F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 7.10 - Service manual

F-Secure Anti-Virus for
Microsoft Exchange
Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure
product names and symbols/logos are either trademarks or registered trademarks of F-Secure
Corporation. All product names referenced herein are trademarks or registered trademarks of their
respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of
others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,
F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure
Corporation reserves the right to modify specifications cited in this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of
this document may be reproduced or transmitted in any form or by any means, electronic or
mechanical, for any purpose, without the express written permission of F-Secure Corporation.
Copyright © 1993-2007 F-Secure Corporation. All rights reserved.
Portions Copyright © 1991-2007 Kaspersky Lab.
This product includes software developed by the Apache Software Foundation (http://
www.apache.org/). Copyright © 2000-2007 The Apache Software Foundation. All rights reserved.
This product includes PHP, freely available from http://www.php.net/. Copyright © 1999-2007 The PHP
Group. All rights reserved.
This product includes code from SpamAssassin. The code in the files of the SpamAssassin distribution
are Copyright © 2000-2002 Justin Mason and others, unless specified otherwise in that particular file.
All files in the SpamAssassin distribution fall under the same terms as Perl itself, as described in the
“Artistic License”.
This product may be covered by one or more F-Secure patents, including the following:
12000040-7K27
GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233
GB2374260

3
Contents
About This Guide 9
How This Guide Is Organized ............................................................................................ 10
Conventions Used in F-Secure Guides.............................................................................. 12
Symbols .................................................................................................................... 12
Chapter 1 Introduction 14
1.1 Overview....................................................................................................................15
1.2 How F-Secure Anti-Virus for Microsoft Exchange Works...........................................16
1.3 Key Features..............................................................................................................19
1.4 F-Secure Anti-Virus Mail Server and Gateway Products...........................................21
Chapter 2 Deployment 23
2.1 Installation Modes......................................................................................................24
2.2 Network Requirements...............................................................................................25
2.3 Deployment Scenarios...............................................................................................26
2.3.1 Environment with a Single Exchange Server .................................................27
2.3.2 Environments with Exchange Roles Deployed on Multiple Servers...............28
2.3.3 Quarantine Management Considerations.......................................................31
Chapter 3 Installation 33
3.1 System Requirements................................................................................................34
3.1.1 Operating System Requirements ...................................................................35
3.1.2 Microsoft Exchange Server Requirements.....................................................35
3.1.3 SQL Server Requirements .............................................................................36

4
3.1.4 Web Browser Software Requirements ...........................................................38
3.2 Improving Reliability and Performance ......................................................................38
3.3 Centrally Administered or Stand-alone Installation? ..................................................39
3.4 Installation Overview..................................................................................................40
3.5 Installing F-Secure Anti-Virus for Microsoft Exchange...............................................41
3.6 After the Installation ...................................................................................................53
3.6.1 Importing Product MIB files to F-Secure Policy Manager Console.................54
3.6.2 Configuring the Product..................................................................................55
3.7 Upgrading the Evaluation Version..............................................................................56
3.8 Uninstalling F-Secure Anti-Virus for Microsoft Exchange ..........................................57
Chapter 4 Using F-Secure Anti-Virus for Microsoft Exchange 58
4.1 Administering F-Secure Anti-Virus for Microsoft Exchange .......................................59
4.2 Using Web Console ...................................................................................................60
4.2.1 Logging in for the First Time...........................................................................60
4.2.2 Modifying Settings and Viewing Statistics with Web Console........................62
4.2.3 Checking the Product Status .........................................................................63
4.3 Using F-Secure Policy Manager Console ..................................................................63
4.3.1 Modifying Settings and Viewing Statistics in Centrally Administered Mode ...63
4.4 Selecting Scanning Methods to Use..........................................................................65
Chapter 5 Centrally Managed Administration 67
5.1 Overview....................................................................................................................68
5.2 F-Secure Anti-Virus for Microsoft Exchange Settings................................................68
5.2.1 Common Settings...........................................................................................68
5.2.2 Transport Protection.......................................................................................76
5.2.3 Storage Protection..........................................................................................88
5.3 F-Secure Anti-Virus for Microsoft Exchange Statistics.............................................116
5.3.1 Common.......................................................................................................117
5.3.2 Transport Protection.....................................................................................118
5.3.3 Storage Protection........................................................................................119
5.3.4 Quarantine....................................................................................................121
5.4 F-Secure Content Scanner Server Settings.............................................................121
5.4.1 Interface........................................................................................................122

5
5.4.2 Virus Scanning .............................................................................................123
5.4.3 Virus Statistics..............................................................................................125
5.4.4 Database Updates........................................................................................126
5.4.5 Spam Filtering ..............................................................................................127
5.4.6 Threat Detection Engine...............................................................................128
5.4.7 Proxy Configuration......................................................................................129
5.4.8 Advanced......................................................................................................130
5.5 F-Secure Content Scanner Server Statistics ...........................................................131
5.5.1 Server...........................................................................................................131
5.5.2 Scan Engines ...............................................................................................132
5.5.3 Common.......................................................................................................133
5.5.4 Spam Control................................................................................................133
5.5.5 Virus Statistics..............................................................................................134
5.6 F-Secure Management Agent Settings....................................................................134
5.7 F-Secure Automatic Update Agent Settings ............................................................135
Chapter 6 Administration with Web Console 138
6.1 Overview..................................................................................................................139
6.2 Home........................................................................................................................139
6.3 Transport Protection.................................................................................................142
6.3.1 Attachment Filtering......................................................................................144
6.3.2 Virus Scanning .............................................................................................147
6.3.3 Grayware Scanning......................................................................................151
6.3.4 Archive Processing.......................................................................................154
6.3.5 Spam Control................................................................................................156
6.3.6 Security Options...........................................................................................157
6.4 Storage Protection ...................................................................................................159
6.4.1 Real-Time and Background Scanning..........................................................159
6.4.2 Manual Scanning .........................................................................................172
6.4.3 Scheduled Scanning ....................................................................................185
6.5 Quarantine ...............................................................................................................196
6.5.1 Options.........................................................................................................197
6.6 Automatic Updates...................................................................................................206
6.6.1 Communications...........................................................................................208
6.7 Content Scanner Server...........................................................................................212

6
6.7.1 Options.........................................................................................................214
6.8 General ....................................................................................................................223
6.8.1 Network Configuration .................................................................................224
6.8.2 Administration...............................................................................................226
6.8.3 Notifications..................................................................................................231
6.8.4 Lists and Templates .....................................................................................232
6.8.5 Sample Submission......................................................................................235
Chapter 7 Quarantine Management 237
7.1 Introduction ..............................................................................................................238
7.1.1 Quarantine Reasons.....................................................................................239
7.2 Configuring Quarantine Options...............................................................................239
7.3 Searching the Quarantined Content.........................................................................239
7.4 Query Results Page.................................................................................................244
7.5 Viewing Details of a Quarantined Message .............................................................246
7.6 Reprocessing the Quarantined Content...................................................................248
7.7 Releasing the Quarantined Content.........................................................................249
7.8 Removing the Quarantined Content.........................................................................250
7.9 Deleting Old Quarantined Content Automatically.....................................................250
7.10 Quarantine Logging..................................................................................................251
7.11 Quarantine Statistics................................................................................................251
7.12 Moving the Quarantine Storage ...............................................................................252
Chapter 8 Updating Virus and Spam Definition Databases 254
8.1 Overview..................................................................................................................255
8.2 Automatic Updates with F-Secure Automatic Update Agent....................................255
8.3 Configuring Automatic Updates ...............................................................................255
Chapter 9 Administering F-Secure Spam Control 257
9.1 Overview..................................................................................................................258
9.2 Spam Control Settings in Centrally Managed Environments...................................259
9.3 Spam Control Settings in Web Console...................................................................263
9.4 Realtime Blackhole List Configuration .....................................................................266

7
9.4.1 Configuring Realtime Blackhole Lists...........................................................266
9.4.2 Optimizing F-Secure Spam Control Performance........................................268
AppendixA Variables in Warning Messages 270
List of Variables................................................................................................................ 271
AppendixB Services and Processes 273
B.1 List of Services and Processes............................................................................... 274
AppendixC Deploying the Product on a Cluster 277
C.1 Installation Overview............................................................................................... 278
C.2 Creating Quarantine Storage...................................................................................279
C.2.1 Creating the Quarantine Storage for a Single Copy Cluster Environment ...279
C.2.2 Creating the Quarantine Storage for a Continuous Cluster Replication Environ-
ment..............................................................................................................286
C.3 Administering the Cluster Installation with F-Secure Policy Manager......................290
C.4 Using the Quarantine in the Cluster Installation.......................................................290
C.5 Uninstallation............................................................................................................292
C.6 Troubleshooting .......................................................................................................292
AppendixD Sending E-mail Alerts And Reports 293
D.1 Overview................................................................................................................. 294
D.2 Solution....................................................................................................................294
D.2.1 Creating a Scoped Receive Connector........................................................295
D.2.2 Grant the Relay Permission on the New Scoped Connector........................296
D.2.3 Specify SMTP Server for Alerts and Reports...............................................296
Chapter E Troubleshooting 297
E.1 Overview..................................................................................................................298
E.2 Starting and Stopping...............................................................................................298
E.3 Viewing the Log File.................................................................................................299
E.4 Common Problems and Solutions............................................................................299
E.4.1 Installing Service Packs................................................................................302
E.4.2 Securing the Quarantine...............................................................................303
E.4.3 Administration Issues ...................................................................................303

8
E.5 Frequently Asked Questions....................................................................................304
Technical Support 305
F-Secure Online Support Resources ............................................................................... 306
Web Club .........................................................................................................................308
Virus Descriptions on the Web .........................................................................................308

9
ABOUT THIS GUIDE
How This Guide Is Organized.................................................... 10
Conventions Used in F-Secure Guides..................................... 13

10
How This Guide Is Organized
F-Secure Anti-Virus for Microsoft Exchange Administrator's Guide is
divided into the following chapters:
Chapter 1. Introduction. General information about F-Secure Anti-Virus
for Microsoft Exchange and other F-Secure Anti-Virus Mail Server and
Gateway products.
Chapter 2. Deployment. Instructions and examples how to set up your
network environment before you can install F-Secure Anti-Virus for
Microsoft Exchange.
Chapter 3. Installation. Instructions how to install and set up F-Secure
Anti-Virus for Microsoft Exchange.
Chapter 4. Using F-Secure Anti-Virus for Microsoft Exchange.
Instructions how to use and administer F-Secure Anti-Virus for Microsoft
Exchange.
Chapter 5. Centrally Managed Administration. Instructions how to
remotely administer F-Secure Anti-Virus for Microsoft Exchange and
F-Secure Content Scanner Server when they have been installed in
centralized administration mode.
Chapter 6. Administration with Web Console. Instructions how to
administer F-Secure Anti-Virus for Microsoft Exchange with the Web
Console.
Chapter 7. Quarantine Management. Instructions how you can manage
and search quarantined mails with the F-Secure Anti-Virus for Microsoft
Exchange Web Console.
Chapter 8. Updating Virus and Spam Definition Databases. Instructions
how to update your virus definition database.
Chapter 9. Administering F-Secure Spam Control. General information
about and instructions on how to configure F-Secure Spam Control.
Appendix A. Variables in Warning Messages. Lists variables that can
be included in virus warning messages.