F-SECURE ANTI-VIRUS FOR MIMESWEEPER - Service manual

F-Secure Anti-Virus
for MIMEsweeper
Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure
product names and symbols/logos are either trademarks or registered trademarks of F-Secure
Corporation. All product names referenced herein are trademarks or registered trademarks of their
respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of
others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,
F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure
Corporation reserves the right to modify specifications cited in this document without prior notice.
Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of
this document may be reproduced or transmitted in any form or by any means, electronic or
mechanical, for any purpose, without the express written permission of F-Secure Corporation.
This product may be covered by one or more F-Secure patents, including the following:
Copyright © 1993-2005 F-Secure Corporation.
Portions Copyright © 1991-2004 Kaspersky Lab.
All rights reserved. 12000073-5E16
GB2353372 GB2366691 GB2366692 GB2366693
GB2367933 GB2368233 GB2374260

iii
Contents
About This Guide 5
How This Guide Is Organized .............................................................................................. 6
Conventions Used in F-Secure Guides................................................................................ 7
Symbols ...................................................................................................................... 7
Chapter 1 Introduction 9
1.1 Overview ....................................................................................................................10
1.2 MIMEsweeper Product Family ...................................................................................11
1.3 Features.....................................................................................................................12
Chapter 2 Installation 13
2.1 Deployment................................................................................................................14
2.2 System Requirements................................................................................................15
2.3 Installation Steps........................................................................................................15
Chapter 3 Configuration 19
3.1 Configuring F-Secure Anti-Virus for MIMEsweeper ...................................................20
3.2 Configuring Content Scanner Scenario......................................................................25
3.3 Configuring Alert Forwarding .....................................................................................28
Chapter 4 Updating Virus Definition Databases 33
4.1 Overview ....................................................................................................................34
4.2 Automatic Updates.....................................................................................................34

iv
4.3 Manual Updates.........................................................................................................35
4.3.1 Using FSUPDATE..........................................................................................35
4.3.2 Using LATEST.ZIP .........................................................................................35
4.3.3 Updating the Virus Definition Database Remotely .........................................35
Technical Support 37
Overview ............................................................................................................................ 38
F-Secure Online Support Resources .................................................................................38
Web Club .................................................................................................................. 39
Virus Descriptions on the Web.................................................................................. 39
About F-Secure Corporation

5
ABOUT THIS GUIDE
How This Guide Is Organized...................................................... 6
Conventions Used in F-Secure Guides....................................... 7

6
How This Guide Is Organized
F-Secure Anti-Virus for MIMEsweeper Administrator's Guide is divided
into the following chapters:
Chapter 1. Introduction. General information on F-Secure Anti-Virus for
MIMEsweeper and other F-Secure Anti-Virus products.
Chapter 2. Installation. Instructions on how to install and deploy
F-Secure Anti-Virus for MIMEsweeper.
Chapter 3. Configuration. Instructions on how to configure F-Secure
Anti-Virus for MIMEsweeper, Content Scanner Scenario and Alerts.
Chapter 4. Updating Virus Definition Databases. Instructions on how to
keep virus definition databases up-to-date.
Technical Support. Instructions on how to get technical support for
problems in F-Secure Anti-Virus products.
About F-Secure Corporation Describes the company background and
products.

7
Conventions Used in F-Secure Guides
This section describes the symbols, fonts, and terminology used in this
manual.
Symbols
⇒An arrow indicates a one-step procedure.
Fonts
Arial bold (blue) is used to refer to menu names and commands, to
buttons and other items in a dialog box.
Arial Italics (blue) is used to refer to other chapters in the manual, book
titles, and titles of other manuals.
Arial Italics (black) is used for file and folder names, for figure and table
captions, and for directory tree names.
Courier New is used for messages on your computer screen.
WARNING: The warning symbol indicates a situation with a
risk of irreversible destruction to data.
IMPORTANT: An exclamation mark provides important information
that you need to consider.
REFERENCE - A book refers you to related information on the
topic available in another document.
l
NOTE - A note provides additional information that you should
consider.
TIP - A tip provides information that can help you perform a task
more quickly or easily.

8
Courier New bold is used for information that you must type.
SMALL CAPS (BLACK)is used for a key or key combination on your
keyboard.
Arial underlined (blue) is used for user interface links.
Times New Roman regular is used for window and dialog box names.
PDF Document
This manual is provided in PDF (Portable Document Format). The PDF
document can be used for online viewing and printing using Adobe®
Acrobat® Reader. When printing the manual, please print the entire
manual, including the copyright and disclaimer statements.
For More Information
Visit F-Secure at http://www.f-secure.com for documentation, training
courses, downloads, and service and support contacts.
In our constant attempts to improve our documentation, we would
welcome your feedback. If you have any questions, comments, or
suggestions about this or any other F-Secure document, please contact
us at [e-mail].

9
1INTRODUCTION
Overview..................................................................................... 10
MIMEsweeper Product Family.................................................... 11
Features..................................................................................... 12

10
1.1 Overview
Malicious code, such as computer viruses, is one of the main threats for
companies today. When users began to use office applications with
macro capabilities to write documents and distribute them via mail and
groupware servers, macro viruses started spreading rapidly.
After the millennium, the most common spreading mechanism has been
the e-mail. Today about 90% of viruses arrive via e-mail. E-mails provide
a very fast and efficient way for viruses to spread without any user
intervention and this is why e-mail worm outbreaks, like Bagle, Sober and
Mydoom, cause a lot of damage around the world.
The Internet is used by more and more people every day, which opens
another, so far dormant channel, HTTP, for viruses to spread. F-Secure
Anti-Virus Mail Server and Gateway products are designed to protect your
company's mail and groupware servers and to shield the company
network from any malicious code that travels in HTTP, FTP-over-HTTP or
SMTP traffic. The protection can be implemented on the gateway level to
screen all incoming and outgoing e-mail (SMTP), web surfing (HTTP) and
file transfer (FTP) traffic. Furthermore, it can be implemented on the mail
server level so that it not only protects inbound and outbound traffic but
also internal mail traffic and public sources, such as Public Folders on
Microsoft Exchange servers.
Providing the protection already on the gateway level has many
advantages: the protection is easy and fast to set up and install, and it is
invisible to the end users, which ensures that the system cannot be
by-passed and is easy to maintain. Protecting the gateway level alone,
however, is not enough to provide a complete antivirus solution; file
server and workstation level protection is needed, too.