User manual KASPERSKY LAB SECURITY 6.0 FOR MICROSOFT EXCHANGE SERVER 2007 ADMINISTRATOR GUIDE

[. . . ] THE ADMINISTRATOR'S GUIDE KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 Dear User!We hope that this documentation helps you in your work and answers your questions about this software product. This document is the property of Kaspersky Lab: all rights to this document are reserved by the copyright laws of the Russian Federation, and by international treaties. Illegal reproduction and distribution of this document or parts thereof will result in civil, administrative or criminal liability in accordance with the laws of the Russian Federation. [. . . ] A backup copy of the object is created only if in the anti-virus protection settings (see section «Selecting actions to be performed on objects» on page 47) the box Save a copy of the original object in the backup storage is checked. The object is stored in backup storage in encrypted form, which ensures: no risk of infection, as the object is not accessible without decoding; better performance for the anti-virus application, as encrypted files stored in backup storage are not identified as infected and are not rescanned. The data volume that can be stored in the backup storage may be restricted by one of the two following parameters: The total number of objects in the backup storage should not exceed one million. The user can additionally specify restrictions on the backup storage size, and the length of an object's storage period (see section «Configuring the backup storage settings» on page 64). Compliance with these restrictions is checked when a new object copy is saved to backup storage, and also as a regular background task (once per minute). The application performs the following actions: if the allowed number of objects in the backup storage is exceeded, the application will remove the required number of the "oldest" objects; if the backup storage size is limited and there is not enough free disk space to save the new object, the application will free the required space by again deleting the "oldest" objects; if the object storage period is limited, the application will remove objects which have been stored for longer than the limit. The Backup folder allows you to: Viewing the backup storage (see section «Viewing the backup storage» on page 57); edit the backup settings (see section «Viewing the backup storage» on page 57); manage backed-up objects: view their properties (see section «Viewing properties of a backed-up object» on page 59), restore them (see section «Restoring objects from backup storage» on page 63), send them for analysis (see section «Sending objects for analysis» on page 63) and remove them (see section «Deleting objects from backup storage» on page 64). This child node is included in each node representing a managed Kaspersky Security server. 56 BACKUP STORAGE Quick filtering and custom filters can be configured to enable convenient viewing and searching of the backup storage area (see the section «Quick filtering of objects» on page 59), and the section on custom filters (see section «Backup storage filters» on page 60). Filters created for backup storage are displayed in the Backup folder as subfolders, with the names assigned by the administrator when the filters were created. IN THIS SECTION Viewing the backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Viewing properties of a backed-up object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Quick filtering of objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Backup storage filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Restoring objects from backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Sending objects for analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Deleting objects from backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Configuring the backup storage settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 VIEWING THE BACKUP STORAGE To view backup storage: Open the Kaspersky Security 6. 0 for Microsoft Exchange Server 2007 node in the console tree, select the node corresponding to the required server, and open the Backup folder in the console tree. 57 KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 The results pane contains the full list of all objects in backup storage (see the figure below). Figure 24: Viewing the backup storage In addition to the standard email message attributes (Sender, Recipients, Cc, Subject, Sent time, Delivery time), this table displays the following information for each object: Name - attachments will retain their original names, while the body of the message will be saved as <message body>. Type - the type of object saved in the backup storage (Message body or Attachment) indicates where the infected object was detected. Status ­ the status assigned to the object following the anti-virus scan (see section «Selecting actions to be performed on objects» on page 47). Please note that backup storage contains the object copy created before the application modified it. For a disinfected object, the Status field displays its status after the change. Detected in folder - the path to the server folder in which the infected object was found (applicable only for servers acting in Mailbox mode). [. . . ] It shall be at the absolute discretion of Kaspersky Lab whether or not you have satisfied this condition for the provision of Support Services. (ii) Support Services will terminate unless renewed annually by payment of the then-current annual support charge and by successful completion of the Support Services Subscription Form again. (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privacy Policy, which is deposited on ww. kaspersky. com/privacy, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. (iv) "Support Services" means: (a) Daily updates of the anti-virus database; (b) Free software updates, including version upgrades; (c) Extended technical support via e-mail and phone hotline provided by Vendor and/or Reseller; 113 KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 (d) Virus detection and disinfection updates 24 hours per day. [. . . ]