Kaspersky Security 8.0 for Microsoft Exchange Servers AD Installation Guide

Transcription

1 Kaspersky Security 8.0 for Microsoft Exchange Servers AD Installation Guide P R O G R A M V E R S I O N : 8. 0 M A I N T E N A N C E P A C K 1

2 Dear User! Thank you for choosing our product. We hope that this document will help you in your work and provide answers to the majority of your questions. Warning! This document is the property of Kaspersky Lab ZAO (herein also referred to as Kaspersky Lab): all rights to this document are reserved by the copyright laws of the Russian Federation and by international treaties. Illegal reproduction and distribution of this document or parts thereof will result in civil, administrative or criminal liability in accordance with applicable law. Any type of reproduction or distribution of any materials, including in translated form, is allowed only with the written permission of Kaspersky Lab. This document and the graphic images it contains may be used exclusively for informational, non-commercial or personal purposes. This document may be amended without prior notification. For the latest version, please refer to Kaspersky Lab s web site at Kaspersky Lab assumes no liability for the content, quality, relevance or accuracy of any materials used in this document the rights to which are held by third parties, or for potential damages associated with using such materials. The document contains registered trademarks and service marks which are the property of their respective owners. Revision date: Kaspersky Lab ZAO. All Rights Reserved

3 TABLE OF CONTENTS In this document... 4 Document conventions... 5 Data sources for independent searching... 6 Discussing Kaspersky Lab applications on the web forum... 7 Contacting the Technical Documentation Development group... 7 Basic functionality... 8 Distribution kit... 9 License agreement... 9 Services for registered users... 9 Step 1. Installing the required components Step 2. Greeting and License Agreement Step 3. Selecting the installation type Step 4. Selecting the application components Step 5. Configuring the connection to the Microsoft SQL Server Step 6. Copying files Installing a license key Configuring server protection Configuring the proxy server Notification settings Connecting to the Security Server Testing the application functionality

4 ABOUT THIS GUIDE Greetings from the team of Kaspersky Lab ZAO (hereinafter referred to as Kaspersky Lab)! We hope that this Installation Guide will assist you in the procedure necessary to set up and configure Kaspersky Security 8.0 for Microsoft Exchange Servers (further referred to as Kaspersky Security or the application) and in learning the basics of its functionality. The document is intended for administrators of mail servers using Microsoft Exchange Server 2007 or 2010 (further - Microsoft Exchange Server) who have chosen Kaspersky Security as their mail server protection solution. The purpose of this document: to assist Microsoft Exchange Server administrators in installing the application components on the server, activating server protection and ensuring optimal application configuration in light of the current tasks; to provide quickly searchable information about installation-related issues; to provide alternate sources of information about the application and ways to get technical support. IN THIS SECTION In this document... 4 Document conventions... 5 IN THIS DOCUMENT The Installation Guide for Kaspersky Security 8.0 for Microsoft Exchange Servers consists of the following sections: About this Guide (see page 4). This section describes the structure of this Installation Guide. Additional sources of information (see page 6). This section describes various sources of information pertaining to the purchase, installation and operation of Kaspersky Security. Kaspersky Security 8.0 for Microsoft Exchange Servers (see page 8). This section describes the main features of the application. Hardware and software requirements (see page 9). This section describes the hardware and software requirements of Kaspersky Security. Preparing for installation (see page 11). This section describes the actions that have to be performed before installing the application. Upgrading from an earlier version (see page 12). This section describes how to upgrade from an earlier version of Kaspersky Security. Installation procedure (see page 14). This section contains step-by-step instructions for application setup. Getting started. Initial Configuration Wizard (see page 18). This section contains instructions for configuration of the main application settings immediately after installation. Restoring the application (see page 22). This section provides information about the methods available for program restoration in case of errors in its operation. Removing the application (see page 23). The section describes the application removal procedure. 4

5 A B O U T T H I S G U I D E DOCUMENT CONVENTIONS The text in this document is accompanied by semantic elements - warnings, tips and examples that you are advised to read thoroughly. These elements are intentionally highlighted using graphics and typeface. Document conventions and examples of their use are described in the table below. Table 1. Document conventions SAMPLE TEXT Please note that... It is recommended that you use... Example:... An update is... The Databases are outdated event occurs. Press ENTER. Use the ALT+F4 keyboard shortcut. Click the Enable button. To configure a task schedule, perform the following steps: Enter help in the command line The following message will appear: Specify the date in DD:MM:YY format. <IP address of your mobile device> DOCUMENT CONVENTIONS DESCRIPTION Warnings are highlighted in red and enclosed in frames. Warnings contain information about potential unwanted actions which may result in the loss of data or disrupt the operation of a mobile device. Notes are enclosed in frames. Notes may contain useful tips, advice, specific values or particular important cases of program operation. Examples are given in sections with a yellow background under the header "Example". the following items are highlighted using italics: new terms; status variations and application events. Names of keyboard keys are capitalized and printed in bold type. Names of keys linked with a + (plus) sign indicate key combinations. Such keys should be pressed simultaneously. UI elements, for example, names of entry fields, menu items, buttons are in bold. Introductory phrases of instructions are printed in italics and marked with an arrow sign. Special style is used to mark the following text types: command line text; text of program messages output on the screen; data that the user has to enter. Variables are enclosed in angle brackets. You should replace the variable with the corresponding value; angle brackets are to be omitted. 5

6 ADDITIONAL SOURCES OF INFORMATION If you have any questions regarding the selection, purchase, installation or use of Kaspersky Security, you can quickly find relevant answers. Kaspersky Lab provides various sources of information about the application. You can select the most convenient source, depending on the urgency or importance of your question. IN THIS SECTION Data sources for independent searching... 6 Discussing Kaspersky Lab applications on the web forum... 7 Contacting the Technical Documentation Development group... 7 DATA SOURCES FOR INDEPENDENT SEARCHING You may refer to the following sources of information about the application: the application page on Kaspersky Lab's web site; the application page on the Technical Support web site (in the Knowledge Base); the online help system; the documentation. The application page on Kaspersky Lab's web site On this page you can find general information about Kaspersky Security, its capabilities and the particulars of working with it. The application page on the Technical Support web site (in the Knowledge Base) This page contains articles published by the Technical Support experts. These articles contain useful information, guidelines, and answers to frequently asked questions pertaining to the operation of Kaspersky Security. The online help system The online help system contains information on setting up the application components, as well as directions and recommendations on application management. To access the online help system, select Help in the Actions menu of the Administration Console. If you have a question about a certain window or tab in Kaspersky Security, you can use contextual help. 6

7 A D D I T I O N A L S O U R C E S O F I N F O R M A T I ON To open contextual help, open the window or the tab that interests you and press the F1 key. Documentation The Installation Guide for Kaspersky Security contains all information necessary to install the application and is included in the application package. DISCUSSING KASPERSKY LAB APPLICATIONS ON THE WEB FORUM If your question does not require an urgent answer, you can discuss it with Kaspersky Lab's specialists and other users in our forum located at In this forum you can view existing topics, leave your comments, create new topics, and use the search engine. CONTACTING THE TECHNICAL DOCUMENTATION DEVELOPMENT GROUP If you have any questions regarding documentation, have found an error or would like to provide feedback, you can contact the Technical Documentation Development group. Click the Leave feedback link in the top right part of the Help window to open the default client on your computer. The displayed window will automatically show the address of the Documentation Development group (docfeedback@kaspersky.com) and the message subject "Kaspersky Help Feedback: Kaspersky Security". Write your feedback and send the without changing the subject. 7

8 KASPERSKY SECURITY 8.0 FOR MICROSOFT EXCHANGE SERVERS Kaspersky Security 8.0 for Microsoft Exchange Servers is an application designed for protection of mail servers based on Microsoft Exchange Server against viruses, Trojan software and other types of threats that may be transmitted via e- mail. Malware can cause serious damage; these programs are designed specifically to steal, block, modify or destroy data, disrupting the operation of computers and computer networks. Massive virus mailing can quickly spread infection in corporate networks, paralyzing both running servers and workstations and resulting in undesirable downtime and losses. Moreover, virus attacks may also cause data losses which can negatively affect your business and the business of your partners. Kaspersky Security offers anti-spam protection on the level of your corporate mail server, saving your employees the trouble of deleting unwanted mail manually. IN THIS SECTION Basic functionality... 8 Distribution kit... 9 BASIC FUNCTIONALITY Kaspersky Security protects mailboxes, public folders and relayed mail traffic passing a Microsoft Exchange Server against malware and spam. The application scans all traffic passing through the protected Microsoft Exchange Server. Kaspersky Security can perform the following operations: Scan mail traffic, incoming and outgoing mail, as well as the messages stored on a Microsoft Exchange Server (including public folders), for malware presence. While scanning, the application processes the whole message and all its attached objects. Depending upon the selected settings, the application disinfects and removes detected harmful objects and provides users with complete information about them. Filter unsolicited mail (spam) from mail traffic. The Anti-Spam component scans mail traffic for spam content. In addition, Anti-Spam allows creation of white and black lists of sender addresses and supports flexible configuration of anti-spam analysis intensity. Save backup copies of objects (an object consists of message body and its attachments) and spam messages prior to their disinfection or deletion to enable subsequent restoration, if required, thus preventing the risk of data losses. Configurable filters allow the user to easily locate specific stored objects. Notify the sender, the recipient and the system administrator about messages that contain malicious objects. Maintain event logs, collect statistics and create regular reports on application activity. The application can create reports automatically according to a schedule or by request. Configure the application settings to match the volume and type of relayed mail traffic, in particular, define the connection timeout to optimize scanning. Update the Kaspersky Security databases automatically or in manual mode. Updates can be downloaded from the FTP or HTTP servers of Kaspersky Lab, from a local / network folder that contains the latest set of updates, or from user-defined FTP or HTTP servers. 8

9 K ASP E R S K Y S E C U R I T Y 8. 0 F O R M I C R O S O F T E X C H A N G E S E R V E R S Re-scan messages for the presence of new viruses according to a schedule. This task is performed as a background scan and has little effect on the mail server s performance. Perform anti-virus protection on storage level based on the list of protected storages. DISTRIBUTION KIT You can purchase Kaspersky Security from our partners or online from Internet shops, such as the estore section of Kaspersky Security is supplied as a part of Kaspersky Security for Mail Servers or of the Kaspersky Open Space Security solution (Kaspersky Enterprise Space Security and Kaspersky Total Space Security). After purchasing a license for Kaspersky Security, you will receive either an containing a link to download the application from the Kaspersky Lab web site and a key file for license activation, or an installation CD containing the product distribution package. Before breaking the seal on the installation disk envelope, carefully read through the EULA. LICENSE AGREEMENT The End-User License Agreement is a legal agreement between you and Kaspersky Lab that specifies the terms on which you may use the software you have purchased. Read the EULA through carefully! If you do not accept the terms and conditions of the license agreement, you can decline the product offer and receive a refund. Please note that the envelope with the installation CD should remain sealed. By opening the sealed installation disk, you accept all the terms of the EULA. SERVICES FOR REGISTERED USERS Kaspersky Lab ZAO offers an extensive service package to all legally registered users of Kaspersky Security, enabling them to boost the application's performance. After purchasing a license, you become a registered user and, during your license period, you will be provided with the following services: regular application database updates and software package updates; support on issues related to the installation, configuration and use of the purchased software product by phone or via ; information about new Kaspersky Lab products and about new viruses appearing worldwide. This service is available to users who subscribe to Kaspersky Lab's newsletter on the Technical Support Service web site. Support on issues related to the performance and use of operating systems, third-party software or other non-kaspersky technologies is not provided. 9

10 I N S T A L L A T I O N G U I D E HARDWARE AND SOFTWARE REQUIREMENTS Hardware requirements The hardware requirements of Kaspersky Security are identical to the requirements of Microsoft Exchange Server. Depending upon the application settings and mode of operation, considerable disk space may be required for Backup storage and other service folders (when using default settings,the Backup storage folder can occupy up to 5120 MB). Hardware requirements of the Administration Console installed with the application include: Intel Pentium 400 MHz or faster processor (1000 MHz recommended); 256 MB free RAM; 500 MB disk space for the application files. Software requirements Installation of Kaspersky Security requires one of the following operating systems: Microsoft Small Business Server 2011; Microsoft Small Business Server 2008 Standard x64; Microsoft Small Business Server 2008 Premium x64; Microsoft Essential Business Server 2008 Standard x64; Microsoft Essential Business Server 2008 Premium x64; Microsoft Windows Server 2008 x64 R2 Enterprise Edition Service Pack 1; Microsoft Windows Server 2008 x64 R2 Standard Edition Service Pack 1; Microsoft Windows Server 2008 x64 Enterprise Edition Service Pack 2; Microsoft Windows Server 2008 x64 Standard Edition Service Pack 2; Microsoft Windows Server 2003 x64 R2 Enterprise Edition Service Pack 2; Microsoft Windows Server 2003 x64 R2 Standard Edition Service Pack 2; Microsoft Windows Server 2003 x64 Enterprise Edition Service Pack 2; Microsoft Windows Server 2003 x64 Standard Edition Service Pack 2. Installation of Kaspersky Security requires the following software: Microsoft Exchange Server 2007 x64 Service Pack 3 or Microsoft Exchange Server 2010 Service Pack 1 deployed in at least one of the following roles: Hub Transport, Mailbox or Edge Transport; One of the following database management systems: Microsoft SQL Server 2005 Express Edition, Microsoft SQL Server 2005 Standard Edition, Microsoft SQL Server 2005 Enterprise Edition, Microsoft SQL Server 2008 Express Edition, Microsoft SQL Server 2008 Standard Edition, Microsoft SQL Server 2008 Enterprise Edition, Microsoft SQL Server 2008 R2 Express Edition, Microsoft SQL Server 2008 R2 Standard Edition, Microsoft SQL Server 2008 R2 Enterprise Edition; 10

11 H A R D W A R E A N D S O F T W A R E R E Q U I R E M E N T S Microsoft.NET Framework 3.5 Service Pack 1. Installation of the Administration Console requires one of the following operating systems: Microsoft Small Business Server 2011; Microsoft Small Business Server 2008 Standard; Microsoft Small Business Server 2008 Premium; Microsoft Essential Business Server 2008 Standard; Microsoft Essential Business Server 2008 Premium; Microsoft Windows Server 2008 x64 R2 Enterprise Edition Service Pack 1; Microsoft Windows Server 2008 x64 R2 Standard Edition Service Pack 1; Microsoft Windows Server 2008 x64 Enterprise Edition Service Pack 2; Microsoft Windows Server 2008 x64 Standard Edition Service Pack 2; Microsoft Windows Server 2008 Enterprise Edition Service Pack 2; Microsoft Windows Server 2008 Standard Edition Service Pack 2; Microsoft Windows Server 2003 x64 Service Pack 2; Microsoft Windows Server 2003 x64 R2 Standard Edition; Microsoft Windows Server 2003 x64 R2 Enterprise Edition; Microsoft Windows XP x64 Service Pack 2; Microsoft Windows Vista х64; Microsoft Windows Server 2003 R2 Standard Edition; Microsoft Windows Server 2003 R2 Enterprise Edition; Microsoft Windows Vista; Microsoft Windows Server 2003 Service Pack 2; Microsoft Windows XP Service Pack 3; Microsoft Windows 7 Professional; Microsoft Windows 7 Professional x64; Microsoft Windows 7 Enterprise; Microsoft Windows 7 Enterprise x64; Microsoft Windows 7 Ultimate; Microsoft Windows 7 Ultimate x64. Installation of the Administration Console requires the following software: Microsoft Management Console 3.0; Microsoft.NET Framework 3.5 Service Pack 1. 11

12 I N S T A L L A T I O N G U I D E PREPARING FOR INSTALLATION To install Kaspersky Security, you will need domain administrator privileges. In addition, the following mandatory components must be installed:.net Framework 3.5 SP1; Microsoft Management Console 3.0; Operation of Kaspersky Security requires an instance of Microsoft SQL Server 2005 / 2008 / 2008 R2 (Standard, Express or Enterprise) installed on one of the network computers. The SQL server can be installed on the same computer with Kaspersky Security. For working with Kaspersky Security, a fresh installation of SQL Server is recommended. To create a database on the SQL server, you will need the local access rights for the computer where Kaspersky Security will be installed and administrator privileges on the SQL server. If the SQL server is running on a domain controller, you must be a member of the Enterprise Admins and / or Domain Admins group. 12

13 U PGR A D I N G F R O M A N E A R L I E R V E R S I O N UPGRADING FROM AN EARLIER VERSION Kaspersky Security supports updating version 8.0 Critical Fix 1 to the current version. Upgrading from earlier versions is not supported. The application cannot be updated on DAG servers. On DAG servers the previous version has to be removed before installing the current version. Updating the application on servers functioning as part of SCC or CCR clusters is strongly discouraged because such configuration considerably complicates data migration from the previous version to the new one. You are advised to remove the earlier application version before installing the current one. SQL server hosting the application database must remain accessible during the update procedure. Otherwise the update will fail. Parameter values and data of the previous application version will be transferred to the new version as follows: The license installed in the previous version will be used in the new version of the application. The starting date of the license validity period remains unchanged. Application settings configured in the previous version will be applied without changes to the corresponding settings in the new version except for the Use UDS checkbox. The box will be reset to the default state (off), if it has been checked. Database structure will also be updated during the application update. Backup and statistical data will be preserved. Ready reports do not appear in the interface of the new application version, but they remain in the reports folder (<application folder>/data/statistics/reports). Prior to updating, exit the Administration Console if it is started. To update Kaspersky Security to the current version, perform the following steps: 1. Start the setup_ru.exe file on the computer where the application version 8.0 Critical Fix 1 is installed. 2. Click the link Kaspersky Security 8.0 for Microsoft Exchange Servers to initiate the application update procedure. 3. In the displayed welcome screen of the application Setup Wizard, click Install. The application will be updated automatically. 4. When the update procedure completes, click Finish to exit the application Setup Wizard. 13

14 APPLICATION SETUP PROCEDURE Kaspersky Security consists of two main components: the Security Server and Administration Console. The Security Server is always installed together with the Administration Console. The Administration Console can be installed separately on another computer for remote management of the Security Server. Depending upon your corporate server architecture, you can select one of four available installation variants: Security Server will be installed on the computer running Microsoft Exchange Server. The Administration Console will be installed to the same host. The Security Server and the Administration Console will be installed on the computer running Microsoft Exchange Server. The Administration Console may be installed on any computer within your corporate network for remote management of the Security Server. The Security Server will be installed on a cluster of servers running Microsoft Exchange Server. In that case the Security Server and Administration Console should be installed together on each node of the cluster. The Security Server will be installed on a cluster of DAG servers running Microsoft Exchange Server. Then the Security Server and Administration Console will be installed together on each server belonging to a DAG. Some services of Microsoft Exchange Server have to be restarted after Kaspersky Security installation. Microsoft Exchange services will be restarted automatically without additional prompts. The Kaspersky Security installer is designed as a wizard which provides information about the operations you must perform during each step of the procedure. The Back and Next buttons can be used to navigate between the installation screens (steps) at any time. The Cancel button allows you to exit the installer. The installation procedure begins when the setup_en.exe file is run. IN THIS SECTION Step 1. Installing the required components Step 2. Greeting and License Agreement Step 3. Selecting the installation type Step 4. Selecting the application components Step 5. Configuring the connection to the Microsoft SQL Server Step 6. Copying files STEP 1. INSTALLING THE REQUIRED COMPONENTS During this step you have to make sure that the following required components are installed on your computer:.net Framework 3.5 SP1. You can install the component by clicking the Download and install.net Framework 3.5 SP1 button. The computer must be restarted after.net Framework 3.5 SP1 installation. If you continue setup without restarting, it may cause problems in the operation of Kaspersky Security. 14

15 A P P L I C A T I O N S E T U P P R O C E D U R E Microsoft Management Console 3.0 (MMC 3.0). Microsoft Management Console 3.0 (MMC 3.0) is a part of the operating system in Microsoft Windows Server 2003 R2 and later versions. To install the program in earlier versions of Microsoft Windows Server, you need to upgrade MMC to version 3.0. To do that, click the Download and install MMC 3.0 button. You can proceed to the next setup step by clicking the link Kaspersky Security 8.0 for Microsoft Exchange Servers. In addition, you can click the Installation guide button to download and install an installation guide. STEP 2. GREETING AND LICENSE AGREEMENT The welcome screen informs you that installation of Kaspersky Security to your computer has been started. Clicking the Next button opens the License Agreement window. The License Agreement is an agreement between the application user and Kaspersky Lab. Checking the box I accept the terms and conditions of this Agreement means that you have read the License Agreement and accepted its terms and conditions. Kaspersky Security cannot be installed if you do not accept the terms and conditions of the License Agreement. STEP 3. SELECTING THE INSTALLATION TYPE The installation type selection screen contains two buttons: Typical. Clicking this button will continue the installation procedure using the standard set of components, which suits most users. Please see Step 5 for further instructions. Custom. Clicking this button allows you to select the application components you would like to install manually. Custom installation mode is recommended for experienced users. Once the installation type is selected, the Setup Wizard proceeds to the next step. STEP 4. SELECTING THE APPLICATION COMPONENTS If you have selected the Custom setup type, the installer will prompt you to select the components which you would like to install. The set of components available for installation will differ depending on whether Microsoft Exchange Server is installed and the role it is configured to perform. If Microsoft Exchange Server is deployed to act both as a Mailbox and Hub Transport, the following components will be available for selection: Administration Console; Anti-Spam protection component; Anti-Virus for the Mailbox role; Anti-Virus for the Hub Transport and Edge Transport roles. If Microsoft Exchange Server is deployed to act as an Edge Transport or Hub Transport only, the following application components will be available for selection: Administration Console; Anti-Spam protection component; Anti-Virus for the Hub Transport and Edge Transport roles. 15

16 I N S T A L L A T I O N G U I D E If Microsoft Exchange Server is deployed to act as a Mailbox only, the following components will be available for selection: Administration Console; Anti-Virus for the Mailbox role. In all other cases, only the Administration Console is available for installation. The path to the default installation folder is displayed in the lower part of the window. To change the installation folder, click the Browse button and specify another location. The path to the data folder is displayed below. The data storage folder contains the following items: Anti-Virus database; Anti-Spam database; quarantined objects. If you believe that the folder will occupy more space than the selected drive has available, you can click the Browse button to change the data storage folder location. Clicking the Reset button cancels the user-defined selection of components and restores the default selections. Clicking the Disk usage button opens a dialog containing information about the availability of the space required for installation of the selected components on local drives. STEP 5. CONFIGURING THE CONNECTION TO THE MICROSOFT SQL SERVER The purpose of this step is to configure a connection to an SQL server. Configuring the connection to a Microsoft SQL Server In the Name of SQL server field, specify the name (or IP address) of the computer and the SQL server instance, for example, MYCOMPUTER\SQLEXPRESS. Clicking the Browse button next to that field allows you to select an SQL server within the current network segment. In the Database name name field specify the name of the database where the application will store the Backup data and statistical information. If the SQL server contains no database with the specified name, it will be created. If you plan to use a centralized Backup and centralized storage of statistical data for several Security Servers, the same SQL server and database names must be specified for all the Security Servers. If you do not plan on using centralized storages, each Security Server can use its own database. If you deploy Kaspersky Security on a cluster or Microsoft Exchange DAG, using a common database for all Security Servers is strongly recommended. To create a database on the SQL server, you will have to choose an account that will be used to create the database. The following options are available: Active account. In this case the current user account will be used. Other account. In this case you must enter the name and password for the specified user account. You can click the Browse button to select an account. 16

17 A P P L I C A T I O N S E T U P P R O C E D U R E The SQL server browser must be started on the computer running the SQL server. Otherwise you will not be able to see the instance of the SQL server that you need. If Kaspersky Security is installed on an Edge Transport while the SQL server is running within a domain, there will be no way to establish a connection to the SQL server. In that case, a local SQL server instance should be used. To create a database on the SQL server, the account selected for that purpose must have the local access rights for the computer where Kaspersky Security will be installed and administrator privileges on the SQL server. If the SQL server is running on a domain controller, the account must belong to the Enterprise Admins and / or Domain Admins group. If you are using a remote connection to the SQL server, make sure that TCP/IP support is enabled in the SQL Server Configuration Manager. Select an account for the operation of application service In the next window you will see an offer to choose the account that will be used to start the application service and connect to the SQL server. The following options are available: Local System account. In this case the application service will be started and connections to the SQL server will be established using the local system account. Other account. In this case you must enter the name and password for the specified account. You can click the Browse button to select an account. For operations with an existing database the selected account must have the following privileges: Table 2. The privileges for connection to database BASE PROTECTED ENTITY PERMISSION DESCRIPTION DATABASE CREATE TABLE The right to add tables in the selected database DATABASE CREATE XML SCHEMA COLLECTION The right to create collections of XML schemas in the selected database SCHEMA CONTROL The right to control the dbo schema in the selected database If a new database is created, the application will automatically set these permissions for the selected account. If you have selected an account registered with a domain, the account must be added to the Exchange View-Only Administrators domain group. After its addition, the application service must be restarted on all the computers where it has been started on behalf of that user. The step is necessary to apply the changes to the domain groups. STEP 6. COPYING FILES To proceed with the installation, press the Install button in the Setup Wizard window. It will initiate copying of the application files to the computer, registration of the components in the system, creation of the corresponding database on the SQL server and restarting of some services of Microsoft Exchange Server. Microsoft Exchange services will be restarted automatically without additional prompts. 17

18 I N S T A L L A T I O N G U I D E GETTING STARTED. THE APPLICATION CONFIGURATION WIZARD Once the files are copied and the components are registered in the system, the Setup Wizard will display a notification informing you that application setup is complete. Clicking the Next button in the Setup Wizard will start the Application Configuration Wizard. The Application Configuration Wizard will assist you in configuring the protection settings, installing the license, and testing the application functionality. To start product configuration in the Application Configuration Wizard, click Next. IN THIS SECTION Installing a license key Configuring server protection Configuring the proxy server Notification settings Connecting to the Security Server Testing the application functionality INSTALLING A LICENSE KEY You can use the License screen of the Application Configuration Wizard to install a license for Kaspersky Security. If you deploy Kaspersky Security on a Microsoft Exchange DAG, it will be sufficient to install the license just once during application setup on any of the DAG servers. Once this is done, the Application Configuration Wizard will automatically detect the installed license during application setup on other servers of the DAG. Reinstalling the license will be unnecessary then. To install a license, perform the following steps: 1. Press the Add button. 2. In the displayed File name dialog, specify the path to the key file (a file with the *.key extension) and click the Open button. The application will install the license that allows using Kaspersky Security for the specified time subject to the terms and conditions defined in the license. To remove a license, click the Remove button. 18

19 G E T T I N G S T A R T E D. T H E A P P L I C A T I O N C O N F I G U R A T I O N W I Z A R D CONFIGURING SERVER PROTECTION You can use the Protection settings window of the Application Configuration Wizard to configure the Anti-Virus and Anti-Spam protection settings. Anti-Virus and Anti-Spam protection is enabled by default. To define the protection settings, perform the following steps: 1. Leave the box Enable Anti-Virus protection immediately after installation selected to activate Anti-Virus protection immediately after application launch. 2. Leave the box Enable Anti-Spam protection selected to activate Anti-Spam protection immediately after application launch. If you do not want to activate the Anti-Virus and Anti-Spam protection immediately after application launch, uncheck the corresponding boxes. You can enable protection later using the Administration Console. 3. Check the box Enable Enforced Anti-Spam Updates Service, if you want the application to use the service for prompt delivery of Anti-Spam database updates. The following conditions will be required to ensure proper functioning of the Enforced Anti-Spam Updates Service: permanent Internet connection on the computer running the Security Server; regular updates of the Anti-Spam database (recommended frequency: every five minutes). 4. Leave the box Enable automatic database updating selected to make the application update its Anti-Spam and Anti-Virus databases automatically from the servers of Kaspersky Lab as soon as it starts. CONFIGURING THE PROXY SERVER You can use the Proxy server settings screen of the Application Configuration Wizard to set up a connection via a proxy server. The application will use the settings to connect to the update servers while updating its databases and to the servers of Kaspersky Lab providing external Anti-Spam services. To configure the proxy server settings, perform the following steps: 1. To make the application connect to the servers of Kaspersky Lab via a proxy, check the box Use proxy server. 2. Enter the proxy address in the Proxy server address field. 3. Define the proxy server port in the entry field. By default, port 8080 is used. 4. To enable authentication with the proxy server, check the Use authentication box and enter the relevant information about the user account selected for that purpose in the Account and Password fields. Use the button to select one of the existing accounts. 5. If you wish to download updates from a local corporate server directly, check the Bypass proxy server for local addresses box. NOTIFICATION SETTINGS The Notification settings window of the Application Configuration Wizard allows you to configure the notifications sent by . Using notifications, you will be informed promptly of all Kaspersky Security events. 19

20 I N S T A L L A T I O N G U I D E To define the notification settings, perform the following steps: 1. In the Web-service address field, specify the address of the web service that will be used to mail messages via Microsoft Exchange Server. By default, in the Microsoft Exchange Server, it is the following address: 2. In the Account field, specify any account from among the mailboxes registered on the Microsoft Exchange Server. To do that, click Browse or enter the account name manually. 3. Type the password for the selected account in the Password field. 4. Enter in the Administrator address field the destination mail address, for example, your Click the Test button to send a test message. If the test message arrives in the specified mailbox, it means that delivery of notifications is configured properly. 6. Click Next to finish setting up the application options. 7. Click the Finish button in the final window of the Application Setup Wizard to quit the wizard. If the Start Administration Console after Application Configuration Wizard completion box is left checked, the Administration Console will start automatically. CONNECTING TO THE SECURITY SERVER After Kaspersky Security installation, the Administration Console will be connected automatically to the local Security Server; the Server will then appear in the Administration Console tree. To connect to a Security Server located on a remote computer, you should add the Kaspersky Security service to the trusted applications list of the remote computer's firewall, or allow RPC connection. To connect to another server, perform the following steps: 1. Launch Kaspersky Security by selecting StartPrograms Kaspersky Security 8.0 for Microsoft Exchange Servers Administration Console. 2. Select the Kaspersky Security 8.0 for Microsoft Exchange Servers node in the console tree. 3. Click the Add server button in the details pane. 4. Select the Custom server option in the displayed window. 5. Click Browse and specify the server that you would like to connect. 6. Click OK. TESTING THE APPLICATION FUNCTIONALITY After Kaspersky Security is installed and configured, you are advised to verify its settings and operation using a test "virus" and its modifications. The test virus was specifically designed by EICAR (The European Institute for Computer Antivirus Research) to test anti-virus products. The test "virus" is not a malicious program and it contains no code that can harm your computer. However, most anti-virus products identify it as a virus. 20

21 G E T T I N G S T A R T E D. T H E A P P L I C A T I O N C O N F I G U R A T I O N W I Z A R D You can download the test "virus" from the official web site of EICAR at: Testing the Anti-Virus functionality To send a message with the test "virus", perform the following steps: 1. Create an message with an attached EICAR test "virus". 2. Send the message via Microsoft Exchange Server with Kaspersky Security installed and the Security Server connected (see the section "Connecting to the Security Server" on page 20). 3. Check to make sure that the delivered message contains no virus. If a virus is detected on a server functioning as a Mailbox, the deleted virus will be replaced with a text file. When a virus is detected on a server functioning as a Hub Transport, the application adds the prefix Malicious object deleted to the message subject. After virus detection, the mailbox that you have specified in the Notification Settings window (see the section "Configuring notifications" on page 19) of the Initial Configuration Wizard should receive a notification about the intercepted virus. To view the application report on the detected virus, perform the following steps: 1. Launch Kaspersky Security by selecting StartPrograms Kaspersky Security 8.0 for Microsoft Exchange Servers Administration Console. 2. In the console tree to the left, select and open the node corresponding to the server which was supposed to process the message containing the "virus". 3. Select the Reports node. 4. In the details pane, in the Quick reports section, perform the following steps: a. Select in the Type list the report type Protection for the Mailbox role or Anti-Virus for the Hub Transport role (depending upon the existing configuration). b. Click Generate report. 5. View the created report in the Ready reports section. To do that, double-click the desired report to open it. If the report contains information about the EICAR infection, the application is properly configured. To receive the reports to an address, perform the following steps: 1. In the details pane in the Anti-Virus report for the Mailbox role and Anti-Virus report for the Hub Transport sections check the Administrator box to enable sending of notifications to the address you specified in the notification settings (see section "Configuring notifications" on page 19) of the Application Configuration Wizard. If you did not specify an address in the Application Configuration Wizard, click the sending settings link to set up notification sending settings (see the section "Configuring notifications" on page 19). 2. To make sure that reports arrive in the specified address, click the Test button to send a test message. By default, the application saves a copy of an infected object in Backup. To check whether a copy of an infected object has been saved in Backup, perform the following steps: 1. In the console tree, select the Backup node. 2. Check to make sure that the infected object (message with attached "virus") appears in the details pane. Testing the Anti-Spam functionality 21

22 I N S T A L L A T I O N G U I D E To test normal functioning of Anti-Spam, perform the following steps: 1. Launch Kaspersky Security by selecting StartPrograms Kaspersky Security 8.0 for Microsoft Exchange Servers Administration Console. 2. In the console tree to the left, select and open the node corresponding to the server which will be used to transfer the test message. 3. Select the Server protection node. 4. Select in the details pane the tab Protection for the Hub Transport role. 5. Open the White and black list settings section. 6. Check the Add sender's address to black list box. 7. Specify in the entry field any address that you have access to. 8. Click the addition button to the right of the field. 9. Open the Scan settings section. 10. In the Blacklisted field, select Allow. 11. In the same field, check the box Add label. 12. Send a message from the specified mailbox to the administrator address through the protected mail server. If the message arrives with the [Blacklisted] label in the header, Anti-Spam is functioning correctly. 22

23 R E S T O R I N G T H E A P P L I C A T I O N RESTORING THE APPLICATION If the application encounters a failure while running (for example, if its executable files get damaged), you can use the restoration functionality provided in the installer. During restoration the installer will preserve the selected settings and user configuration including notifications and the path to the Quarantine database. To restore Kaspersky Security, perform the following steps: 1. Start the file setup_ru.exe. 2. Click the link Kaspersky Security 8.0 for Microsoft Exchange Servers to start the application Setup Wizard and click Next. 3. Click the Next button in the welcome screen of the Initial Configuration Wizard. 4. In the Change, Repair or Remove the application window, click the Restore button. 5. In the Restoring window, click the Repair button. Restoration of the application will not be possible if its configuration files are damaged. In that case removing and reinstalling the application is recommended. 23

24 I N S T A L L A T I O N G U I D E REMOVING THE APPLICATION To remove Kaspersky Security from a computer, perform the following steps: 1. Start the file setup_en.exe. 2. Click the link Kaspersky Security 8.0 for Microsoft Exchange Servers to start the application Setup Wizard and click Next. 3. In the Change, Repair or Remove the application window, click the Remove button. 4. In the Remove window, click the Remove button. 5. In the Database removal window: If you want the application to delete the database from the SQL server during application removal, click Yes. If you want the application to leave the database on the SQL server during application removal, click No. Backup data added by the application will be deleted from the database. Statistical data added by the application will not be deleted. You can also uninstall the application using the standard software management tools in Microsoft Windows. During Kaspersky Security removal, some services of Microsoft Exchange Server will need a restart. Microsoft Exchange services will be restarted automatically without additional prompts. 24

25 KASPERSKY LAB ZAO Kaspersky Lab software is internationally renowned for its protection against viruses, malware, spam, network and hacker attacks, and other threats. In 2008, Kaspersky Lab was rated among the world s top four leading vendors of information security software solutions for end users (IDC Worldwide Endpoint Security Revenue by Vendor). Kaspersky Lab is the preferred developer of computer protection systems among home users in Russia, according to the COMCON survey "TGI-Russia 2009". Kaspersky Lab was founded in Russia in Today, it is an international group of companies headquartered in Moscow with five regional divisions that manage the company's activity in Russia, Western and Eastern Europe, the Middle East, Africa, North and South America, Japan, China, and other countries in the Asia-Pacific region. The company employs more than 2000 qualified specialists. Products. Kaspersky Lab s products provide protection for all systems from home computers to large corporate networks. The personal product range includes anti-virus applications for desktop, laptop, and pocket computers, and for smartphones and other mobile devices. Kaspersky Lab delivers applications and services to protect workstations, file and web servers, mail gateways, and firewalls. Used in conjunction with Kaspersky Lab s centralized management system, these solutions ensure effective automated protection for companies and organizations against computer threats. Kaspersky Lab's products are certified by the major test laboratories, are compatible with the software of many suppliers of computer applications, and are optimized to run on many hardware platforms. Kaspersky Lab s virus analysts work around the clock. Every day they uncover hundreds of new computer threats, create tools to detect and disinfect them, and include them in the databases used by Kaspersky Lab applications. Kaspersky Lab's Anti-Virus database is updated hourly; and the Anti-Spam database every five minutes. Technologies. Many technologies that are now part and parcel of modern anti-virus tools were originally developed by Kaspersky Lab. It is no coincidence that many other developers use the Kaspersky Anti-Virus kernel in their products, including: SafeNet (USA), Alt-N Technologies (USA), Blue Coat Systems (USA), Check Point Software Technologies (Israel), Clearswift (UK), CommuniGate Systems (USA), Critical Path (Ireland), D-Link (Taiwan), M86 Security (USA), GFI (Malta), IBM (USA), Juniper Networks (USA), LANDesk (USA), Microsoft (USA), NETASQ (France), NETGEAR (USA), Parallels (Russia), SonicWALL (USA), WatchGuard Technologies (USA), ZyXEL Communications (Taiwan). Many of the company s innovative technologies are patented. Achievements. Over the years, Kaspersky Lab has won hundreds of awards for its services in combating computer threats. For example, in 2010 Kaspersky Anti-Virus received several top Advanced+ awards in a test administered by AV-Comparatives, a respected Austrian anti-virus laboratory. But Kaspersky Lab's main achievement is the loyalty of its users worldwide. The company s products and technologies protect more than 300 million users, and its corporate clients number more than 200,000. Kaspersky Lab s web site: Virus Encyclopedia: Anti-Virus Lab: Kaspersky Lab's web forum: newvirus@kaspersky.com (only for sending probably infected files in archive format) (for queries to virus analysts) 25