User manual KASPERSKY ANTI-VIRUS 4.5 FOR MICROSOFT EXCHANGE SERVER REV 12-2003

[. . . ] KASPERSKY LABS Kaspersky Anti-Virus® 4. 5 for Microsoft Exchange Server USER'S GUIDE KASPERSKY ANTI-VIRUS® 4. 5 FOR MICROSOFT EXCHANGE SERVER User's Guide Kaspersky Labs Ltd. http://www. kaspersky. com Edition date: December 2003 Contents CHAPTER 1. What is new in version 4. 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] %FROM% Displayed sender name. Attachment-name Submission time* Arrival time* Recipient names (Cc:):* Recipient names (To:): * MS Exchange database name* Server name Server Code page* Sender ­ claimed name:* Sender ­ name: * * All macros marked with "*" can be used under MS Exchange Server 2000/2003 only. 68 Kaspersky Anti-Virus 4. 5 for MS Exchange Server Macro name Macro and its meaning %FOLDER_NAME% Name of the folder in which the message was located during checkup. %CONTENT_TYPE% Content type of MIME object. Folder* URL name* Mailbox* Size Subject* Content type* Anti-Virus The list of macros that allow inserting anti-virus parameters into a template is located in the Anti-Virus folder. Macros in the Anti-Virus folder Macro name Macro and its meaning %REPORTADDRESS% Administrator report address. With this parameter you will be able to check whether the message has been checked with the latest anti-virus database. database files (AVC Report address Virus - databases Databases ­ number Databases ­ folder %AVBASES_FOLDER% Anti-virus database directory. Protection of MS Exchange Server Messages 69 Macro name Macro and its meaning %VIRUSNAME% Name of the virus detected. %FULLCHECKEDTIME% Scanning and object disinfection time in milliseconds. This value does not include the time spent for further object treatment: report removal, replacement, generating or delivery. %CURRENT_DATETIME% Current date/time in full format set on server by default. %CHECKEDTIMEEND% Date/time of object scan completion (in full format set on the server by default). %CHECKEDTIME% Date/time of object scan start (in full format set on the server by default). %AVBASES_LAST_UPDATE% Date of anti-virus database update in full format set on the server by default. %INSTALL_FOLDER% Name of the folder in which Kaspersky AntiVirus® 4. 5 for MS Exchange Server is installed. This macro can be used when specifying the paths to the temporary folder, quarantine folders, and log files. %SCANNER_VERSION% Anti-virus Interceptor version. Virus ­ name Virus ­ information Check time Date and time Quarantine ­ folder Quarantine ­ file End of check Start of check Database updating Object ­ name Installation folder Scanner ­ version 70 Kaspersky Anti-Virus 4. 5 for MS Exchange Server Macro name Macro and its meaning %SCANNER_VERSION% Anti-virus Interceptor name. Takes the following values: · · · · · Start/Stop service Critical errors Config updates Anti-Virus Databases reload Virus info Scanner ­ name Report type Event type %EVENT_TYPE% Type of event for which the report was generated. It takes the following values: · · · · · Error type Warning type Information type Audit success Audit failure In addition, two auxiliary macros are used: %CRLF% Move to the next line. This is not displayed on the screen when working in Template Editor but can be displayed when viewed with a standard text editor. This ® symbol is necessary in report templates for joint work with Kaspersky Report Viewer. 3. 4. 8. 3. 2. Conditional Clauses Conditional clauses are contained in the Conditional group. Protection of MS Exchange Server Messages 71 You should keep to the following syntax when inserting conditionals into the templates: <CONDITIONAL_CLAUSE>Text that will be included into message when meeting the set condition</CONDITIONAL CLAUSE> In their syntax conditional clauses are similar to HTML tags. However, you must not use another conditional in the conditional clause text. For example, if you insert the following phrase when creating a template for a disinfected message: <DISINFECTED>Virus %VIRUSNAME% has been deleted from this message attachment %OBJECTNAME%. </DISINFECTED> then, after Anti-Virus Engine detects and deletes the W97M/Media virus in a test. doc file, the user will see the following message: Virus W97M/Media has been deleted from this message attachment test. doc. One should pay attention to syntax when using conditional clauses. [. . . ] You may terminate this Agreement at any point by destroying all copies of the Software and the Documentation. (i) Kaspersky Labs will provide you with the support services ("Support Services") as defined below for a period of one year on: (a) Payment of its then current support charge; and (b) Successful completion of the Support Services Subscription Form as provided to you with this Agreement or as availabsle on the Kaspersky Labs website, which will require you to produce the Key Identification File which will have been provided to you by Kaspersky Labs with this Agreement. It shall be at the absolute discretion of Kaspersky Labs whether or not you have satisfied this condition for the provision of Support Services. (ii) Support Services will terminate unless renewed annually by payment of the then current annual support charge and by successful completion of the Support Services Subscription Form again. [. . . ]