User manual F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 DEPLOYMENT GUIDE

[. . . ] F-Secure Anti-Virus for Microsoft Exchange Deployment Guide "F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. [. . . ] If the installation program cannot connect to F-Secure Policy Manager Server, the following dialog opens. Make sure that the computer where you are installing F-Secure Anti-Virus for Microsoft Exchange is allowed to connect to the administration port (by default, 8080) on F-Secure Policy Manager Server, or if you use proxy, make sure that the connection is allowed from the proxy to the server. For more information, see F-Secure Policy Manager Administrator's Guide. CHAPTER 3 Installation If you want to skip installing MIB files, click Cancel. You can install MIB files later either manually or by running the Setup again. If the product MIB files cannot be uploaded to F-Secure Policy Manager during installation, you can import them manually. For more information, see "Importing Product MIB files to F-Secure Policy Manager Console", 55. 53 Step 17. The list of components that will be installed is displayed. Click Start to install listed components. 54 Step 18. The installation status of the components is displayed. Click Next to continue. Step 19. The installation is complete. Click Finish to close the Setup wizard. CHAPTER 3 Installation 55 3. 8 After the Installation After the installation is complete, importing product MIBs to F-Secure Policy Manager (if that is required), and perform the initial configuration of the product. 3. 8. 1 Importing Product MIB files to F-Secure Policy Manager Console If you are using the product in centrally managed mode, there are cases when the F-Secure Anti-Virus for Microsoft Exchange MIB JAR file cannot be uploaded to F-Secure Policy Manager Server during the installation. In these cases you will have to import the MIB files to F-Secure Policy Manager. You will have to import the MIB files if: F-Secure Anti-Virus for Microsoft Exchange is located in a different network segment than F-Secure Policy Manager, and there is a firewall between them blocking access to Policy Manager's administrative port (8080). F-Secure Policy Manager Server has been configured so that administrative connections from anywhere else than the localhost are blocked. To import the MIBs with F-Secure Policy Manager Console, follow these instructions: 1. Open the Tools menu and select the Installation packages option. 2. When the Import Installation Packages dialog opens, browse to the Jars directory to locate the jar file. 4. After importing the new MIB files, restart F-Secure Policy Manager Console. 56 3. 8. 2 Configuring the Product After the installation, F-Secure Anti-Virus for Microsoft Exchange is functional, but it is using mostly default values. It is highly recommended to go through all the settings of all installed components. Configure F-Secure Anti-Virus for Microsoft Exchange. If F-Secure Anti-Virus for Microsoft Exchange has been installed in the centralized administration mode, use F-Secure Policy Manager Console to configure the settings for F-Secure Content Scanner Server and F-Secure Anti-Virus for Microsoft Exchange and distribute the policy. If F-Secure Anti-Virus for Microsoft Exchange has been installed in stand-alone mode, use the F-Secure Anti-Virus for Microsoft Exchange Web Console to configure the settings of F-Secure Anti-Virus for Microsoft Exchange. Specify the IP addresses of hosts that belong to your organization. Verify that the product is able to retrieve the virus and spam definition database updates. If necessary, reconfigure your firewalls or other devices that may block the database downloads. For more information, see "Network Requirements", 19. If F-Secure Anti-Virus for Microsoft Exchange is installed on the same computer with Microsoft Exchange Server 2010, which is in the Mailbox server role, specify the primary SMTP address for the account which is used to scan items in public folders. The user account must have permissions to access and modify items in the public folders. If the organization has multiple Microsoft Exchange Server installations and Mailbox servers are deployed on dedicated servers, you have to configure the Hub Transport Role and Mailbox Role Servers so that quarantined messages can be delivered: For more information, see "Configuring Mailbox Role Servers", 100. CHAPTER 3 Installation For more information, consult F-Secure Anti-Virus for Microsoft Exchange Administrator's Guide. 57 Network Configuration The mail direction is based on the Internal Domains and Internal SMTP senders settings and it is determined as follows: 1. E-mail messages are considered internal if they come from internal SMTP sender hosts and mail recipients belong to one of the specified internal domains (internal recipients). E-mail messages are considered outbound if they come from internal SMTP sender hosts and mail recipients do not belong to the specified internal domains (external recipients). E-mail messages that come from hosts that are not defined as internal SMTP sender hosts are considered inbound. [. . . ] You can run the F-Secure Support Tool from the F-Secure Anti-Virus for Microsoft Exchange Web Console as follows: 1. Type https://127. 0. 0. 1:25023/fsdiag/ in the browser's address field or or click F-Secure support tool on General Server Properties page. 110 3. The F-Secure Support Tool starts and the dialog window displays the progress of the data collection. Note that in some web browsers, the window may appear behind the main browser window. 4. [. . . ]