M86 MailMarshal Exchange USER GUIDE. Software Version: 7.1



Similar documents
M86 MailMarshal SMTP USER GUIDE. Software Version: 6.8.4

User Guide. MailMarshal SMTP. Version 6.0

Trustwave SEG Cloud Customer Guide

WebMarshal User Guide

Sophos for Microsoft SharePoint startup guide

GFI Product Manual. Administration and Configuration Manual

MARSHAL REPORTING CONSOLE VERSION 2.5 INSTALLATION GUIDE

Kaseya Server Instal ation User Guide June 6, 2008

GFI Product Manual. Administrator Guide

Kaspersky Security 9.0 for Microsoft Exchange Servers Administrator's Guide

GFI Product Manual. Getting Started Guide

Symantec Mail Security for Microsoft Exchange Getting Started Guide

DameWare Server. Administrator Guide

Interworks. Interworks Cloud Platform Installation Guide

Release Notes for Websense Security v7.2

Kaspersky Security 9.0 for Microsoft Exchange Servers Administrator's Guide

Symantec Mail Security for Microsoft Exchange

Kaspersky Security 8.0 for Microsoft Exchange Servers AD Administrator's Guide


Installing GFI MailSecurity

Installing GFI MailSecurity

Symantec Mail Security for Microsoft Exchange

Kaspersky Security 9.0 for Microsoft SharePoint Server Administrator's Guide

Kaspersky Security 8.0 for Microsoft Exchange Servers Installation Guide

Metalogix SharePoint Backup. Advanced Installation Guide. Publication Date: August 24, 2015

Server Installation Guide ZENworks Patch Management 6.4 SP2

Symantec Protection for SharePoint Servers Implementation Guide

AND SERVER SECURITY

KASPERSKY LAB. Kaspersky Administration Kit version 6.0. Administrator s manual

AND SERVER SECURITY


Installation and Configuration Guide. NetIQ Security and Compliance Dashboard

Product Manual. Administration and Configuration Manual

Pearl Echo Installation Checklist

GFI Product Manual. Getting Started Guide

GlobalSCAPE DMZ Gateway, v1. User Guide

Symantec Mail Security for Microsoft Exchange Getting Started Guide

Copyright 2012 Trend Micro Incorporated. All rights reserved.

Symantec Backup Exec TM 11d for Windows Servers. Quick Installation Guide


NETWRIX EVENT LOG MANAGER

GFI Product Manual. Web security, monitoring and Internet access control. Administrator Guide

MailMarshal Exchange in a Windows Server Active/Passive Cluster

How To Use Gfi Mailarchiver On A Pc Or Macbook With Gfi From A Windows 7.5 (Windows 7) On A Microsoft Mail Server On A Gfi Server On An Ipod Or Gfi.Org (

Quick Install Guide. Lumension Endpoint Management and Security Suite 7.1

How To Set Up Safetica Insight 9 (Safetica) For A Safetrica Management Service (Sms) For An Ipad Or Ipad (Smb) (Sbc) (For A Safetaica) (

Core Protection for Virtual Machines 1

How To Install Caarcserve Backup Patch Manager (Carcserver) On A Pc Or Mac Or Mac (Or Mac)

Sophos for Microsoft SharePoint Help. Product version: 2.0

GFI Product Manual. Deployment Guide

Altiris IT Analytics Solution 7.1 SP1 from Symantec User Guide

Dell Recovery Manager for Active Directory 8.6. Quick Start Guide

Getting Started. Symantec Client Security. About Symantec Client Security. How to get started

NETWRIX ACCOUNT LOCKOUT EXAMINER

ESET Mail Security 4. User Guide. for Microsoft Exchange Server. Microsoft Windows 2000 / 2003 / 2008

GFI Product Manual. ReportPack Manual

Sage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and October 2013

Server Installation ZENworks Mobile Management 2.7.x August 2013

Step-by-Step Guide to Setup Instant Messaging (IM) Workspace Datasheet

1 Introduction About this manual Terms and conventions used in this manual 12

Symantec AntiVirus Corporate Edition Patch Update

Enterprise Vault Installing and Configuring

Symantec Backup Exec 2010 R2. Quick Installation Guide

2.0. Quick Start Guide

NETWRIX FILE SERVER CHANGE REPORTER

Understanding and Configuring Password Manager for Maximum Benefits

Virtual Web Appliance Setup Guide

Backup Exec 15. Quick Installation Guide

About Recovery Manager for Active

Getting Started with Symantec Endpoint Protection

System Compatibility. Enhancements. Operating Systems. Hardware Requirements. Security

Ad-Aware Management Server Installed together with Ad-Aware Business Client Ad-Aware Update Server Before You Start the Deployment...

TIBCO Spotfire Web Player 6.0. Installation and Configuration Manual

VERITAS Backup Exec TM 10.0 for Windows Servers

Installing Windows Rights Management Services with Service Pack 2 Step-by- Step Guide

Filter. SurfControl Filter 5.0 for SMTP Getting Started Guide. The World s #1 Web & Filtering Company

F-Secure Messaging Security Gateway. Deployment Guide

Installing GFI MailEssentials

Configuration Information

Installing and Configuring vcenter Multi-Hypervisor Manager

8.7. Resource Kit User Guide

ADMINISTRATOR'S GUIDE

Step-by-Step Guide to Securing Windows XP Professional with Service Pack 2 in Small and Medium Businesses

SysPatrol - Server Security Monitor

Administrator's Guide

1. Server Microsoft FEP Instalation

Version 3.8. Installation Guide

AD Self-Service Suite for Active Directory

Kaspersky Security Center 10 Getting Started

[The BSD License] Copyright (c) Jaroslaw Kowalski

GFI Product Manual. GFI MailEssentials Administrator Guide

Dell Client Profile Updating Utility 5.5.6

Configuration Guide. BES12 Cloud

Copyright 2011 Sophos Ltd. Copyright strictly reserved. These materials are not to be reproduced, either in whole or in part, without permissions.

How To Install Powerpoint 6 On A Windows Server With A Powerpoint 2.5 (Powerpoint) And Powerpoint On A Microsoft Powerpoint 4.5 Powerpoint (Powerpoints) And A Powerpoints 2

Getting Started Guide

Introduction to the EIS Guide

Agency Pre Migration Tasks

Veeam Backup Enterprise Manager. Version 7.0

MobileStatus Server Installation and Configuration Guide

Transcription:

M86 MailMarshal Exchange USER GUIDE Software Version: 7.1

M86 MAILMARSHAL EXCHANGE USER GUIDE 2011 M86 Security All rights reserved. Published November 2011 for software release 7.1 No part of this Documentation may be reproduced or transmitted in any form or by any means, including but without derogation of the foregoing, electronic or mechanical means, photocopying, recording or any information storage and retrieval system, without the prior permission in writing of M86 Security. This Documentation is provided as is and there are no warranties or representations made by M86 Security, either express, implied, or statutory, with respect to it, including warranties or conditions of title, quality, non-infringement, merchantability, quality or fitness for a particular purpose, nor are there any warranties created by course of dealing, course of performance, or trade usage. M86 Security does not warrant that this Documentation will meet your needs or be free from errors. In no event will M86 Security be liable for any form of loss or damage of whatsoever kind (whether arising in contract, tort, by statute or otherwise), including, but without limiting the generality of the foregoing, direct, damages at common law, repudiatory damages indirect, special, idiosyncratic or consequential damages or loss, loss of anticipated profits, loss of business opportunity or loss of contracts by you or any third party or claims or demands against you by any third party or other like economic loss in connection with or arising out of your use and/or possession of this Documentation. M86 MailMarshal Exchange is the registered trademark of M86 Security. Other product names mentioned in this Documentation may be trademarks or registered trademarks of their respective companies. II M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Contents About This Book and the Library... xi Technical Support and Resources... xi Conventions... xii Chapter 1 Introduction... 1 What Is MailMarshal Exchange?...1 What Does MailMarshal Exchange Provide?...2 How MailMarshal Exchange Helps You...3 How MailMarshal Exchange Works...3 Understanding What MailMarshal Exchange Does...4 Configuring MailMarshal Exchange...5 Monitoring and Reporting...5 MailMarshal Exchange and MailMarshal SEG...6 Chapter 2 Planning Your MailMarshal Exchange Installation... 9 Planning Checklist...9 Understanding MailMarshal Exchange Components...11 MailMarshal Exchange Components...12 Other Software and Services...13 Understanding Installation Scenarios...14 Standalone Installation...14 Array Installation...15 Hardware and Software Requirements...16 Standalone Installation Requirements...16 Array Installation Requirements...18 Web Components Requirements...21 Configurator or Console User Interface Requirements...22 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE III

CONTENTS Database Software Considerations...23 Understanding MailMarshal Exchange Folder Locations...25 Supported Antivirus Software...26 Collecting Information for Installation...28 Chapter 3 Installing and Configuring MailMarshal Exchange... 31 Installation Checklist...31 Installing Prerequisite Software...32 Installing MailMarshal Exchange on a Standalone Server...33 Installing MailMarshal Exchange as an Array...36 Installing a MailMarshal Exchange Array Manager...36 Installing a MailMarshal Exchange Server...39 Running the Configuration Wizard...43 Creating Directory Connectors...46 Configuring Antivirus Scanning...50 Excluding Working Folders From Virus Scanning...50 Configuring MailMarshal Exchange to Use an Antivirus Product...52 Installing and Customizing Web Components...54 Installing the MailMarshal Exchange Web Components...55 Customizing the Web Components...59 Installing Additional User Interfaces...60 Upgrading MailMarshal Exchange...61 Upgrading from MailMarshal Exchange Version 7.0...61 Upgrading from MailMarshal Exchange Version 5.X...65 Uninstalling MailMarshal Exchange...65 IV M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Chapter 4 Understanding MailMarshal Exchange Interfaces... 69 Understanding the Configurator...70 Working With the Getting Started and Common Tasks Pages...71 Working With Menu and Detail Items...72 Working With Properties Configuration...72 Committing Configuration...73 Understanding the Console...73 Understanding the Web Console...75 Understanding the Quarantine Management Website...76 Understanding Other Tools...77 Chapter 5 Implementing Your Email Content Security Policy... 79 Configuring Email Content Security...79 Stopping Viruses...80 How MailMarshal Exchange Uses Virus Scanners...80 Virus and Threats Policy and Rules...82 Best Practices...83 Viewing Virus Scanner Properties...84 Filtering Messages and Attachments...84 Chapter 6 Understanding Email Policy, Policy Groups, and Rules... 87 Understanding Policy Types...87 Content Analysis Policy...88 Dead Letter Policy...88 Understanding Policy Groups...88 Understanding Rules...89 Creating Rules...90 Understanding User Matching...92 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE V

CONTENTS Understanding Rule Conditions...94 Rule Conditions for Content Analysis Policy Rules...94 Rule Conditions for Dead Letter Policy Rules...109 Understanding Rule Actions...110 Rule Actions for Content Analysis Policy Rules...110 Rule Actions for Dead Letter Policy Rules...118 Understanding the Order of Evaluation...118 Adjusting the Order of Evaluation of Policy Groups...118 Adjusting the Order of Evaluation of Rules...119 Viewing Email Policy...121 Chapter 7 Understanding Email Policy Elements... 123 Configuring Connectors...125 Configuring User Groups...127 Creating and Populating User Groups...127 Moving and Copying Users and Groups...131 Identifying Email Text Content Using TextCensor Scripts...132 Creating Scripts...132 Editing Scripts...135 Duplicating Scripts...136 Script and Item Weighting...136 Item Syntax...138 Importing Scripts...139 Exporting Scripts...140 TextCensor Best Practices...140 Testing Scripts...142 VI M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Notifying Users with Message Templates and Message Stamps...142 Message Templates...143 Creating a Message Template...144 Creating Digest Templates...146 Editing Templates...149 Duplicating Templates...149 Deleting Templates...150 Working with Message Stamps...150 Using Variables...152 Date Formatting...156 Using Virus Scanning...158 Using Email Folders and Message Classifications...158 Working with Message Classifications...159 Working with Folders...161 Creating Folders...162 Editing Folders...163 Header Matching and Rewriting...164 Using Rules to Find Headers...164 Using Rules to Change Headers...164 Using the Header Rewrite Wizard...165 Extending Functionality Using External Commands...171 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE VII

CONTENTS Chapter 8 Monitoring Email Flow... 175 Using the MailMarshal Exchange Console...177 Connecting to MailMarshal Exchange Using the Console...177 Connecting to MailMarshal Exchange Using the Web Console...178 Viewing Server Statistics...179 Viewing Folders and Folder Contents...180 Working With Email Messages...181 Viewing Email History...188 Searching Folders and Email History...189 Viewing Alert History...190 Setting Console Security...191 Viewing Event History...195 Finding Events...196 Viewing News From M86 Security...198 Using Windows Tools...199 Event Log...199 Performance Monitor...200 Using MailMarshal Exchange Text Logs...200 Chapter 9 Managing MailMarshal Exchange Configuration... 201 Managing Your MailMarshal Exchange Licenses...201 Reviewing Installed Licenses...202 Requesting a New License Key...202 Entering a License Key...203 Backing Up and Restoring the Configuration...204 Backing Up the Configuration...205 Restoring the Configuration...206 Configuring Local Domains...208 Changing Local Domains Information...208 Configuring Manager Security...210 VIII M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Configuring Automatic Updates...211 Managing Array Nodes...213 Managing Node Services...213 Adding and Deleting Nodes...214 Joining a Node to an Array...216 Customizing Settings for Nodes...217 Setting Advanced Options...218 Working with Array Communications...219 Changing Folder Locations...222 Using the Group File Import Tool...223 Using the Configuration Export Tool...225 Using the Quarantine Synchronization Tool...227 Chapter 10 Delegating Quarantine Management... 229 Setting Up Console Access...229 Setting Up Quarantine Management Features...230 Quarantine Management Windows...230 Setting Up Folders and Templates...232 Setting Up Message Digests...233 Setting Up Rules...235 Chapter 11 Reporting on MailMarshal Exchange Activity... 237 Data Retention and Grouping...238 Configuring Data Retention...238 Configuring Reporting Groups...239 Appendix A Wildcards and Regular Expressions 241 Wildcard Characters...241 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE IX

CONTENTS Regular Expressions...243 Shortcuts...243 Reserved Characters...244 Examples...246 Map Files...247 Appendix B Third Party Extensions 249 Image Analyzer...249 Why Would I Use Image Analyzer?...250 What Results Can I Expect From Image Analyzer?...251 How Does Image Analyzer Address the Issues?...251 Virus Scanning Software...252 Glossary 253 Index 259 X M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

ABOUT THIS BOOK AND THE LIBRARY The User Guide provides conceptual information about MailMarshal Exchange. This book defines terminology and various related concepts. Intended Audience This book provides information for individuals responsible for understanding MailMarshal Exchange concepts and for individuals managing MailMarshal Exchange installations. Other Information in the Library The library provides the following information resources: User Guide Provides conceptual information and detailed planning and installation information about MailMarshal Exchange. This book also provides an overview of the MailMarshal Exchange user interfaces and the Help. Help Provides context-sensitive information and step-by-step guidance for common tasks, as well as definitions for each field on each window. TECHNICAL SUPPORT AND RESOURCES For technical assistance please visit http://www.m86security.com/support/ This website provides: Access to additional self-service resources such as a Knowledge Base and customer forum Software updates Information about how to contact Technical Support staff. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE XI

CONVENTIONS The library uses consistent conventions to help you identify items throughout the documentation. The following table summarizes these conventions. Convention Bold Italics Fixed Font Brackets, such as [value] Braces, such as {value} Logical OR, such as value1 value2 Use Window and menu items Technical terms, when introduced Book and CD-ROM titles Variable names and values Emphasized words File and folder names Commands and code examples Text you must type Text (output) displayed in the command-line interface Optional parameters of a command Required parameters of a command Exclusive parameters. Choose one parameter. XII M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Chapter 1 Introduction Email is an essential communication tool, but it also creates serious productivity and security issues. Email offers an entry point in your network for spam and other undesired non-business content, such as malicious code, large file attachments that consume valuable disk space, phishing attempts, information and identity theft attacks, and other damaging content and activity. In addition, email can become a conduit for proprietary data and confidential information to leave the company. Spam, email viruses, malicious code, liability issues, and declining employee productivity are all risks associated with email. Email viruses, Trojan horses, and other malicious files can cause millions of dollars in damage in just a matter of hours. Reports of companies forced into legal action because of staff misuse of email are becoming commonplace. Email remains the lifeblood of modern business communication, but the damages email can cause become more costly each year. WHAT IS MAILMARSHAL EXCHANGE? MailMarshal Exchange is an email filtering solution for Microsoft Exchange Server that helps organizations to provide a safe environment for employees, free from harassment and objectionable material. It also improves productivity levels by managing non-business email content and attachments. Many organizations today have created policies and guidelines for the appropriate use of email, and employee education programs to deal with the torrent of spam and viruses. MailMarshal Exchange complements a gateway email filtering solution such as MailMarshal SEG, and can help your company to apply email policy and security automatically to internal messages. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 1

CHAPTER 1: INTRODUCTION WHAT DOES MAILMARSHAL EXCHANGE PROVIDE? As a content security solution for internal email, MailMarshal Exchange protects your network and your organization. MailMarshal Exchange enforces your Acceptable Use Policy to protect against viruses and other undesirable consequences of using email. MailMarshal Exchange scans the content of internal, inbound and outbound email messages, including the headers, message body, and attachments. MailMarshal can detect many conditions, such as: Presence of a virus (using one or more supported virus scanners) Presence of particular phrases in header, message, or attachment Size or type of attachments The product can also respond to messages that violate your Acceptable Use Policy, by taking actions such as: Quarantining a message for later review by administrators or users Deleting a message Redirecting a message Archiving a message for future reference MailMarshal Exchange provides email administrators with granular control of policies and the ability to delegate email monitoring and control to other personnel. MailMarshal Exchange provides the following user interfaces to meet the needs of a variety of administrators and your email recipients: Configurator For email security administrators to configure the product and establish email policy. 2 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 1: INTRODUCTION Console For email administrators and helpdesk personnel to monitor and control product activity. Also available as a Web based application. Quarantine Management Website For email recipients to verify quarantined email for their own email addresses. HOW MAILMARSHAL EXCHANGE HELPS YOU Unmonitored email presents both financial and legal dangers to a company. For example, virus infection and malicious code can be costly in employee time, repair time, and lost data. Inappropriate and offensive email content wastes time and is a potential liability. Using MailMarshal Exchange, your company can earn a significant ROI as you secure your network, protect corporate assets, reduce the potential for corporate liability, and improve workplace productivity. HOW MAILMARSHAL EXCHANGE WORKS MailMarshal Exchange is installed with the Exchange Server computer. It complements and is compatible with traditional Internet firewalls, SMTP mail servers, antivirus scanners, and other security applications. The MailMarshal Server software integrates with an Exchange Server Hub Transport server using the Transport Agent architecture. Email processed by Exchange is filtered by MailMarshal. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 3

CHAPTER 1: INTRODUCTION MailMarshal Exchange includes several components including the Array Manager, one or more email processing server installations (Transport Agent and Engine on an Exchange Server), a Microsoft SQL Server database, and optional management websites. Small organizations can install the components on a single computer. Large organizations can install the components across several computers. Enterprises can manage a distributed array of email processing servers with a single Array Manager computer. MailMarshal Exchange provides a number of user interfaces, including the Configurator, Console, Web Console, and Quarantine Management site. The Configurator lets security policy administrators set email policy for the entire organization from a central console. You can install additional user interfaces on other computers throughout the network as needed. Understanding What MailMarshal Exchange Does The MailMarshal Exchange installation plugs in to the Exchange Server through the Transport Agent, and extracts email that is queued for processing. The MailMarshal Engine unpacks each email, expanding any attached archive or compressed files. The Engine then checks each component against the email policy (rules) you have enabled, including XML Category scripts, TextCensor scripts, and any other rules you have enabled. You can alter the effects of MailMarshal Exchange rules by changing the rule order and by changing specific characteristics of the rule. MailMarshal Exchange also scans email for viruses using antivirus scanning software. MailMarshal Exchange supports several scanners with highthroughput interfaces. 4 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 1: INTRODUCTION After the MailMarshal Engine evaluates each email component against the rules, it determines whether to accept, modify, or quarantine the email. Accepted email is passed to Exchange Server, which then delivers it to the appropriate recipients. Modified email can be delivered to recipients with attachments removed. Virus-laden email, or other email that violates policy restrictions, is quarantined. MailMarshal Exchange can also notify administrators of specific actions or notify end-users of quarantined email. You can associate the appropriate rule action when you create or modify rules. Configuring MailMarshal Exchange You configure MailMarshal Exchange rules and settings using the Configurator interface, connected to the MailMarshal Array Manager. The Array Manager coordinates the activity of all other MailMarshal Servers in the array and connects with the user interfaces, optional Web server, and the database. You can enforce a wide variety of Acceptable Usage Policies by customizing the way MailMarshal Exchange processes email content and attachments. Monitoring and Reporting MailMarshal Exchange provides additional user interfaces for monitoring and daily email administration. The Console features the Dashboard to summarize MailMarshal Exchange activity and server health at a glance. Using the Console, email administrators can review email processing history for a message and view and release any quarantined message. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 5

CHAPTER 1: INTRODUCTION The administrator can grant other users access to specific Console functions or specific quarantine folders. Using this feature, the administrator can delegate basic tasks to help desk or departmental personnel. MailMarshal Exchange also offers a Web version of the Console to allow remote access to the Console capabilities. Email users can review and manage quarantined email using daily email digests and the Quarantine Management Web-based console. This console is a Web application you can easily deploy on your intranet Web server running Microsoft Internet Information Services (IIS). Administrators and managers can generate reports on MailMarshal Exchange activity using Marshal Reporting Console. Marshal Reporting Console uses SQL Server Reporting Services to product reports. This is a server application with a website interface. Marshal Reporting Console can deliver reports by web view, email, FTP, or local network files, and can schedule automatic delivery of reports. Marshal Reporting Console is provided as a separate package from M86 Security. This application is available to all MailMarshal Exchange customers. MAILMARSHAL EXCHANGE AND MAILMARSHAL SEG MailMarshal Exchange provides email content security for email sent or received internally when you use Microsoft Exchange as your email server. MailMarshal Exchange lets you scan internal email and apply your internal Acceptable Use Policy. MailMarshal SEG (formerly known as MailMarshal SMTP) is a gateway solution that applies email content security for email inbound from or outbound to the Internet. MailMarshal SEG provides industry leading anti-spam performance with a variety of proprietary technologies. 6 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 1: INTRODUCTION If you require both internal and external email content security, you can use both products. For more information about MailMarshal SEG, see the User Guide for MailMarshal SEG. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 7

CHAPTER 1: INTRODUCTION 8 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

Chapter 2 Planning Your MailMarshal Exchange Installation When planning to install MailMarshal Exchange, you should understand how MailMarshal Exchange manages email and the recommended installation scenarios based on your needs. This chapter provides information about these concepts and provides hardware requirements, software requirements, and planning checklists to help you through the planning process. PLANNING CHECKLIST Plan your MailMarshal Exchange installation by reading the following sections and completing the following checklist: Step See Section 1. Learn about important MailMarshal Exchange concepts. 2. Choose a standalone or array installation. 3. If you selected a standalone installation, choose the appropriate configuration for your environment. Understanding MailMarshal Exchange Components on page 11. Understanding Installation Scenarios on page 14. Standalone Installation on page 14. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 9

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION Step See Section 4. If you selected an array installation, determine the number and location for the MailMarshal Exchange Servers and Array Manager components. 5. Ensure the computers meet the hardware and software requirements. 6. Determine whether to use Microsoft SQL Server or SQL Express. 7. Decide where to install the MailMarshal Exchange folders. 8. Choose the antivirus software to use with MailMarshal Exchange. 9. Collect installation information about your email environment. Array Installation on page 15. Standalone Installation Requirements on page 16 or Array Installation Requirements on page 18 Database Software Considerations on page 23. Understanding MailMarshal Exchange Folder Locations on page 25. Supported Antivirus Software on page 26. Collecting Information for Installation on page 28. 10 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION UNDERSTANDING MAILMARSHAL EXCHANGE COMPONENTS MailMarshal Exchange consists of several software components, which you can install on different computers in your network. These components can be installed in a variety of configurations to suit any size organization from small businesses to distributed enterprises. While the components are shown on separate computers in the following figure, in lower volume scenarios you can install all components on a single computer. Exchange Servers with MailMarshal Agent MailMarshal Array Manager MailMarshal User Interfaces Configurator MailMarshal Database (Microsoft SQL Server or SQL Express) Console MailMarshal Web Components and MRC (Microsoft IIS Server) Report Console Directory Server Web Console Quarantine Management M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 11

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION MailMarshal Exchange Components MailMarshal Exchange includes the following components: Server Retrieves email from Exchange Server (Exchange Agent), applies policy in the form of rules (Engine), and returns email to Exchange Server for delivery (Exchange Agent)). You can install the MailMarshal Exchange Server components on one or more Exchange Servers in your installation. Array Manager Manages an array of MailMarshal Exchange email processing servers. The Array Manager connects to the email processing servers and to the database, hosted using Microsoft SQL Server or SQL Express. For more information, see Other Software and Services on page 13. Configurator User interface allowing email policy Administrators to define policy (rules) and configure MailMarshal Exchange. Console User interface allowing email Administrators to manage and monitor undelivered or filtered email. Web Console Web based interface used by roaming email Administrators just as they would use the Console. Quarantine Management Website Web based interface used by email users to view and manage quarantined email. Marshal Reporting Console Optional Web based interface used to generate traffic and management reports based on MailMarshal Exchange activity. 12 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION To operate properly, MailMarshal Exchange requires an Array Manager, at least one email processing Server, a database, a Configurator, and a Console. You can optionally install Web Components and the Marshal Reporting Console if you plan to use the additional features these components offer. Other Software and Services In addition, MailMarshal Exchange may require the following software and network services: Microsoft SQL Server or SQL Express The MailMarshal Exchange database stores configuration data and log information. If your email volume permits, you can use the free SQL Express. If your email volume is higher, use Microsoft SQL Server. If possible, install the database software and the MailMarshal Exchange Array Manager on the same computer. To use Marshal Reporting Console, you must install SQL Express Advanced Edition or SQL Server Reporting Services. For more information, see Array Installation Requirements on page 18 and Database Software Considerations on page 23. Directory Server If you want to import existing users and groups from your directory service for use in applying email Acceptable Use Policy, the MailMarshal Exchange Array Manager must be able to connect with your directory server. MailMarshal Exchange can connect with Microsoft Active Directory and most LDAP compliant directories. Microsoft Internet Information Services (Microsoft IIS) If you want to offer the Web Console and end-user Quarantine Management Website, install the MailMarshal Exchange Web Components. If you want to use Marshal Reporting Console, install this component. All web components require a server with Microsoft IIS and ASP.NET 4.0 installed. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 13

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION UNDERSTANDING INSTALLATION SCENARIOS You can choose between two installation scenarios, based on the number of Exchange Servers: Standalone, or basic installation Array installation The standalone installation scenario is appropriate for small organizations with a lower volume of email. This option allows smaller organizations to gain all the benefits of using MailMarshal Exchange with Exchange Server or Microsoft SBS. The array installation is appropriate for larger organizations where email volume is high. This option provides all the security and efficiency options larger organizations require. For more information about determining your configuration needs, contact your Technical Support or Sales Engineering representative. Standalone Installation For small organizations, a standalone installation provides convenience and value. In a standalone installation, you install all the MailMarshal Exchange components on a single Exchange Server. You may also be able to install the SQL Express database on the same single computer. You can install the MailMarshal Exchange Configurator and Console user interfaces on one or more computers in the local network. To use the MailMarshal Exchange Web Console, Quarantine Management Website, or Marshal Reporting Console, install these components on a Microsoft IIS Server. 14 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION Array Installation You can install MailMarshal Exchange as an array where your environment includes more than one Exchange Server in the Hub Transport role. Install the MailMarshal Exchange Array Manager, and the database if possible, on a dedicated computer. The location of the Array Manager can affect the performance of the administration and configuration tools used in MailMarshal Exchange but does not affect email processing performance. For best results, install the MailMarshal Exchange Array Manager component in one of the following locations, listed from most-preferred to least-preferred: On the same server as the Microsoft SQL Server hosting the database. Since the Array Manager is the only MailMarshal Exchange component that communicates directly with the database, installing the Array Manager on the computer that hosts Microsoft SQL Server or SQL Express results in the most efficient operation. On another computer in the network close to the computer hosting the database over a high-speed network connection. On an Active Directory Global Catalog or other Directory Server. The Array Manager communicates regularly to the Global Catalog if you are running Active directory, or through LDAP to another existing Directory Server. You can install the MailMarshal Exchange Configurator and Console on one or more computers in the local network. To use the MailMarshal Exchange Web Console, Quarantine Management Website, or Marshal Reporting Console, install these components on a Microsoft IIS server domain member inside the network. M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE 15

CHAPTER 2: PLANNING YOUR MAILMARSHAL EXCHANGE INSTALLATION HARDWARE AND SOFTWARE REQUIREMENTS Depending on the installation scenario you select and your estimated email volume, the specification for computers on which you install MailMarshal Exchange components can vary. The following sections specify the recommended hardware and software for various computers where you may be installing MailMarshal Exchange components. Consider all the requirements before mapping your MailMarshal Exchange installation. The MailMarshal Exchange product installation package includes many prerequisite software updates, including SQL Express and ASP.NET Framework. If you install MailMarshal Exchange from a Web download, you may have to download software you need from the vendor sites. To avoid a system restart during product installation, install any prerequisite software on your computers before you start installing MailMarshal Exchange. For more information about the latest requirements and supported environments, see the M86 Security Knowledge Base. Standalone Installation Requirements The following table lists system requirements for installing the MailMarshal Exchange Server, Array Manager, and selected database on a single Exchange Server. MailMarshal Exchange supports use of SQL Express or Microsoft SQL Server as host database. Note: SQL Server 2008 or SQL Express 2008 has additional prerequisites, including.net 3.5 SP1 and Windows Installer 4.5 16 M86 SECURITY, MAILMARSHAL EXCHANGE USER GUIDE