F-Secure Anti-Virus for Microsoft Exchange Administrator's Guide "F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure Corporation reserves the right to modify specifications cited in this document without prior notice. Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of F-Secure Corporation. Copyright © 1993-2010 F-Secure Corporation. All rights reserved. Portions Copyright © 2003 Commtouch ® Software Ltd. Copyright © 1997-2009 BitDefender. This product includes software developed by the Apache Software Foundation (http:// www.apache.org/). Copyright © 2000-2007 The Apache Software Foundation. All rights reserved. This product includes PHP, freely available from http://www.php.net/. Copyright © 1999-2007 The PHP Group. All rights reserved. This product includes code from SpamAssassin. The code in the files of the SpamAssassin distribution are Copyright © 2000-2002 Justin Mason and others, unless specified otherwise in that particular file. All files in the SpamAssassin distribution fall under the same terms as Perl itself, as described in the "Artistic License". This product may be covered by one or more F-Secure patents, including the following: GB2353372 GB2366691 GB2366692 GB2366693 GB2374260 GB2367933 GB2368233 Contents About This Guide 7 How This Guide Is Organized .............................................................................................. 8 Conventions Used in F-Secure Guides .............................................................................. 10 Symbols .................................................................................................................... 10 Chapter 1 1.1 1.2 Using F-Secure Anti-Virus for Microsoft Exchange 12 Administering F-Secure Anti-Virus for Microsoft Exchange ....................................... 13 Using Web Console ................................................................................................... 14 1.2.1 Logging in for the First Time........................................................................... 14 1.2.2 Modifying Settings and Viewing Statistics with Web Console ........................ 16 1.2.3 Checking the Product Status ......................................................................... 17 Using F-Secure Policy Manager Console .................................................................. 17 1.3.1 Modifying Settings and Viewing Statistics in Centrally Administered Mode ... 17 1.3 Chapter 2 2.1 2.2 Centrally Managed Administration 20 Overview ....................................................................................................................21 F-Secure Anti-Virus for Microsoft Exchange Settings ................................................ 21 2.2.1 General Settings............................................................................................. 21 2.2.2 Transport Protection ....................................................................................... 31 2.2.3 Storage Protection.......................................................................................... 50 F-Secure Anti-Virus for Microsoft Exchange Statistics............................................... 84 2.3.1 Common ......................................................................................................... 85 2.3.2 Transport Protection ....................................................................................... 86 2.3.3 Storage Protection.......................................................................................... 87 2.3.4 Quarantine...................................................................................................... 89 F-Secure Content Scanner Server Settings............................................................... 90 2.4.1 Interface.......................................................................................................... 90 2.4.2 Virus Scanning ............................................................................................... 91 2.4.3 Virus Statistics ................................................................................................ 94 2.4.4 Database Updates.......................................................................................... 95 2.4.5 Spam Filtering ................................................................................................ 96 2.4.6 Threat Detection Engine................................................................................. 97 2.3 2.4 3 2.4.7 2.4.8 2.5 Proxy Configuration ........................................................................................ 98 Advanced........................................................................................................ 99 F-Secure Content Scanner Server Statistics ...........................................................100 2.5.1 Server ...........................................................................................................100 2.5.2 Scan Engines ...............................................................................................101 2.5.3 Common .......................................................................................................102 2.5.4 Spam Control................................................................................................102 2.5.5 Virus Statistics ..............................................................................................103 F-Secure Management Agent Settings ....................................................................103 F-Secure Automatic Update Agent Settings ............................................................105 2.6 2.7 Chapter 3 3.1 3.2 3.3 Administration with Web Console 107 Overview ..................................................................................................................108 Home........................................................................................................................109 Transport Protection.................................................................................................113 3.3.1 Attachment Filtering......................................................................................115 3.3.2 Virus Scanning .............................................................................................117 3.3.3 Grayware Scanning ......................................................................................121 3.3.4 Archive Processing.......................................................................................124 3.3.5 Content Filtering ..........................................................................................127 3.3.6 Other Options ...............................................................................................130 Spam Control ...........................................................................................................133 3.4.1 Status ...........................................................................................................134 3.4.2 Settings.........................................................................................................135 Storage Protection ...................................................................................................139 3.5.1 Real-Time Scanning .....................................................................................140 3.5.2 Manual Scanning .........................................................................................153 3.5.3 Scheduled Scanning ....................................................................................166 Quarantine ...............................................................................................................178 3.6.1 Query............................................................................................................180 3.6.2 Options .........................................................................................................180 Automatic Updates...................................................................................................188 3.7.1 Communications...........................................................................................190 General Server Properties .......................................................................................195 3.8.1 Administration...............................................................................................196 3.4 3.5 3.6 3.7 3.8 4 3.8.2 3.8.3 3.8.4 3.8.5 3.8.6 Network Configuration .................................................................................202 Notifications ..................................................................................................204 Sample Submission......................................................................................205 Engines.........................................................................................................207 Lists and Templates .....................................................................................216 Chapter 4 4.1 4.2 4.3 4.4 4.5 4.6 Quarantine Management 219 Introduction ..............................................................................................................220 4.1.1 Quarantine Reasons.....................................................................................221 Configuring Quarantine Options...............................................................................222 Quarantine Status ....................................................................................................222 4.3.1 Quarantine Logging ......................................................................................222 Searching the Quarantined Content.........................................................................222 Query Results Page .................................................................................................227 4.5.1 Viewing Details of the Quarantined Message ..............................................228 Quarantine Operations.............................................................................................229 4.6.1 Reprocessing the Quarantined Content .......................................................231 4.6.2 Releasing the Quarantined Content .............................................................232 4.6.3 Removing the Quarantined Content .............................................................233 4.6.4 Deleting Old Quarantined Content Automatically .........................................234 Moving the Quarantine Storage ...............................................................................235 4.7 Chapter 5 Updating Virus and Spam Definition Databases 237 Overview ..................................................................................................................238 Automatic Updates with F-Secure Automatic Update Agent....................................239 Configuring Automatic Updates ...............................................................................239 Appendix A Variables in Warning Messages Appendix B Sending E-mail Alerts And Reports B.1 B.2 241 244 List of Variables................................................................................................................ 242 Overview ................................................................................................................. 245 Solution ....................................................................................................................245 B.2.1 Creating a Scoped Receive Connector ........................................................246 5 B.2.2 Grant the Relay Permission on the New Scoped Connector........................247 B.2.3 Specify SMTP Server for Alerts and Reports ...............................................247 Appendix C Troubleshooting 248 C.1 Overview ..................................................................................................................249 C.2 Starting and Stopping...............................................................................................249 C.3 Viewing th ...