GlobalSCAPE Mail Express. User Guide Version 3.2

Transcription

1 GlbalSCAPE Mail Express User Guide Versin 3.2

2 GlbalSCAPE, Inc. (GSB) Crprate Headquarters Address: 4500 Lckhill-Selma Rad, Suite 150, San Antni, TX (USA) Sales: (210) Sales (Tll Free): (800) Technical Supprt: (210) Web Supprt: GlbalSCAPE, Inc. All Rights Reserved Nvember 1, 2012

3 Table f Cntents Intrductin t Mail Express... 9 Mail Express Architecture...10 Mail Express Quick Start...13 What's New in Mail Express?...15 Installing and Uninstalling Mail Express...15 System Requirements and Prerequisites Mail Express Server Requirements/Prerequisites SQL Server 2008 R2 Express Installatin Requirements/Prerequisites Outlk Add-In Requirements/Prerequisites Outlk Add-In Prerequisite Resurces Authenticatin Optins fr Cnnectins t SQL Server 2008 R Internal SQL Server 2008 R2 Express Instance TCP/IP Settings Additinal Service Dependency External SQL Server 2008 R2 Instance Installing Mail Express Server Silent Installatin f Mail Express Server Deplying the Outlk Add-In Installing the Outlk Add-In File/Cnfiguratin Lcatins Running the MSI Installer Viewing the Mail Express Outlk Add-In User Interface Silent Installatin f the Outlk Add-In Installatin Arguments Generating the Installatin Script Deplyment Upgrading Mail Express Server Upgrading the Outlk Add-In Finalizing the Upgrade Determining the Versin f Mail Express Server Registering Mail Express Licensing the Outlk Add-In Registering DMZ Gateway Installatin Lgging Debug Lgging iii

4 Mail Express User Guide v3.2 Installatin Cmmand-Line Parameters Mail Express Server Database Utility Cmmand Line Parameters fr the Database Utility Mdifying Mail Express Database Cnfiguratin Repairing the Mail Express Installatin Uninstalling Mail Express Server Cnfiguring and Administering Mail Express Server...69 Initial Cnfiguratin f Mail Express Server Lgging in t Mail Express Server Specifying the Mail Express Server Hst Name Cnfiguring the Default Landing Page Specifying the System Ntificatin Address Cnfiguring Active Directry Authenticatin Cnfiguring Mail Express fr Windws (Kerbers) Authenticatin Cnfigure Active Directry Cnfigure Kerbers Cnfigure the Service Principal Names Cnfigure the Outlk Add-In Cnfiguring Mail Express fr Micrsft Exchange Server Cmmunicatin Cnfiguring Annymus Access t Exchange In Exchange 2007 and In Exchange Cnfiguring Mail Express with the New Mdule Cnfiguring Authenticated Access t Exchange Exchange 2007 and Exchange Cnfiguring Mail Express fr Authenticated Access Testing the Cnfiguratin Cnfiguring File Strage and Purging Cnfiguring Database Purging and Ntificatins Cnfiguring the Drp-Off Prtal Overview f the Add-In and Internal Web Prtal Authenticating Outlk Users Manual Authenticatin Single Sign On Cnfiguring the Add-In and Internal Web Prtal Overview f Mail Express Invitatins iv

5 Table f Cntents Custm URLs fr the Drp-Off and Internal Prtal Enabling the Pick-Up Prtal Enabling and Cnfiguring the Reply Prtal Cnfiguring the DMZ Gateway Cnnectin Advanced DMZ Gateway Cnfiguratin Optins Viewing and Managing Files Viewing and Managing Packages Viewing Mail Express Status Lgging Mail Express Server Activities Installatin Lgging Mail Express Server Diagnstics Lgging Mail Express Server Service Diagnstics Lgging Mail Express Server Event Viewer Custmizing Mail Express Pages and Ntificatins Templates Cmmn Template Data Structures Server Templates Outlk Add-In Templates Web Prtal Templates Misc Templates Replacing the Mail Express Lg with Yur Own Mail Express Security and SSL Cnfiguring the Default HTTPS Listener (Prt 443) SSL Prtcls SSL Algrithms SSL Certificates Specifying an SSL Certificate Manually Cnfiguring SSL Certificate/Key Optins Resetting the Cnfiguratin f the SSL Certificate and Key SSL Certificate Authrity Certificate Chain Supprt What is the Mail Express Server Public Certificate/Private Key Pair? What is an SSL Certificate Authrity Certificate Chain? When d I need t specify an SSL Certificate Authrity Certificate Chain? Hw is the SSL Certificate Authrity Certificate Chain cnfigured? Supprted Certificate Chain Frmat Hw d I knw that it is wrking? Higher Security Settings v

6 Mail Express User Guide v3.2 Internet Explrer and High Security Settings Alternative 1: Mdify Client Cnfiguratin Alternative 2: Mdify Server Cnfiguratin Using Anti-Virus with Mail Express The DMZ Prtcl Handler SSL Prtcls SSL Algrithms SSL Certificates Managing Administratr and User Accunts Managing Internal User Accunts Managing Drp-Off User Accunts Auditing and Reprting Mail Express Activity Generating Reprts f Attachment Activity Detailed Activity Reprt Viewing Cnfiguratin Histry Viewing Audit Event Histry Viewing User Histry Viewing Invite Activity Audit Event Types Mail Express Database Tables Using Mail Express in Outlk Mail Express Outlk Add-In The Mail Express User Interface Message Buttns Cnnecting t Mail Express Server Cnfiguring Message Optins Turning On r Off the Outlk Add-In Sending Files with the Mail Express Outlk Add-In Viewing Mail Express Add-In Status Recvering an frm "Unrecverable Errr" Cancelling Packages Lgging Mail Express Outlk Add-In Activities Changing the Message Frmat Changing the Message Frmat in Outlk Changing the Message Frmat in Outlk 2007 and Mail Prfiles with Multiple Accunts Dwnlad Ntificatins vi

7 Table f Cntents Using Mail Express in a Web Brwser Cnnecting t the Web Prtal Requesting Access t the Drp-Off Prtal Requesting Access t the Internal Prtal Sending Files Using the Drp-Off Prtal Sending Files with the Internal Prtal Sending Invites with the Internal Prtal Picking Up Files Recvering a Lst Passwrd Maximum File Size fr Brwser-Based Uplads Viewing Unicde Filenames Cnfiguring the Web Brwser Sending Files with the Reply Prtal Using the Accunt Activatin Prtal Getting Help Finding Infrmatin in the Help Searching the Help File r glbalscape.cm Printing a Help Tpic Sharing Tpic Links GlbalSCAPE Supprt Center Using the Knwledgebase Using Advanced Search Mail Express End-User License Agreement (EULA) Index vii

8 Mail Express User Guide v3.2 viii

9 Intrductin t Mail Express Mail Express allws yu t send large file attachments t recipients inside r utside f yur rganizatin quickly, reliably, and securely, while reducing the lad n yur mail server. Mail Express als allws yur recipients t send large file attachments t yu thrugh a Web prtal. Yu can send files using a Micrsft Outlk Add-In, a Web prtal, r bth, using secure authenticatin and auditing capabilities. The Mail Express system will fflad file attachments t an independent server and can ntify recipients that the files are available fr pickup. Yu can cnfigure the authenticatin scheme t change the way recipients authenticate against Mail Express Server t dwnlad their files. One authenticatin scheme allws users t access their files withut prviding any credentials; the ther requires the recipient t type in a temprary passwrd that is prvided in ut-f band cmmunicatin with the recipient (e.g., phne call r ). By default the Mail Express System will retain attachments fr 2 weeks, but yu can increase r decrease this perid based n crprate security, auditing, and usage requirements. When yu send an attachment, the attachment is upladed t Mail Express Server ver HTTPS, and then the recipient receives an with hyperlinks t dwnlad the files frm the server. When the recipient clicks the hyperlink in the ntificatin, a Web page appears frm which the recipient can dwnlad the attachment. All visits t the dwnlad page and file dwnlads are recrded in the database. Auditing t a database prvides a detailed histry f transfers shwing senders and receivers, which files were transferred, and when they were transferred. When yu allw Mail Express t manage attachments sent via Micrsft Outlk, s remain in the Outbx until the Mail Express prcessing is cmplete, and the attachments are cmpletely upladed. Nrmally, mail clients have a hard time managing large attachments and can ften becme unrespnsive while these files are attached. Using Mail Express wn Attach File buttn, very large files can be attached t an , quickly reducing the time waiting fr the mail client t becme respnsive again. When Mail Express manages an , it uplads the attachments t the Mail Express Server, remves the attachments frm the , and inserts links int the frm which the recipient(s) can dwnlad the attachment(s). This prcess has the added benefit f end users nt exceeding their server's mailbx quta r attachment size limits, since the resulting itself is nrmally quite small. The Mail Express wrkflw: 1. The Outlk user creates an with attachments and clicks Send. 2. Mail Express: Inserts links in the in place f the attachments. Stres the attachments n the Mail Express Server. Sends the The recipient pens the The recipient clicks the links t dwnlad the attachments frm the Mail Express Server. 9

10 Mail Express User Guide v3.2 Mail Express Architecture The Mail Express (ME) applicatin is cmpsed f the fllwing cmpnents: Server Applicatins The Server applicatins f Mail Express are the "brains" f the system. Using settings and cnfiguratin defined by the Mail Express administratr, web server applicatins transfer, stre, and manage all f the files prcessed by the system. A database applicatin stres and prvides data regarding all f the file transfers that pass thrugh the system and the cnfiguratin changes that are requested by the administratr Administratin Prtal As with any enterprise level sftware, Mail Express prvides an interface that allws the "wner" f the applicatin access t system cnfiguratin and management, sender administratin, and transactin auditing. Mail Express ffers a web interface that an administratr (either an IT administratr r a business unit manager, depending n wh within an rganizatin wns the slutin) can use t access all f the necessary management features and functins. Outlk Add-In The Micrsft Outlk Add-In prvides the ability t autmatically send files using Mail Express via the nrmal Outlk messaging wrkflw based either n predetermined use cases (either administratr r sender defined) r in an ad hc manner using Mail Express tls that are integrated int the Outlk User Interfaces. N Mail Express-specific actin will be required by the sender after the initial installatin and cnfiguratin f the Add-In. Internal Web Prtal Mail Express includes an Internal Prtal, a web page frm which internal parties can send files t recipients inside r utside the rganizatin. The Internal Prtal prvides a web-based alternative t using the Outlk Add-In and is driven by a set f administrative settings that are shared with the Add-In. Package Drp-ff Mail Express includes a Package Drp-ff Prtal, a web page frm which external parties can send files t Mail Express custmers. The Package Drp-ff Prtal prvides a bi-directinal flw f infrmatin between yu and yur partners. Package Pick-up Mail Express prvides multiple ptins fr recipients t dwnlad the files that have been sent t them. Recipients have the ability t dwnlad files instantly by clicking n the links prvided in an r by visiting the Package Pick-up Prtal where files are listed fr dwnlad. Reply Prtal When an internal r external user receives an frm a Mail Express user, the can cntain a link t the Reply Prtal in which recipients can respnd t the t return files t the sender. The fllwing diagram illustrates hw the cmpnents wrk tgether in the netwrk 10

11 11

12 Mail Express User Guide v3.2 12

13 Mail Express Quick Start Prvided belw is a "quick start" check list t assist yu in getting Mail Express installed and functinal. Please click the links in each step t read the detailed prcedures, cmplete with screen shts. Additinal cnfiguratin may be required, depending n yur individual requirements. All passwrds must be at least 6 characters and cntain at least 3 f the fllwing types f characters: uppercase letters, lwercase letters, numbers, and special characters (e.g., #, %, ^). If yu print this checklist, please refer t the nline help fr screen shts and detailed prcedures: Or print the PDF f the Mail Express user guide (apprximately 200 pages), available at Server Installatin: 1. Verify that prerequisites are installed and system requirements have been met. 2. Ensure that prt 443 is available n the IP address designated fr Mail Express Server. TIP: Use the fllwing cmmand t check against any cnflicts: netstat -anp TCP NOTE: If there is any ther prcess listening n prt 443 (including the glbal interface), please refer t Mail Express Knwledgebase article #10636 fr mre infrmatin. 3. Mail Relay shuld be turned n if yu d nt create an accunt n the Exchange Server fr Mail Express Server t send s. Fr infrmatin refer t hw-t-allw-relaying.html. Refer t Cnfiguring Annymus Access t Exchange and Cnfiguring Authenticated Access t Exchange fr infrmatin abut cnfiguring Exchange. 4. Create a new service accunt n yur Active Directry netwrk fr the Mail Express service. This accunt is required fr Mail Express t perfrm Kerbers authenticatin fr cnnecting clients and fr LDAP queries, and it can als be used t allw authenticated relay thrugh Exchange. 5. Ensure yu have access t lg int a Dmain Cntrller with Dmain Admin rights. This is required in rder t enable Kerbers authenticatin in Mail Express. After installatin and initial cnfiguratin have been cmpleted, it is n lnger required. 8. Install all available Windws Updates (required fr security and cmpatibility) 9. Rebt the server cmputer. (required befre the Mail Express installatin can begin) 10. Dwnlad a cpy f the Mail Express installer nt the Mail Express cmputer s lcal hard drive. 11. Install Mail Express Server (run the executable); 32-bit r 64-bit depending n perating system. Yu will need the fllwing infrmatin: Installatin directry (Where t write installatin files) Attachment strage directry (Any strage that can be accessed frm server) Mail Express administratr username/passwrd and address If using an external database, database server cnnectin parameters Server Cnfiguratin: 12. Specify the dmain f Mail Express Server. This is the system name that will be used fr prtal and package URL infrmatin. Fr example, if the dmain is set t "me.glbalscape.cm", the package links that recipients receive will lk like " identifier>" 13. Specify System Ntificatin addresses ( address t which system ntificatins are sent; the address prvided at installatin is used by default.) 14. Cnfigure the Exchange cnnectin 15. Enable attachment pickup 16. Create new Internal user fr testing purpses 13

14 Mail Express User Guide v3.2 Outlk Installatin and Cnfiguratin: 17. Install the Outlk Add-In n the client wrkstatin(s), including Add-In prerequisites 18. Specify the hst name, username, and passwrd fr the Internal user created during server setup 19. Enable the Mail Express User Interface in Outlk. 20. Enable the Status pane in Outlk t display the cnnectin status between the Mail Express Add-In and Mail Express Server 21. Send a test with an attachment using the Attach File icn n the Mail Express tl bar. 22. Pick up the package Advanced Features (can be setup after the initial cnfiguratin is cmpleted and the basic system functinality has been verified. Nt critical t the basic functinality f the system.) Specify a Mail Express SSL Certificate Enable Active Directry Authenticatin Enable Single Sign On using Kerbers Enable Drp-ff Page Enable and cnfigure Internal Prtal Enable and cnfigure the Reply Prtal Enable attachment purging Enable database purging Silent installatin f Outlk Add-In clients Install and cnfigure DMZ Gateway Register the Server and DMZ Gateway in the Mail Express administratin interface. 14

15 What's New in Mail Express? The fllwing features were added fr Mail Express versin 3.2: Cnnect t an external database (nt installed by Mail Express) Internal users can send invitatins t external users t create a Drp-Off user accunt Reply Prtal allws recipients access t Mail Express when using the Reply link in File Management page (separate frm the Package Management page) allws yu t view and manage individual files that were sent Enhanced package management, allwing yu t expire packages and view package details, including dwnlad infrmatin, invitatin status, and reply link usage Invitatin Activity reprt allws yu t view when an invitatin was sent, t whm it was sent, and s n Specify initial administratr address during installatin Create up t 25,000 accunts f each type f user (Admin, Internal, and Drp-Off) Installing and Uninstalling Mail Express Installing Mail Express includes installing Mail Express Server and then installing the Mail Express Outlk Add-In n users' wrkstatins. These tpics prvide the system requirements, installatin prcedures, and activatin instructins. System Requirements and Prerequisites GlbalSCAPE Quality Assurance (QA) tested and apprved Mail Express fr use with the prgrams and hardware described belw. The minimum system requirements belw are rganized by Mail Express Server, SQL Server 2008 R2 Express, and Outlk Add-In requirements. The installer must be run by a user with administrative privileges n the cmputer. The installer/uninstaller will check fr this at the beginning f executin. While it is pssible fr the Mail Express Server and Add-In t wrk n system cnfiguratins ther than thse listed belw, prgrams and hardware nt listed belw were nt tested and are nt supprted. Please review each f the requirements and prerequisites belw and ensure that they are met befre installing Mail Express. Ensure all Micrsft updates have been installed and the cmputer has been rebted. If all f the prerequisites are nt met, the installatin will abrt. Yu can print this page f the help and check ff the requirements as yu verify that they are installed/available. Mail Express Server Requirements/Prerequisites The table lists the system requirements/prerequisites n the cmputer n which Mail Express Server is installed. Fr Outlk Add-In system requirements, refer t Outlk Add-In Requirements/Prerequisites, belw. Fr SQL Server 2008 R2 Express system requirements, refer t SQL Server 2008 R2 Express Installatin Requirements/Prerequisites, belw. (These are the requirements that the installer verifies; refer t the Micrsft link belw fr additinal SQL Server system requirements.) Fr SQL Server 2008 R2 system requirements, refer t Mail Express "silently" installs Java Runtime Envirnment (JRE) versin build 25 r later and Apache Tmcat versin (web server); yu d nt need t update r maintain these applicatins. 15

16 Mail Express User Guide v3.2 Mail Express Server Requirement/Prerequisite Mail Express Server must be accessible frm the Internet, either directly r via the DMZ Gateway, if applicable, s that recipients can brwse the attachment links t pick up attachments (typically in the DMZ behind a firewall such as Micrsft ISA Server). Using GlbalSCAPE s DMZ Gateway server, the Mail Express Server des nt have t remain in the DMZ and can reside within the internal netwrk. When deplying the Mail Express Server in a virtualized cluster envirnment, setting a static MAC address fr the server is required. Ensure that prt 443 is available t the Mail Express IP address (and that n prt cnflicts exist n that IP address). This prt can be assigned t a specific IP address placed n the system fr Mail Express expressly. If the firewall is enabled n the cmputer n which Mail Express Server is installed, yu must create an exceptin fr TCP prt 443. Supprts bth 32-bit and 64-bit editins f the fllwing perating systems: Micrsft Windws Server 2008 with SP1 r later Micrsft Windws Server 2003 with SP2 r later (The Active Directry Dmain Cntrller n Windws 2003 Systems require the Windws 2003 SP2 32-bit Supprt Tls t be installed (dwnlad frm Micrsft Dwnlad Center).) Micrprcessrs: 1 GHz x86-based prcessr r higher fr 32-bit perating systems 1.4 GHz x86-based prcessr r higher fr 64-bit perating systems 1 GB RAM r mre Disk space: Installatin temprarily requires up t 125 MB free disk space n the system drive t accmmdate temprary installatin files. Up t 500 MB f additinal strage n the selected installatin drive t accmmdate Mail Express Server lg files and temprary files Adequate strage shuld be prvided fr upladed attachments Regular disk maintenance/management f resurces. Mail Express administratin requires a small amunt f available disk space in rder t service requests. When the disk is full, Mail Express may nt functin as expected. 1024x768 r higher reslutin mnitr Supprted brwsers (with latest OS/brwser patches, with JavaScript and ckies enabled): Internet Explrer 7 r later (Internet Explrer 8 recmmended) Firefx 3.6 r later (Firefx 5 recmmended) Safari 4 r later (Safari 5 recmmended) Access t an Exchange Server: Exchange Server 2003 Exchange Server 2007 Exchange Server 2010 Additinal mdules in Exchange Server that meet the specific needs f Mail Express. Refer t Cnfiguring Annymus Access t Exchange r Cnfiguring Authenticated Access t Exchange fr details. Service accunt in AD fr Mail Express (Optinal); Accunt is necessary fr Kerbers authenticatin; an existing accunt can be used, if preferred. Access t a SQL Server 2008 R2 database (SQL Server Express, which can be installed with the Mail Express installer fr evaluatin, is nt intended fr prductin use.) See SQL Server 2008 R2 Express-specific requirements belw. Anti-virus: (ptinal) The Mail Express Server cmputer shuld have a current anti-virus applicatin installed s that attachments managed by Mail Express Server are free frm malicius sftware. If slwer-than-nrmal uplads are bserved, ensure yur antivirus sftware is prperly cnfigured. 16

17 Installing and Uninstalling Mail Express SQL Server 2008 R2 Express Installatin Requirements/Prerequisites If yu are installing SQL Server 2008 R2 Express (available in the Mail Express Server installer fr evaluatin purpses), ensure that the cmputer meets the requirements/prerequisites in the table belw. When yu chse t install SQL Server 2008 R2 Express with the Mail Express Server installer, the installer will verify that the prper prerequisites/requirements are available befre installing. If the requirements are nt met, the installatin will abrt. Listed in the table belw are the requirements that the installer verifies; refer t the Micrsft link belw fr additinal SQL Server system requirements. If yu are cnnecting t an external SQL Server 2008 R2 database, refer t the SQL Server 2008 R2 requirements. SQL Server 2008 R2 Express Requirement/Prerequisite Micrsft.NET Framewrk v3.5.1 SP1 Micrsft Installer Service 4.5 r later (included in Windws 2008; fr Windws 2003, dwnlad frm Micrsft Dwnlad Center) The fllwing privileges must be enabled fr the administer accunt running the installer: SeBackupPrivilege SeDebugPrivilege SeSecurityPrivilege Installatin temprarily requires up t 3.6 GB f free space n the system drive Minimum f 500 MB n the system drive, cnsumed by SQL Server installatin files and initial database 10 GB f additinal strage n the system drive t accmmdate database grwth Outlk Add-In Requirements/Prerequisites The table belw lists the system requirements/prerequisites n the cmputer n which the Outlk Add-In is installed. Outlk Add-In Requirement/Prerequisite Mail Express Server must be installed befre installing the Outlk Add-In. Operating Systems: Windws XP Pr Windws Vista Business Windws 7 Prfessinal Outlk versins (refer t Micrsft dcumentatin fr Outlk requirements): Outlk 2003 Outlk 2007 Outlk 2010, 32-bit r 64-bit Minimum system requirements A single 1 GHz x86-based CPU r better 1 GB f RAM r mre 1024x768 r higher reslutin mnitr Outlk Add-In prerequisites based n Micrsft Office versin; Due t interdependencies amng the fllwing prerequisites they shuld be installed in the rder listed. The prerequisites are available at the links listed belw in Outlk Add-In Prerequisite Resurces. 17

18 Mail Express User Guide v3.2 Outlk Add-In Requirement/Prerequisite Prerequisites when using Office 2003: 1. Micrsft Windws Installer 3.1 r Later 2. Micrsft.NET Framewrk v3.5 SP1 3. Micrsft Office 2003 Primary Interp Assemblies 4. Micrsft Visual Studi 2005 Tls fr Office Secnd Editin Runtime (build ) Prerequisites when using Office 2007: 1. Micrsft Windws Installer 3.1 r Later 2. Micrsft.NET Framewrk v3.5 SP1 3. Micrsft Office 2007 Primary Interp Assemblies 4. Micrsft Visual Studi Tls fr the Micrsft Office System (versin 3.0 Runtime) and Service Pack 1 Prerequisites when using Office 2010: 1. Micrsft Windws Installer 3.1 r Later 2. Micrsft.NET Framewrk 3.5 SP1 3. Micrsft Office 2010 Primary Interp Assemblies 4. Micrsft Visual Studi 2010 Tls fr Office Runtime Outlk Add-In Prerequisite Resurces The Outlk Add-in prerequisites (nted in the table abve) can be btained frm the links listed belw. Micrsft Windws Installer 3.1 r later Installatin f the Mail Express Outlk Add-In and its ther prerequisites requires Micrsft Windws Installer 3.1 r later. As f this writing the current versin f the Micrsft Windws Installer is 4.5. Infrmatin fr bth resurces is included belw. Micrsft Windws Installer 3.1 Installer Name: Windws Installer 3.1 Redistributable (v2) Installer File: WindwsInstaller-KB v2-x86.exe Dwnlad Page: b838-de776fd4138c Direct Dwnlad Link: Micrsft Windws Installer 4.5 Installer Name: Windws Installer 4.5 Redistributable Installer File: <Operating System Dependent> Dwnlad Page: 95b9-54d056d6f9f4&displaylang=en Micrsft.NET Framewrk v3.5 SP1 Installer Name: Micrsft.NET Framewrk 3.5 Service Pack 1 Installer File: dtnetfx35setup.exe Dwnlad Page: 5D1A-413D DA479AB0D7&displaylang=en Direct Dwnlad Link: Nte: Installatin may require rebt 18

19 Installing and Uninstalling Mail Express Micrsft Office 2003 Primary Interp Assemblies Installer Name: Office 2003 Update: Redistributable Primary Interp Assemblies Installer File: O2003PIA.MSI Dwnlad Page: AC BA0-D36D67E0F4AD&displaylang=en Nte: The dwnlad file is named "O2003PIA.EXE". The "O2003PIA.MSI" installer file will be extracted frm this executable when run. Micrsft Office 2007 Primary Interp Assemblies Installer Name: 2007 Micrsft Office System Update: Redistributable Primary Interp Assemblies Installer File: 2007PIA.msi Dwnlad Page: Nte: The dwnlad file is named "PrimaryInterpAssembly.exe". The "2007PIA.msi" installer file will be extracted frm this executable when run. Micrsft Office 2010 Primary Interp Assemblies Installer Name: Micrsft Office 2010: Primary Interp Assemblies Redistributable Installer File: 2010PIA.msi Dwnlad Page: 4bd7-a dc15855 Nte: The dwnlad file is named "PIARedist.exe". The "2010PIA.msi" installer file will be extracted frm this executable when run. Micrsft Visual Studi 2005 Tls fr Office Secnd Editin Runtime (build ) Installer Name: Micrsft Visual Studi 2005 Tls fr Office Secnd Editin Runtime (build ) (x86) Installer File: vstr.exe Dwnlad Page: Micrsft Visual Studi Tls fr the Micrsft Office System (versin 3.0 Runtime) and Service Pack 1 Nte that this prerequisite cnsists f 2 separate installers. The main installer and a service pack upgrade installer. Bth are detailed belw. Micrsft Visual Studi Tls fr the Micrsft Office System (versin 3.0 Runtime) Installer Name: Micrsft Visual Studi Tls fr the Micrsft Office system (versin 3.0 Runtime) (x86) Installer File: vstr30.exe Dwnlad Page: a2d1-eecd7a092dcb&displaylang=en Micrsft Visual Studi Tls fr the Micrsft Office System Service Pack 1 Installer Name: Micrsft Visual Studi Tls fr the Micrsft Office System (versin 3.0 Runtime) Service Pack 1 (x86) Installer File: vstr30sp1-kb x86.exe 19

20 Mail Express User Guide v3.2 Dwnlad Page: 973F-0B96E6CCF376 Direct Dwnlad Link: Micrsft Visual Studi 2010 Tls fr Office Runtime Installer Name: Micrsft Visual Studi 2010 Tls fr Office Runtime (VSTOR 2010) Redistributable Installer File: Fr 32-bit editins f Micrsft Windws OS - vstr40_x86.exe Nte: On 32-bit editins f Micrsft Windws OS, it is nt strictly required t install this prerequisite prir t installing the Mail Express Outlk Add-In because Outlk 2010 will autmatically install the Micrsft Visual Studi 2010 Tls fr Office Runtime if it is nt already installed. This ccurs the first time that Outlk lads the Add-In and des nt require the user t have administrative privileges n the cmputer. Hwever, this will cause a slight delay the first time end-users start Outlk after the Add-In has been installed. Administratrs wishing t prvide a mre streamlined end-user experience may want t g ahead and pre-install this prerequisite. Fr 64-bit editins f Micrsft Windws OS - vstr40_x64.exe Nte: On 64-bit editins f Micrsft Windws OS, this autmatic installatin des nt functin; therefre, the prerequisite must be manually installed. Dwnlad Page: Direct Dwnlad Link: Fr 32-bit editins f Micrsft Windws OS - Fr 64-bit editins f Micrsft Windws OS - Authenticatin Optins fr Cnnectins t SQL Server 2008 R2 The Mail Express Server installer and the Mail Express Server supprt the SQL Server Authenticatin and Windws Authenticatin ptins fr cnnecting t the SQL Server 2008 R2 instance. When using SQL Server Authenticatin, bth a username and a passwrd must be prvided. When using Windws Authenticatin the current user accunt fr the prcess will be used when cnnecting:. When the installer perfrms tasks that require cnnecting t the instance such as creating the database, database user, and database schema r when upgrading the schema it will use the credentials fr the user accunt that launched the installer. When the Mail Express Server cnnects t the database, it will use the credentials f the "Lg n" accunt that is cnfigured t run the Mail Express Server Windws service. T specify the accunt that Mail Express Server service is t lg n as 1. Click Start, click in the Start Search bx, type the fllwing text, then press ENTER: services.msc 2. In the details pane, right-click the Mail Express Server service, and then click Prperties. 20

21 Installing and Uninstalling Mail Express 3. Click the Lg On tab, and then d ne f the fllwing: T specify that the service uses the Lcal System accunt, click Lcal System accunt. (Set by default.) T specify that the service uses the Lcal Service accunt, click This accunt, and then type NT AUTHORITY\LcalService. T specify that the service uses the Netwrk Service accunt, click This accunt, and then type NT AUTHORITY\NetwrkService. T specify anther accunt, click This accunt, click Brwse, and then specify a user accunt in the Select User dialg bx. When yu are finished, click OK. Type the passwrd fr the user accunt in the Passwrd and Cnfirm passwrd bxes and then click OK. If yu select the Lcal Service accunt r Netwrk Service accunt, d nt type a passwrd. T cnfigure hw a service is started using the cmmand line Yu can als manage services using the sc cnfig cmmand. Fr mre infrmatin abut the ptins available, pen a cmmand prmpt and type sc cnfig /?. Fr examples and detailed descriptins f the cmmand-line ptins, see the cmmand-line reference at Internal SQL Server 2008 R2 Express Instance Fr new installatins yu can use an internal evaluatin SQL Server 2008 R2 Express database instance. When selected, the installer will autmatically install the database instance with an instance name f "MailExpress" and a database name f "MAILEXPRESS". The initial Mail Express Server administratr passwrd specified during installatin will be used fr the "sa" accunt passwrd. Additinally, the installer will create a database user accunt fr use by the Mail Express Server. The username and passwrd fr this accunt will match the initial Mail Express administratr passwrd. Only the Database Engine and limited cnfiguratin tls are installed. The tls include the "SQL Server Cnfiguratin Manager." The fllwing services are installed: SQL Server (MAILEXPRESS) The Mail Express Database Instance. SQL Server Agent (MAILEXPRESS) This service is disabled by default and nt used by Mail Express. SQL Server Brwser the brwser service used t lcate the MAILEXPRESS database instance when using dynamic TCP/IP prts. SQL Server VSS Writer TCP/IP Settings The Mail Express Server uses Java Database Cnnectivity (JDBC) and the SQL Server JDBC driver t cmmunicate with the database. This driver uses TCP/IP t cnnect t the database s the MAILEXPRESS SQL Server database instance is installed with TCP/IP supprt enabled. Fr enhanced security, the TCP/IP settings are cnfigured t nly listen fr cnnectins frm the lcal machine, using the lcalhst interface ( ). T allw remte cnnectins r t mdify the cmmunicatins settings, use the SQL Server Cnfiguratin Manager. Additinal Service Dependency When the internal evaluatin database is used, the Mail Express Server installer will autmatically create an additinal service dependency fr the Mail Express Server Windws service n the SQL Server Database instance Windws Service - "SQL Server (MAILEXPRESS)." 21

22 Mail Express User Guide v3.2 External SQL Server 2008 R2 Instance The installer allws yu t cnfigure the Mail Express Server t use a pre-existing external SQL Server 2008 R2 Instance. Yu can instruct the installer t either create a new database and user n an existing external instance r t use an existing database and database user. In this case, the installer will simple create the necessary database bject and default data within the existing database. This ptin is prvided fr users that prefer mre manual cntrl ver the database creatin. Required Settings Fr prper peratin the Mail Express Server requires the fllwing attributes f the instance, database, and database user accunt used by the Mail Express Server: The TCP/IP Prtcl must be enabled fr cnnectins t the SQL Server instance The database must use a case sensitive cllatin The database "ALLOW_SNAPSHOT_ISOLATION" setting must be ON The database "READ_COMMITTED_SNAPSHOT" setting must be ON The database user s default schema shuld be set t "db" By default the database user s "Database rle membership" will be set t "dbwner"; hwever, because the Mail Express Server des nt mdify the database DDL during the curse f peratin, the "Database rle membership" may be ptinally lcked dwn t "dbdatareader" and "dbdatawriter" after initial installatin. Nte, hwever, that during subsequent upgrades, the database user used during the upgrade must have permissin t mdify the database DDL. As such, prvisin is prvided in the upgrade sequence f the installer t specify an alternate user t use fr perfrming the actual upgrade. Alternatively, yu may temprarily grant the nrmal Mail Express Server database user the right t mdify the database DDL fr the curse f the upgrade. Database Creatin Example The fllwing sample SQL statements will create the database. The cllatin name shuld be adjusted depending n the desired database language. (Case-sensitive cllatin is required. Case-sensitive cllatins typically include "_BIN" (fr Binary) r "_CS" (fr Case Sensitive) in the cllatin identifier. Yu shuld avid using cllatins whse identifier cntains "_CI" (fr Case Insensitive).) CREATE DATABASE "MAILEXPRESS" COLLATE SQL_Latin1_General_CP1_CS_AS ALTER DATABASE "MAILEXPRESS" SET ALLOW_SNAPSHOT_ISOLATION ON ALTER DATABASE "MAILEXPRESS" SET READ_COMMITTED_SNAPSHOT ON Database User Creatin Example The fllwing sample statements will create the database user: CREATE LOGIN "medatabase" WITH PASSWORD=' Hv2rKQ8n2NVM', DEFAULT_DATABASE="MAILEXPRESS", CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF USE "MAILEXPRESS"; CREATE USER "medatabase" FOR LOGIN "medatabase" WITH DEFAULT_SCHEMA=db USE "MAILEXPRESS"; EXEC sp_addrlemember 'db_wner', "medatabase" 22

23 Installing and Uninstalling Mail Express Installing Mail Express Server This tpic prvides infrmatin abut installing Mail Express Server. Fr infrmatin abut installing the Outlk Add-In, refer t Installing the Outlk Add-In. Befre beginning installatin, please review the fllwing imprtant infrmatin: Mail Express versin 3.0 and later d nt supprt upgrading frm Mail Express v2.2. The installer will abrt the installatin if it finds Mail Express 2.2 installed. Yu must uninstall Mail Express versin 2.2 befre cntinuing with installatin f versin 3.0. Separate installers are prvided fr 32-bit and 64-bit installatins. Please use the prper installer fr yur perating system. mail-express-windws-x86-32.exe is the installer fr use n 32-bit systems. mail-express-windws-x86-64.exe is the installer fr use n 64-bit systems. Yu must run the installer with administrative privileges. When the installer is executed, it checks fr permissin and abrts the installatin if yu d nt have the prper permissin. The installer installs Mail Express Server, the Java Runtime Envirnment (JRE), Apache Tmcat (webserver), and, ptinally, SQL Server 2008 R2 Express. If yu are installing SQL Server 2008 R2 Express: SQL Server 2008 R2 Express requires that.net Framewrk 3.5 SP1 is already installed, as stated in the system requirements. The installer will nt prceed with installatin if the prper versin f.net Framewrk is nt fund and if the cmputer was nt rebted after.net was installed. SQL Server 2008 R2 Express uses TCP/IP t cnnect t the database s the MAILEXPRESS SQL Server database instance is installed with TCP/IP supprt enabled. Fr enhanced security, the TCP/IP settings are cnfigured t listen fr cnnectins frm the lcal cmputer nly, using the lcalhst interface ( ). T allw remte cnnectins r t mdify the cmmunicatins settings, use the SQL Server Cnfiguratin Manager. A database instance with an instance name f MAILEXPRESS is created when yu use the Mail Express installer t install the database. The installer creates the database and creates the Mail Express database user with the username and passwrd supplied during installatin. Only the SQL Server Express Database Engine and limited cnfiguratin tls are installed, including the SQL Server Cnfiguratin Manager. Installing SQL Server 2008 R2 Express is ptinal. SQL Server Express is ffered nly fr evaluatin purpses; it is nt recmmended fr prductin. Service Dependencies: During installatin, the installer will autmatically create service dependencies fr the Mail Express Server Windws service n "Afd The Ancillary Functin Driver fr WinSck" and "Tcpip The TCP/IP service." These service dependencies are created t ensure the Mail Express Server is nt started until the netwrking layer r the perating system is peratinal. An installer wizard guides yu thrugh the installatin prcess. Yu will need t prvide the fllwing infrmatin: Installatin directry (default = \Prgram Files\GlbalSCAPE\Mail Express) File stre directry (default = \<Installatin_Directry>\MailExpressAttachments). This directry will be used t stre attachments, frequently, very large attachments. Ensure this lcatin can prvide adequate disk strage fr upladed attachments. 23

24 Mail Express User Guide v3.2 Initial Mail Express administratr accunt username (1-128 characters) and passwrd (6-128 characters). The passwrd must cntain at least three f the fllwing types f characters: uppercase letters, lwercase letters, numbers, special characters (e.g., #, %, ^). This accunt will be used fr the initial lg in t the Mail Express Administratin Prtal and finalize the initial system cnfiguratin. D nt use an Active Directry (AD) username as the Mail Express administratr accunt, as this may cause later cllisins between internal Mail Express accunts and AD accunts. Chse and type the passwrd carefully--if yu d nt knw yur passwrd at initial lgin, yu will nt be able t lg in and will have t uninstall and then reinstall the applicatin. After yu lg in t the server, yu will have the pprtunity t change the passwrd and t create ther administratr accunts. Using a UNC path t netwrk lcatins requires running the Mail Express Server Windws service under a true user accunt instead f Lcal System. By default, Lcal System accunt des nt have access t netwrk paths, and giving it access is nt recmmended. If yu are cnnecting t a remte SQL Server database (supprted in v3.2 and later), yu will need the database cnnectin infrmatin (hst name, prt, privileged user credentials). All ther cnfiguratin, such as licensing, IP address/hstname, prt, and s n is cnfigured in the Web administratin interface after installatin. Befre installing, refer t System Requirements. If the system requirements are nt met, the installer will fail. Fr instructins fr uninstalling the server, refer t Uninstalling Mail Express Server. The SQL Server Express prtin f the installatin can be quite time cnsuming. T install Mail Express Server 1. Review the imprtant infrmatin abve befre starting the installatin. Nt reading and heeding the infrmatin abve culd cause yur installatin t fail. 2. If Mail Express versin 2.2 is installed, uninstall it befre cntinuing with the installatin f versin 3.0 r later. 3. Duble-click the installer. The Welcme page appears. 24

25 Installing and Uninstalling Mail Express 4. Click Next. The License Agreement appears. 5. Read the license agreement, then click I agree. The Chse Install Lcatin page appears. 6. Specify a lcatin fr Mail Express Server, r keep the default f C:\Prgram Files\GlbalSCAPE\Mail Express. 7. Click Next. The Chse Attachment Flder page appears. 25

26 Mail Express User Guide v Specify a lcatin in which t stre file attachments, r keep the default f C:\Prgram Files\GlbalSCAPE\Mail Express\MailExpressAttachments. This flder ptentially requires a large amunt f available space. Using a UNC path t netwrk lcatins requires running the Mail Express Server Windws service under a true user accunt instead f Lcal System. By default, Lcal System accunt des nt have access t netwrk paths, and giving it access is nt recmmended. D nt use a mapped drive fr the file strage lcatin. 9. Click Next. The Chse Start Menu Flder page appears. 10. Click Next. The Mail Express Server Administratin Accunt page appears. 26

27 Installing and Uninstalling Mail Express In the Username bx, prvide a username (1-128 characters) t use when administering and mnitring Mail Express Server. The username is case-sensitive. D nt use an Active Directry (AD) username as the Mail Express administratr accunt, as this may cause later cllisins between internal Mail Express accunt s and AD accunts. In the Passwrd and Cnfirm Passwrd bx, prvide a passwrd (6-128 characters) t use when administering and mnitring Mail Express Server. The passwrd is case sensitive, shuld be between 6 and 128 characters, and must cntain at least three f the fllwing types f characters: uppercase letters, lwercase letters, numbers, special characters (e.g., #, %, ^). If the passwrd des nt meet cmplexity requirements, an errr message appears. Chse and type the passwrd carefully; if yu d nt knw yur passwrd at initial lgin, yu will nt be able t lg in and will have t uninstall and then reinstall the applicatin. After yu lg in t the server, yu will have the pprtunity t change the passwrd and t create ther administratr accunts. In the Address bx, prvide the address that will receive Mail Express administratin ntificatins. 11. Click Next. The Chse Database Server page appears. 27

28 Mail Express User Guide v Chse whether t install the evaluatin database use an existing database, then fllw ne f the three prcedures (a, b, r c) in the table belw t install the evaluatin database, use an existing database, r create a new database. Type f database t install Prcedure a. Evaluatin database Click Install SQL Server 2008 R2 Express Editin, then click Install. (The Next buttn changes t Install if yu chse this ptin.) 1. Click Use an existing SQL Server r SQL Server Express, then click Next. The b. Existing database Chse New r Existing Database page appears. Use this ptin t have the installer initialize an existing database and cnfigure the Mail Express Server t use the database. Yu shuld use this ptin if yu have already manually created the database and database user accunt fr use by the Mail Express Server, r if yu have previusly used the Mail Express Server Installer t create a database. Yu will need t prvide the installer with the database cnnectin infrmatin and user accunt credentials fr the existing database and database user. 2. Click Use an existing database. The Cnfigure Database Server Cnnectin Settings page appears. 28

29 Installing and Uninstalling Mail Express Type f database t install Prcedure 3. Prvide the cnnectin infrmatin: Database server hst name (255 characters is the maximum length fr a SQL Server hstname) Database server prt: This ptin is disabled by default and the value defaults t 1433 (the default SQL Server listener prt). When enabled, the prt value is required and must be between 1 and If yu are nt running the SQL Server Brwser Service and nt using the default prt, then yu need t specify the prt. Database instance name: This ptin is enabled by default and the value defaults t "MSSQLSERVER." When enabled, the instance name is required and must be between 1 and 128 characters. If yu have nt specified a prt but are running the SQL Server Brwser service, then yu need t specify the database instance name s that the brwser service can be queried fr the crrect prt. "MSSQLSERVER" is the default instance name fr an SQL Server 2008 R2 installatin. Authenticatin mde: Use SQL Server authenticatin when cnnecting as the privileged user accunt, which is the default. When SQL Server authenticatin is selected, yu must specify the username and passwrd fr the privileged user accunt t use when cnnecting t the database. When Windws authenticatin is selected, the installer will use the active Windws user accunt when cnnecting t the database. (The "active Windws user accunt" is the accunt running the installer.) Lgin name and passwrd: The credentials Mail Express is t use t lg in t the database. When Windws authenticatin is selected these fields are disabled. 4. (Optinal) T verify that Mail Express will be able t cnnect t the database using these settings click Test. a. If the cnnectin is successful, click OK t dismiss the success message. b. If the cnnectin fails, click OK t dismiss the errr message and then verify that yu have entered the cnfiguratin crrectly. 5. Click Install. 29

30 Mail Express User Guide v3.2 Type f database t install c. Create a new database Use this ptin t have the installer create a new database and database user within an existing SQL Server Instance. The installer will als initialize the database and cnfigure the Mail Express Server t use the newly created database user when cnnecting t the database. Yu will need t prvide the installer with the SQL Server Instance cnnectin infrmatin and user credentials fr an accunt, such as the "sa" accunt, that has privileges t create the database and database user. The installer will use these credentials t create the new database, database user, and database bjects. Prcedure 1. Click Use an existing SQL Server r SQL Server Express, then click Next. The Chse New r Existing Database page appears. 2. Click Create a new database. The Cnfigure Database Server Cnnectin Settings page appears. 3. On the Cnfigure Database Server Cnnectin Settings page, prvide the database instance cnnectin infrmatin: Database server hst name (255 characters is the maximum length fr a SQL Server hstname) Database server prt: This ptin is disabled by default and the value defaults t 1433 (the default SQL Server listener prt). When enabled, the prt value is required and must be between 1 and If yu are nt running the SQL Server Brwser Service and nt using the default prt, then yu need t specify the prt. Database instance name: This ptin is enabled by default and the value defaults t "MSSQLSERVER." When enabled, the instance name is required and must be between 1 and 128 characters. If yu have nt specified a prt but are running the SQL Server Brwser service, then yu need t specify the 30

31 Installing and Uninstalling Mail Express Type f database t install Prcedure database instance name s that the brwser service can be queried fr the crrect prt. "MSSQLSERVER" is the default instance name fr an SQL Server 2008 R2 installatin. Authenticatin mde: Use SQL Server authenticatin when cnnecting as the privileged user accunt, which is the default. When SQL Server authenticatin is selected, yu must specify the username and passwrd fr the privileged user accunt t use when cnnecting t the database. When Windws authenticatin is selected, the installer will use the active Windws user accunt when cnnecting t the database. (The "active Windws user accunt" is the accunt running the installer.) Privileged username and Privileged user passwrd: The privileged database accunt, such as the "sa" accunt, has permissin t cnnect t the database server, create users, and create r alter users. If the passwrd des nt meet cmplexity requirements, an errr message appears. When Windws authenticatin is selected these fields are disabled. 4. (Optinal) T verify that Mail Express will be able t cnnect t the database using these settings, click Test. If the cnnectin is successful, click OK t dismiss the success message. If the cnnectin fails, click OK t dismiss the errr message and then verify that yu have entered the cnfiguratin crrectly. 5. Click Next. The Cnfigure Database Settings page appears. 6. Prvide the database name and wner credentials: Database name: Name f the database; e.g., MAILEXPRESS Authenticatin mde: When SQL Server authenticatin is selected, yu must specify the username and passwrd fr the user accunt t use when cnnecting t the database. When Windws authenticatin is selected, the installer will use the active Windws user accunt when cnnecting t the database. (The "active Windws user accunt" is the accunt running the installer.) Database wner username and Database wner passwrd: The accunt credentials t be used by the Mail Express Server when cnnecting t the database. When Windws authenticatin is selected these fields are disabled. 7. If the cnnectin is successful, click Install. 13. Mail Express Server is installed, and then the Installatin Cmplete page appears. 31

32 Mail Express User Guide v Click Next. The Finish page appears. 15. Befre clicking Finish, select r clear the check bxes as needed: Create a desktp shrtcut fr the Administratin Interface This check bx is selected by default. The shrtcut allws yu t cnnect t the administratin interface in yur default brwser. Shw versin histry This check bx is cleared by default. If yu select the check bx, when yu click Finish, a text file f the versin histry appears in yur default text reader (typically Ntepad). Start the Mail Express Server service This check bx is selected by default. If yu d nt want the service t start yet, clear the check bx. Yu will nt be able t pen the administratin interface if the service is stpped. 32

33 Installing and Uninstalling Mail Express The Mail Express Server service Lg On Accunt is set t use the Lcal System accunt by default. If yu want t run the service under a true user accunt, rather than the Lcal System accunt, clear the Start the Mail Express Server service check bx and change the Lgn Accunt prir t starting the service. Start the Administratin Interface This check bx is selected by default. If yu have pted t start the Mail Express Server service, this ptin will launch yur default web brwser and pen the Mail Express Administratin Prtal. 16. After yu click Finish, if yu chse t start the administratin interface, the Welcme t Mail Express Administratin page appears in yur default web brwser. Refer t Initial Cnfiguratin f Mail Express Server fr instructins fr initial setup. (Bth the username and the passwrd are case sensitive.) Silent Installatin f Mail Express Server The Mail Express Server installer supprts silent installatin, maintenance, and remval. Installatin prceeds withut any prmpts r visual indicatins t the user. The installer lgging functinality may be used t verify the utcme and diagnse ptential issues. T initiate a silent installatin use the /S cmmand-line parameter and prvide additinal parameters as described in Installatin Cmmand-Line Parameters. The sectins belw prvide infrmatin n the required and ptinal cmmand line parameters fr each f the main functins r paths in the installer. New Installatin Using an Internal Evaluatin Database This path will instruct the installer t install the Mail Express Server and the internal SQL Server 2008 R2 Express database instance, initialize the database, and set it fr use by the Mail Express Server. This database instance is intended fr evaluatin purpses. Prductin envirnments shuld use an external SQL Server 2008 R2 database. This ptin is nly applicable when the Mail Express Server is nt already installed. Required Parameters /DatabaseType="INTERNAL" /AdminUsername="<username>" /AdminPasswrd="<passwrd>" /Admin ="< >" Optinal Parameters /S /debug /lgfile="<file>" /InstallDirectry="<path>" /AttachmentDirectry="<path>" /StartMenuGrup="<grup>" /SkipPrereqCheck /SkipDBUtilFirewallUpdate /SkipDesktpShrtcut /SkipStartService /SkipSQLServerPrereqCheck /SkipSQLServerInstall /SkipSQLServerSettings /SkipSQLServerCreateDB /SkipSQLServerCreateDBUser /SkipSQLServerCreateSchema 33

34 Mail Express User Guide v3.2 New Installatin Creating a New External Database and Database User This ptin installs the Mail Express Server and creates a database and database user n an external SQL Server database instance. This ptin is nly applicable when the Mail Express Server is nt already installed. Required Parameters /DatabaseType="EXTERNAL" /ExternalDatabaseMde="CREATE" /AdminUsername="<username>" /AdminPasswrd="<passwrd>" /Admin ="< >" /DatabaseServerName="<server>" /AuthenticatinType="<type>" /LginName="<username>" if /AuthenticatinType="SQLSERVER" /LginPasswrd="<username>" if /AuthenticatinType="SQLSERVER" /DBOAuthenticatinType="<type>" /DBOLginName="<username>" /DBOPasswrd="<passwrd>" if /DBOAuthenticatinType="SQLSERVER" Optinal Parameters /S /debug /lgfile="<file>" /InstallDirectry="<path>" /AttachmentDirectry="<path>" /StartMenuGrup="<grup>" /SkipPrereqCheck /SkipDBUtilFirewallUpdate /SkipDesktpShrtcut /SkipStartService /SkipSQLServerCreateDB /SkipSQLServerCreateDBUser /SkipSQLServerCreateSchema /DatabasePrt="<prt>" /DatabaseInstanceName="<instance name>" /DatabaseName="<database name>" New Installatin Using an Existing Database and Database User This ptin installs the Mail Express Server and uses an existing database and database user n an external SQL Server database instance. This ptin is nly applicable when the Mail Express Server is nt already installed. Required Parameters /DatabaseType="EXTERNAL" /ExternalDatabaseMde="EXISTING" /AdminUsername="<username>" /AdminPasswrd="<passwrd>" /Admin ="< >" /DatabaseServerName="<server>" /AuthenticatinType="<type>" /LginName="<username>" if /AuthenticatinType="SQLSERVER" /LginPasswrd="<username>" if /AuthenticatinType="SQLSERVER" Optinal Parameters /S /debug /lgfile="<file>" /InstallDirectry="<path>" /AttachmentDirectry="<path>" /StartMenuGrup="<grup>" /SkipPrereqCheck /SkipDBUtilFirewallUpdate /SkipDesktpShrtcut /SkipStartService /SkipSQLServerCreateSchema /DatabasePrt="<prt>" /DatabaseInstanceName="<instance nane>" /DatabaseName="<database name>" 34

35 Installing and Uninstalling Mail Express Reinstall This path will instruct the installer t reinstall the Mail Express Server sftware. This path is nly applicable when the Mail Express Server is already installed and its versin is the same as the installer. Required Parameters Optinal Parameters /InstallerOperatin=REINSTALL /S /debug /lgfile="<file>" /SkipPrereqCheck /SkipDBUtilFirewallUpdate /SkipDesktpShrtcut /SkipStartService Upgrade This ptin upgrades an existing installatin f the Mail Express Server sftware and assciated database. This ptin is nly applicable when an lder versin f the Mail Express Server is currently installed. Required Parameters Optinal Parameters /InstallerOperatin=UPGRADE /S /debug /lgfile="<file>" /AuthenticatinType="<type>" /LginName="<username>" if /AuthenticatinType="SQLSERVER" /LginPasswrd="<username>" if /AuthenticatinType="SQLSERVER" /SkipPrereqCheck /SkipDBUtilFirewallUpdate /SkipDesktpShrtcut /SkipStartService /SkipSQLServerCreateSchema Uninstall This ptin remves an existing installatin f the Mail Express Server sftware. This ptin is nly applicable when the Mail Express Server is already installed. Required Parameters Optinal Parameters /InstallerOperatin=UNINSTALL /S /debug /lgfile="<file>" /SkipSQLServerUninstall 35

36 Mail Express User Guide v3.2 Mdify the Database Cnfiguratin This ptin mdifies the database settings currently in use by the Mail Express Server. This path is nly applicable when the Mail Express Server is already installed and its versin is the same as the installer. Required Parameters /InstallerOperatin=DATABASE /DatabaseServerName="<server>" Optinal Parameters /S /debug /lgfile="<file>" /DatabasePrt="<prt>" /DatabaseInstanceName="<instance nane>" /DatabaseName="<database name>" /AuthenticatinType="<type>" /LginName="<username>" if /AuthenticatinType="SQLSERVER" /LginPasswrd="<username>" if /AuthenticatinType="SQLSERVER" 36

37 Installing and Uninstalling Mail Express Deplying the Outlk Add-In Listed belw are different methds that yu can use t install the Outlk Add-In t multiple desktps acrss the enterprise. The fllwing are just general guidelines; the scenari that wrks best fr yur rganizatin may differ. Deplying the Outlk Add-In includes installing the Outlk Add-In prerequisites based n Micrsft Office Versin. Methds fr deplying the Add-In include: (Preferred methd) Silently install the prerequisites and the Add-In. In this scenari, users are never asked t d anything t install the Add-In. Installatin can be accmplished a variety f ways, such as with a lgn script r grup plicy. Silently install the prerequisites, then ask users t run the Add-In installer (.msi file) frm a netwrk lcatin. Silently install the prerequisites, then ask users t run a batch file in a netwrk lcatin t install the Add-In silently (r with minimal user interactin) using the installatin arguments (described in Silent Installatin f the Outlk Add-In). With a batch file, the user des nt need t knw abut the Add-In installatin arguments r hw t use the cmmand line. Place the prerequisite installer bundle in a netwrk lcatin, then ask end users t manually install the Add-In using the btstrapper, which will install the prerequisites and launch the.msi file. (The prerequisites and.msi file need t be in the same flder.) Yu will need t prvide end users with instructins t cnnect t Mail Express Server and t cnfigure message ptins. Yu can cpy and paste instructins int an directly frm the help file r prvide end users with an nline link t the tpics in Using Mail Express in Outlk. Installing the Outlk Add-In Refer t Deplying the Outlk Add-In t determine deplyment methd befre installing. This tpic cvers each f the pssible methds. Fr instructins fr upgrading the Add-in, refer t Upgrading the Outlk Add-In. The Outlk Add-In installer is available frm the Mail Express Server administratin Outlk Add-In Installer page and in the Mail Express Server installatin flder (by default, C:\Prgram Files\GlbalSCAPE\Mail Express). Befre installing the Outlk Add-In, be sure t review the system requirements. Yu need administratr privileges t install its prerequisites; hwever, the Add-In installer des nt require administrative privileges t run. If.NET is nt installed befre yu install the Add-In, yu shuld rebt after cmpleting the.net installatin. If yu d nt rebt after installing.net, the Mail Express Add-In may nt lad prperly in Outlk. Yu shuld install and cnfigure Mail Express Server befre yu install the Outlk Add-In. If yu will be using Kerbers authenticatin, yu must create a dmain accunt fr the Mail Express Server fr authenticating with the Kerbers Key Distributin Center (typically Active Directry) and t allw a Service Principal Name (SPN) t be assciated with the accunt. (Refer t "T create the SPN" belw.) 37

38 Mail Express User Guide v3.2 Installers are prvided in the Mail Express Server installatin directry and, fr access cnvenience, n the Outlk Add-In Installer page. These installers are fr "prf f cncept" nn-silent installatins and are nt intended t be deplyed acrss the enterprise. (Refer t Deplying the Outlk Add-In fr mre infrmatin.) The btstrapper installers in the "Prerequisite Installer Bundles" require Internet cnnectivity in rder t dwnlad the Add-In prerequisites and must be run by an accunt that has administrative privileges n the cmputer n which the Add-In is being installed. Als, the btstrapper installers are nt designed t be deplyed thrugh a deplyment tl. They d nt supprt installatin in quiet/silent mde. Alternatively, each prerequisite item that the Add-In requires can be dwnladed frm Micrsft s web site and each can be deplyed and installed silently. "Silent mde" is the preferred methd fr deplying the Add-In s prerequisites. The same MSI and btstrapper used t deply the 32- bit Outlk Add-In are used t deply the 64-bit Outlk Add-In. (64-bit Outlk Add-in supprt available in v3.2 and later.) T install the Outlk Add-In 1. Lg in t the Mail Express Administratin prtal. 2. Befre installing, review the Outlk Add-In's system requirements and ensure Outlk is updated with the latest service packs. 3. In the navigatin pane, under System Infrmatin, click Add-In Installer. The Outlk Add-In Installer page appears. 4. Dwnlad the applicable installatin file(s) frm the Outlk Add-In Installer page (using the Dwnlad links in the tp sectin f the page) r cpy the installatin files frm the Mail Express Server installatin directry (by default, C:\Prgram Files\GlbalSCAPE\Mail Express). 38

39 Installing and Uninstalling Mail Express Mail Express Outlk Add-In Installer Only (If the prerequisites are nt yet installed, use ne f the "Prerequisite Installer" bundles belw instead f this installer.) Installs the Mail Express Outlk Add-In n wrkstatins running Micrsft Office 2003, 2007, r 2010 when the prerequisite sftware has been pre-installed. This installer will simply install the Add-In; it will nt install the prerequisite items that it requires. This installer supprts silent installatin mde and des nt require administrative privileges t install. Prerequisite Installer Bundle - Outlk 2003 (If the prerequisites are already installed, yu d nt need this bundle. Instead, use the "Mail Express Outlk Add-In Installer Only" abve.) Zipped bundle cntaining the Mail Express Outlk Add-In and prerequisite sftware fr installatin n wrkstatins running Micrsft Outlk This bundle can be used t install the prerequisite items that the Add-In requires plus the Add-In. Typically, yu will run the btstrapper installer in this bundle, which will install the Add-In prerequisites, and then afterwards it will run the Add-In Installer t install the Add-In. Prerequisite Installer Bundle - Outlk 2007 (If the prerequisites are already installed, yu d nt need this bundle. Instead, use "Mail Express Outlk Add-In Installer Only" abve.) Zipped bundle cntaining the Mail Express Outlk Add-In and prerequisite sftware fr installatin n wrkstatins running Micrsft Outlk This bundle can be used t install the prerequisite items that the Add-In requires plus the Add-In. Typically, yu will run the btstrapper installer in this bundle, which will install the Add-In prerequisites, and then afterwards it will run the Add-In Installer t install the Add-In. Prerequisite Installer Bundle - Outlk 2010 (If the prerequisites are already installed, yu d nt need this bundle. Instead, use the "Mail Express Outlk Add-In Installer Only" abve.) Zipped bundle cntaining the Mail Express Outlk Add-In and prerequisite sftware fr installatin n wrkstatins running Micrsft Outlk This bundle can be used t install the prerequisite items that the Add-In requires plus the Add-In. Typically, yu will run the btstrapper installer in this bundle, which will install the Add-In prerequisites, and then afterwards it will run the Add-In Installer t install the Add-In. 5. In the Outlk Add-In Installatin Script area: a. Fr the Installatin type ptins, specify whether the script is fr a New/Upgrade r t Mdify/Repair existing installatin: Use the New/Upgrade ptin when installing the Add-In fr the first time r when installing a new versin f the Add-In fr the first time (i.e. an upgrade). Use the Mdify/Repair existing ptin when reinstalling the same versin f the Add-In that is already n the cmputer either t repair it r t prvide different values fr the installatin parameters. If yu chse the wrng ptin, the Add-In may nt install at all. b. In the Internal Mail Express server hst bx, specify the Mail Express Server hstname as recgnized by internal wrkstatins. (This may be different frm the setting n the General Cnfiguratin page, which may be the hst name f the frnting web server.) c. In the Internal Mail Express server prt bx, specify the prt thrugh which the Mail Express Server cnnects, if different than the default. (It will default t 443.) d. Fr the Lgin type ptins, specify Manual r Single sign-n. 39

40 Mail Express User Guide v3.2 If yu click Single sign-n, in the Service Principal Name (SPN) bx, specify the service cntext. (e.g., <service type >/< mail express instance server hst name >:< prt number >/< service name >). Fr instance HTTP/meserver. The SPN is a name by which the Add-In can uniquely identify the Mail Express Server Service. T create the SPNs, execute the fllwing cmmands n the dmain s primary Active Directry server using the cmmand cnsle. In the cmmands belw, substitute: <MailExpressServerHstName> with the hst name f the Mail Express Server <MailExpressServerFullyQualifiedDmainName> with the fully qualified dmain name f the Mail Express Server <PreAuthUsername> with the username f the pre auth user accunt. Yu will need t create a dmain accunt fr the Mail Express Server fr participating in Kerbers authenticatin. This accunt is used by the Mail Express Server when authenticating with the Kerbers Key Distributin Center (typically Active Directry) and allws a Service Principal Name (SPN) t be assciated with the accunt using the setspn cmmand. setspn A HTTP/<MailExpressServerHstName> <PreAuthUsername> setspn A HTTP/<MailExpressServerFullyQualifiedDmainName> <PreAuthUsername> Fr example: setspn A HTTP/meserver mepreauthuser setspn A HTTP/meserver.glbalscape.cm mepreauthuser These SPNs shuld wrk regardless f the accunt the Mail Express Server Service is running as. T view the SPNs t verify that they were created successfully, run the fllwing cmmand, substituting <PreAuthUsername> with the username f the pre auth user accunt: setspn l <PreAuthUsername> Fr example: setspn -1 mepreauthuser If the Outlk Add-In is installed silently, the SPN must be prvided as an installatin parameter. The installatin parameter name is "SERVICEPRINCIPALNAME." d. Click Generate t create the installatin script. The necessary script appears in the Installatin script bx. e. Click Dwnlad t save the script. 6. Save the script and the installatin files in the same directry, r ensure that the script can access the installer. The cmmand line parameters in the script are imperative fr the prper peratin f the Outlk Add-In. 7. Use ne f the fllwing methds t install the Add-In n users' desktps: Execute the script at each user's desktp t silently install the Add-In. Install the Add-In manually n a user s desktp by duble-clicking n the Add-In MSI installer. Or, send an instructing users t install the Add-In themselves and prvide a walkthrugh r screenshts t guide them thrugh the installatin wizard screens. Deply the Add-In acrss the enterprise using a deplyment tl. Fr example, use a lgn script t install the Add-In silently n wrkstatins since the Add-In MSI des nt require administrative privileges t install. 40

41 Installing and Uninstalling Mail Express File/Cnfiguratin Lcatins The lg files fr the Add-In are (by default) stred in %userprfile%\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin\Lgs\. The default installatin directry f the Add-In is %userprfile%\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin. Cnnectin-based settings and settings cnfigured by the installer are stred in the registry under the fllwing key: HKEY_CURRENT_USER\Sftware\GlbalSCAPE\Mail Express Outlk Addin\Settings General settings are saved in an XML file named settings.cnfig, which will reside under the installatin flder f the Add-In. Running the MSI Installer T run the Outlk Add-In installer (msi) manually 1. Duble-click the.msi file. The Welcme page appears. 2. Click Next. The Cnnectin Settings page appears. If prerequisites required t install the Add-In are nt fund n the system, an errr message appears. Click OK t abrt the installatin, and install the prerequisites using the apprpriate btstrapper installer r dwnlad them frm Micrsft s website and installing them separately. Afterwards, restart the Add-In installatin. 41

42 Mail Express User Guide v In the Mail Express Server Hst bx, prvide the Hst name r IP address f the Mail Express Server. 4. In the Prt bx, prvide the prt number used by Mail Express Server. (443 is the default.) 5. In the Lgin Type bx, click the dwn arrw t specify Windws authenticatin (the default) r Manual authenticatin. If yu chse Windws Authenticatin, in the Mail Express Server Service Principal Name bx, prvide the SPN f the Mail Express Server service. (Refer t "T create the SPN" abve.) If yu chse Manual Authenticatin, prvide a valid username and passwrd fr an Internal Mail Express user. 6. Click Next. The Destinatin Flder page appears. 7. The flder defaults t %userprfile%\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin\. T install t a different flder click Change and specify the lcatin. 42

43 Installing and Uninstalling Mail Express 8. Click Next. The File Stre Cnfiguratin appears. 9. The File Stre lcatin defaults t %userprfile%\lcal Settings\Applicatin Data\GlbalSCAPE\Mail Express Outlk Addin\. The Add-In will temprarily stre attachments fr s that it is prcessing in this flder. T specify a different lcatin, click Change and specify the lcatin. 10. Click Next. The Ready t Install page appears. 11. Click Install t begin the installatin. The Setup Wizard installs the applicatin and the Cmpleted page appears. 43

44 Mail Express User Guide v The Launch Outlk check bx is selected by default. Clear it if yu d nt want t pen Outlk. If Outlk is already pen, yu need t clse it and then repen it fr the changes t take effect. If the cmputer has nt yet been rebted since the.net Framewrk was installed, it is highly recmmended that the cmputer is rebted befre trying t use the Add-In. 13. If yu want t view the versin histry, select the Shw versin histry check bx. 14. Click Finish t clse the wizard. Viewing the Mail Express Outlk Add-In User Interface When yu pen Outlk, the Add-In user interface is nt visible by default, because it is designed t initially run transparent t the user. Use the prcedure belw, depending n yur versin f Outlk, t display the Mail Express Outlk Add-in user interface. In Micrsft Outlk 2003 r 2007: T display the tlbar, click View > Tlbars > Mail Express. 44

45 Installing and Uninstalling Mail Express T view the Mail Express Add-In's status, click Display Status n the Mail Express tlbar. In Outlk 2010, the Add-In uses a ribbn tab instead f a tlbar. T display the ribbn tab click File > Add-Ins > Display Mail Express User Interface. 45

46 Mail Express User Guide v3.2 T view the Mail Express Add-In s status, click Display Status n the Mail Express tab. The Mail Express Add-In s status is useful fr determining whether r nt the Add-In is cnnected t the Mail Express Server and includes infrmatin regarding attachments that are currently being managed by the Add-In. Silent Installatin f the Outlk Add-In The btstrapper installers are nt designed t be deplyed thrugh a deplyment tl r in silent mde. Each prerequisite that the btstrapper installs can be dwnladed frm Micrsft's website and deplyed/installed silently. The MailExpressOutlkAddinInstaller.msi can be deplyed/installed silently. (Refer t Outlk Add-In prerequisites based n Micrsft Office Versin fr prerequisite details and dwnlad links.) Instructins fr creating the silent install script are prvided belw. Deplyment details are nt prvided here; it is assumed that a Windws administratr already knws hw t install and deply applicatins in silent mde. 46

47 Installing and Uninstalling Mail Express Installatin Arguments The fllwing are the installatin arguments that can be prvided t the installer when it is running in nnfull user interface mde. This prvides a way fr the Add-In installatin t be cnfigured and run withut requiring any user interactin (fr instance, if the Add-In is deplyed in silent install mde). The Add-In Installer page f the web administratin site assists administratrs in generating a script with the apprpriate arguments. Argument Name SERVERHOST Descriptin The IP Address r Hst Name f the Mail Express Server SERVERPORT Optinal; allws yu t specify a prt ther than 443. LOGINTYPE The type f authenticatin that the Outlk Add-In will use t authenticate with the Mail Express Server. MANUAL fr Manual Authenticatin WINDOWS fr Windws Authenticatin The default value is WINDOWS. SERVICEPRINCIPALNAME The service principal name defined fr the Mail Express Server, if the lgin type is Windws authenticatin. (Refer t "T create the SPN" in the tpic "Installing the Outlk Add-In.") MEUSERNAME The Mail Express username that the Add-In will use t authenticate with the Mail Express Server if the LOGINTYPE is MANUAL. MEPASSWORD The Mail Express passwrd that the Add-In will use t authenticate with the Mail Express Server if the LOGINTYPE is MANUAL. INSTALLLOCATION The path t the flder where the Outlk Add-In will be installed. This defaults t "%userprfile%\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin". FILESTORELOCATION The path t the flder where the Outlk Add-In will temprarily stre attachments fr s that it is prcessing. This defaults t "%userprfile%\lcal Settings\Applicatin Data\GlbalSCAPE\Mail Express Outlk Addin". It is pssible t install the Add-In silently withut prviding any installatin arguments. In that case, the default values mentined in the table abve are used. In this case, end users will need t prvide their cnnectin infrmatin manually in Outlk s that the Add-In knws hw t cnnect and authenticate with the Mail Express Server. Alternatively, an administratr can deply the registry settings that the Add-In uses. (Refer t Cnnecting t Mail Express Server fr mre infrmatin abut manual cnfiguratin in Outlk.) Generating the Installatin Script Use the Mail Express Server Administratin Site s Add-In Installer page t generate the Add-In installatin batch file script with the apprpriate installatin parameters. Under the Outlk Add-In Installatin Script sectin, specify the Installatin Type f either New/Upgrade r Mdify/Repair existing. New/Upgrade The script will run n wrkstatins that d nt have the Outlk Add-In already installed, r the Add-In is already installed n these wrkstatins but a newer versin f the Add-In is being installed. Mdify/Repair The script will run n wrkstatins that already have the Add-In installed, but the versin f the Add-In being installed has nt changed. This methd is useful when yu want t change sme f the Add-In s settings like SERVERHOST r LOGINTYPE n wrkstatins that already have this versin f the Add-In installed. 47

48 Mail Express User Guide v3.2 Deplyment The Outlk Add-In installer is a MSI t help ease deplyment t wrkstatins. The Add-In installer will deply all files and settings t user-specific lcatins like HKCU and the user s Windws prfile area, s that the installer des nt need t be run with administrative privileges. This further eases the deplyment fr rganizatins that have users with less privileged accunts. Thus, the installer culd be launched directly frm a Windws lgn script withut any prblem. The installer (.msi) can be run in varius UI mdes: N UI, Basic UI, Reduced UI, r Full UI. The btstrapper installers that install the Add-In s prerequisites are nt designed t be installed thrugh a deplyment tl and d nt supprt installatin in quiet/silent mde. They were intended t be run manually by users wh have administrative rights n their cmputer t set up the Add-In quickly withut using a crprate deplyment tl. Hwever, each prerequisite item that the Add-In requires can be dwnladed frm Micrsft s website, and each can be deplyed and installed silently. This is the preferred methd fr deplying the Add-In s prerequisites. Upgrading Mail Express Server Mail Express versin 3.0 and later d nt supprt upgrading frm Mail Express v2.2. The installer will abrt the installatin if it finds Mail Express 2.2 installed. Yu must uninstall Mail Express versin 2.2 befre cntinuing with installatin f versin 3.0 r later. During the Mail Express Server upgrade, the Mail Express Server Service will be stpped. When the Add-In tries t cntact the Mail Express Server, the server will be unavailable, and the Add-In will be discnnected. Because f this, yu shuld perfrm the upgrade during a nrmal maintenance windw r when activity is at a minimum. (Refer t Cnnecting t Mail Express Server fr details f what happens when Mail Express Server is unavailable.) In additin t updating prgram files and the CRT and XML files, the upgrade als installs new templates. Any custmized templates are backed up. Because the template frmat and variables have changed fr versin 3.1, yu must migrate yur custmizatins t the new templates rather than simply cpying yur ld templates int the directry. Refer t Custmizing Mail Express Pages and Ntificatins. T upgrade Mail Express Server 1. On the Internal Settings page (in versin 3.0 and 3.0.1, the page is called Add-In Settings) f the Mail Express Server s web administratin site, clear the Add-In services enabled check bx, then click Save. This will cause any Add-Ins t gracefully use the "Behavir when Mail Express Server is unavailable" preference. The Add-In services enabled check bx shuld nly be reselected after bth the Mail Express Server and the Add-Ins have been upgraded. The Mail Express Server and the Add-Ins must have the same versin number; therwise they may nt be cmpatible with each ther. If the Add-In detects that its versin is incmpatible with the Mail Express Server versin, the Add-In will display a "Versin Mismatch" General Status n the "Mail Express Status" task pane, the Mail Express Attach File and Send Optins buttns will be disabled and the Add-In will be disabled until it is upgraded. Users with disabled Add-Ins can still send s with Outlk, but their s will be ignred and nt prcessed by the Add-In. 2. Execute the installer n the Mail Express Server cmputer. The Welcme page appears. 3. Click Next. The License Agreement appears. 4. Click I agree. The installer detects that an lder versin f Mail Express Server is installed. 48

49 Installing and Uninstalling Mail Express 5. Click Upgrade. The Database Upgrade Credentials page appears and indicates t which database it is cnnecting. 6. By default, the current credentials are used when upgrading. If yu want t cnnect using an alternate accunt, clear the check bx and then specify the new credentials. The ability t specify an alternate set f database credentials is prvided t handle the case in which Mail Express Server is currently cnfigured t cnnect t the database as a user with limited database privileges. During upgrades the installer requires that the accunt used t cnnect t and upgrade the database have privileges t mdify database bjects. In cases such as this yu shuld specify alternate credentials fr a database accunt with higher privileges, such as an accunt with the db_ddladmin r db_wner database rles. If specified, alternate credentials will be nly be used by the installer t perfrm the upgrade. The credentials in use by the Mail Express Server will nt be mdified. 49

50 Mail Express User Guide v3.2 Fr Authenticatin mde, use SQL Server authenticatin when cnnecting as the privileged user accunt. When SQL Server authenticatin is selected, yu must specify the Database wner username and Database wner passwrd fr the privileged user accunt t use when cnnecting t the database. Or yu can use Windws authenticatin t use the active Windws user accunt when cnnecting t the database. (The "active Windws user accunt" is the accunt running the installer.) 7. Click Test if yu want t test the cnnectin t the database befre cntinuing r click Upgrade (which als tests the cnnectin). 8. If the Mail Express Server service is running, yu must stp the service befre yu can cntinue. If a message appears asking if yu want t stp the Mail Express Server service, click Yes. The Mail Express Server Service is stpped and installatin cntinues. (If yu click N, the installatin abrts.) During the Mail Express Server upgrade, the Mail Express Server Service will be stpped. When the Add-In tries t cntact the Mail Express Server, the server will be unavailable, and the Add-In will be discnnected. Refer t Cnnecting t Mail Express Server fr details f what happens when Mail Express Server is unavailable. 9. When installatin is cmplete, click Next. The final page f the wizard appears. 10. Select r clear the check bxes as necessary: If yu want t view the versin histry, select the Shw versin histry check bx. If yu d nt want t create a desktp shrtcut fr the administratin interface, clear the Create a desktp shrtcut check bx. If yu d nt want t start the Mail Express Server service, clear the Start the Mail Express Server service check bx. If yu d nt want t start the administratin interface, clear the Start the Administratin Interface check bx. (The server service must be started t start the administratin interface.) 11. Click Finish. When the upgraded Mail Express Server service is started, the previus versin's Outlk Add-In will nt cnnect. The Add-In will indicate a versin mismatch in the Mail Express Status pane and display an exclamatin pint n the tlbar/ribbn. After yu upgrade the Add-In, it will then cnnect successfully. 12. Upgrade the Mail Express Outlk Add-In. Refer t Upgrading the Outlk Add-In fr details. Upgrading the Outlk Add-In Upgrading the Add-In is similar t installing the Add-In fr the first time, except that because the Add-In s prerequisites (Office PIA, VSTO Runtime, and.net Framewrk 3.5 SP1) are already installed, nly the new Add-In MSI (MailExpressOutlkAddinInstaller.msi) needs t be run t upgrade an Add-In. When running the Add-In MSI silently, the same installatin parameters used t install the Add-In initially can be prvided, but is nt required. The Outlk Add-In Installer page f the web administratin site can be used t generate the apprpriate installatin script, if needed. If the user will perfrm the upgrade manually via the installatin wizard, they will be guided quickly thrugh the upgrade prcess. When the upgraded Mail Express Server service is started, the previus versin's Outlk Add-In will nt cnnect. The Add-In will indicate a versin mismatch in the Mail Express Status pane and display an exclamatin pint n the tlbar/ribbn. After yu upgrade the Add-In, it will then cnnect successfully. 50

51 Installing and Uninstalling Mail Express Finalizing the Upgrade After upgrading the Mail Express Server and the Outlk Add-Ins in yur rganizatin, launch the Mail Express Server s web administratin site, navigate t the Internal Settings page, select the Add-In services enabled check bx, and then click Save. (Yu shuld have disabled the Add-In services befre upgrading the server.) This will allw the Add-Ins t detect that the Mail Express Server is available. Any Add-Ins that were nt upgraded will remain disabled with a "Versin Mismatch General Status" n the Mail Express Status pane until they are upgraded. Users with Add-Ins in this state can still send s with Outlk, they just will nt be prcessed by the Add-In. Refer t Deplying the Outlk Add-In fr details f hw t deply the Add-In in general. Determining the Versin f Mail Express Server If yu need t determine which versin number f Mail Express Server is installed, yu can d s n the General Cnfiguratin page f the Mail Express Server administratin prtal. The versin is als displayed n the Mail Express Status page. (If the Mail Express Server is nt running, the versin number can be viewed in the file <Installatin Directry>\Versin.txt. T cnfigure general settings 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click General. The General Settings page appears. 3. The Sftware versin area displays the installed versin. T g t the Mail Express Supprt Center Web page t see what the latest available versin is, click Check Versin. Registering Mail Express Register Mail Express using the web administratin interface. In the web administratin interface, yu can view the current activatin status f the prduct (trial, fully registered, r expired), and the number f client access licenses (CAL) that are allwed based upn the current license. When yu prvide a serial number, the system cntacts the GlbalSCAPE registratin server t validate the serial number and update the licensing accrdingly. Mail Express uses a Client Access License (CAL) t define the number f active cnnectins allwed t the server. The CAL applies t the number f internal senders that may use the Outlk Add-In cncurrently. The server maintains a list f cnsumed licenses that include the username, IP address, hst name, date and time f the cnnectin, and mst recent activity date and time. The server expires the cnsumed CALs autmatically after 1 hur f Add-In inactivity r when Outlk is clsed. The CAL can specify frm 1 t 9999 cncurrent cnnectins r sessins. A sessin is a cnnectin that is actively querying the server. (The 30-day trial is restricted t 50 CALs.) T activate Mail Express 1. Open a web brwser and lg in t the Mail Express administratin interface. 2. In the left navigatin pane, under Cnfiguratin, click General. 3. On the General Cnfiguratin page, in the Mail Express area, click Register. 51

52 Mail Express User Guide v3.2 The Registratin page appears. 4. In the Serial number bx, prvide the serial number frm yur invice. If yu d nt have yur invice available, click Lst Serial Number t request that GlbalSCAPE yur serial number. Yu must send the request using the address prvided when the serial number was purchased r the previus serial number was registered. Serial numbers are versin specific. 5. In the Registered by bx, prvide yur name. 52

53 Installing and Uninstalling Mail Express 6. In the Persnal Infrmatin area, prvide infrmatin that can be used by GlbalSCAPE Custmer Supprt t search fr yur accunt infrmatin, including lst serial number requests. 7. In the Prxy Details area, click the applicable ptin. Use system prxy settings The system prxy settings are btained fr the user accunt under which the Mail Express Server Windws service is running. By default, the Mail Express Server Windws service runs under the "Lcal System" accunt. This accunt may nt have the apprpriate prxy settings cnfigured. Yu shuld run the Mail Express Server under a named accunt and ensure that the prxy settings have been prperly cnfigured fr that accunt. N prxy N prxy is in use. Manually cnfigure prxy Prvide cnnectin details in Prxy Cnfiguratin settings. 8. Click Register. Mail Express cnnects t the GlbalSCAPE registratin server, then adds the serial number t ur registratin database. Yur cntact infrmatin is used t lk up yur accunt if yu cntact Custmer Supprt r Sales. A message appears indicating successful activatin. If activatin is nt successful, ensure yu have access t the Internet and try again, r cntact GlbalSCAPE Supprt n the GlbalSCAPE Web site, Licensing the Outlk Add-In Licensing f the Outlk Add-In is cntrlled by the Client Access License (CAL) n the Mail Express server. The number f clients (Mail Express Outlk Add-Ins) allwed t cnnect at the same time depends n the number f CALs n the server. A single Mail Express Server can supprt up t 9999 CALs. When the Mail Express Outlk Add-In cnnects t the server, it prvides its IP address and hst name, and is authenticated t the server. Each time the Add-In cnnects, the server prvides it with a new lease. Once cnnected, the Add-In peridically refreshes its lease. After ne hur f inactivity r when Outlk is clsed, the lease is freed s that anther Add-In can use it. If Outlk is exits ungracefully (e.g., crashes r is frcibly terminated) r if the cmputer lses its cnnectin t the netwrk, the lease remains unavailable until it expires. If a CAL is nt available, a message infrms yu that a license is unavailable and a lg entry is created. Yu can still send with Outlk, but the is nt prcessed by the Mail Express Outlk Add-In until a license is available. Registering DMZ Gateway DMZ Gateway is licensed as a mdule, separate frm Mail Express. A 30-day trial is available, starting n the first day the service is started. When the trial expires, a warning message is written t the Windws Event Viewer and cnnectins attempted via the DMZ Gateway are nt accepted. The DMZ Gateway licensing status appears n the General Cnfiguratin page. If yu have licensed DMZ Gateway fr use with EFT Server, yu will need a multi-site license t als use it with Mail Express. The Mail Express Server is cnsidered ne f thse multiple Sites fr licensing purpses. Yu will still need t register DMZ Gateway in the Mail Express Administratin prtal. Fr details f installing and cnfiguring DMZ Gateway, refer t the DMZ Gateway in-applicatin help r nline help. T register DMZ Gateway 1. Open a web brwser and lg in t the Mail Express administratin interface. 53

54 Mail Express User Guide v In the left navigatin pane, under Cnfiguratin, click General. The General Cnfiguratin page appears. 3. On the General Cnfiguratin page, in the DMZ Gateway area, click Register. The Registratin page appears. 54

55 Installing and Uninstalling Mail Express In the Serial number bx, prvide the serial number frm yur invice. If yu d nt have yur invice available, click Lst Serial Number t request that GlbalSCAPE yur serial number. Yu must send the request using the address prvided when the serial number was purchased r the previus serial number was registered. Serial numbers are versin specific. 4. In the Registered by bx, prvide yur name. 5. In the Persnal Infrmatin area, prvide infrmatin that can be used by GlbalSCAPE Custmer Supprt t search fr yur accunt infrmatin, including lst serial number requests. The persnal infrmatin shuld be autmatically cmpleted if yu have already registered Mail Express. 6. In the Prxy Details area, click the applicable ptin. Use system prxy settings The system prxy settings are btained fr the user accunt under which the Mail Express Server Windws service is running. By default, the Mail Express Server Windws service runs under the "Lcal System" accunt. This accunt may nt have the apprpriate prxy settings cnfigured. Yu shuld run the Mail Express Server under a named accunt and ensure that the prxy settings have been prperly cnfigured fr that accunt. N prxy N prxy is in use. Manually cnfigure prxy Prvide cnnectin details in Prxy Cnfiguratin settings. The prxy cnfiguratin, with the exceptin f the authenticatin username and passwrd, is persisted in the database in the "GeneralSettings" table. 7. Click Register. Mail Express cnnects t the GlbalSCAPE registratin server, then adds the serial number t ur registratin database. Yur cntact infrmatin is used t lk up yur accunt if yu cntact Custmer Supprt r Sales. A message appears indicating successful activatin. If activatin is nt successful, ensure yu have access t the Internet and try again, r cntact GlbalSCAPE Supprt n the GlbalSCAPE Web site, Installatin Lgging The installatin lg file is intended fr debugging purpses and cntains messages that may help reslve issues that arise in the field. During installatin and maintenance the installer will create and lg t an "Installer.lg" file created in <Dcuments & Settings>\<Current User>\Lcal Settings\Temp\Mail Express. At the cmpletin f the installatin run, either due t success r failure, the installer will cpy the final lg t the <Installatin Directry>\lgs directry if it exists. Nte that if the installer fails during an initial clean installatin the <Installatin Directry>\lgs directry may nt exist. In this case the final lg file will be in <Dcuments & Settings>\<Current User>\Lcal Settings\Temp\Mail Express. The installer will attempt t append t the existing lg file n subsequent runs f the installer (e.g., if the user perfrms a "Reinstall"). It des this by cpying any existing Installer.lg file frm the installatin directry int the temp directry, writing t it during the install, and then cpying it back t the <Installatin Directry>\lgs directry at the end. Yu can write ut the same lg messages t anther lg file f yur chsing using the /lgfile=<lg file> cmmand line switch t the installer. Debug Lgging The installer is capable f writing the same messages that g t the Main Installer Lg (see abve) using the Windws debug lgging infrastructure. These messages may be viewed using a utility such as SysInternal s DebugView applicatin. 55

56 Mail Express User Guide v3.2 T enable this lgging, the installer must be run frm the cmmand line with the /debug switch (see Installatin Cmmand-Line Parameters). Installatin Cmmand-Line Parameters The installer supprts specificatin f the fllwing cmmand line parameters. When run in graphical user interface mde (the default) these parameters may typically be used t verride the default settings. When running the installer in silent mde, using the /S switch, these parameters are used t specify bth the required and ptinal values as detailed further in Silent Installatin f Mail Express Server. Parameter Definitins /S /debug /lgfile="<file>" Descriptin: Initiates a silent installatin. See Silent Installatin belw fr mre infrmatin. Default: The installer defaults t graphical user interface mde. Example: /S Descriptin: Enables lgging t the Windws system debug lg. This lg may be viewed in real time using tls such as DebugView that is part f the SysInternals Suite frm Micrsft. Default: Disabled by default Example: /debug Descriptin: Lg installatin messages t the specified file (this is in additin t the internal lg that is always created by the installer). Qutes shuld be used fr paths cntaining spaces. Default: Nne Example: /lgfile="c:\temp\meinstall.lg" /InstallerOperatin="<peratin>" Descriptin: Specifies the main peratin that the installer shuld perfrm. Valid values: INSTALL Perfrm a new installatin f the Mail Express Server. Only applicable when the Mail Express Server is nt already installed. UPGRADE Upgrade an existing installatin f the Mail Express Server. Only applicable when an lder versin f the Mail Express Server is currently installed. REINSTALL Reinstall the Mail Express Server sftware. Only applicable when the Mail Express Server is already installed and its versin is the same as the installer. DATABASE Mdifies the database settings used by the Mail Express Server. Only applicable when the Mail Express Server is already installed and its versin is the same as the installer. UNINSTALL Uninstalls the Mail Express Server. Only applicable when the Mail Express Server is already installed. 56

57 Installing and Uninstalling Mail Express /InstallDirectry="<path>" Descriptin: The installatin directry. Qutes shuld be used fr paths cntaining spaces. Default: C:\Prgram Files\GlbalSCAPE\Mail Express Example: /InstallDirectry="D:\Applicatins\Mail Express" /AttachmentDirectry="<path>" Descriptin: The attachment directry. Qutes shuld be used fr paths cntaining spaces. Supprts bth lcal physical drives and UNC-style paths. Mapped drives shuld be avided because they nly exist fr the lgn sessin f the current user. As such they typically will nt be available t the Mail Express Server when running as a Windws Service. Default: <Install Directry>\MailExpressAttachments Example: /AttachmentDirectry="\\jupiter\FileStre\MailExpress" /StartMenuGrup="<Grup Name>" Descriptin: The Start Menu flder in which t place the Mail Express Server shrtcuts. Default: GlbalSCAPE Example: /StartMenuGrup="MEAdmin" /AdminUsername="<username>" Descriptin: The username t use fr the initial Mail Express Administratin accunt. Default: Nne Example: /AdminUsername="meadmin" /AdminPasswrd="<passwrd>" Descriptin: The passwrd t use fr the initial Mail Express Administratin accunt. Default: Nne /Admin ="< >" Example: /AdminPasswrd=" wkbg2yxgzbpr" Descriptin: The address t use fr the initial Mail Express Administratin accut. Default: Nne Example: /Admin [email protected] /DatabaseType="<type>" Descriptin: Specifies if the installer will install an internal database r use an external database. Valid values: INTERNAL specifies that the installer shuld install and use the internal SQL Server 2008 R2 Express database instance. EXTERNAL specifies that the installer shuld use an external, pre-existing database. Default: EXTERNAL Example: /DatabaseType="INTERNAL" 57

58 Mail Express User Guide v3.2 /ExternalDatabaseMde="<mde>" Descriptin: When DatabaseType=EXTERNAL, specifies if the installer shuld create a new external database and user r use an existing database and user. Valid values: CREATE specifies that the installer shuld create a new database and user. EXISTING specifies that the installer shuld use an existing database and user. Default: CREATE Example: /DatabaseMde="EXISTING" /DatabaseServerName="<server>" /DatabasePrt="<prt>" Descriptin: The database server hst r IP address. Default: The lcal cmputer name. Example: /DatabaseServerName="jupiter" Descriptin: The listener prt fr the database n the database server hst. Default: 1433 Example: /DatabaseServerPrt="55000" /DatabaseInstanceName="<instance name>" Descriptin: The database server instance name. Default: MSSQLSERVER Example: /DatabaseInstanceName="SQLSRV_3" /DatabaseName="<database name>" Descriptin: The name f the database. Default: MAILEXPRESS Example: /DatabaseName="MEDB1" /AuthenticatinType="<type>" Descriptin: The type f authenticatin t use when cnnecting t the database in the installer. The installer can use SQL Server authenticatin r Windws authenticatin. When using Windws authenticatin the installer will attempt t cnnect t the database as the user accunt currently running the installer. Valid values: SQLSERVER The installer shuld use SQL Server authenticatin. WINDOWS The installer shuld use Windws authenticatin. Default: SQLSERVER Example: /AuthenticatinType="WINDOWS" /LginName="<username>" Descriptin: The lgin name t use when cnnecting t the database when /AuthenticatinType=SQLSERVER. 58

59 Installing and Uninstalling Mail Express Default: sa Example: /LginName="sa" /LginPasswrd="<passwrd>" Descriptin: The passwrd t use when cnnecting t the database when /AuthenticatinType=SQLSERVER. Default: Nne Example: /LginPasswrd="3qym9NCebHDJ" /DBOAuthenticatinType="<type>" Descriptin: The type f authenticatin that the Mail Express Server shuld use when cnnecting t the database. Valid values: SQLSERVER The installer shuld use SQL Server authenticatin. WINDOWS The installer shuld use Windws authenticatin. Default: SQLSERVER Example: /DBOAuthenticatinType="WINDOWS" /DBOLginName="<username>" Descriptin: The lgin name that the Mail Express server shuld use when cnnecting t the database when /DBOAuthenticatinType=SQLSERVER. Additinally, this is the accunt created when /ExternalDatabaseMde="CREATE". Default: Nne Example: /DBOLginName="medatabase" /DBOLginPasswrd="<passwrd>" /SkipPrereqCheck Descriptin: The passwrd t use when cnnecting t the database when /AuthenticatinType=SQLSERVER. Default: Nne Example: /DBOLginPasswrd=" fkv6zsx669p3" Descriptin: Skips checking the cmmn and installatin prerequisites that ccurs when the installer is initially launched. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipPrereqCheck /SkipDBUtilFirewallUpdate Descriptin: The installer uses an embedded Java-based utility fr interacting with the database. If Windws Firewall is enabled a dialg may be displayed when running the installer asking the user t cnfigure the firewall rules fr the embedded Java Runtime Envirnment. T prevent this dialg frm displaying the installer temprarily mdifies the Windws Firewall settings. This cmmand line ptin instructs the installer t bypass mdifying the Windws Firewall. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipDBUtilFirewallUpdate 59

60 Mail Express User Guide v3.2 /SkipDesktpShrtcut /SkipStartService Descriptin: Skips creatin f the Windws Desktp shrtcut t the Mail Express administratin prtal that typically ccurs at the end f installatin, reinstallatin, and upgrade. Default: Disabled by default Example: /SkipDesktpShrtcut Descriptin: Skips launching f the Mail Express Server Windws service that typically ccurs at the end f installatin, reinstallatin, upgrade, r database settings mdificatin. Default: Disabled by default Example: /SkipStartService /SkipSQLServerPrereqCheck /SkipSQLServerInstall /SkipSQLServerSettings Descriptin: Skips checking the prerequisites fr installing the internal SQL Server 2008 R2 Express database sftware. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipSQLServerPrereqCheck Descriptin: When the installer has been cnfigured t use the internal SQL Server 2008 R2 Express database instance enabling this setting will instruct the installer t skip the actual installatin f the SQL Server sftware. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipSQLServerInstall Descriptin: When the installer has been cnfigured t use the internal SQL Server 2008 R2 Express database instance enabling this setting will instruct the installer t updating the settings related t SQL Server that typically ccur after installing the SQL Server sftware. This setting nly takes effect if the SQL Server install has nt been skipped. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipSQLServerSettings /SkipSQLServerCreateDB Descriptin: Fr installatin paths where the installer wuld nrmally create the database, this setting will instruct the installer t skip the database creatin. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipSQLServerCreateDB /SkipSQLServerCreateDBUser Descriptin: Fr installatin paths where the installer wuld nrmally create the database user, this setting will instruct the installer t skip the database user creatin. This setting is mainly used fr debugging purpses. 60

61 Installing and Uninstalling Mail Express Default: Disabled by default Example: /SkipSQLServerCreateDBUser /SkipSQLServerCreateSchema Descriptin: Fr installatin paths where the installer wuld nrmally initialize the database schema, this setting will instruct the installer t skip initializatin f the database schema. This setting is mainly used fr debugging purpses. Default: Disabled by default Example: /SkipSQLServerCreateSchema /SkipSQLServerUninstall Descriptin: By default the uninstaller will remve the internal evaluatin SQL Server 2008 R2 Express database server instance if it is present. This ptin prvides a way t instruct the uninstaller t leave the database server instance n the machine. Default: Disabled by default Example: /SkipSQLServerUninstall Mail Express Server Database Utility In Mail Express Versin and later, a cmmand-line utility included with the Mail Express Server is prvided fr perfrming varius database-related tasks. Mst cmmn database tasks are handled by the Mail Express Server installer; hwever, n ccasin it may be useful t use the cmmand line utility t verify status r t prvisin additinal databases. Yu can use the database utility t perfrm the fllwing tasks: Create a database with settings apprpriate fr use by the Mail Express Server. This actin nly creates the database and des nt create a database user nr des it create the database bjects. Create a database user fr use by the Mail Express Server and assciates it with an existing database. The user will be created with the settings apprpriate fr use by the Mail Express Server. Check the versin f the database t see if it is current. This actin may be used t see if an upgrade must be perfrmed n a database befre it is ready t be used by the lcal versin f the Mail Express Server. Initialize the database fr use by the Mail Express Server. This actin can be used t either initialize a new database r upgrade an existing database. When initializing a new database, this actin will create the database bjects and apprpriate default data. Update the database cnfiguratin used by the lcal Mail Express Server. This actin may be used t pint the Mail Express Server at an alternate database r t change the credentials used t lg in t the database. This actin is similar t running the Mail Express Server installer in maintenance mde mdify the database cnfiguratin. Display the database cnfiguratin currently in use by the lcal Mail Express Server. Test the cnnectin t a database. Perfrm limited validatin f a database and/r database user accunt t ensure they have settings apprpriate fr use by the Mail Express Server. The database utility is executed using the DOS batch file "DBUtil.bat" in the Mail Express's <Installatin Directry>\bin directry. Fr yur cnvenience, the Mail Express Server installer creates a Start menu shrtcut that will pen a Cmmand Prmpt in this directry. 61

62 Mail Express User Guide v3.2 T pen the database utility Click Start > GlbalSCAPE > Mail Express > Mail Express Cmmand Prmpt. (It will be under a different flder if yu chse an alternate Start menu grup during the Mail Express Server installatin.) The utility includes built-in help dcumentatin. Additinally, the utility prvides feedback n incrrect r missing cmmand line parameters. T view help n using the utility Type: DBUtil.bat help Fr detailed help with the varius tp level actins, type: DBUtil.bat help actin <Actin ID> Where <Actin ID> is ne f: CREATE_DATABASE - creates a database. CREATE_DATABASE_USER - creates a database user. CHECK - checks the versin f the database t see if it is up t date. INIT - initializes the database bjects and default data. PROPS - updates the current database settings fr use by the Mail Express Server. DISPLAY - displays the current database settings in use by the Mail Express Server. CONNECT - tests cnnecting t a database. VALIDATE - cmbines the VALIDATE_DATABASE and VALIDATE_DATABASE_USER actins. VALIDATE_DATABASE - perfrms sme minr validatin f database settings. VALIDATE_DATABASE_USER - perfrms sme minr validatin fr the current database user. Example executins fr each f the actins supprted by the database utility may be viewed in the cmmand line help fr each actin. Cmmand Line Parameters fr the Database Utility Cmmand line parameters fr the utility are described belw. Depending n the actin perfrmed, nly a subset f the parameters will be applicable. -help -lgfile" <file>" Descriptin: Display help n the cmmand line. Refer t the "Help" sectin abve fr additinal infrmatin. Descriptin: When specified, lgs the utput f the executin t the specified file. Default: Nt set -errrfile "<file>" Example: -lgfile "C:\DBUtil.lg" Descriptin: When specified, lgs terminal errr messages t the specified file. Default: Nt set 62

63 Installing and Uninstalling Mail Express -ptinsfile "<file>" -ui -verbse -useprps Example: -errrfile "C:\DBUtil.err" Descriptin: When specified, lads cmmand line parameters frm the file. The file shuld specify parameters in a "parameter=value" pair with ne pair per line. Parameters specified n the cmmand line verride parameters specified in the file. Default: Nt set Example: -ptinsfile "C:\DBUtil.ini" Descriptin: When specified, enabled the utility t display graphical interface cmpnents when necessary. This is mainly fr use by external applicatins such as the Mail Express Server installer that call the utility internally. Currently the ui ptin is nly applicable t the INIT actin fr displaying upgrade prgress graphically. Default: Nt set Descriptin: When specified, enabled debug level lgging. Default: Nt set Descriptin: When specified, the current Mail Express Server database cnfiguratin values will be used rather than requiring them t be prvided n the cmmand line. Default: Nt set -prpfile "<prperty file>" Descriptin: If useprps is set and this value is specified the database cnnectin infrmatin will be laded frm this file rather than the default Mail Express Server database cnfiguratin file. Default: Nne -actin <actin id> Example: -useprps prpfile "C:\jdbc.prperties" Descriptin: Specifies the verall actin the utility shuld perfrm. Value values: CREATE_DATABASE - creates a database. CREATE_DATABASE_USER - creates a database user. CHECK - checks the versin f the database t see if it is up t date. INIT - initializes the database bjects and default data. PROPS - updates the current database settings fr use by the Mail Express Server. DISPLAY - displays the current database settings in use by the Mail Express Server. CONNECT - tests cnnecting t a database. VALIDATE - cmbines the VALIDATE_DATABASE and VALIDATE_DATABASE_USER actins. 63

64 Mail Express User Guide v3.2 VALIDATE_DATABASE - perfrms sme minr validatin f database settings. VALIDATE_DATABASE_USER - perfrms sme minr validatin fr the current database user. Default: Nne -timeut <secnds> Example: -actin CREATE_DATABASE Descriptin: The timeut in secnds t cntinue trying t cnnect t the database. A value f 0 will nly attempt t cnnect nce. Default: 120 secnds Example: -timeut 5 -server "<server name>" -prt <prt> Descriptin: The database server hst r IP address. Default: Nne Example: -server "Jupiter" Descriptin: The listener prt fr the database n the database server hst. Default: Nne Example: -prt instance "<instance name>" Descriptin: The database server instance name. Default: Nne Example: -instance "MSSQLSERVER" -database "<database name>" Descriptin: The name f the database. Default: Nne Example: -database "MAILEXPRESS" -applicatin "<applicatin name>" Descriptin: The applicatin name t present t the database fr use when identifying cnnectins. Default: Mail Express Server Example: -applicatin "ME Server A" -auth <authenticatin type> Descriptin: The type f authenticatin t use when cnnecting t the database. SQL Server authenticatin and Windws authenticatin are supprted. Valid values: SQLSERVER SQL Server authenticatin. WINDOWS Windws authenticatin. Default: Nne 64

65 Installing and Uninstalling Mail Express -user "<user>" Example: -auth SQLSERVER Descriptin: The lgin name t use when cnnecting t the database when auth is set t SQLSERVER. Default: Nne -pass "<passwrd>" Example: -user "medatabase" Descriptin: The passwrd t use when cnnecting t the database when auth is set t SQLSERVER. Default: Nne Example: -pass "3qym9NCebHDJ" -newauth <authenticatin type> Descriptin: The type f authenticatin t be used by the new database user accunt. Specified when creating database users. SQL Server authenticatin and Windws authenticatin are supprted. Valid values: SQLSERVER SQL Server authenticatin. WINDOWS Windws authenticatin. Default: Nne Example: -newauth SQLSERVER -newuser "<new username>" Descriptin: The username fr the new database user accunt. Specified when creating database users. Default: Nne Example: -newuser "medb2" -newpass "<new passwrd>" Descriptin: The passwrd fr the new database user accunt. Specified when creating new database users and newauth is set t "SQLSERVER". Default: Nne Example: -newpass "fkv6zsx669p3" -Dme.admin.username "<user>" Descriptin: The username t use fr the initial Mail Express Administratin accunt. Specified when initializing a new database. All D style parameters must cme last when specified n the cmmand line. Default: Nne Example: -Dme.admin.username "meadmin" -Dme.admin.passwrd "<passwrd>" Descriptin: The passwrd t use fr the initial Mail Express Administratin accunt. Specified when initializing a new database. All D style parameters must cme last when specified n the cmmand line. 65

66 Mail Express User Guide v3.2 Default: Nne Example: -Dme.admin.passwrd "wkbg2yxgzbpr" -Dme.admin. "< address>" Descriptin: The address t use fr the initial Mail Express Administratin accunt. Specified when initializing a new database. All D style parameters must cme last when specified n the cmmand line. Default: Nne Example: -Dme.admin. "[email protected]" -Dme.filesystem.rt "<path>" Descriptin: The attachment directry.. Specified when initializing a new database. Supprts bth lcal physical drives and UNC-style paths. Mapped drives shuld be avided because they nly exist fr the lgn sessin f the current user. As such they typically will nt be available t the Mail Express Server when running as a Windws Service. All D style parameters must cme last when specified n the cmmand line. Default: Nne Example: -Dme.filesystem.rt "\\jupiter\filestre\mailexpress" Mdifying Mail Express Database Cnfiguratin If the external database infrmatin has changed, fr example, yu have installed SQL Server n a mre pwerful cmputer with a larger hard drive, yu will have t recnfigure Mail Express with the new infrmatin. Yu can run the Mail Express Setup wizard (installer) n the Mail Express cmputer and prvide the new database server hst and s n. The database lgin name specified belw must have permissin n the database t cnnect t the database server, read data, and write data. T mdify Mail Express database cnfiguratin 1. Execute the installer n the Mail Express Server cmputer. The Welcme page appears. 2. Click Next. The License Agreement appears. 3. Click I agree. The installer detects that Mail Express Server is already installed. 66

67 Installing and Uninstalling Mail Express 4. Click Mdify database cnfiguratin then click Next. The Database Server Cnnectin Settings page appears. 5. The current database cnnectin settings appear. Prvide the new cnnectin infrmatin. (Refer t Installing Mail Express Server fr details f these fields.) 6. T verify that Mail Express will be able t cnnect t the database using these settings click Test. If the cnnectin fails, verify that yu have entered the cnfiguratin crrectly. 7. If the cnnectin is successful, click Save. 8. Yu will have t restart the Mail Express Server service fr the Server t cnnect t the new database. (Yu shuld d this during times f least user activity.) Repairing the Mail Express Installatin If yu need t reinstall Mail Express n the same cmputer, yu can d s using the Mail Express Setup Wizard. (Reinstalling Mail Express updates nly the Mail Express Server files; it des nt affect the database files r the Add-in.) T repair Mail Express 1. Execute the installer n the Mail Express Server cmputer. The Welcme page appears. 2. Click Next. The License Agreement appears. 3. Click I agree. The installer detects that Mail Express Server is already installed. 67

68 Mail Express User Guide v Click Reinstall Mail Express then click Reinstall. If the Mail Express Server service is running, a message appears asking yu t stp the service. Click Yes t cntinue installatin. (If yu click N, the installatin abrts.) If the Mail Express Server service is nt running, the Mail Express Server files are installed. Uninstalling Mail Express Server Uninstall Mail Express Server using Windw's Add r Remve Prgrams utility. T remve the Mail Express Server 1. Click Start > Run. The Run dialg bx appears. 2. In the Open bx, type appwiz.cpl, then click OK r press ENTER. The Add r Remve Prgrams dialg bx appears. 3. Click GlbalSCAPE Mail Express, then click Remve. The uninstaller wizard appears. 4. Click Uninstall. Mail Express Server is remved. Yu can als run the installer and click Uninstall Mail Express. 68

69 Cnfiguring and Administering Mail Express Server This sectin prvides the prcedures fr cnfiguring Mail Express Server. Initial Cnfiguratin f Mail Express Server Mail Express Server is administered in a web brwser. Yu can access the administratin page with a shrtcut n Mail Express Server r by typing the URL ( int yur web brwser, where <hstname> is the hstname f the cmputer running the Mail Express Server. The administratr hme page is als the Mail Express Status page. Befre yu can send attachments with Mail Express Server, the status f each cmpnent shuld either display a green flag r n lnger indicate that it is disabled. (Fr example, when Exchange Mail Server is enabled, the hstname f the mail server appears.) Initial cnfiguratin f Mail Express Server 1. Launch the Mail Express Server administratin interface. (e.g., click Start > Prgrams > GlbalSCAPE > Mail Express > Mail Express Admin r duble-click the desktp shrtcut). 2. Lg in using the Mail Express Server administratr username and passwrd that yu specified during installatin f the server. The Mail Express Status page appears. The items with red flags and "Disabled" status are items that yu need t cnfigure befre yu can manage attachments with Mail Express. The Mail Express Status page appears and indicates that the prtals are nt yet cnfigured. 69

70 Mail Express User Guide v On the Mail Express Status page, enable/cnfigure "Disabled" items by clicking the relevant link in the navigatin pane. (The Cmpnent clumn als links t the cnfiguratin pages.) On each cnfiguratin page, if yu make changes t the settings, click Save t save yur changes, r click Restre t cancel changes. If yu navigate away frm the page withut clicking Save, yur changes are discarded. Drp-Off Prtal: Enable the Drp-Off prtal, if used, and cnfigure the Security Plicy. Pick-Up Prtal: Enable the Pick-up prtal. Internal Prtal: On the Internal Settings page, enable the Internal prtal, if used, enable Add-In services, and cnfigure Internal User settings, Basic Auth (Kerbers), and the Mail Express plicy fr Internal users. Reply Prtal: Enable the Reply prtal, if used, and cnfigure the Security Plicy fr the Reply Prtal. Outlk Add-In: Install and cnfigure the Outlk Add-In. General Cnfiguratin: Specify the hst (dmain) name fr the Mail Express Server. Specify the default landing page (Drp-Off, Internal, r user chice). Specify the system ntificatin address(es) t which Mail Express will send infrmatin such as file stre r database status. (The address supplied during installatin is used by default.) Register Mail Express. Specify the SSL certificate, if used. Exchange Mail Server: Specify the Micrsft Exchange Server that the Mail Express Server cmmunicates with and the type f cnnectin. Als specify the Frm and Reply t addresses fr ntificatins sent frm Mail Express. DMZ Gateway: Cnfigure the DMZ Gateway cnnectin, if used. 4. Cnfigure Active Directry, if used, including mailbx mnitring fr frwarding system messages. (Active Directry cnfiguratin status des nt appear n the Mail Express Status page.) 5. Add an internal user fr testing cnfiguratin. 6. After yu have enabled and cnfigured each f the cmpnents, the Mail Express Status page shuld have green flags and detailed status fr thse items that yu have enabled/cnfigured. (That is, if yu d nt plan t use DMZ Gateway, its status will cntinue t be Disabled.) Verify that yu can send an with an attachment using the Outlk Add-In and can use the prtals that yu have cnfigured. Lgging in t Mail Express Server Mail Express administratrs can lg in t Mail Express Server n the lg-in page (e.g., When yu lg in t the administratin page, yur credentials are validated against the list f administratrs stred in the Mail Express database. T lg in t the Mail Express Server 1. Click the shrtcut n Mail Express Server r type the URL f Mail Express Server in yur web brwser. The Mail Express Server Lg-in page appears. 70

71 Cnfiguring and Administering Mail Express Server 2. In the Username bx, prvide the username yu created when yu installed Mail Express Server. (The username is case sensitive.) 3. In the Passwrd bx, prvide the passwrd yu created when yu installed Mail Express Server. (The passwrd is case sensitive.) If yu have frgtten yur passwrd, click the Lst Passwrd link and fllw the prmpts. After yu click Cntinue, yur accunt passwrd will be reset and a new, randm passwrd, with "Change passwrd at next lg in" enabled, will be ed t yu. If yu click Cancel, yur passwrd is nt reset. Passwrd reset actins are lgged t the database. Be sure t verify yur accunt's address during cnfiguratin s that, if yu lse yur passwrd, Mail Express can the reset t yu. 4. If yu want Mail Express t remember yur username, select the Remember Me check bx. The username will be remembered fr the next 30 days. 5. If yu want t clear the bxes and start ver, click Reset. 6. Click Sign in. If lgin was successful, the Mail Express Status page appears. If lgin failed, yu have the ptin t reset yur passwrd. If yu click Reset, a temprary passwrd is ed t the address specified when yu created the accunt. All attempted lgins are audited. Infrmatin captured includes the event time and date, username, successful r unsuccessful lgin, and IP address frm which the lgin attempt was made. Specifying the Mail Express Server Hst Name The Mail Express Server hst name is defined during initial cnfiguratin. The Mail Express Server hstname is used when creating the hyperlinks in recipient s. If the server is mved r redefined fr sme reasn, yu can specify the new hstname, as described belw. T cnfigure general settings 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click General. The General Cnfiguratin page appears. 3. In the Hstname bx, prvide the hstname f the Mail Express Server. 71

72 Mail Express User Guide v3.2 If yu enable DMZ Gateway, yu must cnfigure the Pick-Up prtal and Drp-Off page s that the URLs g thrugh DMZ Gateway. Yu can either change the Hstname in the General Cnfiguratin page, r rute the URL prperly in the netwrk. 4. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. Cnfiguring the Default Landing Page In versin 3.1 and later f Mail Express, yu can specify whether the default landing page ( is the Internal prtal, the Drp-Off prtal, r user chice, which allws the user t chse which prtal t use. The prtals must be enabled befre yu can select them n this page. T cnfigure the default landing page 1. In the left navigatin pane, under Cnfiguratin, click General. The General Cnfiguratin page appears. 2. Under General Settings, specify the default landing page. Internal prtal: The Internal Web prtal allws nn-outlk internal users t access Mail Express. Drp-Off prtal: Available t internal users, external users, r annymus users. User chice: A page appears n which the user clicks an icn t select either the Drp- Off Prtal r the Internal Prtal fr that sessin. 72

73 Cnfiguring and Administering Mail Express Server 3. Click Save t save the settings. Specifying the System Ntificatin Address The Mail Express Server system ntificatin address is defined during initial cnfiguratin. This is the address is used t send ntificatins regarding file strage status and database purging peratins. If yu need t change r add addresses, yu can d s n the Mail Express Server Cnfiguratin page f the Mail Express Server administratin prtal. T cnfigure general settings 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click General. The General Cnfiguratin page appears. 3. In the System ntificatin address(es) bx, prvide at least ne address f a Mail Express administratr cntact. Yu can prvide multiple addresses, separated by cmmas. 4. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 73

74 Mail Express User Guide v3.2 Cnfiguring Active Directry Authenticatin On the Active Directry Settings page, yu can cnfigure Mail Express's Active Directry settings. When cnfigured t use Active Directry, Outlk Add-In users and Internal users accessing the Drp-Off Prtal r Internal Prtal may lg in using their existing Active Directry dmain accunt credentials. When users initially lg in, an internal user accunt will be created within the Mail Express Server that crrespnds t the Active Directry accunt. This allws Mail Express administratrs t further custmize the user accunt as it pertains t the Mail Express system. T use the Single Sign On (SSO) capability f Mail Express, yu must als cnfigure AD authenticatin. Mail Express lgs all infrmatin regarding AD cnfiguratin changes made within the Administratin Prtal, including the administratr perfrming the mdificatin, the time and date f mdificatin, and the Active Directry settings after mdificatin. If a manually created Internal user accunt has a username that matches a username in the defined set f Active Directry user accunts, Mail Express will nly authenticate against the manually created user accunt. It will nt attempt t authenticate against the Active Directry accunt. When authenticating an Active Directry-backed user with the Mail Express Server, the server will attempt t lcate the fllwing attributes n the user accunt: mail - The address fr the user is used t ppulate the address fr the user within Mail Express. Basically, this field shuld exist since the LDAP-backed users inherently riginate frm the Outlk Add-In, and thus shuld have Exchange accunts. This field is required. displayname - The display name fr the user is nt required, but if present, it will be used t ppulate the user's display name within Mail Express. If a user accunt lacking the "mail" attribute attempts t authenticate with the Mail Express Server, an ERROR level lg message appears in the MailExpressServer.lg similar t the fllwing: ERROR Failed t lcate attribute "mail" fr user "IdntHaveAn " T enable and cnfigure Active Directry authenticatin 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click Active Directry. The Active Directry Cnfiguratin page appears. 74

75 Cnfiguring and Administering Mail Express Server 3. Select the Enable Active Directry authenticatin check bx (cleared by default). The page expands t display the AD ptins. 4. In the Active Directry hst bx, prvide the hst name r IP address (e.g., ) f the Active Directry server. If users frm child dmains need access t the Mail Express prtals, use the dmain name r dmain IP address in the Active Directry hst bx and use the glbal catalg prt (3268) in the Active Directry prt bx. 5. In the Active Directry prt bx, prvide the prt n which Active Directry listens fr LDAP cmmunicatin. (The default prt is 389; with SSL, the default is typically 636.) 6. Select the Cnnect using SSL check bx if yu are using SSL fr AD. When SSL is enabled, the Trusted Certificate Authrity (CA) Certificate bx appears. 75

76 Mail Express User Guide v3.2 In the Uplad X.509 certificate bx, brwse t the lcatin f the Base-64 encded X.509 signed certificate that is t be used t validate the certificate chain. A certificate in this frmat must begin with "-----BEGIN CERTIFICATE-----" and end with "-----END CERTIFICATE-----"." The Public Certificate that yu must uplad is the Public Certificate f the Certificate Authrity that signs the Public Certificate fr the Active Directry Server t which yu are cnnecting. Hwever, in mst cases the Public Certificate fr the Active Directry will be self-signed. In this case, yu will just uplad the Public Certificate f the AD Server. 7. In the Authenticatin mde area, specify Simple lgin r Annymus. Fr Simple lgin, prvide the Pre-Auth User DN and Passwrd. In the Pre-Auth User DN bx, specify the user Distinguished Name fr Simple lgin authenticatin. The fllwing frmats are supprted: Distinguished Name (e.g., CN=user,OU=users,DC=frests,DC=intranet,DC=example) User Principal Name (UserName@DmainName, e.g., [email protected]) Dwn-Level Lgn Name (DOMAIN\UserName, e.g. ExampleDmain\jeuser) In the Pre-Auth User Passwrd and Cnfirm Pre-Auth User Passwrd bxes, specify the passwrd fr Simple lgin authenticatin. (Fr infrmatin abut preauthenticatin, refer t Preauthenticatin in Micrsft TechNet.) 8. In the Search base bx, prvide the base Active Directry cntainer that Mail Express searches t find users that it will try t authenticate (e.g., CN=users,DC=frest,DC=intranet,DC=example). (Mail Express will search the full sub-tree starting at this tp-level cntainer.) 9. In the Search filter bx, prvide the search filter that is used t find accunts under the search base; fr example (&(bjectclass=user)(samaccuntname={0})). The {0} is the placehlder that will be ppulated with the username when perfrming the search. 10. (Optinal, but recmmended) In the Test username, Test user passwrd, and Cnfirm test user passwrd bxes, prvide the credentials fr a knwn AD accunt, then click Test. When testing Active Directry cnfiguratin via the Active Directry Cnfiguratin page, yu shuld test using a user accunt that pssesses a "mail" attribute. Otherwise, yu will see an errr in the MailExpressServer.lg. 76

77 Cnfiguring and Administering Mail Express Server 11. Click Save t save yur changes n the server, r click Restre t cancel changes. If yu navigate away frm the page withut clicking Save, yur changes are discarded. Cnfiguring Mail Express fr Windws (Kerbers) Authenticatin Use this tpic as a check list t crrectly cnfigure Mail Express s that Internal users can authenticate with the Mail Express Server using integrated Windws Authenticatin. The benefits f using Windws Authenticatin as it pertains t Mail Express include: The Add-In des nt need t stre any credentials fr authenticating, which is mre secure. Aside frm ensuring that each user has a dmain accunt, an rganizatin des nt need t create and maintain additinal credentials fr each Mail Express user. The credentials are nt passed between the Add-In and the Mail Express Server, which is mre secure. T cnfigure Mail Express fr Windws (Kerbers) authenticatin 1. Cnfigure Active Directry 2. Cnfigure Kerbers 3. Cnfigure the Service Principal Names 4. Cnfigure the Outlk Add-In 1. Cnfigure Active Directry T cnfigure the Mail Express Server t use Windws Authenticatin, launch the Mail Express Administratin Web Site and navigate t the Active Directry page. Cmplete the frm as it pertains t yur envirnment. After cnfiguring the settings n the Active Directry page, make sure that the settings are accurate by cmpleting the Test Cnfiguratin fields (Test username, Test user passwrd, and Cnfirm test user passwrd) and clicking Test. Be sure t click Save t save yur settings befre leaving the page. 2. Cnfigure Kerbers If the Active Directry settings test was successful, then prceed t the Internal Settings page, select the Enable Single Sign On (Kerbers) check bx, cmplete the Single Sign On fields, then click Save. (Refer t Cnfiguring the Add-In and Internal Prtal fr details f cnfiguring Single Sign On.) 3. Cnfigure the Service Principal Names Using the Windws "setspn" utility, create Service Principal Names (SPN), which is necessary fr Kerbers t functin crrectly fr Mail Express. The SPN is a name by which the Add-In can uniquely identify the Mail Express Server service. The SPN will be assciated with the Active Directry dmain accunt used in the KDC pre-auth username field f the Mail Express Server Kerbers Cnfiguratin. The "setspn" utility is typically installed by default n Active Directry server cmputers. The cmmand must be run using an accunt with Active Directry administratin rights. Typically it is easiest t perfrm these steps n the dmain s primary Active Directry server. T create the SPNs, execute the fllwing at a cmmand prmpt: setspn A HTTP/<MailExpressServerHstName> <PreAuthUsername> setspn A HTTP/<MailExpressServerFullyQualifiedHstName> <PreAuthUsername> Where: 77

78 Mail Express User Guide v3.2 <MailExpressServerHstName> is the hst name f the machine running the Mail Express Server. This is the hst name that wrkstatins wuld use internally t cmmunicate with the Mail Express Server machine. <MailExpressServerFullyQualifiedHstName> is the fully qualified hst name f the machine running the Mail Express Server. This is the full hst name that wrkstatins wuld use internally t cmmunicate with the Mail Express Server machine. <PreAuthUsername> with the username f Active Directry dmain accunt used in the "KDC pre-auth username" field f the Mail Express Server Kerbers Cnfiguratin. D nt type " -- the prper prefix is "HTTP/". Fr example, type: setspn A HTTP/meserver mepreauthuser setspn A HTTP/meserver.glbalscape.cm mepreauthuser These SPNs shuld wrk regardless f the accunt the Mail Express Server Windws Service is running as. If duplicate SPNs exist (meaning multiple dmain accunts with the same HTTP/<SPN>), then Kerbers will nt wrk crrectly. Once the SPN has been assciated with the Kerbers Pre-Auth Accunt used by the Mail Express Server t participate in Kerbers Authenticatin, yu can duble-check fr duplicate SPNs n the dmain using the cmmand: setspn X. T view the SPNs t verify that they were created successfully, run the fllwing cmmand after substituting <PreAuthUsername> auth user accunt: setspn l <PreAuthUsername> 4. Cnfigure the Outlk Add-In When the Outlk Add-In is installed, end users can chse between Windws r Manual Authenticatin. If Windws Authenticatin is specified, the Service Principal Name created earlier must be specified. Fr instance, if a Service Principal Name was created with the cmmand "setspn A HTTP/meserver mepreauthuser" then type HTTP/meserver in the Service Principal Name field f the installatin wizard. Again, ensure yu use the prefix "HTTP/" and nt " If the Outlk Add-In is installed silently, then the SPN must be prvided as an installatin parameter. The installatin parameter name is "SERVICEPRINCIPALNAME." If the Outlk Add-In has already been installed using alternate authenticatin settings, then the settings can be changed after installatin either by ding ne f the fllwing: Updating the Service Principal Name (SPN) in the Add-In s General Cnfiguratin. Re-running the installatin in silent mde and specifying a different value fr the SERVICEPRINCIPALNAME installatin parameter Changing the ServicePrincipalName registry setting directly and then restarting Outlk. This registry setting resides under the fllwing registry key: HKEY_CURRENT_USER\Sftware\GlbalSCAPE\Mail Express Outlk Addin\Settings Cnfiguring Mail Express fr Micrsft Exchange Server Cmmunicatin On the Exchange Cnfiguratin page, yu specify the Micrsft Exchange Server that the Mail Express Server cmmunicates with and the type f cnnectin. Yu als specify the Frm and Reply t addresses that all Mail Express ntificatins are t use. See als Cnfiguring Annymus Access t Exchange, Cnfiguring Authenticated Access t Exchange, and Testing Mail Express - Exchange Cnfiguratin. 78

79 Cnfiguring and Administering Mail Express Server T cnfigure Micrsft Exchange Server cmmunicatin 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click Exchange. The Exchange Cnfiguratin page appears. 3. In the Hst bx, specify the Exchange Server's hst name (e.g., mail.cmpany.edu). 4. In the Prt bx, specify the prt used by the Exchange Server (usually prt 25). 5. If yu are using SSL n the Exchange server, select the Cnnect using SSL check bx. The Trusted Certificate Authrity (CA) Certificate bx appears. 79

80 Mail Express User Guide v Select the Always trust certificates frm Exchange server check bx if Mail Express shuld implicitly trust the certificate prvided by the Exchange server. Clear the check bx if yu want t prvide a separate certificate. (If yu select the Always trust certificates frm Exchange server check bx, yu d NOT need t specify the certificate.) If yu want t prvide a separate certificate and did NOT select the Always trust certificates frm Exchange server check bx, in the Uplad X.509 certificate bx, brwse t the lcatin f the Base-64 encded X.509 signed certificate that is t be used t validate the certificate chain. A certificate in this frmat must begin with "-----BEGIN CERTIFICATE-----" and end with "-----END CERTIFICATE-----". (Uplad the Public Certificate f the Certificate Authrity that signed the Public Certificate f the Exchange Server. Typically, this will be the Public Certificate f the Active Directry server.) 7. If the Exchange Server requires authenticatin, in the Authenticatin Settings area, select the Use Exchange authenticatin check bx, then specify the username and passwrd t authenticate. (Refer t Cnfiguring Annymus Access t Exchange and Cnfiguring Authenticated Access t Exchange fr mre infrmatin.) 8. In the Settings area, in the Frm address and the Reply t address bxes, specify the address used in the message header when ntificatin s are sent frm Mail Express. If yu are using authenticatin, the Frm address ught t match the accunt used t authenticate. 9. (Optinal) In the Mailbx Settings area, select the Mnitr mailbx check bx t mnitr fr returned mail messages (i.e., "bunced s"). Returned mail ntificatins are sent t the internal sender specified in the Frm address. In the Mailbx Type list, specify either IMAP4 r POP3, then specify the Mailbx Prt (the defaults are IMAP ver SSL=933 and POP3 ver SSL=995). If Use Exchange Authenticatin is nt enabled, the mailbx mnitring ptin is nt available. If yu have cnfigured Exchange t relay, authenticatin will be disabled (as well as Mailbx Settings), and DSN will be frwarded t the sender by Exchange. 10. (Optinal) Prvide an address t send a test t, then click Test. A message appears stating that a test was sent. If an errr ccurs during the transmissin, an errr message is displayed instead. If the test is successful, an is sent t the address specified stating that "the mail server fr Mail Express has been cnfigured crrectly." The Test bx is unavailable if Mnitr Mailbx is selected. In that case, the address specified in the Frm address bx is used fr the test. (Refer t Testing Mail Express - Exchange Cnfiguratin fr mre infrmatin.) 80

81 Cnfiguring and Administering Mail Express Server 11. Click Save t save yur changes, r click Restre t cancel changes. If yu navigate away frm the page withut clicking Save, yur changes are discarded. Cnfiguring Annymus Access t Exchange By default, Exchange installs a "default" SMTP mdule that listens n prt 25. The instructins belw describe hw t create additinal mdules that meet the specific needs f Mail Express. Hwever, it is nt necessary t create multiple mdules. A single mdule can be cnfigured t meet multiple requirements simultaneusly. In Exchange 2003, these mdules are called "SMTP Virtual Servers." In Exchange 2007 and 2010 these mdules are called "Receive Cnnectrs." In the example belw, they are called "mdules." Prt 24 is reserved fr "any private mail system." Demnstrated belw is annymus access using a mdule listening n this prt named "Restricted Relay." The mst imprtant qualities f this mdule are that it registers prt 24 and allws annymus access. (See als Cnfiguring Authenticated Access t Exchange.) In Exchange 2007 and In the Exchange Management Cnsle, under Server Cnfiguratin > Hub Transprt, create a new mdule. (Select the server n which yu want t create the cnnectr, and then click the Receive Cnnectrs tab. In the actin pane, click New Receive Cnnectr. Fllw the prmpts in the New SMTP Receive Cnnectr wizard.) Yu can name it anything; "Restricted Relay" is used in the example belw. 2. Right-click the new mdule, then click Prperties. The Prperties dialg bx appears. 3. Click the Netwrk tab. 4. Under Use the lcal IP addresses t receive mail, the Lcal IP address(es) and Prt appear. If necessary, click Add r Edit t add r change the prt number that Mail Express is t use. The actual prt is nt imprtant as lng as it is nted s that yu can cnfigure Mail Express t use the same prt number. Click the Permissin Grups tab. 81

82 Mail Express User Guide v Select the Annymus users check bx, then click the Netwrk tab. Clear the ther check bxes. 6. Secure the mdule by lcking dwn the IP address that clients can use t cnnect. On the Netwrk tab, under Receive mail frm remte servers that have these IP addresses, click Add r Edit t add r change the IP address that Mail Express Server is using. With its IP address listed here, Exchange is nt acting as an pen relay. 82

83 Cnfiguring and Administering Mail Express Server 7. Optinally, yu can further secure the mdule by enabling encryptin. On the Authenticatin tab, select the Transprt Layer Security (TLS) check bx, then cnfigure Mail Express t als use encryptin t prtect cmmunicatin between Mail Express and Exchange. In Exchange In the Exchange System Manager, create a new mdule. (Click SMTP > New > SMTP Virtual Server, then fllw the prmpts in the New SMTP Virtual Server wizard.) Yu can name it anything; "Restricted Relay" is used in the example belw.) 2. Right-click the new mdule, then click Prperties. The Prperties dialg bx appears. 3. On the General tab next t IP address click Advanced. The Advanced dialg bx appears. 83

84 Mail Express User Guide v Click Add r Edit t add r change the prt n which Mail Express cmmunicates. The actual prt is nt imprtant as lng as it is nted s that Mail Express can be cnfigured t use the same prt number. 5. Click OK, then click the Access tab. 6. Click Authenticatin. 7. Ensure that the Annymus access check bx is selected and the ther check bxes are cleared, then click OK. 84

85 Cnfiguring and Administering Mail Express Server 8. Secure the virtual server by lcking dwn the IP address that clients can use t cnnect. On the Access tab, click Cnnectin. The Cnnectin dialg bx appears. 9. Specify the IP address f the Mail Express server, then click OK. With this cnfiguratin, the Exchange Server is nt acting as an pen relay. 10. Click OK t clse the Prperties dialg bx. Cnfiguring Mail Express with the New Mdule After yu have cnfigured annymus access in Exchange, cnfigure Mail Express t access the "Restricted Relay" mdule yu defined abve. 1. On the Mail Express Exchange Cnfiguratin page, set the Hst bx t the Exchange Server hstname, and the Prt bx t 24 (r whichever prt yu set in Exchange). 2. If yu enabled encryptin in Exchange, select the Cnnect using SSL check bx, then d ne f the fllwing: Select the Always trust certificates frm Exchange Server check bx and dn t uplad a file. This ptin is useful fr testing, but is less secure that the next ptin. Clear the Always trust certificates frm Exchange Server and then click Chse File t uplad the Public Certificate f the f the Certificate Authrity that signed the Exchange Server s Public Certificate (typically this is the Public Certificate fr the Active Directry server). 85

86 Mail Express User Guide v Because "Restricted Relay" accepts annymus users, ensure that the Use Exchange authenticatin check bx (under Authenticatin Settings) is nt selected. With this cnfiguratin, the Frm address and Reply t address will nly be used in messages generated by the Mail Express system and s can be set t whmever the administratr wants t mnitr thse messages. See als Testing Mail Express - Exchange Cnfiguratin. 86

87 Cnfiguring and Administering Mail Express Server Cnfiguring Authenticated Access t Exchange Typically, SMTP uses prt 25. Hwever, an alternative SMTP "submissin" prt has been reserved n prt 587. Fr Exchange 2007 and 2010, installatin will create a "Default" mdule listening n prt 25 as well as a "Client" mdule listening n prt 587. Exchange 2003 installatin will nly create the "Default" mdule. Fr authenticated access, create a mdule listening n prt 587. The imprtant requirements fr Mail Express are that the mdule accept "basic authenticatin" and that an apprpriate user (with the necessary permissins) be made available t the Mail Express system. (See als Cnfiguring Annymus Access t Exchange.) Installatin f Exchange 2007/2010 creates an alternative client submissin receive cnnectr. Exchange 2003 des nt install an alternative client submissin virtual server, s yu must create ne. Exchange 2007 and In the Exchange Management Cnsle, click Server Cnfiguratin > Hub Transprt > ADSERVER > Client ADSERVER, then right-click Client ADSERVER and click Prperties. The Client ADSERVER Prperties dialg bx appears. 2. Click the Netwrk tab. 3. Under Use these lcal IP addresses t receive mail, the Lcal IP address(es) and Prt appear. Verify that the receive cnnectr is listening n prt 587. The actual prt number is nt significant as lng as the Mail Express Server is cnfigured t use the same prt. If necessary, click Add r Edit t add r change the listening prt, then click OK. 4. Click the Authenticatin tab. 87

88 Mail Express User Guide v Select the fllwing check bxes, then click OK: Basic Authenticatin The mst imprtant requirement f this mdule is that it allws "basic authenticatin." Transprt Layer Security (TLS) Requires encryptin s that the user passwrd cannt be intercepted in transit. Offer Basic Authenticatin nly after starting TLS Ensures that the client's passwrd is sent encrypted. 6. Click the Permissin Grups tab. 7. In cnjunctin with the "basic authenticatin" we want t ensure that Exchange is authenticating against Exchange users and nt accepting annymus users. Ensure the Exchange users check bx is selected that the Annymus users check bx is nt selected, then click OK t clse the Prperties dialg bx and save yur settings. 8. Grant permissin t the Mail Express user. When Mail Express users send packages via the web prtal, Mail Express generates n their behalf, which it then directs t the Exchange server. The ability t "impersnate" anther user requires a special permissin. In Exchange 2007/2010, the user whse credentials with which Mail Express will be authenticating requires the "Accept any Sender" permissin when impersnating external addresses and "Accept Authritative Dmain Sender" when impersnating lcal addresses. D ne f the fllwing: 88

89 Cnfiguring and Administering Mail Express Server Open the Exchange Management Shell t alter the permissins. The permissins are called "ms-exch-smtp-accept-any-sender" and "ms-exch-smtp-accept-authritative- Dmain-Sender". In the example belw, the receive cnnectr is called "Client ADSERVER" and the Mail Express user is called "Mail Express": The first cmmand in the image abve is: Add-ADPermissin "Client ADSERVER" User "Mail Express" ExtendedRights ms-exch-smtp-accept-authritative-dmain-sender The secnd cmmand is: Add-ADPermissin "Client ADSERVER" User "Mail Express" ExtendedRights ms-exch-smtp-accept-any-sender The frmat f the cmmands shwn in the image abve is: Add-ADPermissin "${SMTP_MODULE}" User "${MAIL_EXPRESS_USER}" ExtendedRights ${REQUIRED_PERMISSION} Where: "${SMTP_MODULE}" is the name f the mdule "${MAIL_EXPRESS_USER}" is the accunt created fr Mail Express ${REQUIRED_PERMISSION} is ne f the permissins, ms-exch-smtp-accept- Authritative-Dmain-Sender r ms-exch-smtp-accept-any-sender Alternatively, use "ADSI Edit" t graphically add the required permissins. The ADSI Edit applicatin can usually be fund at %SystemRt%\system32\adsiedit.msc. Lcate SMTP Receive Cnnectrs which are under Cnfiguratin.Services.Micrsft Exchange. (Parts f the path will be specific t yur installatin.) Right-click the "Client" receive cnnectr (Client ADSERVER), then click Prperties. Click the Security tab, then click Add t specify the user accunt with which the Mail Express Server will authenticate. Ensure that the Accept any Sender and Accept Authritative Dmain Sender permissin's Allw check bxes fr that user are selected, and that every ther permissin's Allw check bx is cleared. 89

90 Mail Express User Guide v3.2 Exchange 2003 Exchange 2003 des nt install an alternative client submissin virtual server, s yu must create ne. In this example, it is called "Alternative Submissin." 1. In the Exchange cnsle, click Servers > ADSERVER2003 > Prtcls > SMTP > Alternative Submissin, then right-click Alternative Submissin and click Prperties. 2. On the General tab, click Advanced. 90

91 Cnfiguring and Administering Mail Express Server 3. Cnfigure the virtual server t listen n prt 587. The actual prt number is nt significant s lng as it is nted s that the Mail Express server can be cnfigured t use the sme prt. Click OK. 4. Click the Access tab, then click Authenticatin. 91

92 Mail Express User Guide v Select the fllwing check bxes, then click OK: Basic Authenticatin The mst imprtant requirement f this mdule is that it allws "basic authenticatin." Transprt Layer Security (TLS) Requires encryptin s that the user passwrd cannt be intercepted in transit. 6. Next, yu will specify the user with which Mail Express will be authenticating n the Exchange server. When Mail Express users send packages via the web prtal, Mail Express generates n their behalf, which it then directs t the Exchange server. The ability t "impersnate" anther user requires a special permissin. In Exchange 2003, this is the "Send As" permissin. In the Exchange cnsle tree, click Servers > ADSERVER2003, then right-click ADSERVER 2003 and click Prperties. The Prperties dialg bx appears. 7. Click the Security tab, then click Add t specify the user accunt that the Mail Express server will be using t authenticate. 8. With the user selected, ensure that the Send As permissin's Allw check bx is selected, while every ther permissin's check bx is cleared. 9. After granting the permissin, the SMTP service must be restarted s that it is aware f the changes. 92

93 Cnfiguring and Administering Mail Express Server Cnfiguring Mail Express fr Authenticated Access After yu have cnfigured the Exchange Server fr authenticated access, yu must cnfigure Mail Express t access the "Client" mdule that yu defined abve. 1. On the Mail Express Exchange Cnfiguratin page, in the Hst bx prvide the Exchange Server dmain and in the Prt bx specify prt If yu enabled encryptin in Exchange, select the Cnnect using SSL check bx, then d ne f the fllwing: Select the Always trust certificates frm Exchange Server check bx and dn t uplad a file. This ptin is useful fr testing, but is less secure that the next ptin. Clear the Always trust certificates frm Exchange Server and then click Chse File t uplad the Public Certificate f the f the Certificate Authrity that signed the Exchange Server s Public Certificate (typically this is the Public Certificate fr the Active Directry server). 3. Because the "Client" mdule accepts Exchange users, we want t ensure that the Use Exchange authenticatin check bx is selected. In the illustratin, the Exchange user is [email protected]. With this cnfiguratin, the Frm address and Reply t address will be used in messages generated by the Mail Express system. The Frm address will als be used in the SMTP transfer with Exchange after authenticatin and must reflect the mailbx fr the user specified in the Username bx. Yu can set the Reply t address t whmever the administratr wants t mnitr thse messages. 93

94 Mail Express User Guide v3.2 See als Testing Mail Express - Exchange Cnfiguratin. Testing the Cnfiguratin Test the cnfiguratin t verify cmmunicatin between the Exchange server and Mail Express. Send s t/frm addresses that are internal (managed by the Exchange server) and external using the fllwing criteria: 94

95 Cnfiguring and Administering Mail Express Server frm the system - Send a test using the Mail Express Exchange Cnfiguratin page t a recipient internal t the Exchange mail dmain and t ne that is external t the dmain. Verify that the messages are delivered and that the Frm and Reply t addresses are crrect. (Mailbx mnitring must be ff during the test, therwise s are sent t the mailbx being mnitred.) n behalf f a user - Send an n behalf f users wh have addresses bth internal and external. The web prtals can be used t execute these tests. Yu can either create internal and external users f Mail Express, using addresses internal and external t the Exchange mail dmain, r enable annymus access t the Drp-Off prtal and explicitly set the addresses. n behalf f an internal address - Send an frm an internal address t an internal address and an external address. Verify that the messages are received. n behalf f an external address - Send an frm an external address t an internal address and an external address. Verify that the messages are received. Cnfiguring File Strage and Purging Mail Express Server stres all files upladed t it until they are remved based n the data purging plicy. Mail Express des nt manage space, but it can ntify yu when a certain threshld f space has been met. The File Stre Cnfiguratin page prvides autmated purging settings t remve stred packages based n creatin date (and the time when the uplad is cmpleted), with the ldest purged first. The threshld setting is simply a warning t the administratr that the space alltted t Mail Express is getting full. An is sent t the System Ntificatin address specified n the General Cnfiguratin page. (If yu want t send ntificatins t ne r mre recipients, yu will first have t define the Exchange Server.) If space is unavailable, n additinal uplads will be accepted, hwever the Pickup prtal will cntinue t service dwnlads if temprary space is available fr "dwnlad all" requests where a ZIP is created. Every 5 minutes, Mail Express determines whether t purge. The date and time f the file purge is nted in the audit lg, as well as the number f files purged. Mail Express lgs all infrmatin regarding file stre cnfiguratin changes, including the administratr perfrming the actin, time and date f mdificatin, and which files were deleted. On the File Stre Cnfiguratin page, yu can manage data retentin fr all files that are upladed and stred n Mail Express Server. This page als allws yu t cnfigure available strage mnitring and alerts fr the file stre. The file stre path is displayed at the tp f the page, and cannt be changed. The file strage lcatin is cnfigured during installatin and cannt be changed in Mail Express Server cnfiguratin. If it is necessary t change the file strage lcatin after installatin, please cntact GlbalSCAPE Custmer Service fr assistance. It is imprtant t prvide regular disk maintenance/management f resurces. Mail Express administratin requires a small amunt f available disk space in rder t service requests. When the disk is full, Mail Express may nt functin as expected. (Ideally, yu shuld separate the installatin area frm the strage area t avid running ut f temprary space.) Purging is actr based; that is, selecting the Purge files sent by Internal Users check bx nly purges files sent by internally-defined users and the Purge files sent by Drp-Off users nly purges files sent by external users, regardless f which cmpnent they used t send the files. T cnfigure file strage 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click File Stre. The File Stre Cnfiguratin page appears. 95

96 Mail Express User Guide v T purge files sent by Internal users, select the Purge files check bx, then specify the frequency with which t Purge files sent my Internal Users. (This value cannt exceed the database's purging parameters. If yu attempt t set a less frequent value than the database purging value, an errr message appears.) Database purging must be disabled befre disabling File Stre purging. The default is t purge files lder than 3 mnths. 4. T purge files sent by external users, select the Purge files check bx, then specify the frequency with which t Purge files sent by Drp-Off Users. (This value cannt exceed the database's purging parameters. If yu attempt t set a less frequent value than the database purging value, an errr message appears.) Database purging must be disabled befre disabling File Stre purging. The default is t purge files lder than 3 mnths. Purging is actr based; that is, Purge files sent by Internal Users nly purges files sent by internallydefined users and Purge files sent by Drp-Off Users nly purges files sent by external users, regardless f which cmpnent they used t send the files. 5. Ntificatins regarding file stre status are sent by default t the Mail Express administratr address defined n the General Settings page. a. T turn ff ntificatins, clear the Send ntificatins n File Stre status check bx (nt recmmended). b. In the Strage threshld bx, specify the number f GB, TB, PB, EB f maximum strage threshld allwed befre ntificatins are sent. The default threshld is 1 TB. c. In the Send ntificatin when File Stre is bx, specify at what threshld ntificatins are t be sent. The default is 90% full. d. In the Send ntificatin every bx, specify the number f minutes, hurs, days, mnths, r years between ntificatins (frm 5 minutes t 99 years). By default, ntificatins are sent every 30 minutes. Because the file stre culd be n a very large shared strage system (SAN, EMC), Mail Express is limited t an allcatin r "threshld" f that strage. The threshld is nt a hard limit that the Mail Express Server enfrces; it is a level at which yu wuld like t retain Mail Express data. If the threshld is exceeded, Mail Express will still functin, as lng as there is sufficient disk strage available. A "disk full" r "space unavailable" message indicates that the disk available t Mail Express n lnger has any free space. 6. Click Save t save yur changes, r click Restre t cancel changes. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 96

97 Cnfiguring and Administering Mail Express Server Cnfiguring Database Purging and Ntificatins On the Database Cnfiguratin page, yu can manage the retentin plicy fr all change and transactin lgs that are created by Mail Express Server and cnfigure database ntificatins regarding capacity. The date and time f the purge is nted in the audit lg, as well as which files were purged. The purge infrmatin includes a descriptin that "Autmated purging successfully remved <number> lg entries frm database." If yu want t send ntificatins t ne r mre recipients, yu will first have t define the Exchange Server. Fr details f the Mail Express database, refer t Mail Express Database Tables. T cnfigure database purging and ntificatin ptins 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Cnfiguratin, click Database. The Database Cnfiguratin page appears. 3. T specify a purging schedule, select the Purge audit and transactin lgs check bx, then in the Purge lgs lder than bxes, specify the age f lgs t purge (frm 5 minutes t 99 years). Database Purging cannt be enabled unless external and internal File Stre Purging is enabled. By default, purging is turned ff. When turned n, the default setting is 3 mnths. 4. T specify whether t send ntificatins regarding database status, select the Send ntificatin n database status check bx (selected by default), then specify a Strage threshld, what % full t trigger the ntificatin, and hw frequently t send ntificatins. The frequency ntificatins must be mre frequent than the purging schedule. Nte that the "strage threshld" is simply a threshld at which ntificatins are t be sent. The default threshld is set t 10 GB, 90% full, every 30 minutes. The strage threshld is nt a hard limit that the Mail Express Server enfrces; it is a level at which yu wuld like t retain Mail Express data. If the threshld is exceeded, Mail Express will still functin, as lng as there is sufficient disk strage available. A "disk full" r "space unavailable" message indicates that the disk space allcated t Mail Express is full. 5. Click Save t save yur changes, r click Restre t cancel changes. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 97

98 Mail Express User Guide v3.2 Cnfiguring the Drp-Off Prtal On the Drp-Off Prtal Settings page yu define limitatins fr senders use f the package Drp-Off Prtal. These settings will restrict file transfers that can be made and the type f user access that is available fr the prtal. The Drp-Off Prtal is disabled by default. When the prtal is disabled, visitrs t the page receive the standard HTTP "404 Nt Fund" errr. When the prtal is enabled, additinal cnfiguratin settings appear. If yu want t send the Drp-ff URL t ne r mre recipients, yu will first have t define the Exchange Server. T manage the Drp-Off prtal plicy 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Prtal Settings, click Drp-Off Settings. The Drp-Off Prtal Settings page appears. 3. T enable the Drp-Off prtal, select the Prtal enabled check bx. 98

99 Cnfiguring and Administering Mail Express Server 4. T the Drp-Off prtal URL (address) t a list f users, in the Send Drp-ff URL bx, type the addresses, separated by cmmas, then click Send. 5. T allw access t the Drp-Off prtal nly t verified users, select the Require Verified User check bx. Select the Register Internal Users as verified check bx t allw Internal Users t use the Drp-Off prtal. When the Register Internal Users as verified check bx is selected, any new Internal users that are created will autmatically have Drp-Off permissin. Selecting the check bx des nt retractively allw all Internal users t use the Drp-Off page. The administratr has t manually enable the Drp-Off permissin fr Internal users created befre the check bx was selected. 6. T require drp-ff users t use CAPTCHA, select the Require CAPTCHA t send check bx. CAPTCHA (Cmpletely Autmated Public Turing Test T Tell Cmputers and Humans Apart) is a prgram that displays a test that humans can pass, but a cmputer is nt likely t, such as reading a series f distrted letters and typing the same letters int a bx, thus limiting the amunt f spam s. 7. T limit the number f recipients the sender can specify, select the Recipient limit check bx, then specify the number in the bx, frm 1 t is the default. 8. T limit the ttal file size f ne transfer, select the File size limit check bx, then specify the file size in the bxes, frm 1 KB - 2 GB. (The default is 5 MB.) 9. T expire dwnlad links, select the Link expiratin check bx, then specify the duratin. If n link expiratin is defined, packages will be purged based n the file retentin plicy. When yu mdify the file expiratin value, yu are mdifying this setting fr all future transfers. Packages that are active within the system retain the expiratin value in place at time that they were created. (The default is 2 weeks. Link expiratin can be frm 1 hur t 99 years.) 10. T exclude specific file types frm being transferred, select the File type exclusins check bx, then list up t 50 file extensins in the bx. (Wildcards are nt supprted.) T add file extensins t the list, type the file extensin in the small bx, then click Add. T remve a file extensin frm the list, click the file extensin in the list, then click Remve. 11. T limit the dmains t which drp-ff users can send files, select the Valid recipient dmains check bx. (The dmain is everything that cmes after symbl in the address. Fr example, if the address is [email protected], the dmain is example.cm.) T add dmains t which drp-ff users can send files, type the dmain in the small bx, then click Add. (Changes are nt saved until yu click Save.) T remve dmains t which drp-ff users can send files, click the dmain in the list, then click Remve. (Changes are nt saved until yu click Save.) The dmain validatr lks fr an exact match with valid recipient dmains OR if the address is a sub-dmain f a valid recipient dmain. Fr example, if the valid recipient dmain is scape.cm, valid addresses are [email protected] r [email protected], but nt [email protected]. 12. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 99

100 Mail Express User Guide v3.2 Overview f the Add-In and Internal Web Prtal Mail Express 3.1 and later prvide an Internal Web prtal t access the Mail Express service. A web interface avids the need t install and manage any client sftware and can be accessed frm anywhere via a web brwser. The Internal Web prtal allws nn-outlk internal users t access Mail Express. The web interface prvides file transfer functinality similar t the Outlk Add-In and Drp-Off prtal t allw end users t cmpletely manage their file transfer needs via Mail Express (within the bunds set by the accunt wner r IT administratr). Internal users can create and send attachments (packages), accunt invitatins, and reply links. Access t the Internal Prtal is prtected by username/passwrd authenticatin. A "lst passwrd" link is prvided fr users t reset their passwrd if frgtten. A "remember me" ptin is prvided t remember the last username saved n the lcal cmputer fr 30 days frm time f lgin, but the end user can enable r disable this ptin (disabled by default). A "request accunt" link is prvided fr un-registered users t request access t the Internal Prtal. Unlike the Drp-Off page used by external senders, the Internal Prtal des nt have the same security restrictins, such as CAPTCHA. The Internal Prtal can als be custmized. On the Internal Settings page, yu define the requirements fr Internal Users' use f the Mail Express Outlk Add-In and the Internal Prtal. These settings are passed t each instance f the Add-In being used. Internal Users can cnfigure Message Optins t be mre strict thrugh the Add-In, but cannt make the settings less strict r set t a way that Mail Express is nt used in situatins in which the administratr expects Mail Express t be used. This cntrl allws the administratr t enfrce a set f crprate usage standards. Authenticating Outlk Users The Outlk Add-In (OAI) cmmunicates with the Mail Express Server. The OAI can authenticate with the Mail Express Server using Manual Authenticatin (Basic) r Single Sign On using Kerbers (Windws Authenticatin). These methds are cnfigured in the OAI user interface and the Mail Express Server administratin interface. Fr infrmatin abut Kerbers, refer t Manual Authenticatin When the manual authenticatin ptin is selected, the user must supply a username and passwrd in the OAI. Manual authenticatin is useful in the fllwing scenaris: Trial use f the sftware User is nt lgged in t the dmain (e.g. using a laptp at the airprt) Only a small number f users will be using the system A Kerbers infrastructure is nt available Active Directry is nt available Manual authenticatin is perfrmed between the OAI and the Mail Express Server using basic access authenticatin (ver HTTPS). If the OAI functinality is enabled n the Mail Express Server (i.e., the "Add- In enabled" setting) then the basic authenticatin ptin will be prvided (instead f the SSO functinality which may be independently disabled). The user accunt will first be authenticated against the manually created internal user list. If the user accunt cannt be authenticated against the internal user list, the user will be authenticated against Active Directry if the Active Directry functinality is enabled. 100

101 Cnfiguring and Administering Mail Express Server Single Sign On The Single Sign On (SSO) functinality depends n the Active Directry functinality being enabled and cnfigured prperly. It will nt functin withut it. Single Sign On uses Kerbers t authenticate the OAI t the Mail Express Server withut users having t prvide credentials. Single Sign On will nt functin fr clients that are n the same machine as the Mail Express Server. Typically, yu will nt run Outlk n the same cmputer as Mail Express Server; hwever, if yu are testing using a lcal web brwser, it will nt wrk. This is a limitatin f client's attempting t cnnect using NTLM when lcal t the server rather than using Kerbers. The benefits f using Windws Authenticatin with Mail Express include: The Add-In des nt need t stre any credentials fr authenticating. Aside frm ensuring that each user has a dmain accunt, an rganizatin des nt need t manually create and maintain additinal credentials fr each Mail Express user. The credentials are nt passed between the Add-In and the Mail Express Server. Cnfiguring the Add-In and Internal Web Prtal Fr details f the Add-In and Internal prtal, refer t Overview f the Add-In and Internal Web Prtal. Fr details f authenticatin f Outlk users, refer t Authenticating Outlk Users. T cnfigure Internal Settings 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Prtal Settings, click Internal Settings. The Internal Settings page appears. 101

102 Mail Express User Guide v Select the Add-In services enabled check bx. If the Add-In services enabled check bx is cleared, the Outlk Add-In will nt be able t cnnect t the Mail Express Server. The Add-In services enabled check bx als cntrls whether the Authenticatin Settings and Plicy Settings are available. 4. Select the Internal Prtal enabled check bx t allw Internal users t cnnect t the Internal Prtal. 5. T specify when links are t expire, select the Link Expiratin check bx, then specify the duratin. If n link expiratin is defined, packages will be available fr dwnlad until purged, based n the file retentin plicy. When yu mdify the file expiratin value, yu are mdifying this setting fr all future transfers. Packages that are active within the system retain the expiratin value in place at time that they were created. (The default is 2 weeks. Link expiratin can be frm 1 minute t 99 years.) 102

103 Cnfiguring and Administering Mail Express Server 6. Select the Allw Internal Users t send accunt invitatins check bx f yu want t allw Internal users t send invitatins t recipients that are nt Internal users. If the check bx is cleared, n ne can send invites. If the check bx is selected, nly users wh have the Allw accunt invitatins check bx enabled in their user accunt have this permissin. 7. Select the Register Internal Users as accunt invite enabled if yu want t allw registered Internal users t send invitatins. When the check bx is selected, any new Internal users that are created will autmatically have this permissin. Selecting the check bx des nt retractively allw the permissin. The administratr has t manually enable the permissin fr Internal users created befre the check bx was selected. 8. In the Include Mail Express Reply link area, specify whether the Mail Express Reply link is Never included, Always included r User chice. If User chice is specified, the sender can chse whether t include the Mail Express Reply link. When User chice is specified, yu can als specify whether the default user chice is Never, Managed, r Always. Managed is specified by default; Managed means that the Mail Express Reply link is included n all s managed by Mail Express. 9. In the Basic Auth realm bx, specify the Mail Express Server name. This name is used as the realm name when perfrming basic access authenticatin fr web services. 10. T enable Kerbers, select the Enable Single Sign On (Kerbers) check bx. If Kerbers authenticatin is enabled, the accunt with which the Outlk user is lgged int the perating system is used fr authenticatin. If yu selected the Enable Single Sign On check bx, mre ptins appear. (Refer t Cnfiguring Mail Express fr Windws (Kerbers) Authenticatin fr mre infrmatin abut using Kerbers.) In the KDC Hst bx, prvide the string (between characters) that used as the Key Distributin Hst when perfrming Kerbers authenticatin. A KDC fr a dmain is lcated n a dmain cntrller. If a dmain has a single dmain cntrller, the KDC hst will be the same as the Active Directry server hst. Fr example, mailexpress.glbalscape.cm. In the KDC Prt bx, prvide the prt that the KDC is listening n (default=88; valid values are 1 t ). In the Dmain Name bx, prvide the string used as the dmain name when mapping between Windws Dmains and the Kerbers Realm. Fr example, glbalscape.cm In the KDC Pre-auth Username bx, prvide the username f the accunt that will be used t authenticate with the KDC. In the KDC Pre-auth User Passwrd and Cnfirm KDC Pre-auth User Passwrd bxes, prvide the passwrd f the accunt that will be used t authenticate with the KDC. 11. Under Plicy Settings, specify when Outlk users shuld use Mail Express: Always Use Mail Express Selected by default; use Mail Express t manage attachments fr every . Mail Express nt Required Outlk Add-In users can use Mail Express if they want t, but the administratr is nt requiring its use. Use Mail Express based n the fllwing plicy Any attachment that matches ne f the criteria cause all attachments t send using Mail Express. When yu select this ptin, the sectin expands t prvide Usage Plicy ptins: File Size Messages that match r exceed the defined file size (aggregate f all files attached t message) triggers Mail Express use. 103

104 Mail Express User Guide v3.2 File Type Attached files with extensins defined in this sectin trigger Mail Express use. Default file types are dc and pdf. Prvide nly the extensin, n perids r wildcards. T add a file type, select the check bx, type the extensin, then click Add. T remve a file type frm the list, click it in the list, then click Delete. Number f Attachments Messages that match r exceed the number f attachments specified trigger Mail Express use. Defaults t 10 when enabled; valid values are between T specify that Mail Express shuld manage embedded attachments, such as cmpany lg, select the Manage Embedded Attachments check bx. 13. Mail Express des nt prcess s that are in rich-text frmat; hwever, Mail Express des prvide an administrative setting "Enfrce Rich Text Cnversin" that requires users t change the frmat f rich-text messages t plain-text r HTML if they try sending a rich-text that meets the plicy criteria. This feature is useful in situatins where an rganizatin wants t ensure that users cannt bypass Mail Express by sending attachments via rich-text messages. By default the Enfrce Rich Text Cnversin feature is turned ff. Fr instructins fr changing the frmat f s t HTML r Plain-Text in Outlk, refer t Sending Files with the Mail Express Outlk Add-In. 14. File integrity checking is enabled by default. With integrity checking enabled, if there is a mismatch between sent and received files, the Add-In will resend the attachment. (A mismatch is typically due t a netwrk errr.) If yu d nt want t use file integrity checking, clear the Perfrm file integrity check check bx. If yur server experiences heavy traffic, turning ff file integrity checking can prvide a slight bst in perfrmance. 15. T specify what t d when Mail Express Server is nt available, under Behavir when Mail Express is unavailable, click ne f the fllwing ptins: Queue s with attachments until Mail Express Server is available Save the messages in a queue until the cnnectin t Mail Express Server is restred, then send the s. Send s via Outlk withut Mail Express Send the s thrugh Outlk withut Mail Express managing the attachments. Allw sender t specify behavir Display a prmpt when the cnnectin t the Mail Express Server is lst and ask the user t specify whether t wait fr cnnectivity t the Mail Express Server r send the immediately withut Mail Express managing the attachments. 16. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. Overview f Mail Express Invitatins Mail Express v3.2 allws Internal users t send an invitatin frm the Add-in r Internal Prtal t invite external parties t create a permanent external accunt. With this accunt, external users are able t use a defined Drp-Off Prtal accunt t send files t the sender as an alternative t using the Drp- Off Prtal annymusly. This feature invlves mre wrk fr recipients because they must initially create an accunt, with the added benefit that the users can mre efficiently exchange files. Invitatins sent frm the Add-in can be sent with r withut attachments. Each recipient will receive their wn private invitatin link even when an invitatin is sent t multiple addresses. 104

105 Cnfiguring and Administering Mail Express Server After an external user creates an accunt via an invitatin, the user can access the Mail Express system t send files via the Drp-Off prtal and will be subject t all restrictins and limitatins put n the prtal by the Mail Express administratr. The Mail Express administratr cntrls which Internal users have permissin t send invitatins t external users. The administratr can allw r deny the permissin glbally t all Internal users via the Internal Settings page, r nly fr specific Internal users via the user accunt details page. The glbal setting verrides the individual setting; that is, if the glbal setting is disabled, n ne can send invitatins, even if the check bx was selected fr a specific accunt. The Mail Express administratr can run an activity reprt t view which users have sent invitatins and t whm they were sent. Als, when the glbal setting is enabled, Outlk users can send invitatins frm Outlk. If the recipient's is already defined in Mail Express, the invitatin prvides a "reminder" link t the user's accunt. Custm URLs fr the Drp-Off and Internal Prtal Mail Express v3.1 incrprates a new ptinal feature fr the Drp-Off and Internal Prtals that allws custmers t create links t specific addresses. By appending /t/<list f recipients> t the standard Drp-Off and Internal Prtal URLs, where <list f recipients> is a cmma-delimited list f addresses, a URL can be created fr use in external sites, s, r as a bkmark. Use f this feature will pre-ppulate the T field and disable the ability t edit the T field. The <list f recipients> will be pre-validated prir t the display f the page, and any malfrmed addresses r validatin errrs ( address length, dmain restrictins, number f recipients allwed, etc.) will result in a 404 Page Nt Fund errr. URLs withut /t/<list f recipients> will result in standard behavir. Custm URLs must be prperly URL encded. Fr example, multiple addresses can nly be separated by cmmas. Any ther delimiters, such as semiclns will result in errrs. Additinally, the cnfirmatin page will allw the user t send anther message fr the specific <list f recipients> if ne was prvided via the URL. Otherwise, the "send anther" link will behave nrmally (renders Drp-Off/Internal Prtal with an editable "T" field, nt pre-ppulated). Example URLs: culd be used t create a link t a client s Drp-Off Prtal with [email protected] pre-ppulated in the T field. culd be used t create a link t a client s Internal Prtal with [email protected] pre-ppulated in the T field. m is an example f using multiple recipients with this feature. The T field wuld be pre-ppulated with bth recipients. Nte that the addresses are separated by a cmma. Any ther delimiters, such as semiclns will result in errrs. Belw is an example f the Drp-Off Prtal when rendered using Off/t/[email protected], shwing the T field ppulated with the address: 105

106 Mail Express User Guide v3.2 Enabling the Pick-Up Prtal When a Mail Express user sends an with an attachment, the attachment (if managed by Mail Express) is sent t the Mail Express Server, and the recipient receives an that cntains the bdy f the riginal sent , plus ne r mre hyperlinks frm which the recipient can dwnlad the attachment. The attachment is nt prcessed by the SMTP server nr sent t the recipient's client. The link t the attachment is embedded in the . The URL fr the Pick-Up Prtal is URL>/pickup. The Pick-Up Prtal must be enabled fr recipients t dwnlad attachments. Yu may want t disable the Pick-Up Prtal fr things like trubleshting, security issues, r maintenance. Yu enable r disable the Pick-Up prtal n the Pick-Up Prtal Cnfiguratin page. T enable the Pick-Up Prtal 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Prtal Settings, click Pick-up Settings. The Pick-up Prtal Cnfiguratin page appears. The URL fr the Pick-Up Prtal appears under General Settings. 3. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 106

107 Cnfiguring and Administering Mail Express Server Enabling and Cnfiguring the Reply Prtal Mail Express allws users t send large file attachments t recipients inside r utside f their rganizatin. The may cntain a link t the Reply Prtal. In the Reply Prtal, recipients can respnd t the t return files t the sender. (Yu must attach at least ne file; it is nt used simply fr an respnse.) T cnfigure the Reply Prtal 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Prtal Settings, click Reply Settings. The Reply Prtal Settings page appears. 3. T enable the Reply Prtal, select the Prtal enabled check bx. 4. T require reply users t use CAPTCHA, select the Require CAPTCHA t send check bx. CAPTCHA (Cmpletely Autmated Public Turing Test T Tell Cmputers and Humans Apart) is a prgram that displays a test that humans can pass, but a cmputer is nt likely t, such as reading a series f distrted letters and typing the same letters int a bx, thus limiting the amunt f spam s. 5. T limit the ttal file size f ne transfer, select the File size limit check bx, then specify the file size in the bxes, frm 1 KB - 2 GB. (The default is 20 GB.) 6. T expire dwnlad links, select the Link expiratin check bx, then specify the duratin. If n link expiratin is defined, packages will be purged based n the file retentin plicy. When yu mdify the file expiratin value, yu are mdifying this setting fr all future transfers. Packages that are active within the system retain the expiratin value in place at time that they were created. (The default is 2 weeks. Link expiratin can be frm 1 hur t 99 years.) 107

108 Mail Express User Guide v T exclude specific file types frm being transferred, select the File type exclusins check bx, then list up t 50 file extensins in the bx. (Wildcards are nt supprted.) T add file extensins t the list, type the file extensin in the small bx, then click Add. T remve a file extensin frm the list, click the file extensin in the list, then click Remve. 8. T limit the dmains t which reply users can send files, select the Valid recipient dmains check bx. (The dmain is everything that cmes after symbl in the address. Fr example, if the address is [email protected], the dmain is example.cm.) When a reply user clicks "Reply all" t an that includes recipients whse dmains are restricted, the s t thse recipients are nt sent. T add dmains t which drp-ff users can send files, type the dmain in the small bx, then click Add. (Changes are nt saved until yu click Save.) T remve dmains t which drp-ff users can send files, click the dmain in the list, then click Remve. (Changes are nt saved until yu click Save.) The dmain validatr lks fr an exact match with valid recipient dmains OR if the address is a sub-dmain f a valid recipient dmain. Fr example, if the valid recipient dmain is scape.cm, valid addresses are [email protected] r [email protected], but nt [email protected]. 9. Click Save t save yur changes, r click Restre t reset the bxes t their previus setting. If yu navigate away frm the page withut clicking Save, yur changes are discarded. 108

109 Cnfiguring the DMZ Gateway Cnnectin Cnfiguring the DMZ Gateway Cnnectin This sectin describes cnfiguring Mail Express fr use with DMZ Gateway. Fr infrmatin abut installing and cnfiguring DMZ Gateway, please refer t the DMZ Gateway dcumentatin. Versin 3.1 and later f Mail Express Server can cnnect t a netwrk prtected by DMZ Gateway v3.0.1 and later. Using DMZ Gateway with the Mail Express Server allws administratrs t limit access by allwing nly utbund cnnectins frm the Mail Express Server via the firewall cnfiguratin. DMZ Gateway is designed t reside in the demilitarized zne and prvide secure cmmunicatin with the Mail Express Server behind intranet firewalls withut requiring any inbund firewall hles between the internal netwrk and the DMZ, and with n sensitive data stred in the DMZ, even temprarily. When cnfigured t use DMZ Gateway, Mail Express functins nrmally, giving n indicatin t end users f the system that the additinal piece has been added t the netwrk. DMZ Gateway is a separate mdule frm Mail Express Server and is installed and licensed separately. The cnnectin between Mail Express and DMZ Gateway is cnfigured in the Mail Express administratin prtal. Yu must enable an utbund prt frm Mail Express Server t DMZ Gateway ver which Mail Express Server is t cnnect t DMZ Gateway. The default prt is Mail Express nly cmmunicates ver HTTPS, which uses prt 443 by default. By default, nly the Pick-up, Drp-ff, and Reply prtals are accessible via DMZ Gateway. The Administratin prtal, Internal prtal, and Outlk Add-In web service interface (interfaces nrmally accessed frm within the netwrk) are nt accessible via DMZ Gateway. In the DMZ Gateway interface, the Mail Express Server is cnsidered a "Server" and the Mail Express DMZ Prtcl Handler is cnsidered a "Site" (e.g., in the DMZ Gateway Status pane). In the DMZ Gateway versin 3.1.0, when cmmunicating with Mail Express Server, "Mail Express Server" appears in the Server Type clumn. In earlier releases f DMZ Gateway, "[Unknwn]" appears in the Server Type clumn. DMZ Gateway events are lgged in the Mail Express Event lg. Fr details f installing and cnfiguring DMZ Gateway, refer t the DMZ Gateway in-applicatin help r nline help. Befre yu can use DMZ Gateway with Mail Express Server, yu have t prvide Mail Express with the DMZ Gateway cnnectin infrmatin. T cnfigure the DMZ Gateway infrmatin 1. In the Mail Express left navigatin pane r n the Mail Express Status page, click DMZ Gateway. The DMZ Gateway Cnfiguratin page appears. 2. Select the Enable the DMZ Gateway as a prxy check bx. The page expands t display mre ptins. 109

110 Mail Express User Guide v In the DMZ Gateway address bx, specify the hstname r IP address f the DMZ Gateway. 4. In the Server Prt bx, specify the prt number used by DMZ Gateway (44500 by default). 5. In the Client HTTPS Prt bx, specify the prt n which DMZ Gateway listens fr incming client cnnectins. In the case f Mail Express, client cnnectins will typically include external recipients picking up files via the Pick-Up prtal and external users dripping ff files via the Drp- Off prtal. While the DMZ Gateway supprts use f client prts ther than prt 443, it is highly recmmended t use the default HTTPS prt f 443 as this is the industry standard fr HTTPS cmmunicatins. When using the standard prt, users will nt have t specify a prt value in the brwser's URL if they are manually typing the URL t cnnect t a prtal such as the Drp-Off prtal. Using a nn-standard client HTTPS listener prt will require either adding the prt t the General Cnfiguratin Hstname s that the prt is included n links generated by the Mail Express system, r the netwrking infrastructure must be cnfigured using prtfrwarding t redirect external HTTPS traffic t the cnfigured Client HTTPS prt n the DMZ Gateway cmputer. 6. Click Save t save the changes r click Restre t return t the previus settings. If the cnnectin t DMZ Gateway was lst (e.g., due t netwrk errrs), yu can click Recnnect r wait 30 secnds fr the Mail Express Server t autmatically try t recnnect. Advanced DMZ Gateway Cnfiguratin Optins Fr security, cmmunicatins ruted thrugh the DMZ Gateway are denied access t the Administratin prtal, Internal User prtal, and Outlk Add-In web service interfaces by default. Typically, cmmunicatins t these prtals shuld nly cme frm the internal crprate netwrks. This functinality allws limiting access t prtals similar t the functinality prvided by a web applicatin firewall. Additinally, authenticatin that takes place thrugh the DMZ Gateway will nt authenticate against Active Directry/LDAP, if applicable. This prvides an additinal layer f security against brute-frce attacks n Active Directry accunts. T mdify these settings 1. In a text editr, pen the file <Installatin Directry>\webapps\ROOT\WEB- INF\classes\META-INF\staticCnfig.xml. 2. Mdify ne r mre f the fllwing settings: cnfiguratinmanager.enableldapviadmzgateway - Sets whether authenticatin shuld be perfrmed against LDAP fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is false. 110

111 Cnfiguring the DMZ Gateway Cnnectin cnfiguratinmanager.enableadminpagesviadmzgateway - Sets whether Administratin prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is false. cnfiguratinmanager.enabledrpffpagesviadmzgateway - Sets whether Drp-Off prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is true. cnfiguratinmanager.enableinternalpagesviadmzgateway - Sets whether Internal prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is false. cnfiguratinmanager.enablepickuppagesviadmzgateway - Sets whether PickU prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is true cnfiguratinmanager.enableclientserviceviadmzgateway - Sets whether the Outlk Add-In web service interface shuld be enabled fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is false cnfiguratinmanager.enablereplypagesviadmzgateway - Sets whether the Reply prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is true cnfiguratinmanager.enableaccuntactivatinpagesviadmzgateway - Sets whether accunt activatin prtal pages shuld render fr cmmunicatins that have been prxied thrugh the DMZ Gateway. Default is true 3. Save the changes t the file. 4. Restart the Mail Express Server Windws service. Viewing and Managing Files Occasinally, yu might want t prevent users frm picking up a file that was sent, because it was sent errneusly r an external sender attempted t uplad malicius files. File management allws yu t delete any files that yu d nt want transferred int r ut f the rganizatin. When yu delete a file frm the server, nly the files are remved frm the server; n transactin histry is remved frm the database. All manual deletins f files are recrded in the database. The date and time f the deletin is nted in the audit lg, as well as the administratr perfrming the actin, time and date f deletin, and which files were deleted. The deletin infrmatin includes a descriptin similar t the fllwing: File [Zer.2k.dmp] ([2.0 KB] frm [Wed Sep 22 10:09:46 CDT 2010]) was explicitly deleted; belnged t file [CjCr07H63bldFXepO8aE7RGvzHthwHRAuFE7Iel]. If yu click a link fr a file that was deleted, a message appears that the file is invalid. On the File Management page, a table displays details f the files currently n the Mail Express Server within a date range. The Start Date defaults t 1 day prir t the current date and time and the End Date defaults t the current date and time. Package details include: File(s) File(s) in the file. Sender address f the persn wh sent the file. Recipient(s) address f the persn wh received the file. Uplad Time Date and time when the file was upladed t the Mail Express Server. Package ID Unique identifier used t track the file. Yu can filter the list f files by Package, Filename, Sender, Recipients, r Surce. 111

112 Mail Express User Guide v3.2 T manage files 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under System Infrmatin, click File Management. The File Management page appears. T search fr files T srt the table T delete files T filter data by Uplad Time, specify the Start Date and End Date. ("12:00 AM" equals midnight f the previus day.) T search fr data in a particular clumn, prvide the search criteria in the Search By bx, click the dwn arrw t specify which clumn t search (Package, Filename, Sender, Recipient, r Surce), then click Search. Fr example, t search fr files sent by a specify user, in the Search By bx, click Sender, then in the text bx, type the user's address r name. Wildcards are supprted: use? t match a single character and * t match 0 r mre characters. Leave the Search by bx blank t include all files within a date range. Select the Exact Match check bx t cntrl hw the value in the Search bx is used. If the Exact Match check bx is selected, the clumn data must match the search value exactly. T clear the search and display all files, click Reset. Click the clumn heading by which yu want t srt. Select the check bx next t the file(s) yu want t delete, then click Delete selected files. Yu can select all r clear all files using the Select all / deselect all check bx. T mve t ther pages f the table Click the navigatin cntrls that appear abve the clumn headers when mre than ne page f results is available. 112

113 Cnfiguring the DMZ Gateway Cnnectin Viewing and Managing Packages When files are attached t s managed by Mail Express, the s and their attachments are called packages. Occasinally, yu might want t prevent users frm picking up a package that was sent, because it was sent errneusly r an external sender attempted t uplad malicius files. Package management allws yu t expire packages that yu d nt want transferred int r ut f the rganizatin. If yu click a link fr a package that has expired, a message appears that the package is invalid. On the Package Management page, a table displays details f the packages currently n the Mail Express Server within a date range. The Start Date defaults t 1 day prir t the current date and time and the End Date defaults t the current date and time. Package details include: Package ID Unique identifier used t track the package. Expiratin Date and time when the package will n lnger be available fr dwnlad. Sender address f the persn wh sent the package. Recipient(s) address f the persn wh received the package. Details Icns indicate whether the package cntains files, reply invitatins, and/r accunt invitatins. When yu place yur cursr ver the file icn, a tl tip displays the number f files upladed in the package. Yu can filter the list f packages by Package, Filename, Sender, r Recipient. T manage packages 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under System Infrmatin, click Package Management. The Package Management page appears. T search fr packages Specify the date range t filter data in the Uplad Time clumn. ("12:00 AM" equals midnight f the previus day.) 113

114 Mail Express User Guide v3.2 T srt the table T search fr data in a particular clumn, prvide the search criteria in the Search by bx, click the dwn arrw t specify which clumn t search (Package, Sender, Recipients, r Surce), then click Search. Fr example, t search fr packages sent by a specify user, in the Search by bx, click Sender, then in the text bx, type the user's address r name. Wildcards are supprted: use? t match a single character and * t match 0 r mre characters. Leave the Search by bx blank t include all packages within a date range. Select the Exact Match check bx t cntrl hw the value in the Search bx is used. If the Exact Match check bx is selected, the clumn data must match the search value exactly. T clear the search and display all packages, click Reset. Click the clumn heading by which yu want t srt. T view package details Click an icn in the Detail clumn t view the package details. The package details page displays infrmatin abut the sender, recipients, attachments, dwnlads, and replies. T expire packages Select the check bx next t the package(s) yu want t expire, then click Expire selected packages. Yu can select all r clear all check bxes using the Select all / deselect all check bx. 114

115 Cnfiguring the DMZ Gateway Cnnectin T mve t ther pages f the table Click the navigatin cntrls that appear abve the clumn headers when mre than ne page f results is available (e.g., "Shwing 1 t 20 f 103 <<<123456>>>"). Viewing Mail Express Status The Windws Event Viewer displays significant events related t Mail Express, such as server start, server stp, ERROR lg messages, and FATAL lg messages. Messages include the time and date f the event, an indicatin f the severity f the event, and a message describing the event. When yu lg in t the Mail Express Server, Mail Express displays the Mail Express status. In general, the flag clrs indicate "OK" (green), "Warning" (range), r "Fatal" (red). A red flag can indicate that the cmpnent is nt yet cnfigured, miscnfigured, r therwise nt functining as expected. Yu can als view reprts fr mre infrmatin. The Mail Express Status page displays status f the fllwing cmpnents: File Stre Number and size f files stred, and percentage f disk used. An range "warning" flag indicates that the file stre limit has been reached r exceeded. A red flag indicates that the file stre is nt valid r nt writable. T adjust the allwed disk space, refer t Cnfiguring File Strage. Database Cnnectivity and percent full. T adjust allwed size, refer t Cnfiguring Database Purging and Ntificatins. Current Activity Displays number f requests and number f current licenses cnsumed and ttal licenses. Licensing status displays "Unlicensed" if a valid license string has nt been prvided. Drp-ff Prtal Indicates whether the Drp-ff Prtal is enabled. When enabled, shws the number f active uplads ccurring via the Drp-ff prtal. T enable and cnfigure the Drp-Off page, refer t Cnfiguring the Drp-Off Prtal. Pick-up Prtal Indicates whether the Pick-up Prtal is enabled. When enabled, shws the number f active dwnlads ccurring via the Pick-up prtal. T enable and cnfigure the Pick- Up page, refer t Enabling the Pick-Up Prtal 115

116 Mail Express User Guide v3.2 Reply Prtal Indicates whether the Reply Prtal is enabled. When enabled, shws the number f active uplads ccurring via the Reply prtal. T enable and cnfigure the Reply page, refer t Enabling and Cnfiguring the Reply Prtal. Internal Prtal Indicates whether the Internal Prtal is enabled. When enabled, shw the number f active uplads ccurring via the Internal Prtal. T enable and cnfigure the Internal Prtal, refer t Cnfiguring the Add-In and Internal Prtal. Outlk Add-In Indicates whether Outlk Add-In access is enabled. When enabled, shws the number f active transfers ccurring frm Outlk Add-Ins. T enable and cnfigure Add-In services, refer t Cnfiguring the Add-In and Internal Prtal. General Cnfiguratin Dmain Name The Mail Express Server hst name. T specify the Mail Express Server dmain, refer t Specifying the Mail Express Server Hst Name. Exchange Mail Server The Exchange hst name. T cnfigure the Exchange hst name and ther settings, refer t Cnfiguring Mail Express fr Exchange. The status flag alternates between green and red r green, range, and red, depending n hw exchange is cnfigured. If yu're nly sending mail with n bx mnitring, the flag will either be green r red, depending n whether Mail Express can cnnect t the mail server. If bx mnitring is als enabled, a green flag indicates that send and mnitr are bth wrking; a red flag indicates that send and mnitr are nt wrking; an range flag indicates that ne is wrking and the ther is nt. DMZ Gateway When enabled, shws the state f the cnnectin t the DMZ Gateway (Cnnected, Cnnecting, Discnnected) and the cnfigured DMZ Gateway address and server prt. T enable and cnfigure DMZ Gateway, refer t Cnfiguring the DMZ Gateway Cnnectin. T register DMZ Gateway, refer t Registering DMZ Gateway. Installed Sftware Versin Server sftware versin. Lgging Mail Express Server Activities All lgging functinality in Mail Express is precnfigured with the ptimal settings. Typically mdifying the cnfiguratin fr the lgging functinality shuld nly be perfrmed under the directin f GlbalSCAPE Custmer Supprt. Installatin Lgging Refer t Installatin Lgging. Mail Express Server Diagnstics Lgging The Mail Express Server Diagnstics Lgging functinality prvides diagnstic-level messages fr the peratin f the Mail Express Server. This diagnstic infrmatin may be used t identify errrs, warnings, and ther infrmatin f interest that ccur during the peratin f the Mail Express Server. By default this functinality lgs t the file <Installatin Directry>\lgs\MailExpressServer.lg. The lg will be appended during each run f the Mail Express Server. The lg file will archive itself autmatically when it reaches 10 MB and will maintain the last 10 lg files in the frm MailExpressServer.lg.<X> where X is a number frm 1 t 10, with 1 being the mst recently archived lg file and 10 being the ldest. Mail Express Server Service Diagnstics Lgging This lgging recrds diagnstic infrmatin generated by the Mail Express Server service. The Mail Express Server service is respnsible fr starting the Java Virtual Machine and launching and subsequently mnitring the Mail Express Server. The diagnstic infrmatin may be used t identify errrs r warnings that ccur during startup f the Mail Express Server. By default this functinality lgs t the file <Installatin Directry>\lgs\MailExpressServerService.lg. 116

117 Cnfiguring the DMZ Gateway Cnnectin The lg will be appended during each run f the Mail Express Server. The lg file will archive itself autmatically when it reaches 10 MB and will maintain the last 10 lg files in the frm MailExpressServerService.lg.<X> where X is a number frm 1 t 10, with 1 being the mst recently archived lg file and 10 being the ldest. Mail Express Server Event Viewer The Mail Express Server is capable f lgging significant events t the Windws Event Lg. Events riginating frm the Mail Express Server are lgged t the Applicatin Event Lg and by default include the fllwing types f events: Mail Express Server Service start Mail Express Server Service stp Mail Express Server Service restart Mail Express Server Service startup failures All FATAL and ERROR-level diagnstic lg messages lgged t the Mail Express Server Diagnstics Lgging Additinally, the startup and shutdwn activities riginating frm the Windws Service Cntrl Manager are lgged t the System Event Lg. This is an autmatic behavir prvided by the Windws Operating System and is nt generated by Mail Express Server. Custmizing Mail Express Pages and Ntificatins Limited custmizatin is available fr the Mail Express web pages and fr the varius ntificatins that Mail Express sends. Yu can mdify all interfaces that have GlbalSCAPE r Mail Express branding, including Web prtal headers, fters, and lgs, and Mail Express-added cntent. All custmizatins are file-based; that is, yu can create custmized text and image files and place them in a specified lcatin. If any custmizatin cntains invalid variables r frmatting, the default ntificatins are used and an errr is displayed in the Audit Event Histry reprt t infrm yu f the issue. (The Audit Event Histry reprt will display a Template Custmizatin errr.) Custmizatins are perfrmed by editing the templates lcated in <Installatin Directry>\webapps\ROOT\WEB-INF\template. Each template includes minimal GlbalSCAPE branding as a fter n each web page and . The "Pwered by GlbalSCAPE Mail Express " fter is nt editable r remvable. (GlbalSCAPE Prfessinal Services team prvides custm branding services.) Attachment headers read, "The fllwing attachments have been securely sent t yu and can be dwnladed until <expiratin_date>". The time and date frmat fr all ntificatins is "Mnth, Day Year HH:mi:ss AM/PM". The time is the lcal server time. The default welcme text n any prtal page is "Welcme t the Mail Express <name> Prtal" where <name> is ne f File Drpff, Internal, r Pickup. The default welcme text n any lgin page is "Welcme t the Mail Express <name> Lgin Page" where <name> is ne f Administratin, File Drpff, r Internal. Custmized files in the \template\ directry are autmatically backed up during reinstall r upgrade. Hwever, if any f the html r prperty files beneath <Installatin Directry>\webapps\ROOT\classes directry have been mdified, these will nt be backed up autmatically. Backup yur custmizatins utside f the Mail Express installatin directry. If yu have t reinstall Mail Express r install a new versin, yur custmizatins will be verwritten in the Mail Express installatin directry. 117

118 Mail Express User Guide v3.2 Mail Express uses the Freemarker Template Engine t handle prcessing the template files. Refer t the Freemarker website fr mre infrmatin abut editing Freemarker templates. Fr example, if yu wanted t include a custm URL that recipients culd click in the that Mail Express sends t them s that they can access yur custm Drp-Off prtal t return files, yu wuld edit the addinsendtemplate.html.ftl template t include the custm link: <p> <#if packagelinkonly> <a href="${packagelink}">dwnlad <#if attachments?size == 1>attachment<#else>attachments</#if></a> Please use this custmized Mail Express <a href=" link t return any files t me. <#else> <span style="fnt-size:11px"><i>additinal dwnlad ptins are available at the <a href="${packagelink}">pick-up Prtal</a>. Please use this custmized Mail Express <a href=" link t return any files t me.</i></span> </#if> </p> The text in red was added t the existing text in the template. Templates Mail Express uses a variety f templates t build the varius s that it sends. Yu can custmize the text and sme text attributes in the template. The templates are purpsefully very simple. The text f the is editable. The address and link are added with variables. (Be careful t nt change any f the variables in angle brackets, <variable>, as that will prevent the frm functining prperly.) "Pwered by GlbalSCAPE " is nt editable in the templates. (GlbalSCAPE Prfessinal Services team can prvide custm branding services.) Each f the s is cmpsed f the fllwing template types: <ID>.html.ftl is the template fr the HTML-frmatted versin f the that will be seen by recipients using HTML mde t view s in their client sftware. <ID>.subject.ftl is the template fr the subject line f the <ID>.text.ftl is the template fr the text-frmatted versin f the that will be seen by recipients using plain text t view s in their client sftware. If yu want HTML recipients and plain-text recipients t view the same message, yu will have t edit bth versins f the template. The subject template applies t bth HTML and plain text. Cmmn Template Data Structures Many templates use data in a cmmn frmat. The prperties f these structures are detailed in the table. 118

119 Cnfiguring the DMZ Gateway Cnnectin Structure Descriptin Prperties Actr Represents a user accunt address: String; accunt address; e.g. "[email protected]" username: String; accunt user name; e.g. "je.blggs" displayname: String; accunt display name; may be null; e.g. "Je Blggs" persnalizedaddress: String; cmbines display-name and address; e.g. [Je Blggs <[email protected]>] kind: String; type f accunt: Administratr administratrs InternalAutmatic internal users frm LDAP InternalManaged internal users manually added External drp-ff users Attachment Represents a file attachment t an title: String; the dcument title length: Duble; the dcument size unit: String; the dcument unit: Kb, MB, etc link: String; dcument access URL Prblem Represents an system errr title: String; a brief name f the issue descriptin: String; mre detailed descriptin f the issue level: Integer; nesting level fr the issue; used when they are chained tgether based n rt cause; the initial level is 0 AccuntSummary Represents a user accunt frm an invitatin actr: Actr; the accunt hlder prtal: String; the prtal URL based n the accunt type InviteSummary Represents an accunt invitatin: wh sent it, what was it called, and when it was sent sender: Address; wh sent the invitatin title: String; subject-line f the invitatin createdate: java.util.date; the date the invitatin was sent 119

120 Mail Express User Guide v3.2 Structure Descriptin Prperties Address FrmatMethd Represents an RFC822 address; e.g. [Je Blggs In the example, "Je Blggs" is the "persnal name" prtin f the address, and "[email protected]" is the "address" prtin f the address. A wrapper arund the "java.lang.string.frmat(string frmat, Object args)" methd fr executin within a template. address: String; the address prtin persnal: String; the persnal name prtin ascciqutedpersnal: String; the persnal name prtin encded as ASCII s that it is suitable fr exchange with SMTP servers utfqutedpersnal: String; the persnal name prtin quted s that UTF characters are preserved (if they exists in the name) asciitext: String; the persnal name and address prtins tgether, cntaining nly ASCII s that it is mail-safe utftext: String; the persnal name and address prtins tgether, with Unicde characters preserved. Example executin: ${frmat("%s %s.", "Hell", "wrld")} Server Templates Template Name Template Files Data Mdel Accunt activatin ntificatin sent t users wh extended an invitatin t the user wh just activated their accunt cnfirmatin sent t the user wh just activated their accunt accuntactivatinntificatin.html.ftl accuntactivatinntificatin.subject.ftl accuntactivatinntificatin.text.ftl accuntactivatincnfirmatin.html.ftl accuntactivatincnfirmatin.subject.ftl accuntactivatincnfirmatin.text.ftl accunt: AccuntSummary invites: List f [InviteSummary] invitetitlesize: Integer; number f characters f the lngest invite title recipientaddresssize: Integer; number f characters in the lngest recipient address recipientpersnalsize: Integer; number f characters in the lngest recipient persnal name recipientutftextsize: Integer; number f characters in the lngest recipient persnal & address text 120

121 Cnfiguring the DMZ Gateway Cnnectin Template Name Template Files Data Mdel Accunt Passwrd Reset The sent t users wh have requested that their passwrd be reset. The cntains a link t the passwrd reset page. accuntpasswrdreset.html.ftl accuntpasswrdreset.subject.ftl accuntpasswrdreset.text.ftl user: Actr; accunt being accessed url: String; URL t fllw t reset the passwrd The Accunt Passwrd Reset template frmats the sent t users wh have requested their passwrd be reset. The cntains a link t reset the passwrd. This link takes yu t the reset passwrd page. Once the user changes the passwrd, either by this link r by lgging in and ging t the change passwrd page, the Passwrd Changed template is used t frmat the t ntify the user f the change. Accunt Request The sent t admin users detailing an accunt request. accuntrequest.html.ftl accuntrequest.subject.ftl accuntrequest.text.ftl name: String; requestr s name address: String; requestr s address message: String; requestr s message prtal: String; prtal frm which request was made Dwnlad Ntificatin The sent t the riginal sender when the package has been dwnladed by a recipient. External User Invitatin The autmatically sent t newly created external users inviting them t use the Mail Express system. dwnladntificatin.html.ftl dwnladntificatin.subject.ftl dwnladntificatin.text.ftl externaluserinvitatin.html.ftl externaluserinvitatin.subject.ftl externaluserinvitatin.text.ftl packageid: String; the package that was accessed filename: String; the dcument title, r null if the cmplete package was dwnladed recipient: String; wh accessed the file, r null fr annymus access dwnladdate: Date; when the recipient dwnladed the file upladdate: Date; when the sender sent the package subject: String; subject line frm the sender s displayname: String; new accunt s display name; may be null drpffurl: String; the URL t the drp-ff page username: String; new accunt s username; same as address passwrd: String; new accunt s passwrd frcepasswrdchange: Blean; whether the new user will have t change the passwrd the first time the accunt is accessed 121

122 Mail Express User Guide v3.2 Template Name Template Files Data Mdel Package Uplad Prtal Send Ntificatin The sent t recipients f packages sent frm the Package Uplad Prtal. 122 drpffsendntificatin.html.ftl drpffsendntificatin.subject.ftl drpffsendntificatin.text.ftl hasdwnlad: Blean; whether the package has attachments hasaccuntinvite: Blean; whether the package has accunt invitatins hasreplyinvite: Blean; whether the package has reply invitatins expiratin: java.util.date; when the package expires; may be null subject: String; subject line frm the sender s packagelinkonly: Blean; whether t include links t all the files in the package individually r nly the package-pickup page sendercpy: Blean; whether the sender wants a cpy f the message delivered t the recipients (like a CC) message: String; sender s message accmpanying the package sender: Address; the sender s address recipientcunt: Integer; the ttal number f "T" and "Cc" recipients packagelink: String; package access URL attachments: list f [Attachment]s attachmentlengthsize: Integer; number f characters in the lngest attachment length and unit attachmenttitlesize: Integer; number f characters in the lngest attachment title attachmentlinksize: Integer; number f characters in the lngest attachment link accuntlink: String; URL t activate accunt invitatin accuntmessage_html: String; accunt invitatin message has HTML accuntmessage_text: String; accunt invitatin message as ASCII replyalllink: String; URL t reply t all recipients with uplads replylink: String; URL t reply t the sender with uplads

123 Cnfiguring the DMZ Gateway Cnnectin Template Name Template Files Data Mdel Package Uplad Send Cnfirmatin The cnfirmatin sent t the sender detailing the transfer s files, recipients. drpffsendcnfirmatin.html.ftl drpffsendcnfirmatin.subject.ftl drpffsendcnfirmatin.text.ftl accuntinvites: Blean; whether these recipients were sent an accunt invite r nt expiratin: Date; when the package expires; may be null identifier: String; the package that was upladed hasdwnlad: Blean; whether the package has attachments hasaccuntinvite: Bblean; whether the package has accunt invitatins hasreplyinvite: Blean; whether the package has reply invitatins recipientshavenames: Blean; whether any f the recipients have a persnal name r just -addresses recipients: list f recipient [ Address]es restricted: list f restricted recipient [ Address]es (links are remved frm ntificatin ) recipientaddresssize: Integer; number f characters in the lngest recipient address recipientpersnalsize: Integer; number f characters in the lngest recipient persnal name recipientutftextsize: Integer attachments: list f [Attachment]s attachmentlengthsize: Integer; number f characters in the lngest attachment length and unit attachmenttitlesize: Integer; number f characters in the lngest attachment title attachmentlinksize: Integer; number f characters in the lngest attachment link 123

124 Mail Express User Guide v3.2 Template Name Template Files Data Mdel Package Uplad URL The sent via the Administratin prtal s General Settings page. Used t ntify recipients f the Mail Express Server s Package Uplad Page URL. Passwrd Changed The sent t users whse passwrd has been changed via the change passwrd link in the web prtal. (Refer t Accunt Passwrd Reset fr mre infrmatin.) Stre Quta Ntificatin The sent t admin users when the file stre quta r database size quta has been reached. Test The test send when using the test functinality n the Administratin prtal s SMTP cnfiguratin page. senddrpffurlinvitatin.html.ftl senddrpffurlinvitatin.subject.ftl senddrpffurlinvitatin.text.ftl accuntpasswrdchanged.html.ftl accuntpasswrdchanged.subject.ftl accuntpasswrdchanged.text.ftl strentificatin.html.ftl strentificatin.subject.ftl strentificatin.text.ftl test.html.ftl test.subject.ftl test.text.ftl recipient: String; recipient f the invitatin drpffurl: String; the URL t the drp-ff page user: Actr; accunt being accessed internaluser: Blean; true when user.kind is either InternalAutmatic r InternalManaged, false therwise date: java.util.date; when the user changed their passwrd percentfull: Duble; rati f the current size t the quta stretype: String; type f stre: FileSystem, Database sizeamunt: Duble; current size f the stre sizeunit: String; amunt unit: Kb, MB, etc qutaamunt: Duble; quta fr the stre qutaunit: String; amunt unit: Kb, MB, etc nne 124

125 Cnfiguring the DMZ Gateway Cnnectin Template Name Template Files Data Mdel Undeliverable Ntificatin The sent t sender in the event that Mail Express was unable t deliver the message and the reasn why; als whenever yu receive a delivery status ntificatin update frm the mail server. Outlk Add-In Templates undeliverablentificatin.html.ftl undeliverablentificatin.subject.ftl undeliverablentificatin.text.ftl Template Name Template Files Data Mdel Outlk Add-in Invitatin Message The invitatin message custmized per recipient included in the accunt invitatin frm the Outlk Add-In. Outlk Add-in Recipient Header The recipient header custmized per recipient included in the frm the Outlk Add-In. addininvitatintemplate.html.f tl addininvitatintemplate.text.ftl addinrecipienttemplate.html.ft l addinrecipienttemplate.text.ftl user: Actr; riginal sender f the failed message subject: String; the subject line f the failed message errrs: list f [Prblem]s sender: Address; the sender s address accuntlink: String; "${InvitePageLink}"; this is a fixed tken s that the Outlk Add-In can replace it accunts: list f [AccuntSummary] useraccuntsize: Integer; number f characters in the lngest user accunt user size: Integer; number f characters in the lngest user usernamesize: Integer; number f characters in the lngest user name userprtalsize: Integer; number f characters in the lngest user prtal userenabledsize: Integer; number f characters in the lngest user enabled state subject: String; subject line frm the sender s trecipients: list f "TO" recipient [ Address]es ccrecipients: list f "CC" recipient [ Address]es disambiguate: Blean; whether the package has mre than ne nn-bcc tracking recipient recipientcunt: int; the ttal number f "T" and "Cc" recipients sender: Address; the sender s address replyt: list f the "TO" recipient [ Address]es with the additin f the sender if he/she is nt als a recipient 125

126 Mail Express User Guide v3.2 Template Name Template Files Data Mdel Outlk Add-In Send Ntificatin The sent t recipients f packages sent frm the Outlk Add-In.) addinsendtemplate.html.ftl addinsendtemplate.text.ftl hasdwnlad: blean; whether the package has attachments hasaccuntinvite: blean; whether the package has accunt invitatins hasreplyinvite: blean; whether the package has reply invitatins recipientheader: String; the header tken "${RecipientHeader}", r the disambiguatin header if it is the same fr all recipients, r empty if it is nt required expiratin: java.util.date; when the package expires; may be null subject: String; subject line frm the sender s packagelinkonly: Blean; whether t include links t all the files in the package individually r nly the package-pickup page packagelink: String; "${PickupPageLink}"; this is a fixed tken s that the Outlk Add- In can replace it replylink: String; "${ReplyPageLink}"; this is a fixed tken s that the Outlk Add-In can replace it replyalllink: String; "${ReplyAllPageLink}"; this is a fixed tken s that the Outlk Add- In can replace it accuntlink: String; "${InvitePageLink}"; this is a fixed tken s that the Outlk Add-In can replace it accuntmessage: String; "${InviteMessageTemplate}"; this is a fixed tken s that the Outlk Add-In can replace it recipientcunt: int; the ttal number f "T" and "Cc" recipients sender: Address; the sender s address replyt: list f the "TO" recipient [ Address]es with the additin f the sender if he/she is nt als a recipient attachments: list f [Attachment]s (Nte: link: String; "${FileLink.#}"; this is a fixed tken based n the attachment s index (#) in the list s that the Outlk Add-In can replace it) attachmentlengthsize: Integer; number f characters in the lngest attachment length and unit attachmenttitlesize: Integer; number f characters in the lngest attachment title attachmentlinksize: Integer; number f characters in the lngest attachment link 126

127 Cnfiguring the DMZ Gateway Cnnectin Web Prtal Templates There are five basic types f web page custmizatins (Accunt, Lgin, Hme, Prtal, Misc, and Default). Each page has tw areas that are custmizable; the header at the tp f the page and the fter at the bttm f the page. Pages can be further specialized with an enumerated argument. Pages can be lcalized based n the web-viewer (i.e., the cmputer's language setting). Template lcatin: Header Fter Specializatin parameter Prtal type Admin External Internal Pickup Accunt template custmizatin PasswrdChange RequestAccunt LstPasswrd Custm template Accunt: self-maintenance pages; specialized by "Accunt template custmizatin" Lgin: lgin page; specialized by "Prtal type" Hme: prtal disambiguatin page Prtal: landing page; specialized by "Prtal type" Misc: (miscellaneus) every ther page; specialized by "Prtal type" Default: glbal "catch-all" custmizatins Files custmpage[template].[parameter].[lcatin].html_[language]_[cuntry].ftl Data mdel path: String; path t lad image resurces parameter: String; specializatin argument template: String; type f custmized template frmat: [freemarker.template.templatemethdmdel]; hk int the String.frmat(String, Object ) methd The default templates are fr "en_us." Fr details f cuntry-specific cdes, refer t the ISO 3166 cde lists. Fr details f language-specific cdes, refer t the Cdes fr the Representatin f Names f Languages. 127

128 Mail Express User Guide v3.2 Example Suppse smene was trying t sign in t the administratr s prtal. Mail Express wuld lk fr a custmized template t render in bth the header and fter f that page. Fr the header, belw is the rder the files wuld be cnsidered (the fter is similarly prcessed). Failing t find the first ne, Mail Express wuld lk fr the secnd ne. Failing that, it wuld lk fr the next ne, and s n. If n custm header file is fund, Mail Express uses the default. 1. custmpagelgin.admin.header.html_en_us.ftl 2. custmpagelgin.admin.header.html_en.ftl 3. custmpagelgin.admin.header.html.ftl 4. custmpagelgin.header.html_en_us.ftl 5. custmpagelgin.header.html_en.ftl 6. custmpagelgin.header.html.ftl 7. custmpagedefault.header.html_en_us.ftl 8. custmpagedefault.header.html_en.ftl 9. custmpagedefault.header.html.ftl The same data mdel is used fr any template that is fund. Administratrs are free t chse any number f files at the apprpriate level t meet their specific needs. Fters are prcessed similarly t headers; the nly ntable difference is that the fter s data-mdel nly cntains specializatin parameters f prtal-type. Lcalizatin depends n the templates available and the language setting n the client cmputer. Misc Templates Template Files sendattachmenttemplate.html.ftl The Package Recipient Ntificatin s that are sent t recipients after a package is sent via either the Outlk Plug-in r the Package Uplad Prtal will cntain a small attached html file. By default this file will cntain the list f links t dwnlad the files. This template allws fr custmizatin f this attached html file. krb5.cnf.ftl Mainly fr debugging purpses. Allws custmizatin f the Kerbers cnfiguratin file used fr Kerbers authenticatin. Data Mdel attachments: list f attachments; prperties f interest title: String; the dcument title length: Duble; the dcument size unit: String; the dcument unit: Kb, MB, etc link: String; dcument access URL kerbersrealm: String; the upper-case versin f the Authenticatin Settings "Dmain name" field cnfigured via the Mail Express Server Administratin Prtal Internal Settings page. kdchst: String; the hstname r IP Address f the Kerbers Key Distributin Center (e.g. the Active Directry Server) as cnfigured in the Authenticatin Settings "KDC hst" field f the Mail Express Server Administratin Prtal Internal Settings page. kdcprt: Integer; the listener prt f the Kerbers Key Distributin Center (e.g. the Active Directry Server) as cnfigured in the Authenticatin Settings "KDC prt" field f the Mail Express Server Administratin Prtal Internal Settings page. dmain: String; the Windws dmain name managed by the Kerbers Key Distributin Center (e.g. the Active Directry Server) as cnfigured in the Authenticatin Settings "Dmain name" field f the Mail Express Server Administratin Prtal Internal Settings page. 128

129 Mail Express Security and SSL Date Frmat Yu can specify the date and time frmat within the templates that use dates. Fr example, in the variable ${expiratin?datetime?string.lng}, yu wuld change lng t shrt, medium, r full: shrt e.g., 11/20/10 12:45 PM medium Nv 20, 2010 lng Nvember 20, 2010 full Wednesday, Nvember 20, 2010 Replacing the Mail Express Lg with Yur Own The images subdirectry (by default, C:\Prgram Files\GlbalSCAPE\Mail Express\webapps\ROOT\WEB-INF\template\images) cntains the Mail Express lg and thers. Yu can "brand" Mail Express with yur wn graphics by verwriting the existing file. HeaderBar.header_lg.png is the header image fr all Mail Express pages. T replace the Mail Express lg with yur wn 1. Make a cpy f HeaderBar.header_lg.png and then paste it in the same directry. It will be saved as Cpy f HeaderBar.header_lg.png. 2. Create/cpy/edit yur wn lg, making sure it has the same dimensins (310 x 32 pixels) by crpping r resizing it, r use the HeaderBar.header_lg.png as a "template" and paste/create yur lg n tp f it in yur graphic editr. 3. Save the new lg in the image subdirectry, named HeaderBar.header_lg.png verwriting the existing lg. (Yu will still have Cpy f HeaderBar.header_lg.png if yu decide t revert t the riginal.) Mail Express Server will display yur new lg in place f the Mail Express lg. 4. If yu need t g back t the riginal lg, just rename r delete yur lg frm the images directry, then rename the riginal back t HeaderBar.header_lg.png. It is nt necessary t rebt the server t see yur changes. Mail Express Security and SSL The Mail Express Server prvides security fr attachments with the fllwing prtectins: Mail Express uses HTTPS t secure all TCP/IP cmmunicatin channels. The Mail Express Server includes a pre-generated, self-signed public certificate/private key pair used by the Mail Express Server t prvide secure HTTPS cmmunicatins fr the varius web interfaces and web services. After installatin, yu shuld install yur wn certificate befre deplying Mail Express t the enterprise. The Mail Express Server prvides a default HTTPS listener n prt 443. When licensed and enabled fr peratin with the DMZ Gateway, the Mail Express Server als prvides HTTPS cmmunicatins thrugh the DMZ Prtcl Handler. When a limit defined by the administratr is reached, the package is purged frm the database. After the package is purged, if users attempt t access the package, a message appears stating the file they are attempting t dwnlad is unavailable. Yu shuld als install anti-virus prtectin n the server t mnitr files being stred n the Mail Express server cmputer. If a file is remved r quarantined by the anti-virus sftware, a user attempting t dwnlad the file receives a "file unavailable" prmpt. 129

130 Mail Express User Guide v3.2 If yu ntice unusually slw uplad behavir, ensure the antivirus sftware is prperly cnfigured fr use with Mail Express. Cnfiguring the Default HTTPS Listener (Prt 443) Mail Express cmmunicates ver the HTTPS prtcl nly (HTTP with SSL). The Mail Express Server includes a pre-generated, self-signed Public Certificate/Private Key pair. These are used by the Mail Express Server t prvide secure HTTPS cmmunicatins fr the varius web interfaces and web services. The Mail Express Server is cnfigured t use the Apache Prtable Runtime (APR) based native library fr Tmcat ( t prvide increased perfrmance. Internally the native library uses OpenSSL t handle SSL-based cmmunicatins. Mail Express Server uses Tmcat internally, which in turn uses the Tmcat Native library versin This versin f the library is built against OpenSSL 0.9.8i. The Default HTTPS Listener is cnfigured within a Cnnectr element in the <Installatin Directry>\cnf\server.xml file. The apprpriate Cnnectr element may be lcated in the file by searching fr the text prt="443". Fr detailed infrmatin n the cnfiguratin ptins fr the Cnnectr, refer t the fllwing links: Apache Tmcat 6.0 APR/Native HTTPS Cnfiguratin dc/apr.html#HTTPS Apache Web Server md_ssl dcumentatin - The supprted SSL algrithms have been cnfigured fr strng security by default. SSL Prtcls T maintain a wider range f cmpatibility with end-user brwsers, Mail Express Server allws clients t initially cnnect using all supprted SSL prtcls. Hwever, the list f allwed SSL Algrithms is limited t a set f strnger SSL 3.0 and TLS 1.0 algrithms. As such, clients that attempt t cnnect using SSL 2.0 may d s, but must then must negtiate that the remainder f the SSL sessin be handled under SSL 3.0 r TLS 1.0. The supprted SSL prtcls have been set using cnfiguratin item: SSLPrtcl="all" The allwable values fr this item include: all SSLv2 SSLv3 TLSv1 SSLv2+SSLv3 Fr mre infrmatin n this setting refer t dc/apr.html#https Fr infrmatin n higher security settings, refer t the "High Security Settings" sectin belw. 130

131 Mail Express Security and SSL SSL Algrithms The supprted SSL algrithms have been limited t the fllwing: SSL Prtcls SSLv3, TLSv1 SSLv3, TLSv1 SSLv3, TLSv1 OpenSSL Identifier DHE-DSS-AES128-SHA DHE-DSS-AES256-SHA EDH-DSS-DES-CBC3- SHA Key Exchange Ephemeral Diffie-Hellman Ephemeral Diffie-Hellman Ephemeral Diffie-Hellman Authenticatin Encryptin MAC DSA AES(128) SHA1 DSA AES(256) SHA1 DSA 3DES(168) SHA1 SSLv3, TLSv1 IDEA-CBC-SHA RSA RSA IDEA(128) SHA1 SSLv3, TLSv1 AES128-SHA RSA RSA AES(128) SHA1 SSLv3, TLSv1 AES256-SHA RSA RSA AES(256) SHA1 SSLv3, TLSv1 DES-CBC3-SHA RSA RSA 3DES(168) SHA1 SSLv3, TLSv1 SSLv3, TLSv1 SSLv3, TLSv1 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA EDH-RSA-DES-CBC3- SHA Ephemeral Diffie-Hellman Ephemeral Diffie-Hellman Ephemeral Diffie-Hellman RSA AES (128) SHA1 RSA AES(256) SHA1 RSA 3DES(168) SHA1 SSLv3, TLSv1 RC4-MD5 RSA RSA RC4(128) MD5 SSLv3, TLSv1 RC4-SHA RSA RSA RC4(128) SHA1 The SSL algrithm cmbinatins using RSA fr authenticatin will nly be available when using an RSA key pair with the Server. Cnversely, the SSL algrithm cmbinatins using DSA fr authenticatin will nly be available when using a DSA key pair with the Server. The SSL Algrithms have been cnstrained t strng types with the cnfiguratin item: SSL Certificates SSLCipherSuite="ALL:!ADH:!SSLv2:!EXPORT40:!EXP:!LOW" Fr mre infrmatin n the frmat f this setting refer t The majrity f brwsers will issue a warning t users when navigating t a site that uses a self-signed certificate. Typically this behavir is undesirable. As such it is highly recmmended that the Mail Express Server be cnfigured t use an alternate public key/private key pair that has been signed by a trusted Certificate Authrity. Versin 3.1 f Mail Express als supprts certificate chaining. The public certificate is specified with the fllwing cnfiguratin item: SSLCertificateFile="${catalina.hme}\cnf\MailExpressDefault.crt" The private key is specified with the fllwing cnfiguratin item: SSLCertificateKeyFile="${catalina.hme}\cnf\MailExpressDefault.key" If the private key is encrypted then the passwrd is specified with the fllwing cnfiguratin item: SSLPasswrd="mailexpress" If the private key is unencrypted the line shuld be remved. Bth the public certificate and private key files must be in the PEM-encded frmat. 131

132 Mail Express User Guide v3.2 If an encrypted private key is specified, it must be in traditinal PEM-encded frmat. PKCS#8 frmatted encrypted private keys are nt currently supprted. Bth RSA and DSA key types are supprted. Fr infrmatin n mre advanced certificate handling ptins such as specifying revcatin lists, refer t: Apache Tmcat 6.0 APR/Native HTTPS Cnfiguratin dc/apr.html#HTTPS Apache Web Server md_ssl dcumentatin - The default public certificate file is MailExpress.crt. The default public certificate is an X.509 PEM-encded 2048-bit RSA certificate with a SHA1 digest. The default private key file is MailExpress.key. The default private key is a PEM-encded 3DES encrypted 2048-bit RSA private key. When yu uplad yur wn certificate/key pair thse files are verwritten; hwever, cpies f the default files are saved as MailExpressDefault.crt and MailExpressDefault.key in case yu need t g back t the defaults. Specifying an SSL Certificate A self-signed certificate cntains a public key, infrmatin abut the wner f the certificate, and the wner's signature. It has an assciated private key, but it des nt verify the rigin f the certificate thrugh a third-party certificate authrity. T achieve the highest level f authenticatin between critical sftware cmpnents, d nt use self-signed certificates, r use them selectively. The files assciated with an SSL certificate key pair are: Private key file (.key) - The private key shuld never be distributed t anyne. It is used t decrypt the sessin, which is encrypted by the public key (A message encrypted with a recipient's public key cannt be decrypted by anyne except the recipient pssessing the crrespnding private key. Certificate file (.crt) - This is a signed certificate, whether self-signed r signed by an intermediate certificate authrity. Yu can specify an SSL certificate and key n the General Cnfiguratin page in the administratin interface r paste the certificate and key files int the Mail Express cnfiguratin directry. T Specify an SSL Certificate in the Mail Express administratin interface 1. Lg in t the Mail Express Server Administratin Interface. 2. In the left navigatin pane, under Cnfiguratin, click General. 3. In the SSL Certificate sectin, prvide the SSL certificatin infrmatin. 132

133 Mail Express Security and SSL a. In the Uplad certificate bx, click Brwse t find the signed certificate file (.crt). b. In the Uplad key bx, click Brwse t find the key file fr the certificate (.key). c. If a passwrd is required fr this certificate, select the SSL key is passwrd prtected check bx, then prvide the passwrd in the SSL key passwrd and Cnfirm SSL key passwrd bxes. 4. Click Save t save the changes n the server r click Restre t cancel the changes. Yu must restart the Mail Express Server service befre the new certificate/key takes effect. Manually Cnfiguring SSL Certificate/Key Optins Yu can specify an SSL certificate and key n the General Cnfiguratin page in the administratin interface as described abve. If yu want t paste the certificate and key files int the Mail Express cnfiguratin directry and cnfigure the certificate/key ptins manually, refer t the prcedure belw. The default public certificate file is <Installatin Directry>\cnf\MailExpress.crt The default public certificate is an X.509 PEM-encded 2048-bit RSA certificate with a SHA1 digest The default private key file is <Installatin Directry>\cnf\MailExpress.key The default private key is a PEM-encded 3DES encrypted 2048-bit RSA private key. T cnfigure SSL certificate/key ptins manually 1. Obtain an apprpriate public certificate/private key pair signed by a trusted certificate authrity. The public certificate and private key may be either RSA r DSA-based. The public certificate and private key shuld be placed in separate files and must be PEM-encded. If an encrypted private key is specified it must be in traditinal PEM-encded frmat. PKCS#8 frmatted encrypted private keys are nt currently supprted. 2. Lg in (with administratr privileges) t the cmputer n which Mail Express Server is installed. 3. Navigate t the Mail Express cnfiguratin directry (e.g., C:\Prgram Files\GlbalSCAPE\Mail Express\cnf). 4. Name the files MailExpress.crt and MailExpress.key. and paste them int the directry. This will verwrite the default cert/key pair. Backups f these files are shipped with Mail Express in case yu need t revert back named MailExpressDefault.crt and MailExpressDefault.key. 5. Mdify the cnfiguratin t use the new files: Using a text editr, edit the <Installatin Directry>\cnf\server.xml cnfiguratin file. 133

134 Mail Express User Guide v3.2 Lcate the "Cnnectr" that defines the default prt 443 listener. This "Cnnectr" may be fund by searching fr the fllwing text: "prt="443"". Change the SSLPasswrd setting fr the "Cnnectr" t the passwrd used t encrypt the private key: SSLPasswrd="mailexpress" Alternatively, if passwrd prtected was nt used n the private key, then it shuld read: SSLPasswrd="" If the DMZ Gateway is being used the SSLPasswrd setting must als be mdified fr the DMZ Gateway Prtcl Handler cnnectr. This "Cnnectr" may be fund by searching fr the fllwing text: prtcl="cm.glbalscape.prtclhandler.dmzprtclhandler" 7. Restart Mail Express Server. What if I specify an invalid certificate/key pair r wrng passwrd? If yu uplad an invalid certificate r key, r prvide an incrrect passwrd, when yu restart the server, the server will nt be able t create the HTTPS listener and yu will nt be able t cnnect t Mail Express Server. T get back t a wrking state, yu need t manually swap ut the bad certificate/key pair with the defaults and change the passwrd. Fr the prcedure fr manually swapping ut the bad certificate/key pair with the defaults and changing the passwrd, refer t Resetting the Cnfiguratin f the SSL Certificate and Key. Resetting the Cnfiguratin f the SSL Certificate and Key Mail Express Server stres the cnfigured SSL certificate/key pair in the <Installatin Directry>\cnf directry as MailExpress.crt and MailExpress.key. When cnfiguring the SSL certificate/key pair in the Mail Express Administratin Interface, these files will be verwritten by the new certificate/key pair. If yu accidentally specify an invalid certificate r key file, r specify an inapprpriate passwrd, yu must revert t a valid state. T facilitate reverting t a valid state, Mail Express Server ships with backup cpies f the default SSL certificate/key pair in the <Installatin Directry>\cnf directry as MailExpressDefault.crt and MailExpressDefault.key. Using the prcedure belw, yu will revert t the default files and cnfiguratin. T reset the SSL certificate/key cnfiguratin 1. Lg in (with administratr privileges) t the cmputer n which Mail Express Server is installed. 2. Navigate t the Mail Express cnfiguratin directry (e.g., C:\Prgram Files\GlbalSCAPE\Mail Express\cnf). 3. Delete the files MailExpress.crt and MailExpress.key. (These are the invalid files that yu will create new versins f in step 5.) 4. Make backup cpies f MailExpressDefault.crt and MailExpressDefault.key (the default SSL certificate and key files) in the same flder. The cpies will be named Cpy f MailExpressDefault.crt and Cpy f MailExpressDefault.key 5. Rename the cpies t MailExpress.crt and MailExpress.key. Yu nw have clean versin f these files. 6. Mdify the cnfiguratin t use the default passwrd: a. Using a text editr, edit the <Installatin Directry>\cnf\server.xml cnfiguratin file. 134

135 Mail Express Security and SSL b. Lcate the "Cnnectr" that defines the default prt 443 listener. This "Cnnectr" may typically be fund by searching fr the fllwing text: prt="443" c. Change the SSLPasswrd setting fr the "Cnnectr" t the passwrd used t encrypt the private key: SSLPasswrd="mailexpress" d. Alternatively, if passwrd prtected was nt used n the private key then it shuld read: SSLPasswrd="" e. If yu are using the DMZ Gateway, the SSLPasswrd setting must als be mdified fr the DMZ Gateway Prtcl Handler cnnectr. This "Cnnectr" may be fund by searching fr the fllwing text: prtcl="cm.glbalscape.prtclhandler.dmzprtclhandler" 7. Restart Mail Express Server. Yu shuld nw be able t lg in t the Mail Express administratin interface and specify a prper SSL certificate/key pair. Refer t Mail Express Security fr mre infrmatin abut SSL. SSL Certificate Authrity Certificate Chain Supprt This tpic describes cnfiguring an TLS/SSL Certificate Authrity Certificate Chain fr use with the Mail Express Server s Web Server public certificate/private key pair. What is the Mail Express Server Public Certificate/Private Key Pair? In Mail Express 3.0+, an administratr may cnfigure the TLS/SSL public certificate and private key pair via the General Cnfiguratin page f the Mail Express Server administratin interface. This key pair is required t prvide TLS/SSL cmmunicatins when a client cnnects t the Mail Express Server s HTTPS prt (prt 443). As part f the TLS/SSL prtcl, the key pair is used t authenticate the Mail Express Server t the cnnecting client. The client, such as a brwser, perfrms a number f checks t ensure it is talking t the crrect, trusted server. One f these checks cmpares the "Cmmn Name" attribute f the Mail Express Server s public certificate t the hstname prtin f the URL t which the brwser is cnnecting. If they d nt match, the brwser will issue a warning t the user that the certificate desn t match the server s hstname. Anther check perfrmed by the brwser is verifying that the public certificate has been signed by a trusted certificate authrity (CA) using the CA s wn public certificate and private key pair. Signing f public certificates is hierarchical in that a public certificate may be signed by a certificate authrity, and that CA s public certificate may have, in turn, been signed by anther certificate authrity, and s n. Brwsers, by default, include a set f industry standard trusted CA s public certificates in a "Trusted Certificate Authrity" list. Additinally, users may add t this list f trusted CAs. When the brwser checks the server s public certificate, it traces up the signing hierarchy starting at the server s public certificate lking fr a certificate authrity that is in its trusted list. Nte that the abve descriptin is a grss generalizatin f Public Key Infrastructure and the TLS/SSL prtcl. Fr mre detailed infrmatin, please refer t the fllwing nline articles:

136 Mail Express User Guide v3.2 What is an SSL Certificate Authrity Certificate Chain? In sme cases, a public certificate is signed by ne r mre intermediate certificate authrities (CA). Fr example, a cmmercial certificate authrity uses its wn intermediate certificate t sign the server s public key rather than their rt certificate, then prvides yu with the apprpriate intermediate public certificates, and ften als their rt certificate, when sending back yur signed public certificate. The public certificates fr the intermediate CAs ften are nt in the client applicatin s list f trusted CAs. Rather, the client applicatin will nly knw the rt certificate fr the cmmercial certificate authrity. Hwever, the client needs access t these public certificates s that it can verify the signature hierarchy f the server s key. It needs these intermediate public keys s that it can "walk the chain" frm the server s public certificate up t a trusted certificate authrity. The TLS/SSL prtcl prvides a mechanism whereby the web server can prvide the list f intermediate certificate authrities t the cnnecting client. The client can then verify the signature chain up t a trusted certificate authrity. Fr this functinality t wrk in Mail Express Server yu must prperly cnfigure the certificate chain. When d I need t specify an SSL Certificate Authrity Certificate Chain? In thery, yu nly need t specify a chain if the cmmercial CA signed the server s public certificate with an intermediate certificate that is nt included in the industry-standard set f trusted CA public keys shipped by default within the mre ppular brwsers. Hwever, there are many types and versins f brwsers in use, making it difficult t guarantee that all clients cnnecting t the web server will pssess the necessary trusted CA public certificates. It is safer t practively prvide the full certificate chain frm the web server. As such, ur recmmended best practice is t always cnfigure the full certificate chain prvided by the cmmercial certificate authrity. Hw is the SSL Certificate Authrity Certificate Chain cnfigured? The SSL Certificate Authrity (CA) certificate chain may be cnfigured in the SSL Certificate sectin f the General Cnfiguratin page within the Mail Express Server s administratin interface. Nte that use f the certificate chain is ptinal. If yu d nt wish t specify a certificate chain simply dn t prvide a file fr the field. If yu want t cnfigure a certificate chain, nte that the public certificate, private key, and ptinal private key passwrd settings must all be specified at the same time. The interface des nt prvide a methd t cnfigure each setting independent f ne anther. T specify a Certificate Authrity certificate chain, click Brwse t specify the file cntaining the certificate chain in the frmat specified belw. 136

137 Mail Express Security and SSL Supprted Certificate Chain Frmat The certificate chain shuld be cntained in a single file and cnsist f the list f public certificates starting with the certificate f the CA that signed the web server s public certificate and range up t the final rt trusted CA certificate (the public certificate knwn t be in the brwser s list f trusted certificate authrities). Nte that it isn t strictly necessary t include the final trusted certificate authrity s public certificate in the chain. Hwever, it is recmmended t include this certificate, when available, fr the sake f cmpleteness. Each certificate within the file shuld be in the PEM-encded frmat. Each certificate shuld start with the text "-----BEGIN CERTIFICATE-----" and end with the text "-----END CERTIFICATE-----". An example f a certificate chain file s cntents fr a chain cnsisting f a single intermediate CA and the rt CA is as fllws (truncated fr space): -----BEGIN CERTIFICATE----- MIIGzDCCBLSgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBpjELMAkGA1UEBhMCVVMx DjAMBgNVBAgTBVRleGFzMRQwEgYDVQQHEwtTYW4gQW50b25pbzEaMBgGA1UEChMR R2xvYmFsU0NBUEUsIEluYy4xFDASBgNVBAsTC0VuZ2luZWVyaW5nMRUwEwYDVQQD EwxtaWtlLXJvb3QtY2ExKDAmBgkqhkiG9w0BCQEWGW1YW1iaWRnZUBnbG9iYWxz Y2FwZS5jb20wHhcNMTAxMTE4MjEyMzA4WhcNMTUxMTE3MjEyMzA4WjCBmDELMAkG A1UEBhMCVVMxDjAMBgNVBAgTBVRleGFzMRwGAYDVQQKExFHbG9iYWxTQ0FQRSwg SW5jLjEUMBIGA1UECxMLRW5naW5lZXJpbmcxHTAbBgNVBAMTFG1pa2UtaW50ZXJt ZWRpYXRlLWNhMSgwJgYJKZIhvcNAQkBFhltaGFtYmlkZ2VAZ2xvYmFsc2NhcGUu Y29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsF+vlQfZnssDsqFx IXCGHST1jiTHJGGHiiwc9Qb1NPDbyvcdNXvcfkdyYjd8VlYy3/jnj6xx3PxzJhG NmnBGJ0I7h/RFJaG7nmGfeWUHCLsVjGfQeEjC++d6zzE3unPOiLVIhv9abD6kISa hldltobct19mqg1yg4q4xexjeymsygfididv+wwwusstypdppaawcsjnafcmupu RfmcfULPFwvFN6LsgvSTYwYe9l8421fA5c+WiR1JmjGuJT/0sITpzQRCenWi0S0 8WGjbVtRg/k4Hgf2TGwxcw== -----END CERTIFICATE BEGIN CERTIFICATE----- MIIG4jCCBMqgAwIBAgIJAJjguYVnU08GMA0GCSqGSIb3DQEBBQUAMIGmMQswCQYD VQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxFDASBgNVBAcTC1NhbiBBbnRvbmlvMRw GAYDVQQKExFHbG9iYWxTQ0FQRSwgSW5jLjEUMBIGA1UECxMLRW5naW5lZXJpbmcx FTATBgNVBAMTDG1pa2Utcm9vdC1jYTEMCYGCSqGSIb3DQEJARYZbWhhbWJpZGdl QGdsb2JhbHNjYXBlLmNvbTAeFw0xMDExMTgyMTE5NDdaFw0xNTExMTcyMTE5NDda MIGmMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxFDASBgNVBAcTC1NhbiBB bnrvbmlvmrwgaydvqqkexfhbg9iywxtq0fqrswgsw5jljeumbiga1uecxmlrw5n aw5lzxjpbmcxftatbgnvbamtdg1pa2utcm9vdc1jytemcygcsqgsib3dqejaryz bwhhbwjpzgdlqgdsb2jhbhnjyxbllmnvbtccaiiwdqyjkzihvcnaqebbqadggip -----END CERTIFICATE----- Hw d I knw that it is wrking? Verify that the chain is functining prperly by navigating t the Mail Express Server using yur preferred brwser. Prir t testing yu will want t ensure yu haven t previusly permanently granted an "exceptin" fr the server s SSL Certificate warning within the brwser. 137

138 Mail Express User Guide v3.2 Yu may ptinally test frm a cmputer knwn t have never visited the server befre r yu may clear the exceptins frm the brwser. The exact details n clearing the exceptin is brwser dependent, but typically invlves lcating the list f trusted certificate authrities in the brwser and checking if a certificate is present fr the Mail Express Server s URL (see belw fr the prper URL). If present, the certificate shuld be remved frm the list. When navigating t the Mail Express Server yu must use the URL that crrespnds t the Cmmn Name attribute used in the server s public certificate. Fr example, if the server s public certificate Cmmn Name is set t "mailexpress.example.cm" yu wuld navigate yur brwser t If the chain has been crrectly cnfigured and the rt trusted CA certificate is knwn t the brwser, then the brwser shuld navigate directly t the page. If smething is wrng, then the brwser will typically display an SSL Certificate warning page. In Firefx, such a warning wuld be similar t: In Internet Explrer, such a warning wuld be similar t: Miscnfiguratin f the chain is nt the nly cause fr the brwser t display the warning page. Yu must examine the additinal details prvided by the brwser t determine the exact cause f the errr. Other causes include: Use f the wrng URL t access the Mail Express Server Use f the wrng Cmmn Name in the Mail Express Server s public certificate 138

139 Mail Express Security and SSL The final certificate authrity is nt in the brwsers list f trusted certificate authrities. The server s public certificate has expired. Higher Security Settings By default Mail Express allws initial cnnectins frm clients using the SSLv2, SSLv3, r TLSv1 prtcls in an effrt t supprt a wider variety f brwsers. If higher security is desirable then the allwed SSL prtcls may be lcked dwn t TLSv1 nly; hwever, sme clients, including Internet Explrer, may be unable t cnnect in sme situatins. Refer t Internet Explrer and High Security Settings belw fr mre infrmatin n knwn issues. T mdify the server t nly allw TLSv1 negtiatins 1. In a text editr, such as Ntepad, pen server.xml (e.g., C:\Prgram Files\GlbalSCAPE\Mail Express\cnf\server.xml). 2. Update the HTTPS Prt 443 cnfiguratin: a. Lcate the Cnnectr that defines the default prt 443 listener. This Cnnectr may be fund by searching fr the fllwing text: prt="443" b. Within the Cnnectr definitin, change: SSLPrtcl="all" t SSLPrtcl="TLSv1" 4. Update the DMZ Gateway Prtcl Handler cnfiguratin, if this feature is being used: a. Lcate the Cnnectr that defines the DMZ Gateway Prtcl Handler. This Cnnectr may be fund by searching fr the text prtcl="cm.glbalscape.prtclhandler.dmzprtclhandler" b. Within the Cnnectr definitin, change: sslprtcls="sslv2hell,sslv3,tlsv1" t 5. Save the changes. sslprtcls="tlsv1" 6. Restart the Mail Express Server service. (e.g., Start > Run > services.msc) Internet Explrer and High Security Settings When using the high security settings fr the SSLPrtcl and SSLCipher cnfiguratin items yu may smetimes encunter cnnectin issues when cnnecting with Internet Explrer. Typically yu will see a page similar t the fllwing when cnnecting: 139

140 Mail Express User Guide v3.2 If this ccurs, it may be due t the SSL 2.0 prtcl being enabled in Internet Explrer. When this ptin is enabled, Internet Explrer will initially attempt t cnnect t the server using an SSLv2-frmat message. When using high security settings, the SSLv2 prtcl is disabled which results in the server nt respnding t the request. The issue may be reslved n the client side, by mdifying Internet Explrer cnfiguratin, r n the Server side by nt using the high security settings. Each reslutin is detailed belw. Alternative 1: Mdify Client Cnfiguratin Disable SSL 2.0 supprt within the Internet Explrer ptins 1. In Internet Explrer, click Tls > Internet Optins. The Internet Optins dialg bx appears. 2. Click n the Advanced tab, then scrll dwn t the Security sectin. 140

141 Mail Express Security and SSL 3. Clear the Use SSL 2.0 check bx. 4. Select the Use TLS 1.0 check bx. 5. Click Apply t save the changes, then attempt t cnnect t the server. Alternative 2: Mdify Server Cnfiguratin If yu d nt want t mdify each user's Internet Explrer settings, yu can mdify the Mail Express Server cnfiguratin t enable the SSLv2 prtcl. This is cnsidered less secure but prvides greater cmpatibility with brwsers. Nte that with this slutin the SSLv2, SSLv3, and TLSv1 prtcls will be enabled rather than nly TLSv1. Hwever, the supprted cipher algrithms will be lcked dwn t SSLv3 and TLSv1 algrithms nly. This allws brwsers t cnnect using the SSLv2 prtcl, but then negtiate the use f the SSLv3 r TLSv1 prtcls and ciphers nly. T enable the SSLv2 prtcl 1. In a text editr, such as Ntepad, edit the fllwing settings in server.xml (e.g., C:\Prgram Files\GlbalSCAPE\Mail Express\cnf\server.xml): 2. Update the HTTPS Prt 443 cnfiguratin: a. Lcate the Cnnectr that defines the default prt 443 listener. This Cnnectr may be fund by searching fr the text prt="443" b. Within the Cnnectr definitin, change: SSLPrtcl="TLSv1" t SSLPrtcl="all" 3. Update the DMZ Gateway Prtcl Handler cnfiguratin, if this feature is being used: 141

142 Mail Express User Guide v3.2 a. Lcate the Cnnectr that defines the DMZ Gateway Prtcl Handler. This Cnnectr may be fund by searching fr the text prtcl="cm.glbalscape.prtclhandler.dmzprtclhandler" b. Within the Cnnectr definitin, change: sslprtcls="tlsv1" t 4. Save the changes. sslprtcls=" SSLv2Hell,SSLv3,TLSv1" 5. Restart the Mail Express Server service. (e.g., Start > Run > services.msc) Using Anti-Virus with Mail Express If yu are using an anti-virus (AV) applicatin with Mail Express, yu shuld add an exclusin t the AV applicatin t skip files with a "gsb" extensin. Mst AV applicatins have sme kind f "real-time" scan feature that scans files when they are accessed. Their user interface allws yu t specify t "scan files" when writing t disk, when reading frm disk, n netwrk drives, and/r pened fr backup. When AV applicatins detect an issue, they may clean it, delete it, r quarantine it. T Mail Express, the file will simply disappear (it will appear t be deleted by an agent ther than Mail Express). The AV applicatins try t be smart abut when they "scan" a file; nce they have scanned it, they d nt re-scan it n access unless it has been changed. Fr example, the first time a file is read by an applicatin, the AV applicatin will scan it. If it is subsequently read, the AV applicatins will nt rescan, because the file has nt changed. One f the prblems AV applicatins have with Mail Express is that it writes t the file many times during the transfer prcess. AV applicatins see every write as a change, which triggers a re-scan. Perfrmance can be affected dramatically, especially if the file has attributes that cause the AV applicatins t give it special attentin. Mail Express versin 3.1 applies an extensin t files that are "in-prgress" t prvide a signal t AV applicatins t nt scan them. When Mail Express writes t a file, it adds a "gsb" extensin. When Mail Express finishes transferring the file, it remves the extensin and then triggers the AV applicatin by tweaking the first byte f the file (Mail Express reads and then re-writes the first byte). Therefre, the netwrk administratr shuld add an exclusin t the AV applicatin t skip files with a "gsb" extensin. The netwrk administratr shuld als add an exclusin fr temprary files upladed frm Mail Express's web prtals. Fr example, if Mail Express were installed in C:\Prgram Files\Glbalscape\Mail Express, then the flder fr temprary files is C:\Prgram Files\Glbalscape\Mail Express\temp. Temprary uplad files t this flder will have the pattern "uplad_###.tmp" where "###" is a unique identifier; this flder is generally used by all cmpnents f Mail Express when a temprary file is created. These files will still be scanned by AV applicatins, but nly after they have arrived at the Mail Express data flder. Fr larger files upladed frm the drp-ff page, they will be temprarily staged in the "tmpdir"; withut this exclusin the AV applicatin will delete the file frm the "tmpdir" and the uplad will fail with an errr message which will be ruted back t the client s brwser. 142

143 Mail Express Security and SSL The DMZ Prtcl Handler This tpic prvides SSL-related infrmatin pertaining t the HTTPS cmmunicatins with the Mail Express Server cnducted via the DMZ Gateway. The DMZ Gateway Prtcl Handler uses Java-based SSL and as such is cnfigured separately frm the default HTTPS listener n prt 443. The DMZ Prtcl Handler is cnfigured within a Cnnectr element in the <Installatin Directry>\cnf\server.xml file. The apprpriate Cnnectr element can be lcated in the file by searching fr the text prtcl="cm.glbalscape.prtclhandler.dmzprtclhandler". The supprted SSL algrithms have been cnfigured fr strng security by default. SSL Prtcls T maintain a wider range f cmpatibility with end-user brwsers the Server will allw a client t initially cnnect using all supprted SSL Prtcls. Hwever, the list f allwed SSL Algrithms is limited t a set f strnger SSL 3.0 and TLS 1.0 algrithms. As such clients that attempt t cnnect using SSL 2.0 may d s, but must then negtiate that the remainder f the SSL sessin be handled under SSL 3.0 r TLS 1.0. The supprted SSL prtcls have been set using cnfiguratin item: sslprtcls=" SSLv2Hell,SSLv3,TLSv1" The allwable values fr this item are a cmma-separated list that includes 1 r mre f the fllwing identifiers: SSLv2Hell SSLv3 TLSv1 Fr infrmatin n higher security settings refer t Higher Security Settings. SSL Algrithms The supprted SSL algrithms have been limited t the same set f algrithms prvided by the default HTTPS listener, with the exceptin that the Idea-based algrithm (IDEA-CBC-SHA) is nt available fr use with the DMZ Prtcl Handler. The SSL Algrithms have been cnstrained t strng types with the cnfiguratin item: ciphers="ssl_rsa_with_rc4_128_md5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" (Nte: Spaces were added abve in the cipher list t allw text wrapping. D nt use spaces in yur cipher list.) Fr a list f standard algrithm names refer t the Java Cryptgraphy Architecture Standard Algrithm Name Dcumentatin (included in the Security area f the Java API Dcumentatin). Nte, hwever, that nt all identifiers included in the standard name list will be supprted by the JCE. SSL Certificates The DMZ Prtcl Handler is cnfigured t use the same Public Certificate and Private Key used by the default HTTPS listener. 143

144 Mail Express User Guide v

145 Managing Administratr and User Accunts Managing Administratr and User Accunts On the Administratr Management page, yu can create, mdify, and delete administratr accunts. Administratr accunts are unique within the system and are nt file transfer accunts yu cannt use yur administratr credentials t access any prtal ther than the administratin prtal. (Yu will receive an "access denied" message.) This page is the nly interface by which administratrs can be added r remved frm the system. (T create Internal user accunts, refer t Managing Internal User Accunts.) Yu can have up t 25,000 active accunts. In Mail Express, usernames must be unique acrss all user accunts. Administratr s must take care when manually creating Administratr r Internal User Accunts s that the username des nt cnflict with an Active Directry accunt. If an accunt is manually created with the same username as an Active Directry user, then that user will be unable t cnnect t the server with the Outlk Add-In using Windws (Kerbers) Authenticatin. T manage Mail Express administratr accunts 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under User Management, click Administratrs. The Administratr User Management page appears. The administratr accunt details are displayed in srtable, scrllable clumns. The administratr accunt that is displayed here is the ne yu created when yu installed Mail Express Server. Be sure t use a valid address, in case yu have t reset the accunt (e.g., if yu frget the passwrd). 3. D ne f the fllwing: T search fr a user, in the Search bx, type the address r display name that yu want t search fr, then click Search. Wildcards are supprted. (? matches 1 character, * matches 0 r mre characters, \ can be used t escape an actual? r *.) T edit an accunt, next t the accunt yu want t edit, click the Edit icn, then edit the accunt as necessary. The username, passwrd, and address fr users that are created using AD cannt be edited in Mail Express. T delete an accunt, next t the accunt that yu want t delete, click the Delete icn. When an accunt is deleted, it is marked deleted in the database and is n lnger visible in the Internal User Management page; hwever, audit reprts can lk fr and reference deleted accunts. T create an accunt, click Add User. The Administratr User Details page appears. 145

146 Mail Express User Guide v3.2 a. In the bx, prvide the address assciated with the accunt. b. In the Username bx, prvide the username fr the accunt. c. (Optinal) In the Display name bx, prvide the name fr the accunt user. The Display name appears in the Frm bx with the sender's address, fr example: d. In the Passwrd and Cnfirm passwrd bxes, prvide a passwrd fr the accunt. The passwrd must be between 6 and 256 characters and adhere t at least 3 f the fllwing requirements: cntain at least 1 number, 1 upper case, 1 lwer case, and 1 nn-alphanumeric character. e. If yu want the user t change the accunt passwrd upn signing in, select the Frce passwrd change check bx. f. The Enabled check bx is selected by default. (T disable the accunt, clear the check bx.) g. Click Save t create the accunt r click Cancel if yu d nt want t create the accunt. Click Restre t restre the settings in the bxes t their last saved state. After yu click Save, the user accunt appears n the Administratr User Management page. 146

147 Managing Administratr and User Accunts Managing Internal User Accunts The Internal User Management page prvides status and cnfiguratin ptins fr all internal senders that are defined in the Mail Express system. On this page, yu can view, mdify, add, and delete internal user accunts. Yu can have up t 25,000 active accunts. When yu are cnnected t an Active Directry (AD) user database, the set f Internal senders page is autmatically ppulated. Active Directry users are created as Internal users upn their first lgin t Mail Express. Only Internal accunts are valid fr cnnecting t the Mail Express Server with the Outlk Add- In. Thus, administratrs shuld avid creating Administratr r External User accunts whse username cnflicts with a user wishing t cnnect using the Add-In. That is, if users are ging t cnnect t Mail Express thrugh the Outlk Add-In with their AD accunt, d nt manually create an accunt fr them in Mail Express with the same username; hwever, yu can create a separate Internal user accunt fr them in Mail Express fr manual authenticatin, as lng as the username is different frm their AD accunt. If a user is deleted in the AD user database, the user is nt deleted frm the Mail Express internal user list. Yu must delete the accunt manually n the Internal User Management page. When yu delete a user accunt, the accunt is marked as deleted in the database, but is n lnger visible in the accunt table in the interface. Audit reprts can still lk up and reference deleted accunts until they have been purged frm the system. Once a user accunt has been marked as deleted, it is nt eligible fr purging after the apprpriate age has been reached. Yu cannt create an internal accunt with the same username as an administratr accunt. Usernames must be unique acrss all user accunts. Administratrs must take care when manually creating Administratr r Internal User Accunts s that the username des nt cnflict with an Active Directry accunt. If an accunt is manually created with the same username as an Active Directry user, then that user will be unable t cnnect t the server with the Outlk Add-In using Windws (Kerbers) Authenticatin. T manage user accunts 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under User Management, click Internal Users. The Internal User Management page appears. The accunt details are displayed in srtable, scrllable clumns. The table displays the Internal users srted by address. A green check mark in a clumn indicates that the feature is enabled fr the user; a red X indicates that the feature is nt enabled fr the user. 147

148 Mail Express User Guide v D ne f the fllwing: T srt by a clumn, click the clumn header (except the clumn). T search fr a user, in the Search criteria bx, type the address r display name that yu want t search fr, then click Search. Wildcards are supprted. (? matches 1 character, * matches 0 r mre characters, \ can be used t escape an actual? r *.) T edit an accunt, next t the accunt yu want t edit, click the Edit icn, then edit the accunt as necessary. The username, passwrd, and address fr users that are created using AD cannt be edited in Mail Express. T delete an accunt, next t the accunt that yu want t delete, click the Delete icn. When an accunt is deleted, it is marked as deleted in the database and is n lnger visible in the Internal User Management page; hwever, audit reprts can lk fr and reference deleted accunts. T create an accunt: a. Click Add User. The Internal User Details page appears. b. In the bx, prvide the address assciated with the accunt. c. In the Username bx, prvide the username fr the accunt. If a manually created Internal user accunt has a username that matches a username in the defined set f Active Directry user accunts, Mail Express will nly authenticate against the manually created user accunt. It will nt attempt t authenticate against the Active Directry accunt. 148

149 Managing Administratr and User Accunts d. (Optinal) In the Display name bx, prvide the name fr the accunt user. The Display name appears in the Frm bx with the sender's address, fr example: e. In the Passwrd and Cnfirm Passwrd bxes, prvide a passwrd fr the accunt. The passwrd must be between 6 and 256 characters and adhere t at least 3 f the fllwing requirements: cntain at least 1 number, 1 upper case, 1 lwer case, and 1 nn-alphanumeric character. f. The Enabled check bx is selected by default. (T disable the accunt, clear the check bx.) g. T frce the user t change the accunt passwrd upn signing in, select the Frce Passwrd Change check bx. h. T allw this user t access the Drp-Off page, select the Drp-Off access enabled check bx. (Refer als t the Register Internal Users as Verified setting n the Drp-Off Prtal Settings page.) i. T allw the user t send accunt invitatins, select the Allw accunt invitatins check bx. Yu can als enable this glbally n the Internal Settings page. j. T allw the user t include Mail Express Reply links in messages, select the Allw Mail Express Reply links check bx. Yu can als enable this glbally n the Internal Settings page. k. Click Save t create the accunt r click Cancel if yu d nt want t create the accunt. Click Restre t restre the settings in the bxes t their last saved state. 4. After yu click Save, the changes appear n the Internal User Management page. Managing Drp-Off User Accunts The Drp-Off User Management page prvides status and cnfiguratin ptins fr all senders that are authrized t use f the package Drp-ff Prtal. On this page, yu can mdify, add, and delete the accunts. When yu delete an accunt, the accunt is marked as deleted in the database, but is n lnger visible in the accunt table in the interface. Audit reprts can still lk up and reference deleted accunts. Yu can have up t 25,000 active accunts. The message ptins n the Drp-Off page are nly available fr internal, verified users. If Drp-Off users want t receive dwnlad ntificatins f the files they send frm the Drp-Off page, they must have an internal user accunt. In Mail Express, usernames must be unique acrss all user accunts. Administratrs must take care when manually creating Administratr r Internal User Accunts s that the username des nt cnflict with an Active Directry accunt. If an accunt is manually created with the same username as an Active Directry user, then that user will be unable t cnnect t the server with the Outlk Add-In using Windws (Kerbers) Authenticatin. 149

150 Mail Express User Guide v3.2 T manage drp-ff user accunts 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Users, click Drp-Off. The Drp-Off User Management page appears. The accunt details are displayed in srtable, scrllable clumns. 3. D ne f the fllwing: T search fr a user, in the Search bx, type the address r display name that yu want t search fr, then click Search. Wildcards are supprted. (? matches 1 character, * matches 0 r mre characters, \ can be used t escape an actual? r *.) T edit an accunt, next t the accunt yu want t edit, click Edit, then edit the accunt as necessary. T delete an accunt, next t the accunt that yu want t delete, click Delete. When an accunt is deleted, it is marked deleted in the database and is n lnger visible in the user management page; hwever, audit reprts can lk fr and reference deleted accunts. T create a new user: a. Click Add User. The Drp-Off User Details page appears. b. In the bx, prvide the address assciated with the accunt. This will be the username that the Drp-Off user will use t lg in. 150

151 Auditing and Reprting Mail Express Activity c. (Optinal) In the Display name bx, prvide the name fr the accunt user. The Display name appears in the Frm bx with the sender's address, fr example: d. In the Passwrd and Cnfirm Passwrd bxes, prvide a passwrd fr the accunt. The passwrd must be between 6 and 256 characters and adhere t at least 3 f the fllwing requirements: cntain at least 1 number, 1 upper case, 1 lwer case, and 1 nn-alphanumeric character. e. The Enabled check bx is selected by default. (T disable the accunt, clear the check bx.) f. If yu want the user t change the accunt passwrd upn signing in, select the Frce passwrd change check bx (selected by default). Because the passwrd is sent in clear text, it is a gd idea t frce the user t change their passwrd when they lg in fr the first time. g. If yu want t send an inviting the new user t use the Drp-Off page, select the Send invitatin check bx. If the Send invitatin check bx is selected, an invitatin is sent t the user after yu click Save. The invitatin includes bth the username and the passwrd fr signing in t the Drp-Off page. h. Click Save t create the accunt r click Cancel if yu d nt want t create the accunt. Click Restre t restre the settings in the bxes t their last saved state. 4. After yu click Save, the user accunt appears n the Drp-Off User Management page and an invitatin is sent t the new user. Fr details f custmizing the Drp-Off user invitatin, refer t Custmizing Mail Express Pages and Ntificatins. Auditing and Reprting Mail Express Activity Mail Express audits all transfer activities and all Mail Express cnfiguratin activities. This sectin prvides the prcedures fr generating reprts f attachment activity, cnfiguratin histry, audit event histry, invite activity, and user histry. A detailed descriptin f the database schema is als prvided. Generating Reprts f Attachment Activity Mail Express prvides a set f "canned" reprts that yu can use t generate reprts f Mail Express attachment activities based n a specified date range. Yu can generate the reprt in csv, html, pdf, r rtf frmat. The fllwing reprt types are available: Ttal Outbund Activity Prvides a reprt f the ttal number f files upladed and ttal size f files upladed by Outlk Add-In senders. 151

152 Mail Express User Guide v3.2 Sender Outbund Activity Prvides a reprt f number f files upladed and ttal size f files upladed by each Outlk Add-In sender. Ttal Inbund Activity Prvides a reprt f the ttal files upladed and ttal size f files upladed fr inbund activity via the Drp-Off Prtal. Fr details f generating reprts f cnfiguratin changes, events, r users, refer t Viewing Cnfiguratin Histry, Viewing Audit Event Histry, and Viewing User Histry. T view the database schema, refer t Mail Express Database Tables. T generate a Mail Express reprt 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Reprts, click a reprt type. All reprts have the same basic interface: Start Date, End Date, and File type. The Ttal Outbund Activity Reprt frm is shwn belw. 3. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 4. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. "12:00:00 AM" is midnight f the previus day. Fr example, fr a reprt f activity frm June 1 thrugh the end f the day n June 30, set the Start date t 06/01/2010 at 12:00:00 AM and the End date t 07/01/2010 at 12:00:00 AM. 152

153 Auditing and Reprting Mail Express Activity 5. In the File type bx, specify the frmat in which t save r view the reprt (csv, html, pdf, r rtf). 6. Click Create Reprt. A File Dwnlad dialg bx appears. Click Open t view the reprt nw r click Save t save it lcally r in a netwrk lcatin. If the applicatin necessary t view the reprt is nt installed n the Mail Express Server cmputer, yu can still save the reprt in the frmat yu want and then pen it n anther cmputer n which the applicatin is installed. Fr example, yu culd save the reprt as a PDF, then it r transprt it t a cmputer n which Adbe Reader is installed. Detailed Activity Reprt The Detailed Activity reprt prvides a reprt f all packages by Package ID, File(s), Sender, Recipient, and Uplad Time. (Up t 10 attachments can be in ne package sent using the Drp-Off Prtal.) The reprts are displayed in rder frm newest t ldest activity. T generate a Detailed Activity reprt 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Reprts, click Detailed Activity. The Detailed Activity Reprt frm appears. 3. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 4. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. "12:00:00 AM" is midnight f the previus day. Fr example, fr a reprt f activity frm June 1 thrugh the end f the day n June 30, set the Start date t 06/01/2010 at 12:00:00 AM and the End date t 07/01/2010 at 12:00:00 AM. 153

154 Mail Express User Guide v In the File type bx, specify the frmat in which t save r view the reprt (csv, html, pdf, r rtf). 6. Filter results by Filename, Recipient, r Sender r leave it blank t view all activity. 7. Click Create Reprt. A File Dwnlad dialg bx appears. Click Open t view the reprt nw r click Save t save it lcally r in a netwrk lcatin. If the applicatin necessary t view the reprt is nt installed n the Mail Express Server cmputer, yu can still save the reprt in the frmat yu want and then pen it n anther cmputer n which the applicatin is installed. Fr example, yu culd save the reprt as a PDF, then it r transprt it t a cmputer n which Adbe Reader is installed. Viewing Cnfiguratin Histry The Cnfiguratin Histry reprt displays all mdificatins f Mail Express cmpnents within a particular date range. Yu can filter the data frm a particular date range by IP address r mdifier, and further filter the data by the resurce that was mdified (Database, Drp-Off Settings, File Stre, General, Active Directry, Pick-Up Settings, Exchange, r Web Services Settings). Fr details f generating reprts f activity, events, r users, refer t Generating Reprts f Mail Express Activity, Viewing Audit Event Histry, and Viewing User Histry. T view the database schema, refer t Mail Express Database Tables. T view cnfiguratin histry 1. Lg in t the Mail Express Server administratin interface. 2. In the navigatin pane, under Auditing, click Cnfiguratin. The Cnfiguratin Histry reprt page appears. 3. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 4. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. 5. In the Search By bx, leave it blank t search by all fields r click the list t search by IP Address r Mdifier, then prvide the IP address r mdifier (username). Select the Exact Match check bx t cntrl hw the value in the Search bx is used. If the Exact Match check bx is selected, the clumn data must match the search value exactly. 6. In the Resurce Filter bx, leave it blank t search all resurces r click the list t filter n a particular resurce (Database, Drp-Off Settings, File Stre, General, Active Directry, Pick- Up Settings, Exchange, r Web Services Settings). 7. Click Filter. The reprt updates with yur search and filter selectins. Click Reset t clear the filter. 154

155 Auditing and Reprting Mail Express Activity 8. Click any clumn header that has an up/dwn arrw t srt the data ascending r descending. 9. T cmpare tw items, select their check bxes and then click Cmpare. Yu can nly cmpare changes t the same IP address, mdifier, and resurce. The Cmpare buttn is nt available if the selectins are invalid. The Audit Details f the selected items appears. The settings that changed are in darker text; settings that did nt change are grayed. In this example, the setting fr managing embedded attachments was changed frm false (unselected) t true (selected). Place the cursr ver an abbreviated value t view the full text. 10. Click Back t return t the reprt. 155

156 Mail Express User Guide v3.2 Viewing Audit Event Histry The Audit Event Histry reprt displays all events that ccurred n the Mail Express server within a particular date range. The reprt displays the IP address frm which the event initiated, the user wh caused the event, the type f event, and the severity f the event. The severity level can be any ne f the fllwing types: Infrmatinal - The default severity level fr mst events. Dentes an event that is expected under nrmal peratin. Warning - Dentes system issues that are recverable. Errr - Dentes system issues that are nt recverable. In the Event Type clumn, yu can place yur cursr ver the event t view a tl tip abut the event. Fr example, fr an invalid lgin, the User clumn is empty and the Event Type clumn displays Lgin Attempt. When yu place yur cursr ver Lgin Attempt, a "What's this?" cursr appears and the tl tip displays "Lgin attempted fr [username] frm [IP address] successful? [false]." Refer t Audit Event Types fr details f the varius types f audit events in the Event Type clumn. Fr details f generating reprts f activity, cnfiguratin changes, r users, refer t Generating Reprts f Mail Express Activity, Viewing Cnfiguratin Histry, and Viewing User Histry. T view the database schema, refer t Mail Express Database Tables. T view audit event histry 1. Lg in t the Mail Express Server administratin interface. 2. In the navigatin pane, under Auditing, click Events. The Audit Event Histry reprt page appears. 3. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 4. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. 5. (Optinal) In the Search by bxes, click the dwn arrw t filter by IP Address, Severity, Event Type, r User, then in the bx specify the IP address, severity, event type, r user by which t filter the date. Select the Exact Match check bx t display nly thse items that exactly match yur filter. Fr example, t display all users that cntain the letter j, in the Search By bx, click User, then type a j in the bx. The reprt will display all usernames that cntain the letter j (kjmalley, jsmithsn, bjnes, etc.). T display nly a specific user, click User, type the username in the bx, then select the Exact Match check bx. 6. Click Filter. The reprt updates with yur search and filter selectins. Click Reset t clear the filter criteria. 156

157 Auditing and Reprting Mail Express Activity 7. Click any clumn header that has an up/dwn arrw t srt the data ascending r descending. Viewing User Histry The User Histry reprt prvides a histry f user accunt mdificatins (create, edit, delete) within a particular date range. Yu can filter the data frm a particular date range by IP address r mdifier (username). Yu can cmpare tw entries t view details f what was changed. Fr details f generating reprts f activity, cnfiguratin changes, r events, refer t Generating Reprts f Mail Express Activity, Viewing Cnfiguratin Histry, and Viewing Audit Event Histry. T view the database schema, refer t Mail Express Database Tables. T view user histry 1. Lg in t the Mail Express Server administratin interface. 2. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 3. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. 4. In the Search By bx, leave it blank t search by all fields r click the list t search by IP Address r Mdifier, then prvide the IP address r mdifier (username). 5. Select the Exact Match check bx t cntrl hw the value in the Search bx is used. If the Exact Match check bx is selected, the clumn data must match the search value exactly. 6. Click Filter. The reprt updates with yur search and filter selectins. Click Reset t clear the filter criteria. 157

158 Mail Express User Guide v Click any clumn header that has an up/dwn arrw t srt the data ascending r descending. 8. T cmpare tw items, select their check bxes and then click Cmpare. Yu can nly cmpare changes t the same user. (The Cmpare buttn is nt available if the selectins are invalid.) The Audit Details f the selected items appears. The settings that changed are in darker text; settings that did nt change are grayed. In this example, the user imkarla was deleted (deleted = true) Place the cursr ver an abbreviated value t view the full text. 9. Click Back t return t the reprt. Viewing Invite Activity Yu can generate a reprt f invite activity and save it in the fllwing file frmats: CSV, HTML, PDF, r RTF. If the applicatin necessary t view the reprt is nt installed n the Mail Express Server cmputer, yu can still save the reprt in the frmat yu want and then pen it n anther cmputer n which the applicatin is installed. Fr example, yu culd save the reprt as a PDF, then it r transprt it t a cmputer n which Adbe Reader is installed. 158

159 Auditing and Reprting Mail Express Activity T generate an invite Activity reprt 1. Lg in t the Mail Express Server Administratin Interface. 2. In the navigatin pane, under Reprts, click Invite Activity. The Invite Activity Reprt frm appears. 3. In the Start date bxes, specify the beginning date and time f the reprt range. (Reprts default t a minimum start date f the Mail Express Server installatin date.) Click the calendar icn t select a date frm a ppup calendar. 4. In the End date bxes, specify the end date and time f the reprt range. Click the calendar icn t select a date frm a ppup calendar. "12:00:00 AM" is midnight f the previus day. Fr example, fr a reprt f activity frm June 1 thrugh the end f the day n June 30, set the Start date t 06/01/2010 at 12:00:00 AM and the End date t 07/01/2010 at 12:00:00 AM. 5. In the File type bx, specify the frmat in which t save r view the reprt (CSV, HTML, PDF, r RTF). 6. Click Create Reprt. A File Dwnlad dialg bx appears. Click Open t view the reprt nw r click Save t save it lcally r in a netwrk lcatin. 159

160 Mail Express User Guide v3.2 Audit Event Types The table belw describes the varius types f audit events that can appear in Mail Express reprts and lgs. Event Type Descriptin Severity* File Purged Mail Express physically purged a file frm disk. Infrmatinal File Remved Manually A file was remved by an administratr. Infrmatinal Data Purged A Mail Express recrd was purged frm the database. Infrmatinal DMZ Cnnect The Mail Express Server cnnected t the DMZ Gateway. Infrmatinal DMZ Expected Discnnect Occurs when the Mail Express Server successfully and Infrmatinal expectedly discnnects frm the DMZ Gateway. DMZ Unexpected Discnnect Occurs when the Mail Express unexpectedly lses Warning cnnectin t the DMZ Gateway. Licensing An issue ccurred regarding licensing f the Mail Express Warning server. Lgin Attempt A user attempted t lg in t Mail Express. Infrmatinal Passwrd Reset A user s passwrd was reset. Infrmatinal Template Custmizatin A template custmizatin is errneus. Warning Undeliverable Message An message culd nt be delivered. Infrmatinal Unverified Drp-Off An Unverified User attempted a file uplad which resulted in Infrmatinal phantm package (uplad did nt ccur due t security restrictins) User Limit The maximum number f users fr a given user type has Warning been reached. User Lgged Out A user lgged ut f Mail Express. Infrmatinal *Levels f Severity Infrmatinal The default severity level fr mst events. Dentes an event that is expected under nrmal peratin. Warning Dentes system issues that are recverable. Mail Express Database Tables Refer t the nline help fr details f the database tables. 160

161 Using Mail Express in Outlk Using Mail Express in Outlk These tpics describe using and cnfiguring the Outlk Add-In n the desktp. Fr details f using Mail Express n the web, refer t Using Mail Express in a Web Brwser. Fr details f cnfiguring Mail Express administratin, refer t Cnfiguring and Administering Mail Express Server. Fr details f installing and cnfiguring the Outlk Add-In and system requirements, refer t Installing and Uninstalling Mail Express. Mail Express Outlk Add-In Mail Express allws yu t send and receive file attachments t recipients inside and utside f yur rganizatin quickly, reliably, and securely, while reducing the lad n yur mail server and withut manually creating r maintaining FTP accunts. Mail Express can send files as an Add-In t Micrsft Outlk, with secure authenticatin, and auditing capabilities. When yu send an attachment, the attachment is upladed t Mail Express Server ver HTTPS. When Mail Express manages the , it uplads the attachments t the Mail Express Server, remves the attachments frm , and inserts a link that the recipient can click t dwnlad the attachments. When the recipient clicks the hyperlink in the ntificatin, a Web page appears that allws the recipient t dwnlad the attachment. This prcess helps yu t stay within yur rganizatin's mailbx quta, since the itself is nrmally quite small. (The will remain in the Outbx until the Add-In is finished prcessing the and uplading its attachments.) The Mail Express Add-In is cnfigured by the netwrk system administratr. The Add-In can be cnfigured t have very strict settings r flexible settings. Instructins fr adjusting the settings n a wrkstatin are in Cnfiguring Message Optins. The Mail Express User Interface When the Outlk Add-In is installed, the Mail Express user interface can be enabled t prvide a way fr users t cnfigure the Add-In and view the status f s it is managing. By default, the user interface is hidden s that the Add-In runs transparently t the user. The Add-In prvides the fllwing user interface elements: A Mail Express ribbn tab (Outlk 2010) r tlbar (Outlk 2007 and 2003) n the primary Outlk windw with ptins t cnfigure the cnnectin t Mail Express Server, cnfigure message ptins, hide r shw the Mail Express status pane, and access the Mail Express help dcumentatin. Message buttns n the cmpsitin windws fr attaching files t s r fr cnfiguring settings that pertain t a specific . Prgress meter at the bttm f the primary Outlk windw within Outlk s status bar which shws the aggregate transfer prgress f attachments that the Add-In is uplading. Using the Mail Express Attach File buttn, rather than the Outlk Attach File buttn, prvides better perfrmance and allws yu t send large attachments regardless f the Exchange Server's attachment limits. (The default Exchange setting is 10 MB ttal attachments per .) 161

162 Mail Express User Guide v3.2 T display the Mail Express user interface In Outlk 2003 and 2007: Right-click a blank area f the Outlk tlbar/ribbn, then click Mail Express. -r- On the Outlk main menu, click View > Tlbars > Mail Express. In Outlk 2010: On the Outlk main menu, click File > Add-Ins > Display Mail Express User Interface. Once the user interface is enabled the ribbn tab will be available: 162

163 Using Mail Express in Outlk Message Buttns When yu create a new , the Message buttns allw yu t specify the file(s) t attach and cnfigure Send Optins r Reply Link preferences that are specific t that . (Refer t Cnfiguring Message Optins fr details.) The Mail Express Outlk Add-In interface is hidden by default (transparent mde). Even if the interface is hidden, the Add-In can still prcess s depending n the rules defined by the administratr n the Mail Express administratin site. When the Add-In is in transparent mde, users will nt have access t the Add-In s Attach File buttn and will have t attach files with Outlk s Attach File buttn instead. When using Outlk s Attach File buttn, users may be prmpted that a particular attachment cannt be attached because it exceeds the allwable limit ("The attachment size exceeds the allwable limit."). This ccurs because Outlk is trying t enfrce the attachment size limits defined in Exchange. Therefre, it is imprtant t realize that if the Add-In is running in transparent mde, the attachment size threshlds in Exchange will have t be increased t allw users t send larger attachments with Mail Express. Keep in mind that by increasing these Exchange limits it may be pssible fr users t send s with large attachments thrugh Exchange withut the attachments being managed by the Add-In (e.g., if the Add-In is disabled), which culd affect the perfrmance f the Exchange Server. When the Add-In s user interface is enabled, the Add-In is n lnger in transparent mde and all f the interface elements f the Add-In are accessible. This means that users will have the ability t use the Add-In s Attach File buttn in additin t Outlk s Attach File buttn. When attaching files with the Mail Express Attach File buttn, a surrgate file is attached rather than the actual file. This surrgate file has the same name as the file being attached except that it ends in a ".mailexpress" suffix. This surrgate file is a simple text file that cntains the path t the actual file n the file system. Attaching files with the Mail Express Attach File buttn prvides the fllwing benefits ver Outlk s standard Attach File buttn: Large s can be attached mre efficiently with Mail Express, because a surrgate file is always small. When attaching large files thrugh Outlk s standard Attach File buttn, Outlk may appear t hang while it is prcessing the attachment and writing it t the file system in several places. The Mail Express Attach File buttn eliminates this delay. If the Exchange administratr has defined attachment size limits in Exchange, then Outlk will cmplain with a message "The attachment size exceeds the allwable limit" when attaching files that exceed these limits using Outlk s Attach File buttn. The Mail Express Attach File buttn des nt suffer frm this prblem. If a file is attached via the Mail Express Attach File buttn, the will be managed by Mail Express regardless f the plicy settings. It is assumed that since yu are using the Mail Express buttn, yu want t use Mail Express t manage the . Outlk 2010 (similar Mail Express ptins appear in Outlk 2003 and 2007): 163

164 Mail Express User Guide v3.2 Cnnecting t Mail Express Server Typically, the Mail Express Outlk Add-In server cnnectin infrmatin is cnfigured by the Mail Express administratr. Yu shuld nt edit these settings unless directed t d s by yur Mail Express administratr. Reasns why yu might want t edit the Mail Express settings are if yur username/passwrd has changed, if Mail Express Server is mved t anther hst, if yur lgin type was changed, r if yu need t change the lg file lcatin. If a Client Access License (CAL) is nt available, a message appears in the Status pane, a lg entry is created, and the system administratr is ntified in the lg f the license shrtage. Yu can still send with Outlk, but the is nt prcessed by the Mail Express Outlk Add-In until a license is available. Yu d nt need t edit yur cnfiguratin. When the Add-In des nt have a license, the Message buttns will be disabled with tltips asking yu t verify the status f the Add-In using the Mail Express Status pane. If the Mail Express Add-In is nt cnnected t Mail Express Server, it will nt try t uplad packages. Depending n the Behavir when Mail Express Server is unavailable Message Optin, which can be enfrced by the administratr, the package is: saved t a queue until a cnnectin t Mail Express Server is restred, the is sent thrugh Exchange withut Mail Express managing the attachments, r a prmpt is displayed when the cnnectin t the Mail Express Server is lst and asks yu t specify whether t wait fr cnnectivity t Mail Express Server r t send the immediately thrugh Exchange. If Mail Express is nt managing the attachments, Exchange can reject the if the file size exceeds its file size limit. In the Mail Express Cnfiguratin dialg bx, yu can specify which Mail Express server t cnnect t, hw t authenticate yur cnnectin, and where t save lg files. In mst cases, yur Mail Express administratr will cnfigure this fr yu. T cnfigure the Mail Express Outlk Add-In 1. On the Mail Express tlbar/ribbn, click General Cnfiguratin. The General Cnfiguratin dialg bx appears. 2. In the Mail Express Server Hst bx, prvide the hst name f Mail Express Server. 3. In the Prt bx, prvide the prt used by Mail Express Server. 164

165 Using Mail Express in Outlk 4. In the Lgin type bx, specify either manual r Windws authenticatin: Manual Yu must prvide the username and passwrd that yu use t cnnect t Mail Express r yur AD credentials. a. In the Username bx, prvide the username that yu use t cnnect t Mail Express Server r yur AD username. b. In the Passwrd bx, prvide the passwrd that yu use t cnnect t Mail Express Server r yur AD passwrd. Windws Authenticatin Yu cnnect t Mail Express Server via Single Sign On (Kerbers). In this case, yu d nt need t prvide a username and passwrd. Yur Windws credentials are used t cnnect t Mail Express. (The Username and Passwrd bxes are replaced with a Service principal name bx.) 5. If yu want t test yur cnnectin t Mail Express Server, click Test Cnnectin. 6. In the Lg file lcatin bx, specify the path at which the lg file is saved. By default, the lg files are saved in %userprfile%\\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin\lgs. 7. Click OK t save yur changes, r click Cancel if yu d nt want t save yur changes. Cnfiguring Message Optins Use the Message Optins dialg bx t specify whether Mail Express shuld: manage attachments manage embedded attachments (such as images) ntify yu when files are picked up send attachment links r nly a pickup page link expire links when t include reply links what t d when Mail Express Server is nt available Internal senders can make these settings stricter, but nt less strict. Fr example, if the server is cnfigured t always use Mail Express, yu cannt set message ptins t nt require Mail Express. Hwever, if link expiratin is nt cnfigured n the server, yu can freely cnfigure link expiratin ptins in the Outlk Add-In. If link expiratin was enabled n Mail Express server, yu can set the expiratin t ccur sner, but cannt set it t a lnger expiratin r turn ff link expiratin. Other settings n this dialg behave similarly. If a file is attached via the Mail Express Attach File buttn, the will be managed by Mail Express regardless f these plicy settings. It is assumed that since yu are using the Mail Express buttn (instead f the Outlk Attach File buttn), yu want t use Mail Express t manage the . Yu can cnfigure message ptins fr all s r fr a specific . T cnfigure message ptins fr all s 1. On the Mail Express tlbar/ribbn, click Message Optins. The Message Optins dialg bx appears. 165

166 Mail Express User Guide v In the Require Mail Express t Manage Attachments area, specify whether t use Mail Express t manage attachments. (The availability f the ptins depends n the Mail Express Server cnfiguratin in the Administratin prtal.) Always use Mail Express Use Mail Express t manage all attachments. Mail Express use nt required D nt use Mail Express t manage attachments, unless at least ne was attached using the Mail Express Attach File buttn. Use Mail Express based n fllwing plicy Specify criteria that determine whether Mail Express shuld manage attachments. Ttal file size T manage attachments nly if the ttal file size f all attachments exceeds a certain threshld, select the check bx, then specify the threshld at which t manage attachments. Number f attachments T manage attachments based n the number f attachments, select the check bx, then specify the number f attachments at which t use Mail Express. File type T manage attachments based n file type, select the check bx, then click Add. The defaults are specified n the Mail Express server. In the Specify a file type bx, type the file extensin (e.g., dcx, jpg, xls), then click Add. D nt type a perid befre the extensin.) 166

167 Using Mail Express in Outlk 3. In the Default Send Optins area, specify the fllwing ptins: Manage embedded attachments Ntify me when files are picked up Send pick-up page link nly Link expiratin Link expiratin is enfrced by the Mail Express server. Yu can set the expiratin t happen sner than what is defined n the server, but yu cannt specify a lnger time t expiratin. 4. In the Default Reply Optins area, specify the fllwing ptins: Always include reply link Include reply link when attachments are managed D nt include reply link 5. In the Behavir when Mail Express Server is unavailable area, specify what yu want the Mail Express Add-In t d when it cannt cnnect t Mail Express Server (e.g., during netwrk maintenance): Queue s until Mail Express Server is available Send via Outlk withut Mail Express Prmpt me fr desired behavir 6. Click OK t save yur changes, r click Cancel if yu d nt want t save yur changes. T cnfigure Send Optins fr a specific In each that yu send, yu can specify message ptins that pertain t that nly, verriding the default send ptins specified by the Mail Express administratr. Yu can make these settings stricter, but nt less strict. Fr example, if the server is cnfigured t always use Mail Express, yu cannt set message ptins t nt require Mail Express. (T set ptins fr all e- mails, refer t the prcedure abve.) 1. Create the as yu nrmally d. 2. In the tlbar/ribbn, click Mail Express Send Optins. The Send Optins dialg bx appears. 3. In the Send Optins dialg bx, yu can specify the fllwing ptins: 167

168 Mail Express User Guide v3.2 Manage embedded attachments Embedded attachments are files that are inserted int the bdy f the rather than attached t the , such as a cmpany lg in an signature r a picture. If yu want Mail Express t make these embedded attachments int file dwnlad links, select the check bx. (Cleared by default.) Ntify me when the files are picked up When selected, dwnlad ntificatin is sent t yu when the recipient clicks the dwnlad link in the r Dwnlad Files n the Pick-Up page. (Cleared by default.) Send pick-up page link nly When the check bx is selected, nly the Pick-Up page link is sent. If the check bx is nt selected, individual links fr each file are included in the . (Cleared by default.) Link expiratin When selected, the ability t dwnlad the attachments will expire in the time that yu specify. If the recipient attempts t dwnlad a file that is past its expiratin date, the fllwing message appears: "The file yu are attempting t dwnlad has expired. Please cntact the sender if this file needs t be resent." (Cleared by default.) Require passwrd t dwnlad and uplad files When selected, the recipient must prvide a passwrd t dwnlad the attachments and t uplad files t send back t yu via an accunt r reply invitatin. The passwrd yu create is nly valid fr that specific package. The passwrd will be placed n the in the Sent Items flder after the is sent in case the sender needs t recall which passwrd was used with a particular . (Cleared by default.) 4. Click OK t save yur changes r Cancel if yu d nt want t save yur changes. Turning On r Off the Outlk Add-In In the rare instance f a Mail Express errr, yu may yu need t turn ff the Mail Express Outlk Add-In r turn it back n. T turn n r ff the Mail Express Outlk Add-In In Outlk 2010: 1. Click File > Optins. 2. In the left pane, click Add-Ins. 3. In the Manage bx, click COM Add-Ins, then click G. The COM Add-Ins dialg bx appears. 4. Select (turn n) r clear (turn ff) the Mail Express Outlk Add-In check bx, then click OK. Take nte f the state f the Add-In in the Trust Center (i.e. Active, Inactive, r Disabled). If the Add-In is in a disabled state, it cannt be enabled using the steps abve initially. Instead yu must perfrm the fllwing steps in the Trust Center: a. Next t the Manage bx, click Disabled Items, then click G. b. In the Disabled Items dialg bx, click Mail Express Outlk Add-In, then click Enable. c. Clse the Disabled Items dialg bx. If the Add-In nw appears in the Active list, it is enabled. If the Add-In appears in the Inactive list, fllw steps 3-4 abve. In Outlk 2007: 1. Click Tls > Trust Center. 2. In the left pane, click Add-Ins. 168

169 Using Mail Express in Outlk 3. In the Manage bx, click COM Add-Ins, then click G. The COM Add-Ins dialg bx appears. 4. Select (turn n) r clear (turn ff) the Mail Express Outlk Add-In check bx, then click OK. Take nte f the state f the Add-In in the Trust Center (i.e. Active, Inactive, r Disabled). If the Add-In is in a disabled state, it cannt be enabled using the steps abve initially. Instead yu must perfrm the fllwing steps in the Trust Center: a. Next t the Manage bx, click Disabled Items, then click G. b. In the Disabled Items dialg bx, click Mail Express Outlk Add-In, then click Enable. c. Clse the Disabled Items dialg bx. If the Add-In nw appears in the Active list, it is enabled. If the Add-In appears in the Inactive list, fllw steps 3-4 abve. In Outlk 2003: 1. Click Tls > Other > Advanced Optins > COM Add-Ins. 2. Select (turn n) r clear (turn ff) the Mail Express check bx, then click OK. Sending Files with the Mail Express Outlk Add-In If yu have ever sent an with attachments, yu already knw hw t use Mail Express. Create the , attach ne r mre files t the , then click Send. Yu will cntinue t send and receive e- mails as always; the nly difference is that Mail Express wrks transparently in the backgrund t transfer the s that have attachments. The sent is still saved t yur Sent Items flder, but the attachments, if managed by Mail Express, are nt saved in the Sent Items flder. Instead, a link t the attachments is added t the bdy f the . The saved t yur Sent Items flder lks the same as the recipient's received . The attachment, if managed by Mail Express, is saved n Mail Express Server in the lcatin specified during installatin, in a unique flder fr each , nt n yur SMTP server (such as Micrsft Exchange). The Add-In stres infrmatin abut s that it is prcessing in an individual wrkspace, by default in %userprfile%\lcal Settings\Applicatin Data\MailExpress. The Mail Express administratr cnfigures message-sending ptins n the Mail Express server. Yu can cnfigure mre strict ptins in Outlk fr all messages r fr specific messages. Refer t Cnfiguring Message Optins fr details. If yu attempt t send a package larger than 25 GB, a prmpt appears infrming yu t decrease the size and try t send again. That is, if yu attach multiple files t an and the ttal size is mre than 25 GB, yu will have t remve sme f the attachments and send them separately. Sending the can fail in the fllwing situatins: Offline mde Messages are stred in the utbx until Outlk is nline and the Add-In cnnects t the Mail Express server. Lss f cnnectivity t the Mail Express server Interrupted uplads due t lss f cnnectivity t the Mail Express Server are cntinued frm the pint at which they were stpped when cnnectin t the server is re-established. Insufficient disk space The Add-In will receive a FileSystemErrr respnse frm the server and the Add-In will treat this as an unrecverable errr. Refer t What is This--Recver fr mre infrmatin. 169

170 Mail Express User Guide v3.2 RTF-frmatted s Mail Express 3.1 des nt supprt RTF-frmatted messages. T change the frmat fr all messages sent in Outlk, please refer t Changing the Message Frmat. T send a file 1. Create an as usual. 2. Attach the file t the using the Mail Express Attach File buttn. 3. (Optinal) Click Include Reply Link, if want yur recipient(s) t reply using the Reply Prtal t send attachments back t yu. Yu can specify that yu nly want t include the reply link if attachments are managed by Mail Express. 4. (Optinal) Cnfigure send ptins such as requiring a passwrd t dwnlad files frm and uplad files t Mail Express. 5. Click Send. Viewing Mail Express Add-In Status The Mail Express Add-In includes a Status pane thrugh which yu can view whether yu are cnnected t Mail Express Server and the status f attachments being sent via Mail Express. By default, the Mail Express Status pane is hidden. The pane appears n the right side f the main Outlk windw (in Outlk 2007 and 2010) r in a pp-up windw (in Outlk 2003). T view Mail Express status On the Mail Express tlbar/ribbn, click Hide Status r Display Status. The General Status area displays the status f yur Mail Express Server cnnectin. If the Mail Express Add-In is nt cnnected t the Mail Express Server, it will nt try t uplad packages. Depending n the settings n Mail Express server, the package is either saved t a queue until a cnnectin t Mail Express Server is restred, the is sent thrugh Outlk withut Mail Express managing the attachments, r a prmpt is displayed when the cnnectin t Mail Express is lst and asks yu t specify whether t wait fr Mail Express cnnectin r send immediately. 170

171 Using Mail Express in Outlk The Transfer Status area displays the status f attachments being sent, including recipient, subject line, size f the file, status (Pending, Transferring, Verifying File Digest, etc.), and the number f uplad attempts. T dck r undck the Mail Express Status pane Click and hld the title bar f the Status pane until the Mve cursr appears (r click the dwn arrw n the title bar f the pane, then click Mve) then drag the pane t undck it and mve it where yu want. T dck the pane, click in the title bar, and drag the pane back t the right r left side f the primary Outlk windw. T resize the pane (when undcked) click and hld a crner f the pane (r click the dwn arrw n the title bar f the pane, then click Size), then drag the pane t the size yu want. If the uplad failed, the Transfer Status area displays the fllwing infrmatin: Text-based descriptin f current status, including infrmatin n what prevented package frm being upladed in errr cases Subject f the package Recipients f the package Ttal size f package Number f uplad retry attempts fr package Recver buttn fr failures that were the result f an unrecverable errr. Clicking Recver mves the t the Outlk Drafts flder. Recvering an frm "Unrecverable Errr" The Add-In will try t autmatically recver frm prblems such as lss f cnnectivity with the Mail Express Server during a transfer. If the Mail Express Add-In experiences an "Unrecverable Errr" while managing a package, the Recver buttn appears. An unrecverable errr is a mre serius errr that the Add-In cannt reslve n its wn, such as a File System errr caused by the Mail Express Server running ut f disk space. These types f errrs will usually require an administratr t reslve the issue. 171

172 Mail Express User Guide v3.2 If yu click Recver , the Mail Express Add-In will mve the crrespnding t the package frm Outlk s Outbx t the Drafts flder. Yu can then try resending the , perhaps after the administratr has had a chance t reslve the issue. If the prblem cannt be reslved in a timely fashin, but yu need t send the prmptly, yu can stp the Add-In frm managing s by turning it ff via the Outlk Trust Center r by clicking Mail Express use nt required in the Message Optins dialg bx. Then yu will need t remve any attachments that were attached with the Mail Express Attach File buttn (thse attachments will have the ".mailexpress" suffix) and reattach them with Outlk s Attach File buttn. Nte that if yu are sending an with big attachments with the Mail Express Add-In turned ff, the attachment may be blcked by the Exchange Server. T turn ff the Outlk Add-In, refer t Turning On r Off the Outlk Add-In. T edit Mail Express Message Optins, refer t Cnfiguring Message Optins. Cancelling Packages It is pssible t stp Mail Express frm uplading an s attachments r sending the by mving the ut f the Outbx either by deleting it r by mving it int anther flder, such as the Drafts flder. If the attachments f an are currently being upladed, it may take up t ten secnds fr the Add-In t realize that yu have mved the ut f the Outbx and fr it t cancel the transfer. It is als pssible that while attachments are being upladed fr an , that yu can pen the while it is in the Outbx, alter the , and resend it, as lng as it is resent befre the in-prgress transfer cmpletes. When ding this, the Add-In creates a new package fr the and uplads the files, and the riginal transfer autmatically cancels itself. Lgging Mail Express Outlk Add-In Activities The Outlk Add-In lgs errrs, warnings, fatal errrs, and infrmative details t a file t assist with trubleshting. Other available lg levels include "ALL," "DEBUG," "INFO," "WARN," "ERROR," "FATAL" and "OFF." The lg entries include the date and time in 24-hur frmat, mm/dd/yyyy hh:mm:ss (e.g., 06/25/ :17:46). A lg file can grw up t 10 MB, at which pint a new lg file is created, up t 10 lg files ttal. By default, the lg files are saved in %userprfile%\applicatin Data\GlbalSCAPE\Mail Express Outlk Addin\lgs. Yu can change this lcatin in the General Cnfiguratin dialg bx when the Mail Express User Interface is enabled. Changing the Message Frmat Mail Express 3.1 des nt supprt RTF-frmatted messages. T change the frmat fr all messages sent frm Outlk, please refer t the prcedures belw. Changing the Message Frmat in Outlk 2010 T change the message frmat fr all messages 1. Click the File tab. 2. Click Optins. 3. Click Mail. 4. Under Cmpse messages, in the Cmpse messages in this frmat list, click HTML r Plain Text. T change the frmat f an individual message 1. With the message pen, click Frmat Text. 2. On the Frmat tab, click the frmat yu want t use (Plain Text r HTML). 172

173 Using Mail Express in a Web Brwser Changing the Message Frmat in Outlk 2007 and 2003 T change the default message frmat fr all messages 1. On the Tls menu, click Optins, and then click the Mail Frmat tab. 2. In the Cmpse in this message frmat list, click HTML r Plain Text. T change the frmat f an individual message 1. With the message pen, click Optins. 2. On the Frmat tab, click the frmat yu want t use (Plain Text r HTML). Mail Prfiles with Multiple Accunts Outlk 2003 and 2007 supprts a maximum f ne Exchange accunt per mail prfile. As such, the Outlk Add-In fr these versins f Outlk supprts a mail prfile with a single Exchange accunt. Other accunt types (nn-exchange) are currently unsupprted. Outlk 2010 supprts mail prfiles with multiple Exchange accunts. The Outlk Add-In seamlessly wrks with this new feature and, frm a user standpint, there is n real difference in hw the Add-In is used. s with attachments can be sent frm any f the Exchange accunts in the prfile and the Add- In will manage the s that meet the plicy criteria, as usual. If an is sent with the dwnlad ntificatin feature turned n, the ntificatins will be sent t the accunt that the was sent frm. The Mail Express Status pane will shw an aggregated view f all packages that are being managed by the Add-In fr all accunts. If an accunt is discnnected frm its Exchange Server, the Add-In will wait until cnnectivity is re-established fr that accunt befre uplading cmmences. Dwnlad Ntificatins When the dwnlad ntificatin feature is enabled, the Add-In will send a private cpy f the message t each recipient with their wn private links s that the Mail Express Server can discern wh is dwnlading a particular file. Due t limitatins in Outlk, it is nt pssible t send these private messages while retaining the riginal recipient list. T accunt fr this limitatin, Mail Express will update the message bdy t include the riginal recipient list fr these private s. The updated message bdy will nly ccur when the dwnlad ntificatin r invitatin features are enabled and fr s that are being sent t mre than ne recipient. The text that is added t s t supprt this feature can be custmized thrugh a template that resides n the Mail Express Server. Refer t Custmizing Mail Express Pages and Ntificatins fr mre infrmatin. Using Mail Express in a Web Brwser These tpics describe hw t send r pick up files using Mail Express in a web brwser. Fr details f using Mail Express in Micrsft Outlk, refer t Using and Cnfiguring Mail Express in Outlk. Fr details f cnfiguring Mail Express administratin, refer t Administering Mail Express. Cnnecting t the Web Prtal The Mail Express web prtal is prvided fr users t exchange files using Mail Express utside f Outlk. The web prtal that appears depends n hw the administratr has cnfigured yur default landing page ( r T cnnect t the web prtal 1. Open a web brwser and navigate t the web address f the Mail Express Welcme page prvided t yu by the Mail Express administratr. 173

174 Mail Express User Guide v If the Welcme page appears and displays icns with which t cnnect t the Drp-Off prtal r Internal Prtal, click the Drp-Off Prtal icn, r the Internal Prtal icn. The selected prtal page appears. The ptins that appear depend n the administratr's cnfiguratin f the prtal and the type f yur accunt. Otherwise, yur default landing page appears. GlbalSCAPE Prfessinal Services can custmize this page fr yu.) Requesting Access t the Drp-Off Prtal If yu need t use the Drp-Off Prtal t send dcuments using Mail Express, n the Mail Express Welcme page, yu can request an accunt. The request is sent t the Mail Express administratr. T send file using the drp-ff page 1. Open a web brwser and navigate t the web address f the drp-ff page ( The lgin page appears. 2. Click Request Accunt. The Request Accunt Page appears. 3. Prvide yur Name, address, and reasn fr the request, cmplete the CAPTCHA, then click Request accunt. An is sent t the Mail Express administratr. 174

175 Using Mail Express in a Web Brwser Requesting Access t the Internal Prtal If yu need t use the Internal Prtal t send dcuments using Mail Express, n the Mail Express Welcme page, yu can request an accunt. The request is sent t the Mail Express administratr. T send file using the drp-ff page 1. Open a web brwser and navigate t the web address f the internal prtal (e.g., 2. A welcme page appears and displays icns with which t cnnect t the Drp-Off prtal r Internal Prtal. Click Internal Prtal. 3. Click Request Accunt. The Request Accunt Page appears. 4. Prvide yur Name, address, and reasn fr the request, cmplete the CAPTCHA, then click Request accunt. An is sent t the Mail Express administratr. Sending Files Using the Drp-Off Prtal The Mail Express Drp-Off Prtal is prvided fr external, nn-outlk users t send files using Mail Express. Frm this web page, any individual wh knws the URL f the page can attach files t an t send t ne r mre recipients. Yu can als lg in t the Drp-Off prtal using yur Internal user credentials. If the administratr has cnfigured the Drp-Off page t allw nly "verified" users, yu have t lg in (n annymus access is allwed). Internal users require the Drp-Off access enabled permissin t access t the Drp-Off page. Mst brwsers d nt supprt transfers f files larger than 2 GB. T send larger files, use the Outlk Add-In. T send file using the Drp-Off prtal 1. D ne f the fllwing: Open a web brwser and navigate t the web address f the drp-ff page (e.g., Open a web brwser and navigate t the web address f the default landing page (e.g., If a welcme page appears and displays icns with which t cnnect t the Drp-Off prtal r Internal Prtal, click Drp-Off Prtal. 175

176 Mail Express User Guide v3.2 The Welcme page and frm appear. The ptins that appear depend n the administratr's cnfiguratin f the Drp-Off Prtal and the type f accunt. 2. In the Frm bx, prvide the sender's address. If the administratr requires all senders t be verified users, the Frm bx is cmpleted fr yu and is nt editable. 3. In the T bx, prvide the recipient's address. Multiple addresses can be separated by cmmas. The addresses and number f recipients are validated against administratrdefined values. 4. In the Subject bx, prvide a descriptive "title" fr yur . "Here are the files" is t generic and culd get lst in multiple s. "Attached are the dcuments fr Friday's Widget discussin" is mre descriptive and easier t identify in a search. Yu are allwed up t 256 characters. 5. In the Attachments area, click Brwse t select a file t attach. Yu can nly select ne file at a time and cannt select entire directries. Yu are limited t 10 attachments per send. After 10 attachments have been added, the Brwse buttn is unavailable. 6. In the Message bx, describe the purpse f the . The Message bx allws up t characters. Yu cannt use HTML tags t frmat the message. 7. If CAPTCHA is displayed, in the text bx, type the text in the CAPTCHA. (If CAPTCHA is nt displayed, the administratr did nt select the check bx in the Drp-Off Prtal Settings.) 8. Click Send. If the T, Subject, r Message bxes are empty, r if the CAPTCHA fails, the send will fail and the CAPTCHA will reset. A message similar t the fllwing appears if the send was successful: T send anther package, click Send. T receive a cpy f the receipt in , click . The is sent t the address specified in the Frm bx f the

177 Using Mail Express in a Web Brwser Sending Files with the Internal Prtal The Mail Express Internal Web Prtal is prvided fr users t send files using Mail Express withut Outlk. (Fr example, if yu are wrking remtely and d have access t Outlk r the Exchange Server.) The administratr accunt cannt send files using the Internal Web Prtal when nly verified users are allwed; in that case, yu must create a separate user accunt. Mst brwsers d nt supprt transfers f files larger than 2 GB. T send larger files, use the Outlk Add-In. T send file using the Internal Web Prtal 1. If yu d nt have an Internal user accunt, refer t Requesting Access t the Internal Prtal. 2. After yu have yur Internal user accunt, d ne f the fllwing: Open a web brwser and navigate t the web address f the Internal web prtal (e.g., Open a web brwser and navigate t the web address f the default landing page (e.g., If a welcme page appears and displays icns with which t cnnect t the Drp-Off prtal r Internal Prtal, click Internal Prtal. The Welcme page appears. The ptins that appear depend n the administratr's cnfiguratin f the Internal Web Prtal and the type f accunt. 2. In the Frm bx is cmpleted fr yu and is nt editable. 177

178 Mail Express User Guide v In the T bx, prvide the recipient's address. Multiple addresses can be separated by cmmas. 4. Click Add CC and Add BCC t add cpy recipients. 5. In the Subject bx, prvide a descriptive "title" fr yur . "Here are the files" is t generic and culd get lst in multiple s. "Attached are the dcuments fr Friday's Widget discussin" is mre descriptive and easier t identify in a search. Yu are allwed up t 256 characters. 6. In the Attachments area, click Brwse t select a file t attach. Yu can nly select ne file at a time and cannt select entire directries. Yu are limited t 10 attachments per send. After 10 attachments have been added, the Brwse buttn is unavailable. 7. In the Message bx, further describe the purpse f the . The Message bx allws up t characters. Yu cannt use HTML tags t frmat the message. 8. Mre ptins may be available depending n the administratr's settings and the type f accunt used t lg in. Select the Shw message ptins check bx if yu want t specify the fllwing message ptins specific t this Click Send. Send Reply link When the Mail Express administratr has enabled this ptin, recipients can click a link in the t reply t yur . Ntify me when files are picked up Select this check bx t receive an when the recipient dwnlads the files that yu sent. Link expiratin Select this check bx if yu want t specify an expiratin that is mre strict that what is defined n the server. Send Pick-Up Page link nly Select this check bx if yu want t send nly a link t the Pick-Up Page, nt links t the attachments. Require passwrd fr dwnlad Select this check bx and specify a passwrd if yu want the recipient t prvide a passwrd befre being able t dwnlad the attachments. The sender must prvide the passwrd t recipients in a separate , ver the phne, IM, etc. If the T, Subject, r Message bxes are empty, the send will fail. 178

179 Using Mail Express in a Web Brwser A message similar t the fllwing example appears if the send was successful: T send anther package, click Send. T receive a cpy f the receipt in , click . The is sent t the address specified in the Frm bx f the . Sending Invites with the Internal Prtal In Mail Express 3.2 and later, Internal users can send invitatins t external users t create a Drp-Off prtal accunt. If the Send Invites link des nt appear when yu lg in t the Internal Prtal, the administratr has nt enabled that feature either n yur accunt r glbally fr all Internal Users. 179

180 Mail Express User Guide v3.2 T send invitatins with the Internal prtal 1. D ne f the fllwing: Open a web brwser and navigate t the web address f the Internal web prtal (e.g., Open a web brwser and navigate t the web address f the default landing page (e.g., If a welcme page appears and displays icns with which t cnnect t the Drp-Off prtal r Internal Prtal, click Internal Prtal. 2. Lg in. The Send Files page appears. 3. The Frm bx displays the sender's address. 4. In the T bx, prvide the recipient's address. Multiple addresses can be separated by cmmas. Any ther delimiters, such as semiclns will result in errrs. 5. Click Add CC and Add BCC t add curtesy cpy r blind curtesy cpy recipients. 6. In the Subject bx, the text "Yu have been invited t create a Mail Express Drp-Off accunt" appears. Yu can change this text, if necessary. Yu are allwed up t 256 characters. 7. In the Attachments area, click Brwse t select a file t attach. Yu can nly select ne file at a time and cannt select entire directries. Yu are limited t 10 attachments per send. After 10 attachments have been added, the Brwse buttn is unavailable. 8. In the Message bx, text appears instructing the recipient t click the link in the t set up an accunt. Yu can edit this text as necessary. The Message bx allws up t characters. Yu cannt use HTML tags t frmat the message. 9. Mre ptins may be available depending n the administratr's settings and the type f accunt used t lg in. Select the Shw message ptins check bx if yu want t specify the fllwing message ptins specific t this Send Reply link When the Mail Express administratr has enabled this ptin, recipients can click a link in the t reply t yur with an attachment. 180

181 Using Mail Express in a Web Brwser 12. Click Send. Ntify me when files are picked up Select this check bx t receive an when the recipient dwnlads the files that yu sent. Link expiratin Select this check bx if yu want t specify an expiratin that is mre strict that what is defined n the server. Send Pick-Up Page link nly Select this check bx if yu want t send nly a link t the Pick-Up Page, nt links t the attachments. Require passwrd fr dwnlad Select this check bx if yu want the recipient t prvide a passwrd befre being able t dwnlad the attachments. The sender must prvide the passwrd t recipients in a separate , ver the phne, IM, etc. If the T, Subject, r Message bxes are empty, the send will fail. A message similar t the fllwing example appears if the send was successful. (If invitatins were sent, the page als displays that infrmatin.) T send anther package, click Send. T receive a cpy f the receipt in , click . The is sent t the address specified in the Frm bx f the . Picking Up Files When a Mail Express user sends an with an attachment, the attachment (if managed by Mail Express) is sent t the Mail Express Server, and the recipient receives an that cntains the bdy f the riginal sent , plus a table f ne r mre hyperlinks frm which the recipient can dwnlad the attachment. The attachment(s) are nt prcessed by the SMTP server nr sent t the recipient's client. The links t the attachments are embedded in the

182 Mail Express User Guide v3.2 If yu attempt t dwnlad files after they have expired, an "expired" message appears n the Pick-up page. T pick up a file 1. Click the link in the t pen r save the attachment(s). If the files are passwrd prtected, a passwrd entry page appears in yur default web brwser. Prvide the passwrd, then click Submit. The Pick-up Page appears. Passwrds are defined by the sender under Optins in the Internal Prtal. 2. On the Pick-Up page, click the link next t the file that yu want t view r dwnlad, r click Dwnlad all files t dwnlad a zipped file that cntains the file(s). 3. The dwnlad behavir depends n the brwser yu are using and yur settings. Click Open t view the file (if the necessary prgram is installed) r click Save t save the file. If yu chse Open, the file is pened as read nly. Recvering a Lst Passwrd If yu have frgtten yur passwrd t lg in t Mail Express, yu can request a passwrd reset n the sign in page. T recver a lst passwrd 1. Open a web brwser and navigate t the web address f the lgin page. The lgin page appears. 2. Click Lst Passwrd. The Lst Passwrd page appears. 3. In the Username bx, prvide the username that yu use t lg in t Mail Express. 4. In the Please enter the text yu see abve bx, type the CAPTCHA text, then click Cntinue. 182

183 Using Mail Express in a Web Brwser 5. A message appears that says, "T reset yur passwrd, fllw the instructins sent t yur address fr this accunt." Click Cntinue. 6. Cpy the temprary passwrd frm the and paste it int the Passwrd bx n the lgin page, then click Sign In. The Change passwrd page appears. 8. In the New passwrd and Cnfirm passwrd bxes, prvide a new passwrd. The passwrd must be between 6 and 256 characters, cntain at least 3 f the fllwing types f characters: number, uppercase, lwercase, and nn-alphanumeric character. 9. Click Change. A message appears stating that the passwrd has been changed and a cnfirmatin is sent t the address used when yur accunt was created stating that yur passwrd has changed. Maximum File Size fr Brwser-Based Uplads When uplading a file using a HTTP PUT methd, mst mdern brwsers have a maximum file size limit f arund 2 GB. This limitatin is typically due t hw the cntent length attribute is stred and handled in the brwser cde in which they ften use a data type whse size can nly represent a number up t 2,147,483,648 bytes (2GB). Internal testing has shwn all supprted brwsers have a max file uplad size within 5 KB f the 2 GB limit. Hwever, the size f ther metadata, such as the file s name, affects the brwser s max uplad. Viewing Unicde Filenames Filenames f attachments managed by Mail Express Server appear n sme f the pages in the administratin interface and in reprts. If the cmputer n which yu are launching the Web brwser t cnfigure Mail Express Server des nt have the prper language packs installed, filenames made up f Unicde characters will nt display crrectly. The same is true if yu send r pick up attachments n a cmputer that des nt have the prper language packs installed. T view Unicde characters, yu must have the crrect fnts installed n the perating system. Mst mdern brwsers can use these fnts t display the Unicde characters. On newer perating systems, such as Vista and Windws 7, the fnts are preinstalled. T install them n ther cmputers, yu must install the East Asian Languages Pack. (On Windws 2003, yu must have SP2 installed.) T install East Asian language supprt 1. Click Start > Run, type cntrl, then press ENTER. The Cntrl Panel appears. 2. Duble-click Reginal and Language Optins. The Reginal and Language Optins dialg bx appears. 3. Click the Language tab. 183

184 Mail Express User Guide v In the Supplemental Language Supprt area, select the Install files fr East Asian Languages check bx, then click OK. 5. Restart the cmputer. The interfaces shuld nw display the characters crrectly. Cnfiguring the Web Brwser Befre cnnecting t Mail Express in a web brwser, a few brwser settings may need t be adjusted. Fr example, fr Ajax t wrk, JavaScript has t be enabled in yur brwser, because Ajax uses JavaScript. T cnfigure the web brwser t wrk with Mail Express Internet Explrer 7, 8, 9 Safari Firefx Fr IE t allw Ajax t run, the fllwing settings must be set under Tls -> Internet Optins -> Security tab -> Custm level: Under ActiveX cntrls and plug-ins: Run ActiveX cntrls and plug-ins: Enable Script ActiveX cntrls marked safe fr scripting: Enable Under Scripting: Active scripting: Enable Preferences -> Security (tab) -> Web cntent -> Enable JavaScript selected (Enabled by default) Tls -> Optins -> Cntent (tab) -> Enable JavaScript selected (Enabled by default) 184

185 Using Mail Express in a Web Brwser Sending Files with the Reply Prtal Mail Express allws users t send large file attachments t recipients inside r utside f their rganizatin. If yu have received an frm a Mail Express user and the cntains a link t the Reply Prtal, yu can click the link t return files t the sender. (Yu must attach at least ne file.) T send files with the Reply Prtal 1. Click the Reply t link in the yu received. Yur default brwser pens and the Reply Prtal appears. 2. In the Frm bx, the address is cmpleted fr yu and is nt editable. 3. In the T bx, the address is cmpleted fr yu. (Authenticated Internal users can change the recipient and add multiple recipients.) 4. In the Subject bx, the riginal Subject line appears with "RE:" (reply) in frnt f it. Yu can edit the Subject line; yu are allwed up t 256 characters. 5. In the Attachments area, click Brwse t select a file t attach. Yu can nly select ne file at a time and cannt select entire directries. Yu are limited t 10 attachments per send. After 10 attachments have been added, the Brwse buttn is unavailable. 6. In the Message bx, further describe the purpse f the . The Message bx allws up t characters. Yu cannt use HTML tags t frmat the message. 7. In the Optins area, select the Send me a cpy check bx if yu want t be cpied n the . (Nt available fr authenticated Internal users.) 8. Click Send. A "Files Successfully Sent" message appears. If the Subject r Message bxes are empty, the send will fail. T send anther package, click Send. T receive a cpy f the receipt in , click . The is sent t the address specified in the Frm bx f the

186 Mail Express User Guide v3.2 If yu leave the page pen t lng withut clicking Send, the page expires. Yu will have t clse the brwser/clear the cache and then click r paste the link again. Using the Accunt Activatin Prtal Mail Express Internal users can send invitatins t users utside f their rganizatins with whm they frequently share files. After external users create an accunt, they are able t use the Mail Express Drp- Off Prtal t send files. The invitatin belw was sent t a Gmail accunt: T activate yur accunt 1. In the invitatin , click activate in "Please activate yur accunt t begin sending files." 2. The Mail Express Accunt Activatin Prtal pens in yur default brwser. 3. The username bx is cmpleted by Mail Express and is nt editable. The address displayed is yur username t access the Drp-Off Prtal f Mail Express. 4. In the Display name bx, the address displayed is the name that will appear in the Frm bx in s that yu send. 5. In the Passwrd and Cnfirm passwrd bxes, prvide a passwrd. The passwrd must be between 6 and 256 characters and adhere t at least 3 f the fllwing requirements: cntain at least 1 number, 1 upper case, 1 lwer case, and 1 nn-alphanumeric character. 186

187 Getting Help 6. Click Create. Yur accunt is created and the Drp-Off Prtal appears. 7. After the accunt is created, yu will receive an cnfirming that the accunt has been activated, and the user wh invited yu will receive an cnfirming that yu have accepted the invitatin. (Ensure that s frm the user wh invited yu are ging t yur Inbx and nt yur Junk Mail r Spam flder.) 8. T send files t Mail Express Internal users using the Drp-Off Prtal, refer t Sending Files Using the Drp-Off Prtal. Getting Help Refer t the tpics in this chapter fr details f getting help n using Mail Express. Fr the mst up-t-date infrmatin regarding this versin f Mail Express; t view versin histry, updates, and activatin instructins; and fr ther self-help resurces, visit the Supprt Center. Refer t the GlbalSCAPE User Guides in PDF page t dwnlad a searchable PDF f this user guide. After release f the prduct, the nline help is updated as errrs and missins are identified; therefre, yu shuld visit the Supprt Center when the help file in the applicatin des nt answer yur questin. The fllwing cnventins are used in this user guide: bldface text: Bldface type in text refers t interface buttns, hyperlinks, and filenames/paths. Bldface type als serves as emphasis t set apart main ideas. italicized text: Italicized text applies t new terms intrduced fr the first time. Italicized text can als serve as emphasis fr key cncepts. unicde text: Plain text dentes exact cde, literal cmmands, and user input. Fr mre help infrmatin, refer t the fllwing tpics: Finding Infrmatin in the Help GlbalSCAPE Supprt Center Using the Knwledgebase 187

188 Mail Express User Guide v3.2 If the help pens in the brwser withut a menu r tlbar, right-click in a tpic (r the Help link in Mail Express) and then click Open in New Windw. Finding Infrmatin in the Help Yu can find infrmatin in the nline/applicatin Help in several ways. (This PDF is als searchable and cntains wrking hyperlinks.) Cntents - Displays a lgical rganizatin f the help tpics, similar t chapters in a bk. Click a main heading (represented by a bk icn) t display pages that link t tpics, and click each sub heading (represented by a page icn) t display the crrespnding tpic in the right pane. Search - Allws yu t lcate wrds r phrases within the cntent f the tpics. Type the wrd r phrase in the text bx, press ENTER, then click the tpic yu want frm the list f tpics that appears. In the applicatin's help, yu can search using Blean (OR, AND, and NOT) and wildcard expressins (*,?). Wildcard searches are nt available in Web Help. Yu can srt the search results by Rank, Title, r the Lcatin clumn. The Lcatin clumn displays the name f the helpset. Print - Opens yur cmputer's Print dialg bx frm which yu can specify a printer t print the tpic that is displayed in the right pane. In the applicatin help, yu have the ptin f printing the tpic nly, r the main heading tpic and all subtpics in that heading. (Alternatively, see the prcedure belw.) Searching the Help File r glbalscape.cm When searching, try several different wrds fr the same cncept. Fr example, if yu want help with creating a user accunt, search fr user, accunt, and s n. Als, we have attempted t prvide intuitive names fr the tpic titles. The Table f Cntents and the Index cntain the tpic titles f every tpic in the user guide. S, in this example, if yu are lking fr a prcedure n hw t create a drp-ff user, lk fr the tpic Creating and Managing Drp-Off User Accunts. Printing a Help Tpic T print a Help tpic 1. Click Print Tpic in the Navigatin pane, r right-click in the tpic (in the right pane), then click Print. The Print dialg bx fr yur perating system appears. 2. In the Print dialg bx, click Print. The tpic is printed t the specified printer. Sharing Tpic Links In the nline (HTML) help, the address bar displays the IP address (URL) f the help file, nt the URL f the specific tpic. If yu right-click in the tpic, then click Prperties, yu can cpy the URL f the tpic. The URL displays nly the tpic, withut the table f cntents, which might be sufficient. The prcedure belw describes hw t send a tpic's URL with the table f cntents displayed. T cpy a tpic URL that includes the table f cntents (Internet Explrer nly) 1. Open the tpic in Internet Explrer. 2. Right-click within the tpic (the right frame), then click Prperties. 188

189 Getting Help 3. Highlight the URL fr the tpic, right-click the selectin, click Cpy, and then clse the Prperties dialg bx. 4. Right-click in the address bar f yur brwser, click Paste, and then press ENTER. The tpic displays, but nt the table f cntents (TOC). 5. If yu want t see the tpic with the TOC, click Shw. The URL will update in the address bar and the TOC will appear t the left f the tpic. 189

190 Mail Express User Guide v Cpy the URL frm the address bar t paste int an r dcument. In Firefx, right-click in the frame, then click This Frame > Open Frame in New Tab. In Safari, right-click in the frame, then click Open Frame in New Tab. The URL fr the tpic appears in the address bar f the new tab. GlbalSCAPE Supprt Center Fr fast answers t mst questins, visit the GlbalSCAPE Help Center. Our Custmer Service team can answer yur questins abut sftware activatin and registratin r help with rder prblems. If yu need technical assistance with yur sftware, please submit yur questin t the Technical Supprt team. GlbalSCAPE als ffers numerus self-help resurces: The GlbalSCAPE User Frum is a great place t find infrmatin r seek help frm the glbal cmmunity f GlbalSCAPE custmers and prduct experts. The GlbalSCAPE Knwledgebase (KB) is a dynamic cmpendium f infrmatin n ur prducts. Subscribe t the RSS feed t keep abreast f the latest KB articles. Cpy and paste this URL int yur RSS feed reader. (See belw fr examples.) Subscribe t GlbalSCAPE Annuncements Sign up fr the GlbalSCAPE Newsletter, press releases, prduct annuncements, and ther GlbalSCAPE news. Recver a Lst Serial Number - If yu knw the address yu used when yu activated the sftware, we can send it t yu at yur new address. Cntact Custmer Service by phne r . Cntact Sales by calling r , r use the nline submissin frm. Sales representatives are available 8:00 a.m. t 6:00 p.m. (US Central Time) Mnday thrugh Friday, excluding majr US hlidays. Order Status - Cmplete the nline frm t request infrmatin abut yur rder. 190

191 Getting Help Mail Express supprt pages prvide dwnlads, dcumentatin, activatin instructins, and the latest news regarding Mail Express. T add the GlbalSCAPE Knwledge Base RSS feed t yur Ggle hme page The prcedures belw are prvided as an example; see yur feed reader's nline help fr specific instructins. 1. Sign in t yur Ggle hme page, then, in the upper right area f the page, click Add Stuff. 2. At the tp center f the page, t the right f Search Hmepage Cntent, click Add by URL. The Add by URL frm appears. 3. In the text bx, prvide the URL f the RSS feed, then click Add. 4. In the upper left crner, click Back t Hmepage. The GlbalSCAPE RSS feed appears n yur hme page. T add the RSS feed t Micrsft Outlk On the Tls menu, click Accunt Settings. 2. On the RSS Feeds tab, click New. 3. In the New RSS Feed dialg bx, type r paste the URL f the RSS Feed. Fr example, 4. Click Add. 5. Click OK. Using the Knwledgebase The Knwledgebase prvides varius types f articles, such as HOW TO, FAQ, ERRMSG, FIX, and s n. Many f the articles are created as a result f assisting custmers with their specific cnfiguratin and trubleshting issues. The Resurces link prvides links t nline help and PDFs. The Search link pens a search utility. The Tags link list all tags defined n all articles in the KB. Yu can click a tag t view articles that have been tagged with that keywrd. (If there is a keywrd that yu think shuld be added t the tags, let us knw in the cmments f the articles!) T search the KB 1. Open a web brwser and g t Micrsft Office Online prvides a tutrial n RSS feeds. 191

192 Mail Express User Guide v On left side in the middle f the page, click Knwledgebase. A navigatin tree and the latest articles list appear. 192

193 Getting Help 3. T view the latest articles just fr Mail Express, click the Mail Express nde. The articles are srted by Last Mdified date. yu can srt the list by Title r Last Mdified date by clicking the clumn header. 4. T search the KB, click the Search link at the tp f the page r use the search bx at the bttm f the page. When searching, try several different wrds fr the same cncept. If the keywrd yu are using fr yur search des nt find the article yu want, but yu d eventually find the crrect article, please add a cmment t the article t let us knw that we shuld add that tag t the article t imprve future searches. Using Advanced Search Yu can use GlbalSCAPE's Advanced Search t search nly kb.glbalscape.cm r help.glbalscape.cm/help/ r any ther dmain n GlbalSCAPE's server. T get t the Advanced Search page 1. In yur brwser, g t glbalscape.cm. 2. In the search bx at the tp f the page, type a keywrd r phrase, then click Search. The results page appears. 3. If the tpic yu want des nt appear in the search results, r if there are t many results, at the tp f the page, click Advanced Search. The Advanced Search page appears. 193

194 Mail Express User Guide v In the Dmains bx, type the dmain that yu want t search (e.g., kb.glbalscape.cm, help.glbalscape.cm/help), then click Search. 194

195 Mail Express End-User License Agreement (EULA) When yu install Mail Express, yu must agree t the terms f the Mail Express End-User License Agreement (EULA) in rder t cmplete installatin. During installatin, the EULA is cpied t the installatin flder (by default, C:\Prgram Files\GlbalSCAPE\Mail Express\license.txt). The text f the EULA is als belw fr yur cnvenience. GlbalSCAPE Mail Express versin 3 End-User License and Supprt Agreement This Sftware is licensed by GlbalSCAPE Inc. ("GlbalSCAPE"), nt sld. Yu may use this Sftware nly as described in this Agreement. BY INSTALLING OR USING THE ENCLOSED SOFTWARE OR UTILIZING THE REGISTRATION SERIAL NUMBER, YOU AGREE AND ARE SUBJECT TO THE SOFTWARE LICENSE TERMS SET FORTH BELOW. If yu d nt agree t the terms f this Agreement, d nt install the Sftware r use any registratin serial number that was prvided with the Sftware. Yu may return the Sftware t the place f purchase fr a refund if yu have nt used the registratin serial number. 1. SOFTWARE. The capitalized term "Sftware" refers t the bject cde fr the cmputer prgram knwn as Mail Express, any updates, supplemental cde r prgrams prvided t yu by GlbalSCAPE with r in cnnectin with Mail Express, such as the user's manual and Help file, any cmpnents, any related media and printed materials, and any related "nline" r electrnic dcumentatin. The Sftware includes three basic cmpnents, the Server Prgram, the Web Interface(s) and the Add-In. 2. GRANT OF LICENSE. A. EVALUATION LICENSE. If yu acquired the license fr any cmpnent f the Sftware n an evaluatin r trial basis, yu may use the Sftware withut charge fr the evaluatin perid. Yur evaluatin perid begins n the day the registratin serial number is issued by GlbalSCAPE. Yu must pay the license fee and activate yur cpy in the manner required belw t cntinue t use the Sftware after the evaluatin perid. An evaluatin license fr the Sftware may nt be transferred t any ther persn. B. STANDARD LICENSE. i) SERVER PROGRAM. Yu may install and use ne cpy f the Server Prgram n that number f server cmputers fr which yu have purchased a separate license as indicated n yur invice r sales receipt. ii) WEB INTERFACE(S). Ntwithstanding the restrictins in Sectin 7, yu may custmize the Web Interface created thrugh the Server Prgram fr the Sftware, subject at all times t GlbalSCAPE s rights set frth in Sectin 13. Upn mdificatin, hwever, GlbalSCAPE shall have n further bligatins under Sectin 8 r any related M & S Plan in relatin t the Web Interface. Such mdificatin may nly be used fr yur internal business purpses and may nt be licensed r sublicensed t any third party. iii) ADD-IN. The Add-In requires a CAL (client access license). Yu may install the Add- In n as many desktp persnal cmputers fr which yu have paid a separate license fee as indicated n yur invice r sales receipt fr access and use slely by ne persn n such cmputer. Fr example, if yu purchase a license t the Add-In fr 75 clients, yu can nly install the Add-In n 75 desktps and nly 75 individuals, in aggregate, may access and use the Add-In. If yu wish t increase the number f clients after yur initial license purchase, upn payment f the additinal license fee yu will be issued a new registratin serial number which will be utilized t activate the additinal Add-In licenses purchased and t re-activate the Add-Ins previusly purchased. C. STANDBY LICENSE. If yu have purchased a license t use the Server Prgram and/r the Add-In n a nn-prductin basis, then yu may use the Server Prgram and/r Add-In s licensed nly as fllws: 195

196 Mail Express User Guide v3.2 i) On a standby cmputer that is nt prcessing inbund traffic r ding wrk f any kind except in the event that, and nly fr s lng as, the primary prductin server upn which the Server Prgram license is assciated is ffline; r ii) On a server (and assciated desktp persnal cmputers) used slely fr testing r evaluatin that des nt prcess actual inbund traffic. D. ACTIVATION. Yu must activate the evaluatin r standard license fr the Sftware by entering the prperly issued evaluatin r registratin serial number as prmpted by the Sftware and as therwise instructed by GlbalSCAPE. Yur failure t crrectly fllw the activatin prcedures is a material breach f this Agreement. E. TERM. The term f the license fr any cmpnent f the Sftware is as indicated n yur invice r sales receipt r, if nt therwise specified, perpetual. 3. RIGHT TO COPY FOR BACKUP. Yu may make ne cpy f the Sftware r the installatin media fr the Sftware slely fr back-up r archival purpses at n additinal charge. 4. UPGRADES. T use Sftware identified by GlbalSCAPE as an upgrade r new versin, yu must first be licensed fr the Sftware identified by GlbalSCAPE as eligible fr the upgrade and must be current n all applicable payments f licensing r supprt fees. After upgrading, yu may n lnger use the Sftware that frmed the basis fr yur upgrade eligibility and the license fr that Sftware shall be deemed immediately terminated upn yur installatin f the upgrade. 5. TRANSFER. Yu may nt rent, lease, lend r sublicense the Sftware. Yu may, hwever, make a ne-time permanent assignment f all f yur license rights t the Sftware t anther party, prvided that: (a) the transfer must include all f the Sftware, including all cmpnent parts, prgrams, media, printed materials, all registratin serial numbers, all mdules yu purchase in cnjunctin with the Sftware, and this license; in cnnectin with the sale f all r substantially all f the assets fr that line f business (b) yu d nt retain any cpies f the Sftware, full r partial, including cpies stred n a cmputer r ther strage device, (c) the persn t whm yu transfer the Sftware agrees t be bund by the terms f this license, and (d) yu prvide ntice t GlbalSCAPE at least 10 days prir t such transfer f the identity and cntact infrmatin fr the transferee and such transferee is nt a cmpetitr f GlbalSCAPE as determined by GlbalSCAPE in its sle discretin. If yu purchased the license fr the Sftware n a multi-cmputer basis-that is, ne registratin serial number valid fr the number f cmputers indicated n yur invice, yu may permanently assign yur rights under this license t nly a single persn r entity wh receives all assciated rights. Ntwithstanding anything else in this Agreement t the cntrary, an Evaluatin License fr the Sftware may be used nly fr testing, demnstratin r evaluatin and may nt be sld r transferred t anther persn in any manner. Transfer in vilatin f this Agreement, in whle r in part, will be vid ab initi. 6. INFORMATION COLLECTION AND PRIVACY. The Sftware includes a feature that assigns a unique identifier t yur cmputer based n system infrmatin. The Sftware reprts this identifier t GlbalSCAPE when yu install the Sftware r enter yur registratin serial number. During the term f the Evaluatin License, the Sftware will cntact ur registratin and activatin servers peridically t verify that the Sftware is still eligible fr use under yur Evaluatin License. The Sftware may als identify and reprt t us yur Windws language identifier setting, IP address, and the date and time f installatin and/r activatin. GlbalSCAPE uses this infrmatin t cunt installatins, detect piracy f the Sftware, and develp rugh statistical data regarding the gegraphic lcatin f the Sftware users. GlbalSCAPE may tie this infrmatin t persnally identifiable infrmatin it has abut yu. GlbalSCAPE may use any nnprprietary infrmatin yu prvide as part f btaining supprt services and fr GlbalSCAPE's business purpses, including prduct supprt and develpment. In additin t as therwise prvided herein, GlbalSCAPE's plicies related t this infrmatin are as is further prvided in the Privacy Plicy available at 196

197 Mail Express EULA 7. RESTRICTIONS. Yu may nt reduce the Sftware t human readable (r surce cde) frm, reverse engineer, de-cmpile, disassemble, merge, adapt, r mdify the Sftware, except and nly t the extent that such activity is expressly required t be permitted by applicable law ntwithstanding this limitatin. Yu may nt use the Sftware t perfrm any unauthrized transfer f infrmatin, such as cpying r transferring a file in vilatin f a cpyright, in vilatin f any laws related t the transfer f encrypted data r fr any ther illegal purpse. 8. MAINTENANCE AND TECHNICAL SUPPORT SERVICES. If yu purchased a maintenance and supprt plan ("M & S Plan"), GlbalSCAPE shall prvide the supprt services at the level agreed by yu and GlbalSCAPE and as defined in the GlbalSCAPE Maintenance and Supprt Guide accessible frm (the "Guide") as f the date f yur acceptance f this Agreement and as set frth in yur invice r sales receipt. The term f the M & S Plan may vary and is specified n yur invice r sales receipt. Please cntact GlbalSCAPE if yu wuld like t extend the term f yur M & S Plan. T be eligible fr maintenance and supprt services, the Server Prgram and the Add-In, if purchased, must be cvered by an active M & S Plan. 9. PAYMENT TERMS. If GlbalSCAPE has agreed t invice yu fr license fees r fees applicable t yur M & S Plan, invices shall be transmitted n the date f issuance via electrnic r pstal mail t the primary r billing cntact listed n yur accunt. Unless therwise agreed t in writing, full payment is due within thirty (30) days frm invice date. Amunts nt paid when due shall bear interest at 1.5% per mnth, r the highest nn-usurius rate permitted under applicable law, whichever is less. If GlbalSCAPE is required t take legal actin t cllect any verdue amunt, yu shall als pay GlbalSCAPE's reasnable csts f cllectin, including reasnable attrney fees. 10. SECURITY. The Sftware creates a means fr thers t gain access t yur cmputer. Althugh we have taken cmmercially reasnable measures t prevent unauthrized persns frm gaining access t yur cmputer via the Sftware, we cannt fresee r cntrl the actins f third parties. Therefre, use f the Sftware will make yu vulnerable t security breaches that yu might nt therwise face and culd result in the lss f yur privacy r prperty. Yu agree that GlbalSCAPE is nt liable t yu fr security breaches resulting frm yur use f the Sftware r therwise. Use f secure passwrds and keeping passwrds cnfidential are nt the respnsibility f GlbalSCAPE r the Sftware. 11. AUDIT. Yu shuld retain Yur authrizatin t use the Sftware at a specified level. That level may be measured, fr example, by the number f servers, prcessrs r users and may be set frth n yur invice r sales receipt. Yu agree that n GlbalSCAPE's request yu will certify in writing yur cmpliance with the terms f this Agreement, including yur use f the Sftware nly n r in cnnectin with the number f cmputers and users licensed. Yu further agree that GlbalSCAPE may during nrmal business hurs and with reasnable prir ntice, request and gain access t yur premises fr the limited purpse f cnducting an inspectin t determine and verify yur cmpliance with this Agreement. The inspectin will be cnducted n mre than nce per year and in a manner nt intended t disrupt yur business and will be restricted in scpe and duratin t that reasnably necessary t achieve its purpse. 12. TERMINATION. This Agreement terminates if yu fail t cmply with its terms and cnditins. If yur Agreement terminates, yu must destry all cpies f the Sftware. Terminatin f this Agreement shall nt release yu frm any liability which, at the time f terminatin, has already accrued r which thereafter may accrue with respect t any act r missin befre terminatin, r frm any bligatin which is expressly stated in this Agreement t survive terminatin. The prvisins in Sectins 6, 7, 9, 12, 13, 15, 16,17 and 19 shall survive the terminatin f this Agreement. 197

198 Mail Express User Guide v INTELLECTUAL PROPERTY; CONFIDENTIALITY. Yu acknwledge that yu have nly the limited, nn-exclusive right t use and cpy the Sftware as expressly stated in this Agreement and that GlbalSCAPE retains title t the Sftware and all ther rights nt expressly granted. Yu agree nt t remve r mdify any cpyright, trademark, patent, r ther prprietary ntices that appear, n, in r with the Sftware. The Sftware and all derivatives theref are prtected by United States cpyright, patent and trademark law and rights granted by internatinal treaties related t intellectual prperty rights. The Sftware is cpyright GlbalSCAPE, Inc. All rights reserved. Yu will keep cnfidential and refrain frm disclsing any and all technical infrmatin, knw-hw, and inventins disclsed by GlbalSCAPE in relatin t this Agreement and the license granted hereunder, except when, after, and t the extent that the infrmatin, knw-hw, and inventins are generally knwn t the public. 14. OPEN SOURCE COMPONENTS. The Sftware utilizes third party sftware frm varius surces. Prtins f this sftware are cpyrighted by their respective wners as indicated in the cpyright ntices belw. Ntwithstanding anything else cntained herein, the terms with respect t this sftware is as fllws: The JasperReprts Engine is utilized t generate reprts frm the Sftware and is distributed with the Sftware. This library is free sftware; yu can redistribute it and/r mdify it under the terms f the GNU Lesser General Public License (LGPL) as published by the Free Sftware Fundatin; versin 3.0. Ntwithstanding anything else cntained herein, this library is distributed in the hpe that it will be useful, but WITHOUT ANY WARRANTY; withut even the implied warranty f MERCHANTABILITY r FITNESS FOR A PARTICULAR PURPOSE. See the LGPL fr mre details. The Jasper Reprts library may be fund in the lib directry f the Sftware installatin directry in the files named jasper.jar, jasper-el.jar and jasper-jdt.jar and is distributed under the terms f the GNU LESSER GENERAL PUBLIC LICENSE (LGPL). Jasper Reprts is Cpyright 2007 JasperSft Crpratin. GlbalSCAPE hereby disclaims all cpyright interest in the library. A cpy f the LGPL may be fund in the misc/licenses directry in a file named jasperreprts LICENSE.txt, at r by writing t the Free Sftware Fundatin, Inc., 59 Temple Place, Suite 330, Bstn, MA USA. GlbalSCAPE will prvide a cmplete machine-readable cpy f the surce cde fr Jasper Reprts library t any third party wh cntacts us at: Attn: LGPL Surce Cde Requests GlbalSCAPE, Inc Lckhill-Selma Suite 150 San Antni, TX SPNEGO allws fr HTTP-based crss-platfrm authenticatin. SPNEGO is prvided t yu under the terms f the CDDL v1.0 pen surce license which is available at GlbalSCAPE will prvide a cmplete machinereadable cpy f the surce cde fr SPNEGO library t any third party wh cntacts us at: Attn: LGPL Surce Cde Requests GlbalSCAPE, Inc Lckhill-Selma Suite 150 San Antni, TX N warranty, supprt, indemnity r liability bligatin is ffered with respect t SPNEGO, and if ffered in the future will be ffered slely by GlbalSCAPE. The surce cde fr SPNEGO surce cde may incrprate intellectual prperty wned by Micrsft Crpratin. Our prvisin f this surce cde des nt include any licenses r any ther rights t yu under any Micrsft intellectual prperty. If yu wuld like a license frm Micrsft (e.g. t rebrand, redistribute), yu need t cntact Micrsft directly (send mail t [email protected]). 198

199 Mail Express EULA 15. EXPORT RESTRICTIONS. THE SOFTWARE CONTAINS ENCRYPTION TECHNOLOGY THAT IS CONTROLLED FOR EXPORT BY THE U.S. GOVERNMENT. Yu agree t cmply fully with all relevant exprt laws and regulatins f the United States ("Exprt Laws") t assure that (i) the Sftware is nt exprted, directly r indirectly (including as a result f prviding access t the Sftware t a natinal r resident f and embarged r restricted cuntry), in vilatin f Exprt Laws, r the applicable laws f any ther jurisdictin r (ii) r prvided t anyne n the U.S. Treasury Department's list f Specially Designated Natinals r the U.S. Cmmerce Department's Table f Denial Orders r Entity List. Amng ther things, the Exprt Laws prvide that the Sftware may nt be exprted r re-exprted t certain cuntries that are embarged r restricted, r t certain restricted persns. Embarged and restricted cuntries currently include but are nt limited t Cuba, Iran, Nrth Krea, Syria and Sudan. In additin t ther restrictins described in this sectin, yu may nt use the Sftware, r exprt the Sftware t any destinatin where yu knw r have reasn t knw that the Sftware may be used in cnnectin with the prliferatin f nuclear, chemical, r bilgical weapns r missiles. Yu shall indemnify and hld GlbalSCAPE harmless in cnnectin with any breach f this Sectin. 16. NO WARRANTIES. TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE SOFTWARE AND ANY SUPPORT SERVICES ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, QUALITY, PERFORMANCE AND NONINFRINGEMENT. IF APPLICABLE LAW REQUIRES A WARRANTY, THE REQUIRED WARRANTY IS LIMITED TO NINETY (90) DAYS FROM YOUR RECEIPT OF A COPY OF THE SOFTWARE. COMPUTER PROGRAMS ARE INHERENTLY COMPLEX, AND THE SOFTWARE MAY NOT BE FREE OF ERRORS. THE SOFTWARE IS PROVIDED WITH ALL FAULTS AND THE ENTIRE RISK AS TO SATISFACTORY QUALITY, PERFORMANCE, ACCURACY AND EFFORT IS WITH YOU. GLOBALSCAPE DOES NOT MAKE ANY EXPRESS OR IMPLIED WARRANTY, REPRESENTATION OR ENDORSEMENT TO YOU OR ANY THIRD PARTY WHATSOEVER WITH REGARD TO ANY DATA CAPTURED, TRANSFERRED, ACCESSED OR SHARED USING THE SOFTWARE AND SHALL NOT BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY COST OR DAMAGE ARISING, EITHER DIRECTLY OR INDIRECTLY, FROM ANY LOSS OF DATA. SOME STATES DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES SO THESE LIMITATIONS MAY NOT APPLY TO YOU. 17. LIMITATION OF LIABILITY. GLOBALSCAPE IS NOT LIABLE TO YOU FOR ANY PUNITIVE, CONSEQUENTIAL, SPECIAL, INCIDENTAL, OR INDIRECT DAMAGES OF ANY KIND ARISING OUT OF THE DELIVERY, PERFORMANCE, OR USE OF THE SOFTWARE, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, LOSS OF OR DAMAGE TO DATA, GOODWILL, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, SECURITY BREACHES RESULTING IN DISCLOSURE OF CONFIDENTIAL INFORMATION OR ANY AND ALL OTHER DAMAGES OR LOSSES, EVEN IF GLOBALSCAPE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU. UNLESS APPLICABLE LAW PROVIDES OTHERWISE, GLOBALSCAPE'S LIABILITY FOR ANY CLAIM RELATED TO YOUR PURCHASE OF A LICENSE FOR OR USE OF THE SOFTWARE AND RELATED SUPPORT SERVICES, WHETHER IN CONTRACT, TORT, OR ANY OTHER THEORY OF LIABILITY WILL NOT EXCEED THE GREATER OF U.S. $5.00 OR THE FEES PAID BY YOU UNDER THIS AGREEMENT. 18. U.S. GOVERNMENT. The Sftware is cmmercial cmputer sftware develped slely at private expense. The rights f civilian and nn-civilian agencies f the U.S. Gvernment t use, disclse, and reprduce the Sftware are gverned by the terms f this Agreement. Publisher is GlbalSCAPE, Inc., 4500 Lckhill-Selma Rad, Suite 150, San Antni, Texas, 78249, USA. 199

200 Mail Express User Guide v MISCELLANEOUS. The laws f the State f Texas, excluding its cnflicts laws, shall gvern this Agreement the rights and bligatins f the parties heret, the entire relatinship between the parties heret, and all matters arising ut f r relating t this Agreement. Yu may bring any actin under this Agreement fr any cause whatsever mre than ne (1) year after the ccurrence giving rise t such cause f actin. GlbalSCAPE may seek injunctive relief in curt t prevent imminent harm. This Agreement is nt gverned by the United Natins Cnventin n Cntracts fr the Internatinal Sale f Gds. Yu agree that this Agreement shall be fully perfrmable in Bexar Cunty, Texas and submit t the nn-exclusive jurisdictin f, and agree that venue is prper in, state r federal curts in Bexar Cunty, Texas in any legal actin r prceeding relating t this Agreement. This Agreement cnstitutes the cmplete and exclusive agreement between us, ntwithstanding any prvisin in any purchase rder r ther written dcument, except fr: (i) the definitin f any evaluatin perid, limited license term, and fees and terms fr maintenance r supprt services r additinal sftware cmpnents that may appear n the applicable invice r sales receipt as issued by GlbalSCAPE (r in the absence f an invice r sales receipt, the GlbalSCAPE Website), and (ii) the statement f the number f separate cmputers r cncurrent users fr which yu have paid a license fee as described in Sectin 2, abve. In the case f a cnflict between this Agreement and the invice r sales receipt and any fees set frth n the GlbalSCAPE Website, the invice shall cntrl. In the case f a cnflict between this Agreement and the M&S Plan, this Agreement shall cntrl. This Agreement may nly be mdified by a written dcument signed by GlbalSCAPE. N GlbalSCAPE reseller r distributr is authrized t change the terms f this Agreement. If any prtin heref is fund t be vid r unenfrceable, then such prvisin shall be refrmed withut further actin by the parties t the extent necessary t make such prvisin valid and enfrceable when applied t such facts r circumstances, with the bjective f achieving as nearly as legally pssible the same effect. Failure t exercise r delay in the exercise f any right r remedy under this Agreement shall nt perate as a waiver theref. If yu are lcated utside the United States, then the fllwing prvisin applies: Les parties aux présentes cnfirment leur intentin que cette cnventin ainsi que tus les dcuments afférents sient redigés dans la langue anglaise. (Translatin: "The parties cnfirm that this Agreement and all related dcumentatin is and will be in the English language.") Shuld yu have any questins cncerning this Agreement, r if yu desire t cntact GlbalSCAPE fr any reasn, please cntact GlbalSCAPE by mail at: 4500 Lckhill-Selma Rad, Suite 150, San Antni, Texas, USA, by telephne at: +1 (210) , r by electrnic mail frm: with cpy t [email protected]. Please print a cpy f this Agreement fr yur recrds. Rev

201 Index..NET A acceptcunt , 134 Accunt Request accuntrequest.html.ftl accuntrequest.subject.ftl accuntrequest.text.ftl active directry... 74, 154, 164 Active Directry Cnfiguratin Active Directry Settings AD... 74, 147, 164 addinsendtemplate.html.ftl addinsendtemplate.rtf.ftl addinsendtemplate.text.ftl address f a Mail Express ADH , 134 Administering Mail Express Server adminlginprtalcustmizatin.html.ftl Advanced Advanced Optins Annymus antivirus anti-virus Apache Tmcat... 15, 23 Applicatin Data... 37, 164, 169, 172 Applicatin Event Lg Attach File buttn Audit Details , 157 Audit Event Histry , 156 Audit Event Types , 160 Auditing , 154, 156 Auth User DN Auth User Passwrd Authenticating Outlk Users Authenticatin Authenticatin Settings B Behavir brwser Bundle C CAL... 51, 53, 164 CAPTCHA... 15, 98, 101, 174, 175, 177, 182 Certificate file Changing the Message Frmat Check Versin Chinese Client Access License... 51, 53 CN cmmand line Cmpare , 157 Cnfiguratin... 51, 71, 73, 74, 78, 130, 154 Cnfiguratin Histry cnfigure the Mail Express Outlk Cnfiguring Active Directry Authenticatin Cnfiguring Annymus Access t Exchange Cnfiguring Authenticated Access t Exchange 87 Cnfiguring Database Purging Cnfiguring File Strage Cnfiguring Mail Express fr Windws (Kerbers) Authenticatin cnfiguring Mail Express Server Cnfiguring Message Optins Cnfiguring Micrsft Exchange Server Cmmunicatin Cnfiguring the Default Landing Page Cnfiguring the DMZ Gateway Cnnectin Cnfiguring the Internal Web Prtal Cnfiguring the Reply Prtal Cnfiguring the Web Brwser cnnect t Mail Express Server 130, 164, 165, 170 cnnected t the Exchange , 170 Cnnecting t Mail Express Server Cnnecting t the Web Prtal cnnectintimeut cnnects t the Mail Express CPU create , 149 Create Reprt crt , 134 csv Current Activity custm URL Custm URLs fr Drpff and Internal Prtal Custmizing Mail Express Pages and Ntificatins D Data Purged Database Database Cnfiguratin Database Initializatin Lg Database Installatin Lg Database Cnnectivity Debug Lgging delete , 149 Deplying the Outlk Add-In Detailed Activity Reprt disable , 149 dmain dwnlad attachments

202 Mail Express User Guide v3.2 Dwnlad Files n the Pick dwnlad ntificatin Dwnlad Ntificatin dwnladntificatin.html.ftl dwnladntificatin.subject.ftl dwnladntificatin.text.ftl DrpOff... 98, 149, 174 Drp-ff Prtal Drp-Off Prtal Send Cnfirmatin Drp-Off Prtal URL drpfflginprtalcustmizatin.html.ftl drpffprtalcustmizatin.html.ftl drpffsendcnfirmatin.html.ftl drpffsendcnfirmatin.subject.ftl drpffsendcnfirmatin.text.ftl drpffsendntificatin.html.ftl drpffsendntificatin.subject.ftl drpffsendntificatin.text.ftl E East Asian East Asian Languages edit , 149 in URL Message Tlbar settings Templates Enable CAPTCHA dialg enable the SSLv Enable/cnfigure enablelkups , 134 Enabling Active Directry Authenticatin Enabling and Cnfiguring the Drp-Off Prtal Plicy enabling the add-in Enabling the Pick-Up Prtal ERROR event viewer Events Exchange... 15, 78, 154 Exchange Cnfiguratin Exchange Server... 78, 171 Exchange Server Exchange Server externaluserinvitatin.html.ftl externaluserinvitatin.subject.ftl externaluserinvitatin.text.ftl F File Stre... 95, 154 File Stre Cnfiguratin File Uplad Limit FileExpulsin Filename FilePurge FileSystemErrr Filter , 156, 157 Finding Infrmatin in the Help Firefx ftl 117 G General Cnfiguratin... 51, 71, 130, 164 General Cnfiguratin dialg General Settings General Status generate a Mail Express Generating Reprts Generating Reprts f Mail Express Activity Generating the Installatin Script Getting Help glbalscape H Hide Status higher security settings Highlight the URL Hst hstname html https... 69, 130, 134, 161, 175 I Install... 23, 37 install the PIA install the Prerequisite Installer Bundle Installatin Installatin Lgging Installatin Script Installed Sftware Versin Installing Mail Express Server... 15, 23 installing the Mail Express Outlk Installing the Outlk Add-In Internal Sender User Details Internal User Management Internal Web Prtal... 72, 101, 177 Internet Explrer... 15, 183, 188 Internet Optins invalid certificate IP 154, 157, 195 IP address... 71, 154, 157 J Japanese Java Java Runtime Envirnment... 15, 23 JavaScript JRE... 15, 23 K keepalivetimeut , 134 krb5.cnf.ftl

203 Index L Language Language Optins Launch the Mail Express Server Licensing the Outlk Add-In links , 188 Lcal Settings Lcal System lg Lg file Lg On Accunt lgging Lgging in t Mail Express Server Lgin Lgin Attempt LginAttempt LgOut Lst Passwrd... 70, 182 Lst Serial Number M Mail Express Activity Mail Express Admin Mail Express Architecture Mail Express Database Tables - Basic Index Mail Express address Mail Express menu Mail Express Message Optins Mail Express Outlk Add-In Mail Express Quick Start Mail Express Security Mail Express Send Optins Mail Express Server... 15, 23, 51, 69, 71, 161, 164, 165, 169, 170, 181 Mail Express Server Administratin Accunt Mail Express Server Administratin Interface... 51, 71, 147, 149, 151, 154, 156, 157 Mail Express Server Database Accunt Mail Express Server Diagnstics Lgging Mail Express Server Hst Mail Express Server Lgging Mail Express Server Service Principal Name Mail Express Server Sign In Mail Express Status... 69, 170 Mail Express Tlbars , 164, 165, 170 mailexpress... 69, 171 MailExpressOutlk2003AddinSetup.exe MailExpressOutlk2007AddinSetup.exe MailExpressOutlkAddinInstaller MailExpressOutlkAddinInstaller.msi mail-express-windws-x86-32.exe mail-express-windws-x86-64.exe Main Installer Lg Managing Drp-Off User Accunts Managing Internal User Accunts Managing Packages Manual Authenticatin Maximum File Size fr Brwser maxthreads , 134 Message Frmat Changing Message Optins Micrsft Exchange Server Micrsft ISA Server Micrsft Office Online Micrsft Outlk , 173 Micrsft Outlk Micrsft Outlk , 190 Micrsft Windws Server Micrsft Windws Server mdify client cnfiguratin mdify Server cnfiguratin mdify the Mail Express Server mdifying Internet Explrer msi N name f Mail Express Server Ntificatins... 95, 97, 117 Ntify O 2003pia pia bjectclass Office2003PIARedist Office2007PIARedist perating system Outlk , 168, 170 Outlk , 168, 170 Overview f Mail Express Invitatins Overview f the Add-In and Internal Web Prtal P Package ID , 151 Package Management Package Stre Rt Passwrd... 74, 147, 149, 164, 182 Passwrd Reset PasswrdReset passwrdreset.html.ftl passwrdreset.subject.ftl passwrdreset.text.ftl pdf PickUp Pick-up Prtal pickupprtalcustmizatin.html.ftl Prtal Cnfiguratin Prtal Plicy Prtal Settings... 98,

204 Mail Express User Guide v3.2 preauthenticatin Prerequisite Installer Bundle public key purge Purged... 97, 156 purging R rebrand Recipient Recver Recvering a Lst Passwrd Registering DMZ Gateway Registering Mail Express Registratin remve the Mail Express Server Repair replace lg Reprting Mail Express Activity Reprts request access Request Accunt... 70, 174 Request Accunt Page Requesting Access t the Drp-Off Page Requesting Access t the Internal Prtal Require Mail Express t Manage Attachments. 165 resending reset the SSL restart the Mail Express Server Restre , 149 Restre buttn S samaccuntname Search , 149, 188 Search By , 157 security , 195 Security Plicy Send , 169, 175 Send Invitatin Send Optins , 165 Send Optins dialg sendattachmenttemplate.html.ftl senddrpffurltemplate.html.ftl senddrpffurltemplate.subject.ftl senddrpffurltemplate.text.ftl Sender Sender Outbund Activity Sending Files Using the Drp-Off Page Sending Files with the Internal Web Prtal Sending Files with the Mail Express Outlk Add- In Sending Files with the Reply Prtal Sending Invites with the Internal Prtal Sent Items server_url... 70, 175 Service Principal Name Setup Wizard sharing Sign In signed certificate silent install... 33, 46 silent installatin mde Silent Installatin f Mail Express Server Silent Installatin f the Outlk Add SMTP... 9, 15, 78, 169, 181 SMTP Server Specifying an SSL Certificate Specifying the Mail Express Hst Name Specifying the System Ntificatin Address SQL... 15, 23 SQL Express SQL Server SQL Server Administratin Accunt SQL Server Express SQL Server Express Database Engine ssl... 74, 78, 130, 134, 139 SSL CA Certificate Chain Supprt SSL cert SSL Certificate , 134 SSL key SSLCertificateFile , 134 SSLCertificateKeyFile , 134 SSLCipher SSLCipherSuite , 134 SSLEnabled , 134 SSLPasswrd , 134 SSLPrtcl , 134, 139 SSLv , 134, 139 SSLv SSLVerifyClient , 134 SSLVerifyDepth , 134 Status... 69, 170 Strage Stre Stre Quta Ntificatin strentificatin.html.ftl strentificatin.subject.ftl strentificatin.text.ftl Subject Submit Supplemental Language Supprt System Event Lg System Infrmatin System Requirements... 15, 23 T TCP Technical Supprt Template Template Custmizatin

205 Index Test Test Cnnectin Test test.html.ftl test.subject.ftl test.text.ftl Testing Mail Express - Exchange Cnfiguratin. 94 The DMZ Prtcl Handler The Mail Express Tlbar TLSv Tlbars... 37, 161 tpic link Ttal Inbund Activity Ttal Outbund Activity Transfer Status Trust Center Turning On r Off the Outlk Add-In U Undeliverable Message Undeliverable Ntificatin UndeliverableMessage undeliverablentificatin.html.ftl undeliverablentificatin.subject.ftl undeliverablentificatin.text.ftl unicde Uninstall uninstaller Uninstalling Mail Express Server Unrecverable Errr upgrading Upgrading Mail Express Upgrading the Outlk Add-In Uplad Uplad key Uplad Limit Uplad Time URL... 98, 106, 188, 190 URL f Mail Express Server Username , 164 userprfile... 37, 169 Users , 149 Using Anti-Virus with Mail Express Using Mail Express in Outlk Using the Knwledgebase V versin Viewing and Managing Packages Viewing Audit Event Histry Viewing Cnfiguratin Histry Viewing Invite Activity Viewing Mail Express Add-In Status Viewing Mail Express System Status and Lgging Viewing Unicde Filenames Viewing User Histry virus W Web webserver What is This--Recver What's New in Mail Express Windws Windws 2008 Server Windws Authenticatin... 37, 164 Windws Event Lg Windws Event Viewer Windws Vista Business Windws XP Pr X xml , 134, 139 XML file

206 Mail Express User Guide v