F-SECURE MESSAGING SECURITY GATEWAY

Transcription

1 F-SECURE MESSAGING SECURITY GATEWAY DEFAULT SETUP GUIDE This guide describes how to set up and configure the F-Secure Messaging Security Gateway appliance in a basic server environment.

2 AN EXAMPLE OF A TYPICAL F-SECURE MESSAGING SECURITY GATEWAY INSTALLATION ENVIRONMENT Firewall F-Secure Messaging Security Gateway fsmsg.yourdomainhere.com Server mail.yourdomainhere.com Configuring the Firewall Configure the company firewalls to allow the network traffic shown below. Traffic Updates Source and destination Protocol Port Internet F-Secure Messaging Security Gateway TCP 25 Server F-Secure Messaging Security Gateway TCP 25 F-Secure Messaging Security Gateway -> DNS Server TCP/UDP 53 Source and destination Protocol Port F-Secure Messaging Security Gateway Internet TCP 80, 443 Administration Source and destination Protocol Port Administrator F-Secure Messaging Security Gateway TCP Administrator F-Secure Messaging Security Gateway TCP 22 End-User Commands Source and destination Protocol Port End-user F-Secure Messaging Security Gateway TCP 443

3 F-Secure Support (recommended) In troubleshooting situations, F-Secure support may need access to the appliance. For detailed instructions, see: Setting up the Appliance through a Console Set up the F-Secure Messaging Security Gateway appliance through a console. Log into the Appliance 1) Open the appliance BIOS setup. 2) Set the system time and date correctly by using GMT-0 time. 3) Log into the appliance by using the following login name and password: Login: admin Password: password 4) To change the admin password, select <Yes>.

4 5) Enter the new admin password. Note: The keyboard input language is English, United States at this point. Verify that the characters entered at this point can be accessed after the layout is changed to your localization 6) Press ENTER. Note: If you forget the admin password the only way to reset password is to reinstall Messaging Security Product. Change the Network Settings 1) To change the network settings, select <Yes>. 2) Enter Yes.

5 3) Enter the IP address of the appliance. 4) Enter the subnet mask of the appliance. 5) Enter the IP address of the default gateway. 6) Enter the host name of the appliance. 7) Enter the domain name. 8) Enter the IP addresses of at least two DNS servers that the appliance uses: 9) Enter hostname override settings to hosts file if your network configurations need that.

6 10) Confirm the network settings. Enter Yes. To save the settings, press ENTER. 11) After the settings have been saved, press ENTER. Change the Keyboard 1) In the F-Secure Messaging Security Gateway menu, select Console Keyboard Selector. Press ENTER. Note: It is recommended to type the old password with the US keyboard localization in to a text file to verify that all characters can be accessed through the new desired keyboard localization.

7 2) Select the preferred keyboard from the list. Press ENTER. 3) To confirm the change, select <Yes> and press ENTER.

8 4) To return to the main menu, press ENTER again. Enable SSH 1) From the main menu, select Advanced System Control Operations. Press ENTER.

9 2) Select Remote SSH Access. Press ENTER. 3) Select Enable Remote SSH Access for all. Press ENTER.

10 4) To confirm SSH access to the appliance, select <Yes>. Press ENTER. 5) To return to the menu, press ENTER. 6) Select Return to Advanced System Control Menu. Press ENTER.

11 7) Select Return to the Main Menu. Press ENTER. 8) Select Logout of the F-Secure Appliance. Press ENTER.

12 9) To confirm your logout, select <Yes>. Press ENTER. Note: After the logout, continue the F-Secure Messaging Security Gateway setup through the web interface and point your browser to:

13 Finalizing Setup on the Web Interface 1) Login to the appliance 2) Read the introductory screen

14 3) Read the License Agreement 4) Verify the server hostname and Domain settings, SELECT Master as the appliance type and insert your activation ID from the license received from F-Secure

15 5) Verify the Network Settings 6) Verify the DNS Settings Note: Enter Hostname override information if your network requires it

16 7) Proxy Settings 8) Inbound Mail settings

17 9) Outbound Mail settings Note: This is important if you choose to use Messaging Security Gateway solution to scan your which is sent outside of your organization. 10) Setting up localization, date & time

18 11) Creating profile for Alerts sent by the Messaging Security Gateway server 12) Insert the address which receives all the alerts sent by the Messaging Security Gateway

19 Note: Before doing the next step verify that Messaging Security Gateway product has Internet access otherwise the license activation fails 13) Click Finish to finalize the installation 14) Congratulations you have succesfully implemented the Messaging Security Gateway and are now ready to use the product

20