F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 Service manual

F-Secure Anti-Virus for
Microsoft Exchange
Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure
product names and symbols/logos are either trademarks or registered trademarks of F-Secure
Corporation. All product names referenced herein are trademarks or registered trademarks of their
respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of
others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,
F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure
Corporation reserves the right to modify specifications cited in this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of
this document may be reproduced or transmitted in any form or by any means, electronic or
mechanical, for any purpose, without the express written permission of F-Secure Corporation.
Copyright © 1993-2010 F-Secure Corporation. All rights reserved. 
Portions Copyright © 2003 Commtouch ® Software Ltd.
Copyright © 1997-2009 BitDefender.
This product includes software developed by the Apache Software Foundation (http://
www.apache.org/). Copyright © 2000-2007 The Apache Software Foundation. All rights reserved.
This product includes PHP, freely available from http://www.php.net/. Copyright © 1999-2007 The PHP
Group. All rights reserved.
This product includes code from SpamAssassin. The code in the files of the SpamAssassin distribution
are Copyright © 2000-2002 Justin Mason and others, unless specified otherwise in that particular file.
All files in the SpamAssassin distribution fall under the same terms as Perl itself, as described in the
“Artistic License”.
This product may be covered by one or more F-Secure patents, including the following:
GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233
GB2374260

1
Contents
About This Guide 6
How This Guide Is Organized .............................................................................................. 7
Conventions Used in F-Secure Guides................................................................................ 9
Symbols ...................................................................................................................... 9
Chapter 1 Using F-Secure Anti-Virus for Microsoft Exchange 11
1.1 Administering F-Secure Anti-Virus for Microsoft Exchange .......................................12
1.2 Using Web Console ...................................................................................................13
1.2.1 Logging in for the First Time...........................................................................13
1.2.2 Modifying Settings and Viewing Statistics with Web Console........................15
1.2.3 Checking the Product Status .........................................................................16
1.3 Using F-Secure Policy Manager Console ..................................................................16
1.3.1 Modifying Settings and Viewing Statistics in Centrally Administered Mode ...16
Chapter 2 Centrally Managed Administration 19
2.1 Overview....................................................................................................................20
2.2 F-Secure Anti-Virus for Microsoft Exchange Settings................................................20
2.2.1 General Settings.............................................................................................20
2.2.2 Transport Protection.......................................................................................29
2.2.3 Storage Protection..........................................................................................48
2.3 F-Secure Anti-Virus for Microsoft Exchange Statistics...............................................80
2.3.1 Common.........................................................................................................81
2.3.2 Transport Protection.......................................................................................82
2.3.3 Storage Protection..........................................................................................83

2
2.3.4 Quarantine......................................................................................................85
2.4 F-Secure Content Scanner Server Settings...............................................................86
2.4.1 Interface..........................................................................................................86
2.4.2 Virus Scanning ...............................................................................................87
2.4.3 Virus Statistics................................................................................................90
2.4.4 Database Updates..........................................................................................91
2.4.5 Spam Filtering ................................................................................................92
2.4.6 Threat Detection Engine.................................................................................93
2.4.7 Proxy Configuration........................................................................................94
2.4.8 Advanced........................................................................................................95
2.5 F-Secure Content Scanner Server Statistics .............................................................96
2.5.1 Server.............................................................................................................96
2.5.2 Scan Engines .................................................................................................97
2.5.3 Common.........................................................................................................98
2.5.4 Spam Control..................................................................................................98
2.5.5 Virus Statistics................................................................................................99
2.6 F-Secure Management Agent Settings......................................................................99
2.7 F-Secure Automatic Update Agent Settings ............................................................101
Chapter 3 Administration with Web Console 103
3.1 Overview..................................................................................................................104
3.2 Home........................................................................................................................104
3.3 Transport Protection.................................................................................................109
3.3.1 Attachment Filtering......................................................................................111
3.3.2 Virus Scanning .............................................................................................114
3.3.3 Grayware Scanning......................................................................................117
3.3.4 Archive Processing.......................................................................................120
3.3.5 Content Filtering ..........................................................................................123
3.3.6 Other Options...............................................................................................126
3.4 Spam Control...........................................................................................................129
3.4.1 Status ...........................................................................................................130
3.4.2 Settings.........................................................................................................131
3.5 Storage Protection ...................................................................................................135
3.5.1 Real-Time Scanning.....................................................................................137
3.5.2 Manual Scanning .........................................................................................146
3.5.3 Scheduled Scanning ....................................................................................159

3
3.6 Quarantine ...............................................................................................................172
3.6.1 Query............................................................................................................173
3.6.2 Options.........................................................................................................173
3.7 Automatic Updates...................................................................................................181
3.7.1 Communications...........................................................................................183
3.8 General Server Properties .......................................................................................187
3.8.1 Administration...............................................................................................188
3.8.2 Network Configuration .................................................................................194
3.8.3 Notifications..................................................................................................196
3.8.4 Sample Submission......................................................................................197
3.8.5 Engines.........................................................................................................198
3.8.6 Lists and Templates .....................................................................................208
Chapter 4 Quarantine Management 211
4.1 Introduction ..............................................................................................................212
4.1.1 Quarantine Reasons.....................................................................................213
4.2 Configuring Quarantine Options...............................................................................214
4.3 Quarantine Status ....................................................................................................214
4.3.1 Quarantine Logging......................................................................................214
4.4 Searching the Quarantined Content.........................................................................214
4.5 Query Results Page.................................................................................................219
4.5.1 Viewing Details of the Quarantined Message ..............................................220
4.6 Quarantine Operations.............................................................................................221
4.6.1 Reprocessing the Quarantined Content.......................................................223
4.6.2 Releasing the Quarantined Content.............................................................224
4.6.3 Removing the Quarantined Content.............................................................225
4.6.4 Deleting Old Quarantined Content Automatically.........................................225

4
4.7 Moving the Quarantine Storage...............................................................................226
Chapter 5 Updating Virus and Spam Definition Databases 228
Overview..................................................................................................................229
Automatic Updates with F-Secure Automatic Update Agent....................................229
Configuring Automatic Updates ...............................................................................229
AppendixA Variables in Warning Messages 231
List of Variables................................................................................................................ 232
AppendixB Sending E-mail Alerts And Reports 234
B.1 Overview................................................................................................................. 235
B.2 Solution....................................................................................................................235
B.2.1 Creating a Scoped Receive Connector........................................................236
B.2.2 Grant the Relay Permission on the New Scoped Connector........................237
B.2.3 Specify SMTP Server for Alerts and Reports...............................................237
AppendixC Troubleshooting 238
C.1 Overview..................................................................................................................239
C.2 Starting and Stopping...............................................................................................239
C.3 Viewing the Log File.................................................................................................240
Quarantine Logs...................................................................................................... 240
C.4 Common Problems and Solutions............................................................................240
Checking F-Secure Anti-Virus for Microsoft Exchange........................................... 241
Checking F-Secure Content Scanner Server.......................................................... 242
Checking F-Secure Anti-Virus for Microsoft Exchange Web Console .................... 243
C.4.1 Installing Service Packs................................................................................243

5
C.4.2 Securing the Quarantine...............................................................................244
C.4.3 Administration Issues ...................................................................................244
C.5 Frequently Asked Questions....................................................................................245
Technical Support 246
F-Secure Online Support Resources ............................................................................... 247
Web Club .........................................................................................................................249
Virus Descriptions on the Web .........................................................................................249

6
ABOUT THIS GUIDE
How This Guide Is Organized...................................................... 7
Conventions Used in F-Secure Guides....................................... 9

About This Guide 7
How This Guide Is Organized
F-Secure Anti-Virus for Microsoft Exchange Administrator's Guide is
divided into the following chapters:
Chapter 1. Using F-Secure Anti-Virus for Microsoft Exchange.
Instructions how to use and administer F-Secure Anti-Virus for Microsoft
Exchange.
Chapter 2. Centrally Managed Administration. Instructions how to
remotely administer F-Secure Anti-Virus for Microsoft Exchange and
F-Secure Content Scanner Server when they have been installed in
centralized administration mode.
Chapter 3. Administration with Web Console. Instructions how to
administer F-Secure Anti-Virus for Microsoft Exchange with the Web
Console.
Chapter 4. Quarantine Management. Instructions how you can manage
and search quarantined mails with the F-Secure Anti-Virus for Microsoft
Exchange Web Console.
Chapter 5. Updating Virus and Spam Definition Databases. Instructions
how to update your virus definition database.
Appendix A. Variables in Warning Messages. Lists variables that can
be included in virus warning messages.
Appendix B. Sending E-mail Alerts And Reports. Instructions how to
configure the product to send alerts to the administrator by e-mail.
Appendix C. Troubleshooting. Solutions to some common problems.
Technical Support. Contains the contact information for assistance.
About F-Secure Corporation. Describes the company background and
products.

8
See the F-Secure Policy Manager Administrator's Guide for detailed
information about installing and using the F-Secure Policy Manager
components:
F-Secure Policy Manager Console, the tool for remote
administration of F-Secure Anti-Virus for Microsoft Exchange.
F-Secure Policy Manager Server, which enables communication
between F-Secure Policy Manager Console and the managed
systems.