Symantec 10547829 - Mail Security For Smtp 5.0 Smb User manual

Symantec Mail Security for
SMTP
Installation Guide

Symantec Mail Security for SMTP
Installation Guide
The software described in this book is furnished under a license agreement and
may be used only in accordance with the terms of the agreement.
April 17, 2006
Copyright notice
Copyright © 1998-2006 Symantec Corporation. All rights reserved. Symantec, the
Symantec logo, Brightmail, LiveUpdate, SESA, and Norton AntiVirus are U.S. registered
trademarks or registered trademarks of Symantec Corporation or its affiliates in other
countries. Other names may be trademarks of their respective owners.
Symantec Mail Security for SMTP 5.0 is protected under U.S. Patent Nos. 6,052,709;
5,999,932; and 6,654,787.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED
CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED
WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-
INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL
NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION
WITH THE FURNISHING PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE
INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE
WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be “commercial computer
software” and “commercial computer software documentation” as defined in FAR
Sections 12.212 and DFARS Section 227.7202.
Symantec Corporation
20330 Stevens Creek Blvd.
Cupertino, CA 95014
http://www.symantec.com
Printed in the United States of America.
10987654321

Technical support
As part of Symantec Security Response, the Symantec global Technical Support
group maintains support centers throughout the world. The Technical Support
group’s primary role is to respond to specific questions on product feature/
function, installation, and configuration, as well as to author content for our
Web-accessible Knowledge Base. The Technical Support group works
collaboratively with the other functional areas within Symantec to answer your
questions in a timely fashion. For example, the Technical Support group works
with Product Engineering as well as Symantec Security Response to provide
Alerting Services and Virus Definition Updates for virus outbreaks and security
alerts.
Symantec technical support offerings include:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and Web support components that provide rapid response and
up-to-the-minute information
■Upgrade insurance that delivers automatic software upgrade protection
■Content Updates for virus definitions and security signatures that ensure
the highest level of protection
■Global support from Symantec Security Response experts, which is
available 24 hours a day, 7 days a week worldwide in a variety of languages
for those customers enrolled in the Platinum Support Program
■Advanced features, such as the Symantec Alerting Service and Technical
Account Manager role, offer enhanced response and proactive security
support
Please visit our Web site for current information on Support Programs. The
specific features available may vary based on the level of support purchased and
the specific product that you are using.
To receive the latest product information by email, go to:
http://www.symantec.com/techsupp/bulletin/enterprise.html
and join our support bulletin mailing list.
Licensing and registration
If the product that you are implementing requires registration and/or a license
key, the fastest and easiest way to register your service is to access the
Symantec licensing and registration site at www.symantec.com/certificate.
Alternatively, you may go to www.symantec.com/techsupp/ent/enterprise.html,
select the product that you wish to register, and from the Product Home Page,
select the Licensing and Registration link.

Contacting Technical Support
Customers with a current support agreement may contact the Technical
Support group via phone or online at http://www.symantec.com/techsupp/
enterprise/ .
Customers with Platinum support agreements may contact Platinum Technical
Support via the Platinum Web site at http://www-secure.symantec.com/
platinum/ .
When contacting the Technical Support group, please have the following:
■Product release level
■Hardware information
■Available memory, disk space, NIC information
■Operating system
■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description
■Error messages/log files
■Troubleshooting performed prior to contacting Symantec
■Recent software configuration changes and/or network changes
Customer Service
To contact Enterprise Customer Service online, go to www.symantec.com, select
the appropriate Global Site for your country, then choose Service and Support.
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information on product updates and upgrades
■Information on upgrade insurance and maintenance contracts
■Information on Symantec Value License Program
■Advice on Symantec's technical support options
■Nontechnical presales questions
■Missing or defective CD-ROMs or manuals

Contents
Chapter 1 Introducing Symantec Mail Security for SMTP
About Symantec Mail Security for SMTP .......................................................... 8
What’s new in Symantec Mail Security for SMTP ............................................ 8
New features for all users ............................................................................. 9
Changes for Symantec Mail Security for SMTP users ........................... 10
Changes for Symantec Brightmail Antispam users ...............................12
Components of Symantec Mail Security for SMTP ........................................13
How Symantec Mail Security for SMTP works ...............................................15
Where to get more information .........................................................................16
Chapter 2 Installing Symantec Mail Security for SMTP
Before you install ................................................................................................. 18
Before you install on any platform ........................................................... 18
Before you install on Windows .................................................................. 21
Before you install on Solaris or Linux ...................................................... 21
System requirements .......................................................................................... 23
Hardware requirements .............................................................................. 23
Supported browsers ..................................................................................... 23
Supported LDAP servers ............................................................................. 24
System requirements for Windows ..........................................................24
System requirements for Solaris ............................................................... 24
System requirements for Linux .................................................................25
Installing on Windows ........................................................................................ 25
Installing on Solaris and Linux .......................................................................... 27
Setting up .............................................................................................................. 30
Logging in ..................................................................................................... 30
Registering your system ............................................................................. 31
Configuring your system ............................................................................ 32
Setting up a Scanner ................................................................................... 35
Completing setup ......................................................................................... 38
Accessing the Control Center ............................................................................ 40
Logging out ................................................................................................... 43
Having trouble logging in or out? .............................................................43

6Contents
Areas of localization ............................................................................................ 43
Importing configuration files .................................................................... 44
Configuring system locale .......................................................................... 44
Uninstalling Symantec Mail Security for SMTP ............................................. 46
Uninstalling from Windows ....................................................................... 46
Uninstalling from Linux and Solaris ........................................................ 46
Appendix A Integrating Symantec Mail Security with Symantec
Security Information Manager
About Symantec Security Information Manager ........................................... 49
Interpreting events in the Information Manager ........................................... 50
Firewall events that are sent to the Information Manager ................... 51
Definition Update events that are sent to the Information
Manager ................................................................................................. 51
Message events that are sent to the Information Manager .................. 52
Administration events that are sent to the Information Manager ...... 52
Installing and configuring event logging to the Information Manager ...... 54
Configuring the Information Manager ..................................................... 55
Installing the local SSIM Agent ................................................................. 57
Installing the Collector ............................................................................... 58
Configuring data sources ............................................................................ 58
Uninstalling Information Manager components ........................................... 60
Uninstalling the Collector .......................................................................... 60
Uninstalling the Information Manager Agent ........................................ 60
Appendix B Sample options file
Index

Chapter 1
Introducing Symantec Mail
Security for SMTP
This chapter includes the following topics:
■About Symantec Mail Security for SMTP
■What’s new in Symantec Mail Security for SMTP
■Components of Symantec Mail Security for SMTP
■How Symantec Mail Security for SMTP works
■Where to get more information

8Introducing Symantec Mail Security for SMTP
About Symantec Mail Security for SMTP
About Symantec Mail Security for SMTP
Symantec Mail Security for SMTP offers enterprises an easy-to-deploy,
comprehensive gateway-based email security solution through the following:
■Antispam technology – Symantec’s state-of-the-art antispam filters assess
and classify email as it enters your site.
■Email Firewall – This early response feature can vastly improve message
throughput by analyzing incoming SMTP connections and enabling you to
refuse connections or email messages from hosts it perceives to be hostile.
■Antivirus technology – Antivirus definitions and engines protect your
users from email-borne viruses.
■Content Compliance – These features help administrators enforce corporate
email policies, reduce legal liability, and ensure compliance with regulatory
requirements.
■Group policies and filter policies – An easy-to-use authoring tool lets
administrators create powerful and flexible ad hoc filters for individuals and
groups.
What’s new in Symantec Mail Security for SMTP
All users will find significant new features in this release of Symantec Mail
Security for SMTP. You will also find familiar features, in many cases improved
and expanded. In some cases the names of features are the same; in some cases
the names have changed, and the changes are noted in this chapter.
Note: By default, inbound and outbound messages containing a virus or mass-
mailing worm, and unscannable messages, including malformed MIME
messages, will be deleted. You may want to change the default setting for
unscannable messages if you are concerned about losing important messages.

9Introducing Symantec Mail Security for SMTP
What’s new in Symantec Mail Security for SMTP
New features for all users
Table 1-1 lists features that are new for both Symantec Mail Security for SMTP
users and Symantec Brightmail Antispam users.
Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam
Category Features Description
Threat
protection
features
Improved Email Firewall Protects against directory harvest attacks, denial of service
attacks, spam attacks, and virus attacks.
Sender Authentication Protects against phishing attacks, using the Sender Policy
Framework (SPF), Sender ID, or both.
Improved virus protection Additional virus verdicts protect against suspected viruses,
spyware and adware, and encrypted attachments.
Email messages that may contain viruses can be delayed in the
Suspect VIrus Quarantine, then refiltered, with updated virus
definitions, if available. This feature can be effective in defeating
virus attacks before they are widely known.
View a continuously updated list available of virus definitions.
Inbound and
outbound
content
controls
True file type recognition for
content compliance filtering
Automatically detects file types without relying on file name
extensions or MIME types.
Keywords filtering within
attachments, keyword
frequency filtering
Scan within attachments to find keywords from dictionaries you
create or edit. Specify a number of occurrences to look for.
Regular expression filtering Use regular expressions to further customize filter conditions by
searching within messages and attachments.
Support for third party
archival tools
Specify conditions that result in email being sent to an archival
email address or disk location.
Flexible mail
management
LDAP integration and
synchronization for policies
Dynamic group population via any of several supported LDAP
servers
Expanded variety of actions
and combinations
More than two dozen actions that can be taken on messages, with
many combinations of multiple actions available.
Expanded mail controls SMTP connection management, support for secure email (TLS
encryption), user-based routing, address masquerading, invalid
recipient handling, control over delivery queue processing,
support for static routes
Aliasing Distribution lists automatically expanded, mail filtered and
delivered correctly for each user

10 Introducing Symantec Mail Security for SMTP
What’s new in Symantec Mail Security for SMTP
Changes for Symantec Mail Security for SMTP users
For users of Symantec Mail Security for SMTP 4.1, Version 5.0 provides a host of
expanded and improved capabilities. In addition to the new features listed in
Table 1-1, additional new features for Symantec Mail Security for SMTP users
only are listed in Table 1-2.
Improved
reporting and
monitoring
Extensive set of pre-built
reports, scheduled reporting,
additional alert conditions,
remote syslog support
More than 50 graphical reports that you can generate ad-hoc or
on a scheduled basis. Reports can be exported for offline analysis
and emailed.
Message tracking View a trail of detailed information about a message, including
the filtering processing applied to a message.
Expanded
administration
capabilities
IP-based access control Control which hosts and networks can access your Control Center.
Control over Quarantine size
limits
Specify user-based and total limits, configure automatic message
deletions.
Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam
Category Features Description
Table 1-2 New features for Symantec Mail Security for SMTP users
Category Features Description
Flexible mail
management
Centralized, Web-
based administration
Use the Control Center to manage all aspects of email management and
spam, virus, and content filtering across all servers with one interface.
Group Policies Create separate inbound and outbound policies for an unlimited number
of groups of users. You can specify groups of users based on email
addresses, domains, LDAP groups, or IP addresses. For each category of
email, you can specify custom message handling for each group.
Expanded
notification
capabilities
Automatically send emails notifying specific persons or groups when
certain message conditions are encountered during message filtering.
Create different notifications for different conditions or user groups.
Inbound and
outbound
content controls
Improved
attachment blocking
Strip attachments within container files. Search within attachments
using regular expressions.
Improved
reporting and
monitoring
Aggregated logging
and reporting
Access logs for all messages from all servers via the Control Center.
Manage reports for all servers via the Control Center. Note that many of
the reporting features in SMS for SMTP 4.1 have been replaced in SMS
for SMTP 5.0 by the message tracking feature.