Transcription

AVG 9.0 Email Server EditionUser ManualDocument revision 90.4 (9. 3. 2010)C opyright AVG Technologies C Z, s.r.o. All rights reserved.All other trademarks are the property of their respective owners.This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, C opyright (C ) 1991-2, RSA DataSecurity, Inc. C reated 1991.This product uses code from C -SaC zech library, C opyright (c) 1996-2001 Jaromir Dolecek([email protected]).This product uses compression library zlib, C opyright (c) 1995-2002 Jean-loup Gailly and Mark Adler.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.1

Contents. 41. Introduction.52. AVGInstallation Requirements52.1 Operation.Systems Supported.52.2 Email ServersSupported52.3 Hardware.Requirements62.4 Uninstall .Previous Versions.62.5 MS ExchangeService Packs.83. AVGInstallation Process.83.1 InstallationLaunch. 93.2 License Agreement93.3 Checking.System Status.103.4 Select InstallationType103.5 Activate.AVG113.6 Custom.Installation - Destination Folder123.7 Custom.Installation - Component Selection133.8 Custom.Installation - DataCenter. 143.9 Installing.143.10 InstallationCompletion.174. E-mailScanner for MS Exchange Server 2007/2010. 174.1 Overview.204.2 E-mail Scannerfor MS Exchange (routing TA).214.3 E-mail Scannerfor MS Exchange (SMTP TA).224.4 E-mail Scannerfor MS Exchange (VSAPI).254.5 DetectionActions. 264.6 Mail Filtering.275. E-mailScanner for MS Exchange Server 2000/2003. 275.1 Overview. 305.2 VSAPI 2.0.305.3 E-mail Scannerfor MS Exchange (VSAPI).335.4 DetectionActions. 345.5 Mail FilteringA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.2

.356. AVGfor Kerio MailServer. 356.1 Configuration. 356.1.1 Antivirus.356.1.2 AttachmentFilter.407. Anti-SpamConfiguration.407.1 Anti-SpamInterface.427.2 Anti-SpamPrinciples.427.3 Anti-SpamSettings.427.3.1 Anti-SpamTraining Wizard.427.3.2 SelectFolder with Messages.427.3.3 Messagefiltering options. 477.4 Performance. 487.5 RBL7.6 Whitelist. 497.7 Blacklist. 50.517.8 AdvancedSettings.528. AVGSettings Manager.559. FAQand Technical SupportA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.3

1. IntroductionThis user manual provides comprehensive documentation for AVG 9.0 Email ServerEdition.Congratulations on your purchase of AVG 9.0 Email Server Edition!AVG 9.0 Email Server Edition is one of a range of award winning AVG productsdesigned to provide you with peace of mind and total security for your PC. As with allAVG products AVG 9.0 Email Server Edition has been completely re-designed, fromthe ground up, to deliver AVG’s renowned and accredited security protection in a new,more user friendly and efficient way.AVG has been designed and developed to protect your computing and networkingactivity. Enjoy the experience of full protection from AVG.Note: This documentation contains description of specific E-mail Server Editionfeatures. Should you require information about other AVG features, please consult theuser guide to Internet Security edition, which contains all the necessary details. Youcan download the guide from the http://www.avg.com.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.4

2. AVG Installation Requirements2.1. Operation Systems SupportedAVG 9.0 Email Server Edition is intended to protect e-mail servers running under thefollowing operating systems:·Windows 2008 Server Edition (x86 and x64)·Windows 2003 Server (x86, x64) SP1·Windows 2000 Server SP4 Update Rollup 12.2. Email Servers SupportedThe following e-mail servers are supported:·MS Exchange 2000 Server (with Service Pack 1 or higher) versionNote: For Exchange 2000 Server - Service Pack 1 (or higher) needs to beapplied before you can use the AVG engine; AVG for MS Exchange 2000/2003Server uses the VSAPI 2.0 (or 2.5 with Exchange 2003 Server) applicationinterface which is covered in this Service Pack.·MS Exchange 2003 Server version·MS Exchange 2007 Server version·MS Exchange 2010 Server version·AVG for Kerio MailServer – version 6.7.2 and higher2.3. Hardware RequirementsMinimum hardware requirements for AVG 9.0 Email Server Edition are:·Intel Pentium CPU 1.5 GHz·500 MB of free hard drive space (for installation purposes)·512 MB of RAM memoryRecommended hardware requirements for AVG 9.0 Email Server Edition are:·Intel Pentium CPU 1.8 GHzA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.5

·600 MB of free hard drive space (for installation purposes)·512 MB of RAM memory2.4. Uninstall Previous VersionsIf you have an older version of AVG Email Server installed, you will need to uninstall itmanually before installing AVG 9.0 Email Server Edition. You must manually performthe uninstallation of the previous version, using the standard windows functionality.·From the start menu Start/Settings/Control Panel/Add or RemovePrograms select the correct program from the list of installed software. Becareful to select the correct AVG program for uninstallation. You need touninstall the Email Server Edition before uninstalling the AVG File Server Edition.·Once you have uninstalled the Email Server Edition, you can proceed to uninstallyour previous version of AVG File Server Edition. This can be done easily from thestart menu Start/All Programs/AVG/Uninstall AVG·If you have previously used the AVG 8.x or older version, do not forget touninstall also individual server plug-ins.Note: It will be necessary to restart the store service during the uninstallationprocess.Exchange plug-in - run setupes.exe with the /uninstall parameter from thefolder where the plug-in was installed.e.g. C:\AVG4ES2K\setupes.exe /uninstallLotus Domino/Notes plug-in - run setupln.exe with the /uninstall parameterfrom folder where the plug-in was installed:e.g. C:\AVG4LN\setupln.exe /uninstall2.5. MS Exchange Service PacksSince AVG for MS Exchange 2000/2003 Server uses the VSAPI 2.0/2.5 virusscanning interface, you must have the Service Pack 1 (or higher) for MS Exchange2000 Server applied on your system. Follow the link below to get the latest ServicePack for MS Exchange 2000 Server:Service Pack for MS Exchange 2000 l/exchange/downloads/2000/sp3/default.mspxA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.6

For MS Exchange 2003 Server no additional service pack is needed; however, it isrecommended to keep your system as up to date with the latest service packs andhotfixes as possible in order to obtain maximal available security.Service Pack for MS Exchange 2003 Server ation/sp2/overview.mspxAt the beginning of the setup, all system libraries versions will be examined. If it isnecessary to install newer libraries, the installer will rename the old ones with a .deleteextension. They will be deleted after the system restart.Service Pack for MS Exchange 2007 Server ils.aspx?FamilyID 44c66ad6-f185-4a1da9ab-473c1188954c&displaylang enA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.7

3. AVG Installation ProcessTo install AVG on your computer, you need to get the latest installation file. You canuse the installation file from the CD that is a part of your box edition but this file mightbe out-of-date. Therefore we recommended getting the latest installation file online.You can download the file from the AVG website (at http://www.avg.com/download?prd msw).During the installation process you will be asked for your license number. Please makesure you have it available before starting the installation. The sales number can befound on the CD packaging. If you purchased your copy of AVG on-line, your licensenumber will have been delivered to you via e-mail.Once you have downloaded and saved the installation file on your hard drive, you canlaunch the installation process. The installation is a sequence of dialog windows with abrief description of what do at each step. In the following, we offer an explanation foreach dialog window:3.1. Installation LaunchThe installation process starts with the Welcome window. In here you select thelanguage used for the installation process. In the lower part of the dialog window findthe Choose your setup language item, and select the desired language from thedrop down menu. Then press the Next button to confirm and continue to the nextdialog.Attention: You will be able to choose also additional languages for the applicationinterface later during the installation process.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.8

3.2. License AgreementThe License Agreement dialog provides the full wording of the AVG licenseagreement. Please read it carefully and confirm that you have read, understood andaccept the agreement by checking the I have read license agreement checkboxand pressing the Accept button. If you do not agree with the license agreement pressthe Don't accept button, and the installation process will be terminated immediately.Use the Printable version button to open the license agreement in a new windowsuitable for printing.3.3. Checking System StatusHaving confirmed the license agreement you will be redirected to the CheckingSystem Status dialog. This dialog does not require any intervention; your system isbeing checked before the AVG installation can start. Please wait until the process hasfinished, then continue automatically to the following dialog.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.9

3.4. Select Installation TypeThe Select Installation Type dialog offers the choice of two installation options:Standard Installation and Custom Installation.For most users, it is highly recommended to keep to the Standard Installation thatinstalls AVG in fully automatic mode with settings predefined by the program vendor.This configuration provides maximum security combined with the optimal use ofresources. In the future, if the need arises to change the configuration, you willalways have the possibility to do so directly in the AVG application.Custom installation should only be used by experienced users who have a validreason to install AVG with non-standard settings. E.g. to fit specific systemrequirements.3.5. Activate AVGIn the Activate your AVG License dialog you have to fill in your registration data.Type in your name (User Name field) and the name of your organization (CompanyName field).Then enter your license number into the License Number text field. The licensenumber will be in the confirmation e-mail that you received after purchasing your AVGon-line. You must type in the number exactly as shown. If the digital form of thelicense number is available (in the email), it is recommended to use the copy and pastemethod to insert it.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.10

Press the Next button to continue the installation process.If in the previous step you have selected the standard installation, you will beredirected directly to the Setup Summary dialog. If custom installation was selectedyou will continue with the Destination Folder dialog.3.6. Custom Installation - Destination FolderThe Destination folder dialog allows you to specify the location where AVG should beinstalled. By default, AVG will be installed to the program files folder located on driveC:. If you want to change this location, use the Browse button to display the drivestructure, and select the respective folder. Press the Next button to confirm.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.11

3.7. Custom Installation - Component SelectionThe Component Selection dialog displays an overview of all AVG components thatcan be installed. If the default settings do not suit you, you can remove/add specificcomponents.However, you can only select from components that are included in yourpurchased AVG edition. Only those components will be offered to be installedwithin the Component Selection dialog!·Remote Administration component - if you intend to connect AVG to an AVGDataCenter (AVG Network Editions), then you need to select this option.Note: Only server components available in the list can be managed remotely!·AVG Settings Manager - a tool suitable mainly for network administrators thatallows you to copy, edit and distribute AVG configuration. The configuration canbe saved to a portable device (USB flash drive etc.) and then applied manually orany other way to chosen stations.·Additional Installed Languages - you can define which language(s) AVGshould be installed in. Check the Additional installed languages item and thenselect the desired languages from the respective menu.Basic overview of the individual server components:·Anti-Spam Server for MS ExchangeChecks all incoming e-mail messages and marks unwanted e-mails as SPAM. Ituses several analyzing methods to process each e-mail message, offeringmaximum possible protection against unwanted e-mail messages.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.12

·E-mail Scanner for MS Exchange (routing Transport Agent)Checks all incoming, outgoing and internal e-mail messages going through the MSExchange HUB role.Available for MS Exchange 2007 and can be installed for HUB role only.·E-mail Scanner for MS Exchange (SMTP Transport Agent)Checks all e-mail messages coming through the MS Exchange SMTP interface.Available for MS Exchange 2007 only and can be installed for both EDGE and HUBroles.·E-mail Scanner for MS Exchange (VSAPI)Checks all e-mail messages stored in user mailboxes. If any viruses are detected,they are moved to the Virus Vault, or completely removed.Note: There are different options available for MS Exchange 2007 and MS Exchange2003.Continue by pressing the Next button.3.8. Custom Installation - DataCenterIf you selected the Remote Administration Component module during moduleselection, then in this screen you can define the connection string for connecting toyour AVG DataCenter.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.13

3.9. InstallingThe Installing dialog shows the progress of the installation process, and does notrequire any intervention. Please wait until the installation is complete, then you will beredirected to the Installation Complete dialog.3.10. Installation CompletionThe First Run Wizard is automatically started during the setup process and will requirefew easy steps to fill-in before you can complete the installation:In the Schedule regular scans and updates dialog set up the interval for new updatefiles accessibility check-up, and define time when the schedule scan should belaunched. It is recommended to keep the default values. Press the Next button tocontinue.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.14

In this dialog you decide whether you want to activate the option of anonymousreporting of exploits and bad sites to AVG virus lab. If so, please mark the I agree toprovide ANONYMOUS information about detected threats to improve mysecurity option. Press the Finish button to continue.A new AVG Optimization Scan dialog will appear. The scanning optimizationfunctionality searches the Windows and Program files folders where it detectsappropriate files (at the moment those are the *.exe, *.dll and *.sys files) and savesthe information on these files. With the next access these files will not be scannedagain and this reduce the the scanning time significantly.We recommend to use this option and run the scanning optimization process bypressing the Optimize scanning now button.AVG is now installed on your computer and fully functional. The program is running inthe background in fully automatic mode.To individually setup protection for your e-mail server, follow the appropriate chapter:A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.15

·E-mail Scanner for MS Exchange Server 2007/2010·E-mail Scanner for MS Exchange Server 2000/2003·AVG for Kerio MailServerA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.16

4. E-mail Scanner for MS Exchange Server 2007/20104.1. OverviewThe AVG for MS Exchange Server 2007 configuration options are fully integrated withinthe AVG 9.0 Email Server Edition as server components.Basic overview of the individual server components:·Anti-Spam - Anti-Spam Server for MS ExchangeChecks all incoming e-mail messages and marks unwanted e-mails as SPAM. Ituses several analyzing methods to process each e-mail message, offeringmaximum possible protection against unwanted e-mail messages.·EMS (routing) - E-mail Scanner for MS Exchange (routing Transport Agent)Checks all incoming, outgoing and internal e-mail messages going through the MSExchange HUB role.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.17

Available for MS Exchange 2007 and can be installed for HUB role only.·EMS (SMTP) - E-mail Scanner for MS Exchange (SMTP Transport Agent)Checks all e-mail messages coming through the MS Exchange SMTP interface.Available for MS Exchange 2007 only and can be installed for both EDGE and HUBroles.·EMS (VSAPI) - E-mail Scanner for MS Exchange (VSAPI)Checks all e-mail messages stored in user mailboxes. If any viruses are detected,they are moved to the Virus Vault, or completely removed.Double-click a required component to open its interface. With the exception of AntiSpam, all the components share the following common control buttons and links:·Scan ResultsOpens a new dialog where you can review scan results:A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.18

Here you can check messages divided into several tabs according to theirseverity. See configuration of individual components for amending the severityand reporting.By default there are displayed only results for the last two days. You can changethe displayed period by amending the following options:oShow last - insert preferred days and hours.oShow selection - choose a custom time and date interval.oShow all - Displays results for the whole time period.Use Refresh button to reload the results.·Refresh statistical values - updates stats displayed above.·Reset statistical values - resets all the stats to zero.The working buttons are as follows:·Settings - use this button to open settings of the component.A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.19

·Back - press this button to return to the Server components overview.You will find more information on individual settings of all components in the chaptersbelow.4.2. E-mail Scanner for MS Exchange (routing TA)To open the settings of E-mail Scanner for MS Exchange (routing transport agent), select the Settings button from the interface of the component.From the Server components list select the E-mail Scanner for MS Exchange(routing TA) item:The Basic Settings section contains the following options:·Enable component - uncheck to disable the whole component.·Language - select preferred component language.·Certify messages - check this if you wish to add a certification note to allscanned messages. You can customize the message in the next field.The Logging settings section:A V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.20

·Log file size - choose a preferred size of the log file. Default value: 100 MB.The Scanning properties section:·Use Heuristics - check this box to enable heuristic analysis method duringscanning.·Report Potentially Unwanted Programs and Spyware threats - check thisoption to report the presence of potentially unwanted programs and spyware.·Scan inside archives - check this option to let the scanner look also insidearchived files (zip, rar, etc.)The E-mail attachments reporting section allows you to choose which items shouldbe reported during scanning. If checked, each e-mail with such an item will contain[INFORMATION] tag in the message subject. This is the default configuration whichcan be easily amended in the Detection actions section, part Information (seebelow).The following options are available:·Report password protected archives·Report password protected documents·Report files containing macro·Report hidden extensionsThere are also these sub-items available in the following tree structure:·Detection actions·Mail filtering4.3. E-mail Scanner for MS Exchange (SMTP TA)The configuration for the E-mail Scanner for MS Exchange (SMTP Transport Agent)is exactly the same as in the case of routing transport agent. For more informationplease see the E-mail Scanner for MS Exchange (routing TA) chapter above.There are also these sub-items available in the following tree structure:·Detection actions·Mail filteringA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.21

4.4. E-mail Scanner for MS Exchange (VSAPI)This item contains settings of the E-mail Scanner for MS Exchange (VSAPI).The Basic Settings section contains the following options:·Enable component - uncheck to disable the whole component.·Language - select preferred component language.The Logging settings section:·Log file size - choose a preferred size of the log file. Default value: 100 MB.The Scan settings section:·Background Scan – you can enable or disable the background scanning processhere. Background scanning is one of the features of the VSAPI 2.0/2.5application interface. It provides threaded scanning of the Exchange MessagingDatabases. Whenever an item that has not been scanned with the latest AVGvirus base update is encountered in the users’ mailbox folders, it is submitted toAVG for Exchange 2007 Server to be scanned. Scanning and searching for theA V G 9 .0 E mail Server E dition 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.22

not examined objects runs in parallel.A specific low priority thread is used for each database, which guarantees othertasks (e.g. e-mail messages storage in the Microsoft Exchange database) arealways carried out preferentially.·Proactive Scan (incoming messages)You can enable or disable the proactive scanning function of VSAPI 2.0/2.5 here.This scanning occurs when an item is delivered to a folder, but a request has notbeen made by a client.As soon as messages are submitted to the Exchange store, they enter the globalscanning queue as low priority (maximum of 30 items). They are scanned on thefirst in, first out (FIFO) basis. If an item is accessed while still in the queue, it ischanged to high priority.Note: Overflow messages will continue to the store unscanned.Note: Even if you disable both Background Scan and Proactive Scan options, the onaccess scanner will be still active when an user will try to download a message withthe MS Outlook client.·Scan RTF - you can specify here, whether the RTF file type should be scannedor not.·Number of Scanning Threads - the scanning process is threaded by default toincrease the overall scanning performance by a certain level of parallelism. Youcan change the threads count here.The default number of threads is computed as 2 times the‘number of processors’ 1.The minimum number of threads is computed as ('number of processors' 1)divided by 2.The maximum number of threads is computed as 'Number of Processors' multipliedby 5 1.If the value is the minimum or lesser value or the maximum or greater, thedefault value is used.·Scan Timeout - the maximum continuous interval (in seconds) for one thread toaccess the message that is being scanned (the default value is 180 seconds).The Scanning properties section:·Use Heuristics - check this box to enable heuristic analysis method duringscanning.·Report Potentially Unwanted Programs and Spyware threats - check thisoption to report the presence of potentially unwanted programs and spyware.A V G 9 .0 E mail

Note: For Exchange 2000 Server - Service Pack 1 (or higher) needs to be applied before you can use the AVG engine; AVG for MS Exchange 2000/2003 Server uses the VSAPI 2.0 (or 2.5 with Exchange 2003 Server) application interface which is covered in this Service Pack. MS Exchange 2003 Server version MS Exchange 2007 Server version