STATIS- TICS As the administrator of your email domain hosted in Norman Online Protection service, you are able to configure a number of settings. This guide shows you how. 1
Norman AS is not liable for any form of loss or damage arising from use of the documentation or from errors or deficiencies therein, including but not limited to loss of earnings. The information in this document is subject to change without notice. No part of this documentation may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording or information storage and retrieval systems, for any purpose other than the purchaser s personal use, without the explicit written permission of Norman AS. The Norman logo is a registered trademark of Norman AS. Names of products mentioned in this documentation are either trademarks or registered trademarks of their respective owners. They are mentioned for identification purposes only. Copyright 2010 Norman AS. All rights reserved. 2
Contents Introduction to Norman Online Protection...4 NOP Multi-Layer Spam Scanning...5 NOP Administrator Guide...6 Here is what you have to do...6 Domain level settings...7 1. Changing domain level settings for Virus filtering...7 2. Changing domain level settings for Attachment filtering...7 3. Changing domain level settings for Phishing filtering...7 4. Changing domain level settings for Spam filtering...7 5. Managing Trusted Senders (whitelist)...8 6. Managing Blocked Senders (blacklist)...8 7. Language Filter...9 8. Reporting...9 9. Corporate Quarantine...10 10. Messaging Audit...10 User level settings... 11 3
Introduction to Norman Online Protection (NOP) Norman Online Protection is a subscription service where all received emails are scanned and passed through a spam filter before entering the company IT-system. It blocks spam, phishing attempts, viruses, and other email borne threats before they can reach your organization s system. The service is placed outside the company network system and does not require either software or hardware installations. NOP stops viruses, phishing attaches and spam before even entering the company network. Sleep tight with Norman Online Protection Computer security is an endless struggle to be ahead of any threats at any time and to have enough knowledge about how to prevent an attack. Norman has more than 25 years of experience in fighting computer crime and is the leading competence centre in Norway. The NOP service uses Norman knowledge and technology proven to be the number one within computer security. Subscription service - no extra hardware or software The subscription service makes sure that all emails going into the organization are sent through Norman Online Protection. This requires no extra hardware or software implementation, only a onetime configuration of the email service. Norman will take care of the rest. NORMAN ONLINE PROTECTION OFFERS Advanced reporting Compliance tools An intuitive interface High performance and effective scaling Granular security and access control for inbound and outbound messages 4
NOP Multi-Layer Spam Scanning Efficient protection against electronic threats Efficient, versatile and reliable, NOP features a proprietary spam scan engine and multi-layered analytic technology to protect your email from all types of threats. All emails processed by NOP undergo a layered scan approach: Connection-level performs optional IP-based checks using a customizable list of RBL servers and other security features. Sender Reputation System (SRS) is a connection-based (IP) system which is highly reactive to spam waves and allows reputation classification based on IP addresses Forbidden attachments blocking allows the administrator to select specific attachment types to block automatically Virus and Malware protection analyzes messages using Norman virus engines. Trusted and Blocked sender policies are a list of actions to execute based on specific sender domains or email addresses (whitelist and blacklist) Spam, phishing & foreign language filtering filters out spam, phishing and unauthorized languages Sieve policy management and custom filters allows complete customization of filtering and implementation of Policy Management procedures through an easy and fully integrated Sieve scripting language. Proprietary Sequential Content Analyzer (SCA ) is Norman s advanced Artificial Intelligence engine and performs deep scanning and analysis of all email (including image spam, text and URLs) using definitions which can be updated on the fly at custom time intervals. Additionally, the administrator may configure a series of overrides for every feature of NOP (Reports, Attachments, Phishing, Virus, Spam, Trusted and Blocked Senders, Message Audit and Language Filters). The product also allows task delegation to let domain administrators manage their own domain settings and let endusers handle their own quarantine and usersettings. Override and delegation can be set: System-wide Per domain Per user 5
NOP Administrartor Guide As the administrator of your email domain(s) hosted in Norman Online Protection service you are able to configure your domain settings, mailboxes and their aliases, filtering level for antivirus, antispam and file attachments. In addition you can manage individual settings per emailbox if they should not filter in the same way as your default settings. You can also manage quarantine and quarantine settings. When you signed up for Norman Online Protection service you were given an administrator account name and password that allow you to enter the Norman Online Protection web administration application. Here is what you have to do: 1. Log into the WebAdmin program with the Administrator account name and password use this link http://nop.norman.no/webadmin 2. This is the welcome screen after login where you can manage your domain settings both on domain level and user level. When you signed up for Norman Online Protection service you were given an administrator account name and password that allow you to enter the Norman Online Protection web administration application. 6
Domain level settings 1. Changing domain level settings for Virus filtering a) Clicking on Virus in the menu to the left will let you configure your antivirus domain settings. If you click on the to the right of the function you will get a pop-up that explains what this means. Above you can see the configuration screen for antivirus settings. If you would like to change the default, do the following: i) Tick off the override my server defaults ii) Then change the settings you would like to change and click save 2. Changing domain level settings for Attachment filtering a) Clicking on Attachments in the menu to the left will let you configure your antivirus domain settings. If you click on the to the right of the function you will get a pop-up that explains what this means. Below you can se the configuration screen for attachment filtering settings. If you would like to change the default, do the following: i) Tick off the override my server defaults ii) Then change the settings you would like to change and click save Configuration screen for attachment filtering settings. 3. Changing domain level settings for Phishing filtering a. Clicking on Phising in the menu to the left will let you configure your phising domain settings. If you click on the to the right of the function you will get a pop-up that explains what this means. If you would like to change the default, do the following: i. Tick off the override my server defaults ii. Then change the settings you would like to change and click save 4. Changing domain level settings for Spam filtering b. Clicking on Spam in the menu to the left will let you configure your antispam domain settings. If you click on the to the right of the function you will get a pop-up that explains what this means. If you would like to change the default, do the following: i. Tick off the override my server defaults ii. Then change the settings you would like to change and click save 7
5. Managing Trusted Senders (whitelist) a. Clicking on Trusted Senders in the menu to the left, will let you manage the corporate safe list. Here you can add domains, sub domains or specific email addresses that you will allow even if some of the emails from senders within the safe-list may send emails that normally would be caught by the spam filter. Typical entries could be list server s addresses or domains that multiple people in the company subscribe to. You can add domains, sub domains or specific email addresses that you will allow even if some of the emails from senders within the safe-list may send emails that normally would be caught by the spam filter. 6. Managing Blocked Senders (blacklist) a. Clicking on Blocked list in the menu to the left, will let you manage the corporate blocked list. Here you can add domains, sub domains or specific email addresses that you will block permanently. b. You will also be able to set specific handling preferences for emails stopped by the blocked list. c. Normally companies will let the user manage their personal blocked list themselves instead of using the corporate blocking a domain or email address on the domain level. Here you can add domains, sub domains or specific email addresses that you will block permanently. 8
7. Language Filter a) From this panel, you can configure NOP for foreign language filtering. b) Override server default settings i) Click to override the server settings ii) When a foreign language is detected: Select what action is to be taken for messages with foreign language content (1) Delete message immediately (2) Block message into Quarantine (3) Tag and let message pass through (with an optional subject) iii) Select language content to block (1) Click on» to add a language to the Blocked Languages list (2) Click on «to remove language from the Blocked list Configure NOP for foreign language filtering. 8. Reporting a. Clicking on Reporting in the menu to the left will let you chose how often the Quarantine report will be sent to the individual email address within your company. Default is daily and recommended. Chose how often the Quarantine report will be sent to the individual email address within your company. 9
9. Corporate Quarantine a. Clicking on Quarantine in the menu to the left will let will let you manage the company s quarantine for all users. You can manage spam, file attachment and virus quarantine. b. On the different tags you will also see the number of items in quarantine for each of the filtering types. c. Here you can view, release or delete email that has been quarantined This is useful for releasing emails at a user s request before a quarantine report has been issued. Manage the company s quarantine for all users. You can manage spam, file attachment and virus quarantine. 10. Messaging Audit System administrators can audit email messages and see the most recent transaction history, for mail processing, in the Message Audit view of the WebMonitor application. The Message Audit displays a view of all message transactions in a 1-line per message summary. This feature tracks message traffic inbound external mail, outbound local mail and mail from local user to local user. a) From this panel, you can override the system settings for Audit logging. (1) Override server default settings (a) Enable to override the system properties for Audit logging (2) Enable Message Audit Logging (a) Use to enable Message Audit logging for a domain (3) Log expires in: (a) Enter the number of days before the log expires 10
User level settings Clicking on the Users tab at the top right allows you to view all email addresses within your domain, you can view all alphabetically or you can search by name. Click on edit at the right hand of the user name when you want to change the individual user settings. View all email addresses within your domain. This will open the following screen As you see you will be able to set the same settings as for the corporate domain, but the settings you set here will only be valid for this email address/user and override the corporate domain settings. If you have any questions not covered by this user guide, please contact your contact person or support@norman.com 11
NORWAY DENMARK SWEDEN UNITED KINGDOM Norman AS Strandvn. 37, Postboks 43 1324 Lysaker, Norway Tel: +47 67 10 97 00 Email: norman@norman.no Web: www.norman.no Norman Data Defense Systems A/S Blangstedgårdsvej 1 5220 Odense SØ, Denmark Tel: +45 63 11 05 08 Email: info@normandk.com Web: www.norman.com/dk Norman Data Defense Systems AB Södra Grytsgatan 7, 3tr, Norrköping Science Park 602 33 Norrköping, Sweden Tel: +46 011-230 330 Email: sales.se@norman.no Web: www.norman.com/se Norman Data Defense Systems (UK) Ltd CBXII, West Wing 382-390 Midsummer Boulevard Central Milton Keynes MK9 2RG, UK Tel: +44-01908 847413 Email: norman@normanuk.com Web: www.normanuk.com NETHERLANDS, BELGIUM, LUXEMBOURG FRANCE SPAIN ITALY Norman Data Defense Systems B.V Diamantlaan 4 Postbus 159 2130 AD Hoofddorp, The Netherlands Tel: +31-23-7890222 Email: info@norman.nl Web: www.norman.nl Norman Data Defense Systems Centre NCI 8 rue de Berri 75008 Paris, France Tel: +33 1 42 99 95 09 Email: info@norman.fr Web: www.norman.fr Norman Data Defense Systems Camino Cerro de los Gamos 1, Edif.1 28224 Pozuelo de Alarcón MADRID, Spain Tel: +34 (0)91 790 11 31 Email: norman@normandata.es Web: www.normandata.es Norman Data Defense Systems Centro Cassina Plaza Via Roma, 108 20060 Cassina de Pecchi (MI), Italy Tel: +39 02 951 58 952 Email: info@normanit.com Web: www.normanit.com GERMANY Norman Data Defense Systems GmbH Gladbecker Strasse 3 40472 Düsseldorf, Germany Tel: +49-211 / 5 86 99-0 Email: info@norman.de Web: www.norman.de USA Norman Data Defense Systems Inc 9302 Lee Highway, Suite 950A Fairfax, VA 22031, USA Tel: +1 (703) 267 6109 Email: norman@norman.com Web: www.norman.com GERMANY Norman Data Defense Systems GmbH Niederlassung München Ludwigstr. 47 85399 Hallbergmoos, Germany Tel: +49-811 / 5 41 84-0 Email: info@norman.de Web: www.norman.de USA Norman Data Defense Systems, Inc. 2603 Camino Ramon, Suite 200, San Ramon, CA-94582, USA Tel: +1 (703) 279-6668 Email: sandbox@norman.com Web: www.norman.com www.malwareanalyzer.com SWITZERLAND Norman Data Defense Systems AG Münchensteinerstrasse 43 4052 Basel, Switzerland Tel: +41-61 317 25 25 Email: norman@norman.ch Web: www.norman.ch STATIS- TICS www.norman.com