD packaging. If you purchased your copy of AVG on-line, your license number
will have been delivered to you via e-mail.
Once you have downloaded and saved the installation file on your hard drive, you can
launch the installation process. The installation is a sequence of dialog windows with a
brief description of what do at each step. In the following, we offer an explanation for
each dialog window:
3.1. Installation Launch
The installation process starts with the Welcome window. In here you select the
language used for the installation process and read the license conditions. Use the
Printable version button to open the license text in a new window. Press the Accept
button to confirm and continue to the next dialog.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 8
Attention: You will be able to choose also additional languages for the application
interface later during the installation process.
3.2. Activate Your License
In the Activate your License dialog you have to fill in your license number.
Enter your license number into the License Number text field. The license number will
be in the confirmation e-mail that you received after purchasing your AVG on-line. You
must type in the number exactly as shown. If the digital form of the license number is
available (in the email), it is recommended to use the copy and paste method to insert
it.
Press the Next button to continue the installation process.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 9
3.3. Select Installation Type
The Select type of Installation dialog offers the choice of two installation options:
Quick Install and Custom Install.
For most users, it is highly recommended to keep to the Quick Install that installs
AVG in fully automatic mode with settings predefined by the program vendor. This
configuration provides maximum security combined with the optimal use of resources.
In the future, if the need arises to change the configuration, you will always have the
possibility to do so directly in the AVG application.
Custom Install should only be used by experienced users who have a valid reason to
install AVG with non-standard settings. E.g. to fit specific system requirements.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 10
3.4. Custom Install - Custom Options
The Destination folder dialog allows you to specify the location where AVG should be
installed. By default, AVG will be installed to the program files folder located on drive
C:. If you want to change this location, use the Browse button to display the drive
structure, and select the respective folder.
The Component selection section displays an overview of all AVG components that
can be installed. If the default settings do not suit you, you can remove/add specific
components.
However, you can only select from components that are included in your
purchased AVG edition. Only those components will be offered to be installed
within the Component Selection dialog!
·AVG Remote Admin Client - if you intend to connect AVG to an AVG
DataCenter (AVG Network Editions), then you need to select this option.
Note: Only server components available in the list can be managed remotely!
·Settings Manager - a tool suitable mainly for network administrators that allows
you to copy, edit and distribute AVG configuration. The configuration can be
saved to a portable device (USB flash drive etc.) and then applied manually or
any other way to chosen stations.
·Additional Installed Languages - you can define which language(s) AVG
should be installed in. Check the Additional installed languages item and then
select the desired languages from the respective menu.
Basic overview of the individual server components (Server Addins):

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 11
·Anti-Spam Server for MS Exchange
Checks all incoming e-mail messages and marks unwanted e-mails as SPAM. It
uses several analyzing methods to process each e-mail message, offering
maximum possible protection against unwanted e-mail messages.
·E-mail Scanner for MS Exchange (routing Transport Agent)
Checks all incoming, outgoing and internal e-mail messages going through the MS
Exchange HUB role.
Available for MS Exchange 2007/2010 and can be installed for HUB role only.
·E-mail Scanner for MS Exchange (SMTP Transport Agent)
Checks all e-mail messages coming through the MS Exchange SMTP interface.
Available for MS Exchange 2007/2010 only and can be installed for both EDGE
and HUB roles.
·E-mail Scanner for MS Exchange (VSAPI)
Checks all e-mail messages stored in user mailboxes. If any viruses are detected,
they are moved to the Virus Vault, or completely removed.
Note: There are different options available for different versions of MS Exchange.
Continue by pressing the Next button.
3.5. Installation Completion
If you selected the Remote Administration Component module during module
selection, then the final screen will allow you to define the connection string for
connecting to your AVG DataCenter.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 12
AVG is now installed on your computer and fully functional. The program is running in
the background in fully automatic mode.
To individually setup protection for your e-mail server, follow the appropriate chapter:
·E-mail Scanner for MS Exchange Server 2007/2010
·E-mail Scanner for MS Exchange Server 2003
·AVG for Kerio MailServer

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 13
4. E-mail Scanner for MS Exchange Server 2007/2010
4.1. Overview
The AVG for MS Exchange Server 2007/2010 configuration options are fully integrated
within the AVG Email Server Edition 2011 as server components.
Basic overview of the individual server components:
·Anti-Spam - Anti-Spam Server for MS Exchange
Checks all incoming e-mail messages and marks unwanted e-mails as SPAM. It
uses several analyzing methods to process each e-mail message, offering
maximum possible protection against unwanted e-mail messages.
·EMS (routing) - E-mail Scanner for MS Exchange (routing Transport Agent)
Checks all incoming, outgoing and internal e-mail messages going through the MS
Exchange HUB role.
Available for MS Exchange 2007/2010 and can be installed for HUB role only.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 14
·EMS (SMTP) - E-mail Scanner for MS Exchange (SMTP Transport Agent)
Checks all e-mail messages coming through the MS Exchange SMTP interface.
Available for MS Exchange 2007/2010 only and can be installed for both EDGE
and HUB roles.
·EMS (VSAPI) - E-mail Scanner for MS Exchange (VSAPI)
Checks all e-mail messages stored in user mailboxes. If any viruses are detected,
they are moved to the Virus Vault, or completely removed.
Important note: If you decided to install and use VSAPI in combination with routing
Transport agent on a Hub Exchange role, your e-mail messages will be scanned twice.
To avoid this, please review the Technical notice chapter below for more details.
Double-click a required component to open its interface. With the exception of Anti-
Spam, all the components share the following common control buttons and links:
·Scan Results
Opens a new dialog where you can review scan results:

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 15
Here you can check messages divided into several tabs according to their
severity. See configuration of individual components for amending the severity
and reporting.
By default there are displayed only results for the last two days. You can change
the displayed period by amending the following options:
oShow last - insert preferred days and hours.
oShow selection - choose a custom time and date interval.
oShow all - Displays results for the whole time period.
Use Refresh button to reload the results.
·Refresh statistical values - updates stats displayed above.
·Reset statistical values - resets all the stats to zero.
The working buttons are as follows:
·Settings - use this button to open settings of the component.
·Back - press this button to return to the Server components overview.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 16
You will find more information on individual settings of all components in the chapters
below.
4.2. E-mail Scanner for MS Exchange (routing TA)
To open the settings of E-mail Scanner for MS Exchange (routing transport agent)
,select the Settings button from the interface of the component.
From the Server components list select the E-mail Scanner for MS Exchange
(routing TA) item:
The Basic Settings section contains the following options:
·Enable component - uncheck to disable the whole component.
·Language - select preferred component language.
·Certify messages - check this if you wish to add a certification note to all
scanned messages. You can customize the message in the next field.
The Logging settings section:
·Log file size - choose a preferred size of the log file. Default value: 100 MB.
The Scanning properties section:
·Use Heuristics - check this box to enable heuristic analysis method during

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 17
scanning.
·Report Potentially Unwanted Programs and Spyware threats - check this
option to report the presence of potentially unwanted programs and spyware.
·Report enhanced set of Potentially Unwanted Programs - check to detect
extended package of spyware: programs that are perfectly ok and harmless
when acquired from the manufacturer directly, but can be misused for malicious
purposes later, or programs that always harmless but might be unwanted
(various toolbars etc.). This is an additional measure that increases your
computer security and comfort even more, however it can possibly block legal
programs, and is therefore switched off by default. Note: This detection feature
is additional to the previous option, so if you want protection from the basic
types of spyware, always keep the previous box checked.
·Scan inside archives - check this option to let the scanner look also inside
archived files (zip, rar, etc.)
The E-mail attachments reporting section allows you to choose which items should
be reported during scanning. If checked, each e-mail with such an item will contain
[INFORMATION] tag in the message subject. This is the default configuration which
can be easily amended in the Detection actions section, part Information (see
below).
The following options are available:
·Report password protected archives
·Report password protected documents
·Report files containing macro
·Report hidden extensions
There are also these sub-items available in the following tree structure:
·Detection actions
·Mail filtering
4.3. E-mail Scanner for MS Exchange (SMTP TA)
The configuration for the E-mail Scanner for MS Exchange (SMTP Transport Agent)
is exactly the same as in the case of routing transport agent. For more information
please see the E-mail Scanner for MS Exchange (routing TA) chapter above.
There are also these sub-items available in the following tree structure:
·Detection actions
·Mail filtering

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 18
4.4. E-mail Scanner for MS Exchange (VSAPI)
This item contains settings of the E-mail Scanner for MS Exchange (VSAPI).
The Basic Settings section contains the following options:
·Enable component - uncheck to disable the whole component.
·Language - select preferred component language.
The Logging settings section:
·Log file size - choose a preferred size of the log file. Default value: 100 MB.
The Scan settings section:
·Background Scan – you can enable or disable the background scanning process
here. Background scanning is one of the features of the VSAPI 2.0/2.5
application interface. It provides threaded scanning of the Exchange Messaging
Databases. Whenever an item that has not been scanned with the latest AVG
virus base update is encountered in the users’ mailbox folders, it is submitted to
AVG for Exchange Server to be scanned. Scanning and searching for the not
examined objects runs in parallel.

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 19
A specific low priority thread is used for each database, which guarantees other
tasks (e.g. e-mail messages storage in the Microsoft Exchange database) are
always carried out preferentially.
·Proactive Scan (incoming messages)
You can enable or disable the proactive scanning function of VSAPI 2.0/2.5 here.
This scanning occurs when an item is delivered to a folder, but a request has not
been made by a client.
As soon as messages are submitted to the Exchange store, they enter the global
scanning queue as low priority (maximum of 30 items). They are scanned on the
first in, first out (FIFO) basis. If an item is accessed while still in the queue, it is
changed to high priority.
Note: Overflow messages will continue to the store unscanned.
Note: Even if you disable both Background Scan and Proactive Scan options, the on
access scanner will be still active when an user will try to download a message with
the MS Outlook client.
·Scan RTF - you can specify here, whether the RTF file type should be scanned
or not.
·Number of Scanning Threads - the scanning process is threaded by default to
increase the overall scanning performance by a certain level of parallelism. You
can change the threads count here.
The default number of threads is computed as 2 times the
‘number_of_processors’ + 1.
The minimum number of threads is computed as ('number of processors'+1)
divided by 2.
The maximum number of threads is computed as 'Number of Processors' multiplied
by 5 + 1.
If the value is the minimum or lesser value or the maximum or greater, the
default value is used.
·Scan Timeout - the maximum continuous interval (in seconds) for one thread to
access the message that is being scanned (the default value is 180 seconds).
The Scanning properties section:
·Use Heuristics - check this box to enable heuristic analysis method during
scanning.
·Report Potentially Unwanted Programs and Spyware threats - check this
option to report the presence of potentially unwanted programs and spyware.
·Report enhanced set of Potentially Unwanted Programs - check to detect
extended package of spyware: programs that are perfectly ok and harmless

A V G Email Server E dition 2 011 © 2010 C opyright A V G T echnologies C Z, s.r.o. A ll rights res erved. 20
when acquired from the manufacturer directly, but can be misused for malicious
purposes later, or programs that always harmless but might be unwanted
(various toolbars etc.). This is an additional measure that increases your
computer security and comfort even more, however it can possibly block legal
programs, and is therefore switched off by default. Note: This detection feature
is additional to the previous option, so if you want protection from the basic
types of spyware, always keep the previous box checked.
·Scan inside archives - check this option to let the scanner look also inside
archived files (zip, rar, etc.)
The E-mail attachments reporting section allows you to choose which items should
be reported during scanning. The default configuration can be easily amended in the
Detection actions section, part Information (see below).
The following options are available:
·Report password protected archives
·Report password protected documents
·Report files containing macro
·Report hidden extensions
Generally, some of these features are user extensions of the Microsoft VSAPI 2.0/2.5
application interface services. For the detailed information on the VSAPI 2.0/2.5 please
refer to the following links (and also the links accessible from the referenced ones):
·http://support.microsoft.com/default.aspx?scid=kb;en-
us;328841&Product=exch2k - for information on Exchange and antivirus
software interaction
·http://support.microsoft.com/default.aspx?scid=kb;en-us;823166 for
information on additional VSAPI 2.5 features in Exchange 2003 Server
application.
There are also these sub-items available in the following tree structure:
·Detection actions
·Mail filtering
4.5. Technical Notice
This information relates to situation when you install and use both VSAPI and routing
Transport Agent on a Hub Exchange role. In such case, your e-mail messages will be
scanned twice (first by the VSAPI on-access scanner and then by the routing
Transport Agent).
Due to the way the VSAPI interface works, there might occur some inconsistencies in
scanning results as well as unnecessary load. Therefore, to avoid duplicated scanning,