McAfee GSSCDE-AA-DA User Guide

McAfee GSSCDE-AA-DA - GroupShield Security Suite Manual

McAfee GSSCDE-AA-DA manual content summary:

  • McAfee GSSCDE-AA-DA | User Guide - Page 1
    McAfee® GroupShield™ version 7.0 For Microsoft® Exchange User Guide revision 1.0
  • McAfee GSSCDE-AA-DA | User Guide - Page 2
    , INTRUSION PREVENTION THROUGH INNOVATION, MCAFEE, MCAFEE (AND IN KATAKANA), MCAFEE AND DESIGN, MCAFEE.COM, MCAFEE VIRUSSCAN, NET TOOLS, NET TOOLS , Santa Clara, California 95054, U.S.A., © 2003. • Software copyrighted by Gisle Aas. © 1995-2003. • Software copyrighted by Michael A. Chase, © 1999-2000
  • McAfee GSSCDE-AA-DA | User Guide - Page 3
    GroupShield Features 11 What is New 12 Features not supported 15 Using this Guide 16 Audience 16 Conventions 17 Getting product information 18 Standard 30 Buffer Overflow Protection 30 Installing McAfee Anti-Spam for GroupShield 31 Silent installation 32 Configuring GroupShield in
  • McAfee GSSCDE-AA-DA | User Guide - Page 4
    ® GroupShield™ 7.0 User Guide Contents Testing GroupShield installation using McAfee Virtual Technician 40 Quarantining using McAfee Quarantine Manager 4.1 41 Upgrading Blacklists and Whitelists 42 Maintaining your GroupShield application 43 Modifying the GroupShield installation 43 Repairing
  • McAfee GSSCDE-AA-DA | User Guide - Page 5
    McAfee® GroupShield™ 7.0 User Guide Contents Creating a new on-demand scan task 84 Creating a new 163 On-access settings 163 Notifications 167 Anti spam 168 Detected items 168 McAfee Quarantine Manager 169 Local database 169 User interface preferences 170 Dashboard settings 170 Graph
  • McAfee GSSCDE-AA-DA | User Guide - Page 6
    McAfee® GroupShield™ 7.0 User Guide Contents Diagnostics 171 Debug logging 171 Error reporting service 172 Event logging 172 Product log 172 Product log 173 DAT settings 174 Import and export configuration 174 Index 177 6
  • McAfee GSSCDE-AA-DA | User Guide - Page 7
    ? „ Where GroupShield sits on your network? „ Other areas to protect „ GroupShield Features „ What is New? „ Features not supported What is GroupShield? McAfee® GroupShield™ 7.0 software protects Microsoft® Exchange Server 2003 and Microsoft® Exchange Server 2007 from virus, phish, spam, unwanted
  • McAfee GSSCDE-AA-DA | User Guide - Page 8
    McAfee® GroupShield™ 7.0 User Guide 1 Introduction About GroupShield for Exchange Each time, an email Exchange Server 2007 (with Edge Transport or Hub Transport-only role), GroupShield Note uses McAfee® Transport Scanner (and not Microsoft® Transport Scanner) to protect the server. However,
  • McAfee GSSCDE-AA-DA | User Guide - Page 9
    McAfee® GroupShield™ 7.0 User Guide 1 Introduction About GroupShield for Exchange „ protect the email server thousands of different drivers, each of which contains detailed instructions on how to identify a virus or a type of virus. The McAfee® Security scanning engine works with the DAT files. It
  • McAfee GSSCDE-AA-DA | User Guide - Page 10
    ™ 7.0 User Guide 1 Introduction About GroupShield for Exchange „ Document repository protection - McAfee PortalShield Using computers all your McAfee anti-virus solutions across your network from a single point, ensuring that the engines and the virus definition (DAT) files are up-to-date and that
  • McAfee GSSCDE-AA-DA | User Guide - Page 11
    McAfee® GroupShield™ 7.0 User Guide 1 Introduction GroupShield Features GroupShield Features GroupShield includes these major features on Exchange Server 2003 and 2007: „ Anti-virus scanning - GroupShield provides the ability to scan
  • McAfee GSSCDE-AA-DA | User Guide - Page 12
    Guide 1 Introduction GroupShield Features What is New? „ New Web Based User Interface - GroupShield for Exchange provides a user friendly web-based interface based on DHTML. To access this, click Start | Programs | McAfee of an alert message using the Style, Font, Size, and Token menus. „ Time based
  • McAfee GSSCDE-AA-DA | User Guide - Page 13
    McAfee® GroupShield™ 7.0 User Guide 1 Introduction GroupShield Features „ Filter for Password Protected ZIP Files - For more that enables the transfer of non-ASCII formats over protocols (like SMTP) that supports only 7-bit ASCII characters. GroupShield enables you to specify how such MIME messages
  • McAfee GSSCDE-AA-DA | User Guide - Page 14
    User Guide 1 Introduction GroupShield Features „ McAfee ProtectionPilot product settings, and keeping those products up-to-date. For more information, refer to the chapter GroupShield supports direction-based scanning. It scans inbound, outbound, and internal email messages using McAfee®
  • McAfee GSSCDE-AA-DA | User Guide - Page 15
    Features „ Integration with McAfee Common Management Agent (CMA) version 3.6 and above - You can use the CMA component to manage GroupShield and perform product updates, scheduled tasks, and events reporting as a part of the core installation. Features not supported „ Integration with black
  • McAfee GSSCDE-AA-DA | User Guide - Page 16
    ® GroupShield™ 7.0 User Guide 1 Introduction Using this Guide Using this Guide This guide describes the sequential process of installing McAfee GroupShield™ 7.0 for Microsoft® Exchange 2003 and 2007. It also gives a detailed description of the software usage. Topics covered are: „ Pre-Installation
  • McAfee GSSCDE-AA-DA | User Guide - Page 17
    (headings) within the material. Example: Refer to the VirusScan Enterprise Product Guide for more information. Blue A web address (URL) and/or a live link. Example: Visit the McAfee web site at: http://www.mcafee.com Angle brackets enclose a generic term. Example: In the console tree
  • McAfee GSSCDE-AA-DA | User Guide - Page 18
    , product documentation comes as Adobe Acrobat .PDF files, available on the product CD or from the McAfee download site. Standard documentation User Guide - System requirements and instructions for installing and starting the software. Getting started with the product and its features, detailed
  • McAfee GSSCDE-AA-DA | User Guide - Page 19
    Support http://www.mcafee.com/us/support/ KnowledgeBase Search http://knowledge.mcafee.com/ McAfee Technical Support ServicePortal (Logon credentials required) https://mysupport.mcafee.com/eservice_enu/start.swe Customer Service Web http://www.mcafee.com/us/support/index.html http://www.mcafee.com
  • McAfee GSSCDE-AA-DA | User Guide - Page 20
    McAfee® GroupShield™ 7.0 User Guide 1 Introduction Contact information 20
  • McAfee GSSCDE-AA-DA | User Guide - Page 21
    : „ Make sure Microsoft® Exchange Server 2003/2007 is installed on the installation server. „ Manually uninstall GroupShield software older than version 6.0.2. GroupShield for Exchange 7.0 supports automatic upgrading of the software from version 6.0.2 and above. Note „ Uninstall SpamKilller for
  • McAfee GSSCDE-AA-DA | User Guide - Page 22
    /2007. Refer to Installing GroupShield for Microsoft® Exchange Server 2003/2007 on page 26 for step-by-step instructions. Silent installation You can install McAfee® GroupShield software on Microsoft® Exchange Server 2003/2007 without user interaction. This is also known as unattended installation
  • McAfee GSSCDE-AA-DA | User Guide - Page 23
    McAfee® GroupShield™ 7.0 User Guide 2 Pre-Installation System requirements System requirements Before you install GroupShield, ensure that your server meets these requirements: Table 2-1 System Requirements Processor Memory Available Hard disk space Operating system Exchange Servers Supported
  • McAfee GSSCDE-AA-DA | User Guide - Page 24
    McAfee® GroupShield™ 7.0 User Guide 2 Pre-Installation System requirements 24
  • McAfee GSSCDE-AA-DA | User Guide - Page 25
    distributes GroupShield for Exchange in two ways: „ As an archived file that you download from the McAfee website or from other electronic services. „ On the Total Virus Defense (TVD), the Active Virus Defense (AVD) or the suite CDs. Once you have downloaded the archive file or placed the
  • McAfee GSSCDE-AA-DA | User Guide - Page 26
    ® GroupShield™ for Microsoft® Exchange Server 2003/2007 does not upgrade McAfee® SpamKiller for Exchange installation. You should uninstall McAfee® SpamKiller Caution for Exchange manually before installing GroupShield for Exchange 7.0. Installing GroupShield for Microsoft® Exchange Server 2003
  • McAfee GSSCDE-AA-DA | User Guide - Page 27
    for Exchange - Component selection „ McAfee GroupShield for Exchange 7.0 is selected by default. „ Buffer Overflow Protection provides buffer overflow protection through host intrusion prevention using McAfee VirusScan Enterprise version 8.5i. Buffer overflow protection is not supported on 64-bit
  • McAfee GSSCDE-AA-DA | User Guide - Page 28
    GroupShield™ 7.0 User Guide 3 Installing the Software Installing GroupShield for Microsoft® Exchange Server 2003/2007 „ McAfee Anti-Spam for GroupShield (Evaluation) provides filters to block spam and phish emails. Anti-Spam and Anti-Phish feature is available only if you install McAfee Anti-Spam
  • McAfee GSSCDE-AA-DA | User Guide - Page 29
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Installing GroupShield for Microsoft® the list of sites configured for update. The user interface is similar to that of McAfee VirusScan Enterprise. This application modifies the sitelist.xml file of the current machine. EditSiteList.exe
  • McAfee GSSCDE-AA-DA | User Guide - Page 30
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Installing additional components Permissions can to install additional software components, you must select them in the installer. Note McAfee Anti-Spam for GroupShield component requires a license key for activation. Buffer Overflow
  • McAfee GSSCDE-AA-DA | User Guide - Page 31
    . For more information on buffer overflow protection, refer to VirusScan Enterprise v 8.5 User Guide. Note Installing McAfee Anti-Spam for GroupShield Anti-Spam and Anti-Phish feature is available only if you Next to install the Anti-Spam feature, then click Finish to complete the installation. 31
  • McAfee GSSCDE-AA-DA | User Guide - Page 32
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Silent installation Silent installation The that it requires little involvement compared to a manual installation. Before installation, please ensure that the Windows Net Logon Service is running on the Windows server using domain
  • McAfee GSSCDE-AA-DA | User Guide - Page 33
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the manually execute the respective setup files. Configuring GroupShield in a cluster environment This section describes the steps to configure GroupShield in a cluster environment. GroupShield 7.0 is supported on a Microsoft® Cluster Service
  • McAfee GSSCDE-AA-DA | User Guide - Page 34
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Configuring GroupShield in a cluster environment This is built on the failover and management features provided by the Microsoft® Cluster service. The Exchange Virtual Server uses its own network identity and not the identity of any
  • McAfee GSSCDE-AA-DA | User Guide - Page 35
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Configuring GroupShield in a cluster environment Name and Description for the Resource. 3 From the Resource type drop-down list, select McAfee Cluster Framework. 4 From the Group drop-down list, select the Cluster group to which the
  • McAfee GSSCDE-AA-DA | User Guide - Page 36
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Configuring GroupShield in a cluster environment 7 Click for Exchange 7.0 on a (n+1) cluster from ePolicy Orchestrator server is not Note supported. Product update is specific to a GroupShield for Exchange 7.0 instance in an Exchange
  • McAfee GSSCDE-AA-DA | User Guide - Page 37
    folder on the shared drive. You may delete this folder manually after uninstalling the software. Note Upgrading GroupShield from v6.0.2 or higher McAfee® GroupShield for Exchange version 7.0 supports upgrading your configuration settings from the previous version of the product. When upgrading
  • McAfee GSSCDE-AA-DA | User Guide - Page 38
    McAfee® GroupShield™ 7.0 User Guide 3 Installing the Software Upgrading GroupShield from v6.0.2 or higher 3 When the installation is completed successfully, your system is upgraded to GroupShield for Exchange version 7.0. After
  • McAfee GSSCDE-AA-DA | User Guide - Page 39
    important to consider when performing post installation and maintenance tasks: „ Testing your GroupShield installation „ Quarantining using McAfee Quarantine Manager „ Maintaining your GroupShield application „ Uninstalling the GroupShield for Exchange software Testing your GroupShield installation
  • McAfee GSSCDE-AA-DA | User Guide - Page 40
    McAfee® GroupShield™ 7.0 User Guide 4 Post-Installation Tasks and Maintenance Testing your GroupShield installation 1 Copy the following line into its own file, then save the file with the name EICAR.COM: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TESTFILE!$H+H* The file size will be 68
  • McAfee GSSCDE-AA-DA | User Guide - Page 41
    is particularly effective in managing unsolicited bulk email or spam. This guide does not provide detailed information about installing or using McAfee® Quarantine Manager software. See McAfee Quarantine Manager v 4.1 Product Guide Note for more information. 1 Install GroupShield for Exchange on
  • McAfee GSSCDE-AA-DA | User Guide - Page 42
    ® GroupShield™ 7.0 User Guide 4 Post-Installation Tasks and Maintenance Quarantining using McAfee Quarantine Manager 4.1 8 Click Apply, to save the changes. Once you have completed the above setup, GroupShield starts to quarantine detected items on McAfee Quarantine Manager Server; however it
  • McAfee GSSCDE-AA-DA | User Guide - Page 43
    McAfee® GroupShield™ 7.0 User Guide -h: help you can also substitute the parameters: Note - m with /m -d with /d -h with /h help you maintain your installation. Refer to these topics for detailed instructions: „ Modifying the GroupShield installation „ Repairing the GroupShield installation „
  • McAfee GSSCDE-AA-DA | User Guide - Page 44
    McAfee® GroupShield™ 7.0 User Guide 4 Post-Installation Tasks and Maintenance Maintaining your GroupShield Double-click Add/Remove Programs. The Add/Remove Programs dialog box appears. 5 Select McAfee GroupShield for Exchange from the list. 6 Click Change. The Application Maintenance dialog is
  • McAfee GSSCDE-AA-DA | User Guide - Page 45
    McAfee® GroupShield™ 7.0 User Guide 8 Click Finish to close the dialog box. 4 Post-Installation Tasks Alternatively, you can follow the manual steps given below to restore the default settings and values: Note 1 Stop all Exchange Servers and GroupShield for Exchange services on the host. 2 Copy and
  • McAfee GSSCDE-AA-DA | User Guide - Page 46
    McAfee® GroupShield™ 7.0 User Guide 4 Post-Installation Tasks and Maintenance Uninstalling GroupShield for Exchange 9 Once the software is removed, a message is displayed. Click Finish to close the dialog box. 46
  • McAfee GSSCDE-AA-DA | User Guide - Page 47
    Integrating with ePolicy Orchestrator 3.6 Introduction This chapter describes how to configure GroupShield for Exchange using McAfee ePolicy Orchestrator management software version 3.6. To use this guide effectively, you need to be familiar with ePolicy Orchestrator. See the ePolicy Orchestrator v3
  • McAfee GSSCDE-AA-DA | User Guide - Page 48
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Introduction Introducing ePolicy Orchestrator console The Microsoft® Management Console (MMC) is your interface to the ePolicy Orchestrator product and its features.
  • McAfee GSSCDE-AA-DA | User Guide - Page 49
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Installation Assumptions: „ Computer 1: ePolicy Orchestrator version 3.6 is installed and configured on a supported operating system. „ Computer 2: Microsoft® Exchange Server 2003/2007 is installed and configured on
  • McAfee GSSCDE-AA-DA | User Guide - Page 50
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Installation 3 Click Add. The the client computer: Tip a Click ePO Agent link on the right pane. b Click McAfee Default link for ePolicy Orchestrator agent, the ePolicy Orchestrator Agent page appears. c Select Show
  • McAfee GSSCDE-AA-DA | User Guide - Page 51
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Installation Adding GroupShield Installation Package files to the ePolicy repository 14 Click Repository. The Repository page appears. 15 Click Check in
  • McAfee GSSCDE-AA-DA | User Guide - Page 52
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Installation Installing GroupShield on the client computer 1 From the ePolicy Orchestrator console, select the Site or the Exchange Server on which
  • McAfee GSSCDE-AA-DA | User Guide - Page 53
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Configuring GroupShield Policies Importing the GSE6.0 to GSE7.0 is completed Successfully.... Please follow the on-screen instructions, if upgrading fails. Errors or Exceptions during the upgrade are logged in
  • McAfee GSSCDE-AA-DA | User Guide - Page 54
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Configuring tabs appear in the details pane. 4 In the Policies tab, under GroupShield for Exchange, click McAfee Default for a Category to view the default policy settings. The Policy Settings dialog box appears.
  • McAfee GSSCDE-AA-DA | User Guide - Page 55
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Scheduling tasks 2 Click the Policy Name drop-down list and select New Policy. The Create a new policy dialog box appears. You cannot configure the McAfee Default policy settings for a selected Category. To configure a
  • McAfee GSSCDE-AA-DA | User Guide - Page 56
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Scheduling tasks „ On-Demand AutoUpdate task GroupShield 7.0 software can only provide full protection if you keep it up-to-date with the latest anti-virus definitions (DATs), anti-spam rules, spam engine, and virus
  • McAfee GSSCDE-AA-DA | User Guide - Page 57
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Scheduling tasks 2 Click Settings update the product with latest DATs, spam rules, spam and anti-virus engines from McAfee http/ftp website. Note You can also schedule the autoupdate task from the ePolicy Orchestrator
  • McAfee GSSCDE-AA-DA | User Guide - Page 58
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy „ Local Time Enable randomization Run missed task Delay missed task by Start Date / End Date Select one of the available task type from the drop-down list. and end dates if you only want the task to run for a specified period
  • McAfee GSSCDE-AA-DA | User Guide - Page 59
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Reports Table 5-2 Schedule Options Repeat Task Click Advanced on the Advanced Scheduled Options dialog box. Use this option to run a task multiple times in the same day. To do this, select Repeat Task and then set
  • McAfee GSSCDE-AA-DA | User Guide - Page 60
    Orchestrator Product Guide v 3.6 for more details on all the available settings tabs. Note Configuring reports There are several ways in which you can control what data appears on reports. You can define the version number of virus definition files, scanning engines, and supported products that
  • McAfee GSSCDE-AA-DA | User Guide - Page 61
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Uninstallation 5 Deselect Inherit. From the listed products, select Remove from the list item given against GroupShield for Exchange. 6 Deselect Run this
  • McAfee GSSCDE-AA-DA | User Guide - Page 62
    McAfee® GroupShield™ 7.0 User Guide 5 Integrating with ePolicy Orchestrator 3.6 Uninstallation 3 Right-click groupshield7.0 and select Remove to uninstall the report file from the ePolicy Orchestrator server. 62
  • McAfee GSSCDE-AA-DA | User Guide - Page 63
    chapter describes how to configure GroupShield for Exchange using McAfee ePolicy Orchestrator management software version 4.0. To use this or using ePolicy Orchestrator software. See ePolicy Orchestrator v4.0 Product Guide. Note Pre-requisites for installing ePolicy Orchestrator 4.0 For Microsoft®
  • McAfee GSSCDE-AA-DA | User Guide - Page 64
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Introduction „ Insert the CD into the computer's drive and copy the installation .ZIP files into the temporary directory you created. „ Download
  • McAfee GSSCDE-AA-DA | User Guide - Page 65
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Installation 9 Enter the credentials the agent on selected systems and click OK. Installation Checking-in the McAfee GroupShield for Microsoft Exchange Server 2003/2007 package to the ePolicy Orchestrator server
  • McAfee GSSCDE-AA-DA | User Guide - Page 66
    McAfee® GroupShield™ 7.0 User Guide 5 Choose the Branch as Current. 6 Click Save. 6 Integrating with ePolicy Orchestrator 4.0 all in the page. Note 13 Send an agent wake-up call. For instructions on sending an agent wake-up call, please refer to Sending an Agent Wakeup Call on page 70. Note
  • McAfee GSSCDE-AA-DA | User Guide - Page 67
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Installation Extensions You can install, remove and manage the GroupShield for Exchange extension files. Extension files are in ZIP file format
  • McAfee GSSCDE-AA-DA | User Guide - Page 68
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Introducing ePolicy Orchestrator 4.0 . Specifies the user name who created the selected dashboard. Specifies the user name, date and time stamp of the last modification made to the selected dashboard. Takes you to
  • McAfee GSSCDE-AA-DA | User Guide - Page 69
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Reporting Table 6-1 Dashboard generates a graphical output. ePolicy Orchestrator 4.0 has its own querying and reporting capabilities. McAfee includes a set of default queries on the left pane. However, you can create
  • McAfee GSSCDE-AA-DA | User Guide - Page 70
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Systems 7 The Filter page appears. Tree. For information on adding a new system, refer to the ePolicy Orchestrator 4.0 Product Guide. Note Sending an Agent Wakeup Call 1 Using an administrative account, log on to the
  • McAfee GSSCDE-AA-DA | User Guide - Page 71
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Systems 3 Choose a Create new policy. The Create a new policy dialog box appears. 6 Choose McAfee Default or My Default as desired. The McAfee Default policies are read-only and cannot be edited, renamed, or deleted.
  • McAfee GSSCDE-AA-DA | User Guide - Page 72
    McAfee® GroupShield™ 7.0 User Guide 6 6 Select the systems again. 7 Send an agent wakeup call. For instructions on sending an agent wake-up call, please refer to Sending an Agent only provide full protection if you keep it up-to-date with the latest anti-virus definitions (DATs), anti-spam rules
  • McAfee GSSCDE-AA-DA | User Guide - Page 73
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Systems Creating a new autoupdate task, and the Schedule information. 8 Click Save. 9 Send an agent wake-up call. For instructions on sending an agent wake-up call, please refer to Sending an Agent Wakeup Call on page
  • McAfee GSSCDE-AA-DA | User Guide - Page 74
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Uninstallation 6 Choose On Demand Scan task, and the Schedule information. 10 Click Save. 11 Send an agent wakeup call. For instructions on sending an agent wake-up call, please refer to Sending an Agent Wakeup Call on
  • McAfee GSSCDE-AA-DA | User Guide - Page 75
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Uninstallation „ Run update after 7.0 by clicking Select all in the page. Note 13 Send an agent wake-up call. For instructions on sending an agent wake-up call, please refer to Sending an Agent Wakeup Call on page
  • McAfee GSSCDE-AA-DA | User Guide - Page 76
    McAfee® GroupShield™ 7.0 User Guide 6 Integrating with ePolicy Orchestrator 4.0 Uninstallation 4 Select the option Force removal, bypassing any checks or errors. 5 Click OK. 76
  • McAfee GSSCDE-AA-DA | User Guide - Page 77
    settings, and keeping those products up-to-date. Here you register and configure GroupShield for guide describes how to configure GroupShield for Exchange using McAfee ProtectionPilot software version 1.5. To use this guide effectively, you need to be familiar with ProtectionPilot. This guide
  • McAfee GSSCDE-AA-DA | User Guide - Page 78
    McAfee® GroupShield™ 7.0 User Guide 7 and the virus-scanning engine, upgrades existing products with service pack and patch releases. It also gathers data about Computer 1: ProtectionPilot is installed and configured on a supported operating system. „ Computer 2: Microsoft® Exchange Server
  • McAfee GSSCDE-AA-DA | User Guide - Page 79
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Installation „ Exchange Server is added into the ProtectionPilot's managed server list under the "Directory" branch. „ McAfee Common Agent installed on the ProtectionPilot server. „ From ProtectionPilot server console,
  • McAfee GSSCDE-AA-DA | User Guide - Page 80
    GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Configuring GroupShield policies Adding McAfee GroupShield for Exchange NAP file to the ProtectionPilot server: 1 Locate the NAP file, on the product CD or in the installation .ZIP file downloaded from the McAfee website, and save
  • McAfee GSSCDE-AA-DA | User Guide - Page 81
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Configuring GroupShield policies Setting debug logging 1 Log on to the ProtectionPilot server. 2 In the console tree under McAfee ProtectionPilot | | Directory, select the site, group, single computer, or the entire
  • McAfee GSSCDE-AA-DA | User Guide - Page 82
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Configuring GroupShield policies 7 Select the debug details. Setting error reporting service 1 Click Error Reporting Service tab. 2 Select Enable to enable or disable the error reporting service. 3 Select Catch exceptions
  • McAfee GSSCDE-AA-DA | User Guide - Page 83
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Scheduling tasks 3 Specify the deleted after a set period of time. 8 Type the Maximum age of entry to specify how many days an entry should remain in the database before it is deleted. 9 Select Specify a query timeout to
  • McAfee GSSCDE-AA-DA | User Guide - Page 84
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Scheduling tasks „ On-Demand ( a new AutoUpdate task 1 Log on to the ProtectionPilot server. 2 In the console tree under McAfee ProtectionPilot | | Directory, select the site, group, single computer, or the entire
  • McAfee GSSCDE-AA-DA | User Guide - Page 85
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Uninstallation 4 Click the Scheduled Tasks to delete the task when it is no longer required. Note Uninstallation Removing McAfee GroupShield for Exchange from the client computer using ProtectionPilot server 1 Select the
  • McAfee GSSCDE-AA-DA | User Guide - Page 86
    McAfee® GroupShield™ 7.0 User Guide 7 Integrating with ProtectionPilot 1.5 Uninstallation 2 Select the GroupShield for Exchange to uninstall GroupShield for Exchange package file from the server. Removing the McAfee GroupShield for Exchange NAP file from ProtectionPilot server 1 Log on to the
  • McAfee GSSCDE-AA-DA | User Guide - Page 87
    can administer. The right pane shows information depending on the item you select in the left pane. To start GroupShield for Exchange user interface: 1 Start McAfee GroupShield for Exchange from the icon on the desktop. 2 You can also start GroupShield for Exchange by clicking on Start | Programs
  • McAfee GSSCDE-AA-DA | User Guide - Page 88
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard Dashboard The dashboard provides an overview of the scanning details, latest detections, graphical view of these detections, product
  • McAfee GSSCDE-AA-DA | User Guide - Page 89
    McAfee® GroupShield™ 7.0 User Guide Select Detections> - Select the counters in the Detections section by Last 24 Hours „ Last 7 Days „ Last 30 Days Versions & updates This section date virus protection available. „ Product Information: This tab shows the product name and version, the Service
  • McAfee GSSCDE-AA-DA | User Guide - Page 90
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard „ Licenses: This tab gives the description of the installed product(s), the type of license, expiry date (if the license type is Beta), and the number of day(s) remaining for the license to expire. Reports
  • McAfee GSSCDE-AA-DA | User Guide - Page 91
    Guide 8 Getting Started with the User Interface Dashboard 3 In Choose when to scan, choose any of these options: „ Not scheduled - Select the checkbox and specify the number of hours and minutes after which the scanning has to stop. „ Once - From the respective drop-down lists, choose a date day,
  • McAfee GSSCDE-AA-DA | User Guide - Page 92
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard „ Remove Viruses „ Find Banned Content „ Remove Banned Content „ Full Scan 7 Select Resumable Scanning to enable Restart from last
  • McAfee GSSCDE-AA-DA | User Guide - Page 93
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard The 'Run Now' allows you to stop an existing report task. „ Once - From the respective drop-down lists, choose a date, month, year and the time when a report task has to start. You can select the checkbox and
  • McAfee GSSCDE-AA-DA | User Guide - Page 94
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard „ Days - Specify the time how frequently, in days, the report task should take place and at what time of the day. You can select the checkbox and specify the number of hours and minutes after which the report
  • McAfee GSSCDE-AA-DA | User Guide - Page 95
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard 3 Today or This week to view only today's detections or detections made in the last 7 calendar days (including today's date). 3 From Filter, choose any of these: Top 10 Viruses, Top 10 Spam Detections, Top 10
  • McAfee GSSCDE-AA-DA | User Guide - Page 96
    McAfee® GroupShield™ 7.0 User Guide 8 Getting Started with the User Interface Dashboard „ Reason „ Ticket Number „ Detection Name „ Spam Score 4 Choose All Dates or a desired Date Range from the drop-down lists. 5 Choose Bar Graph or Pie Chart as required. 6 If you choose Pie Chart, choose to
  • McAfee GSSCDE-AA-DA | User Guide - Page 97
    9 Detected Items Detected Items is used to view information about emails that contains spam, phish, viruses, potentially unwanted programs, unwanted content, banned file types or messages, and all items. You should select at least one search filter, however you can use up to three search filters to
  • McAfee GSSCDE-AA-DA | User Guide - Page 98
    User Guide 9 Detected Items Spam Spam Spam is an unwanted email message, specifically unsolicited bulk messages. 1 Click Detected Items | Spam. The Spam page appears. 2 Select up to three of these search filters: „ Ticket Number „ Sender „ Spam Score „ Action Taken 3 Select All Dates to include
  • McAfee GSSCDE-AA-DA | User Guide - Page 99
    McAfee® GroupShield™ 7.0 User Guide 9 Detected Items Viruses 3 Select All Dates to include all the entries. Else, select the desired date and time range from the Date useful program, boot sector, partition sector or document that supports macros, by inserting itself or attaching itself to that
  • McAfee GSSCDE-AA-DA | User Guide - Page 100
    McAfee® GroupShield™ 7.0 User Guide 9 Detected Items Unwanted content 1 Click Detected Items | Potentially Unwanted Programs. The Potentially Unwanted Programs page appears. 2 Select up to three of these search filters: „ Ticket Number „ Filename „ Action Taken „ Submit to Avert 3 Select All Dates
  • McAfee GSSCDE-AA-DA | User Guide - Page 101
    Guide 9 Detected Items Banned file types/messages Banned file types/messages Banned file types are any files which are banned by an administrator. 1 Click Detected Items | Banned File types/Messages. 2 Select any of these search filters: „ Ticket Number „ Filename „ Action Taken 3 Select All Dates
  • McAfee GSSCDE-AA-DA | User Guide - Page 102
    McAfee® GroupShield™ 7.0 User Guide 9 Detected Items All items Search filters used: „ Action Taken - to search according to the type of action taken when the item was detected. „ Filename - to
  • McAfee GSSCDE-AA-DA | User Guide - Page 103
    McAfee® GroupShield™ 7.0 User Guide 9 Detected Items All items You can also use: „ Columns to display - to select additional column headers to be listed in the View Results pane. Click
  • McAfee GSSCDE-AA-DA | User Guide - Page 104
    McAfee® GroupShield™ 7.0 User Guide 9 Detected Items All items 104
  • McAfee GSSCDE-AA-DA | User Guide - Page 105
    10 Policy Manager This chapter explains how you enforce policies in GroupShield for Microsoft® Exchange Server 2003/2007. You can use Policy Manager to specify policies that determine how different types of threats are treated when detected. Each type of policy has a master policy, which is the
  • McAfee GSSCDE-AA-DA | User Guide - Page 106
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy manager views Inheritance view Inheritance View enables you to view policy settings inherited from another policy. The policy that inherits the
  • McAfee GSSCDE-AA-DA | User Guide - Page 107
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy manager views Advanced view The main purpose of Advanced View is to allow you to change the order in which any
  • McAfee GSSCDE-AA-DA | User Guide - Page 108
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Creating a subpolicy Creating a subpolicy 1 From Policy Manager, select a menu item for which you want to create a subpolicy. 2 Click Create sub-policy. The
  • McAfee GSSCDE-AA-DA | User Guide - Page 109
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy settings „ Initialize selected settings with values copied from another policy to choose a policy from the drop-down and initialize the selected
  • McAfee GSSCDE-AA-DA | User Guide - Page 110
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy settings „ Anti-Phishing (Gateway) For more information on Core Scanners mentioned above, see Scanners and filters on page 113 Note „ Filters -
  • McAfee GSSCDE-AA-DA | User Guide - Page 111
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy settings 6 If you choose Select existing time slot, choose any one of these from the drop-down menu: „ Weekdays „ Weekends „ Working
  • McAfee GSSCDE-AA-DA | User Guide - Page 112
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Policy settings View settings In the View Settings tab, you can configure scanner/filter settings for a selected policy and the scanner/filter
  • McAfee GSSCDE-AA-DA | User Guide - Page 113
    McAfee® GroupShield™ 7.0 User Guide 5 Click Apply. Policy Manager 10 Scanners and filters Scanners and filters Policy Manager has core scanners, filters and miscellaneous settings for different types of policies (
  • McAfee GSSCDE-AA-DA | User Guide - Page 114
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters The core scanners, filters, and miscellaneous settings for each type of policy are explained in detail below. Core scanners
  • McAfee GSSCDE-AA-DA | User Guide - Page 115
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 5 In Options, select set of options - to create a new set of options for the selected policy. For step-by-step instructions to create new set of options, refer to Creating new set of options for Anti-Virus Scanner on page
  • McAfee GSSCDE-AA-DA | User Guide - Page 116
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Default file types - to specify that only the default file types should be scanned. „ Defined file types - to specify
  • McAfee GSSCDE-AA-DA | User Guide - Page 117
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Exclude specified names - to match names. Delete - to delete the PUP names that you have added. The McAfee website http://vil.nai.com/vil/default.aspx contains a list of PUP names. Use the Search in Category option to
  • McAfee GSSCDE-AA-DA | User Guide - Page 118
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Editing anti-virus scanner actions 1 From Policy Manager, select a submenu item that has anti-virus scanner. The policy page
  • McAfee GSSCDE-AA-DA | User Guide - Page 119
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Primary actions for On-Demand (Default), On-Demand (Find Viruses), On-Demand (Remove Viruses), and On-Demand (Full Scan)
  • McAfee GSSCDE-AA-DA | User Guide - Page 120
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 3 Click Content Scanning. The existing alert from the drop-down or click Create to create a new alert. For step-by-step instructions about creating a new alert, refer to Creating a new alert on page 120. Note If the alert
  • McAfee GSSCDE-AA-DA | User Guide - Page 121
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 6 Under Content Scanning Alert, choose the desired Style, Font, Size, and Tokens from the respective drop-down lists. These options are available only if you choose HTML content (WYSIWYG) from the Show drop-down
  • McAfee GSSCDE-AA-DA | User Guide - Page 122
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Insert Table - to insert a table at the current cursor position. Type the values in Rows, Columns, Table width, Border
  • McAfee GSSCDE-AA-DA | User Guide - Page 123
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 6 Under If detected, take the following action, choose the desired primary and secondary content scanner actions. See Primary and
  • McAfee GSSCDE-AA-DA | User Guide - Page 124
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Notify recipient - to You can also select an existing alert or use Create to create a new alert. For step-by-step instructions on creating a new alert, refer to Creating a new alert on page 120. Note If the alert text
  • McAfee GSSCDE-AA-DA | User Guide - Page 125
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Change - to change the primary and secondary actions associated with a file filtering rule. For more information on changing the
  • McAfee GSSCDE-AA-DA | User Guide - Page 126
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 11 In File categories, click on a file type. An asterisk symbol (*) appears next to the file type to indicate
  • McAfee GSSCDE-AA-DA | User Guide - Page 127
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Primary and secondary file filtering actions Primary actions for On-Access scan include: „ Replace detected item with an alert -
  • McAfee GSSCDE-AA-DA | User Guide - Page 128
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Notify administrator - to send an alert message to the email administrator. Anti-spam You can configure the file filtering
  • McAfee GSSCDE-AA-DA | User Guide - Page 129
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Reject the Message - to reject the email message. „ Delete message - to delete the email message item. „ Allow through - to
  • McAfee GSSCDE-AA-DA | User Guide - Page 130
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters These default event that you Caution need to change these settings, there is a technical notice available from Technical Support. 7 In Reporting, under the Spam reporting threshold is drop-down menu, select High, Medium,
  • McAfee GSSCDE-AA-DA | User Guide - Page 131
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 12 Select or deselect Verbose reporting to specify whether verbose reporting is required or not. Verbose reporting includes the
  • McAfee GSSCDE-AA-DA | User Guide - Page 132
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Select a required Spam profile from the drop-down. A spam profile is a set of characteristics that identify a category of spam.
  • McAfee GSSCDE-AA-DA | User Guide - Page 133
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ create new set of options - to create a new set of options for anti-phising setting of a selected policy. For
  • McAfee GSSCDE-AA-DA | User Guide - Page 134
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 5 In Instance name, specify a name for the anti-phishing settings. This field is mandatory. 6 In Reporting options, select or
  • McAfee GSSCDE-AA-DA | User Guide - Page 135
    McAfee® GroupShield™ 7.0 User Guide Filters Filters in GroupShield 7.0 include: „ Corrupt Content „ Protected Content „ Encrypted Content „ Signed Content „ Password-Protected Files „ Scanner Control „ MIME Mail Settings „ HTML Files „ Mail Size
  • McAfee GSSCDE-AA-DA | User Guide - Page 136
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Primary and secondary filtering actions for corrupt content Primary actions for On-Access scan include: „ Replace detected item with
  • McAfee GSSCDE-AA-DA | User Guide - Page 137
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Notify recipient - to send an alert message to the recipient, when the recipient is not in the same domain
  • McAfee GSSCDE-AA-DA | User Guide - Page 138
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Delete message - to delete the email message item. „ Allow through - to allow the item to continue to the next
  • McAfee GSSCDE-AA-DA | User Guide - Page 139
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 5 In Actions, view the action that will be taken when encrypted content is detected. To change those actions, click
  • McAfee GSSCDE-AA-DA | User Guide - Page 140
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Delete embedded item - to delete the detected item. For example, to delete an attachment that triggers a detection rule. „ Allow
  • McAfee GSSCDE-AA-DA | User Guide - Page 141
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 1 From Policy Manager, select a submenu item. The policy page for the submenu item appears. 2 Choose a desired policy. 3 Click Password-
  • McAfee GSSCDE-AA-DA | User Guide - Page 142
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Quarantine - to take a copy new set of options - to create a new option set for this policy. For step-by-step instructions, refer to Creating new set of options for scanner control settings on page 143. Note „ Edit - to
  • McAfee GSSCDE-AA-DA | User Guide - Page 143
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 6 In Alert selection, select an existing alert to use when a scanner control option is triggered, else Create a new alert.
  • McAfee GSSCDE-AA-DA | User Guide - Page 144
    McAfee® GroupShield™ 7.0 User Guide „ The maximum scanning time is exceeded. Policy Manager 10 Scanners and filters Primary actions for On-Access scan include: „ Replace detected item with an alert -
  • McAfee GSSCDE-AA-DA | User Guide - Page 145
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Secondary actions for On-Demand ( is a communications standard that enables the transfer of non-ASCII formats over protocols that supports only 7-bit ASCII characters. MIME mail settings are standard and may be modified only
  • McAfee GSSCDE-AA-DA | User Guide - Page 146
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 5 In Options, choose any one of these: „ Core Mail Settings - to view and configure the default mail size filter
  • McAfee GSSCDE-AA-DA | User Guide - Page 147
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Re-encode using HTML with have a lot of ASCII text. „ 8-Bit, which is best suited for use with SMTP servers that support the 8BIT MIME transport SMTP extension. 11 Select or deselect Do not encode if text is 7-bit as
  • McAfee GSSCDE-AA-DA | User Guide - Page 148
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Do not treat as corrupt content 15 In NULL characters in the headers of a MIME message, choose the desired
  • McAfee GSSCDE-AA-DA | User Guide - Page 149
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Notify recipient - to send an alert message to the recipient, when the recipient is not in the same domain
  • McAfee GSSCDE-AA-DA | User Guide - Page 150
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Edit - to change the HTML Links URLs ("
  • McAfee GSSCDE-AA-DA | User Guide - Page 151
    ® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ ActiveX controls - to remove ActiveX control elements from the HTML message. For example: VirusScan Image „ Macromedia Flash - to remove
  • McAfee GSSCDE-AA-DA | User Guide - Page 152
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters 4 From the Options drop-down menu, click create new set of options. The Mail Size Filtering page appears. 5 Specify
  • McAfee GSSCDE-AA-DA | User Guide - Page 153
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Secondary actions are the same for all tabs. „ Log - to record the detection in a log. „ Quarantine - to take a copy
  • McAfee GSSCDE-AA-DA | User Guide - Page 154
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Edit - to change the alert setting options associated with a policy. Creating new set of options for alert settings 1 From
  • McAfee GSSCDE-AA-DA | User Guide - Page 155
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters Disclaimer text 1 From Policy Manager, select Gateway. The policy page for Gateway appears. 2 Choose a desired policy. 3 Click Disclaimer Text.
  • McAfee GSSCDE-AA-DA | User Guide - Page 156
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource Shared resource When setting up policies, you might want the same resource to be used by more than one policy.
  • McAfee GSSCDE-AA-DA | User Guide - Page 157
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource „ HTML Files „ Mail Size Filtering. „ Create New - to create a new shared resource for a selected category. For detailed information, refer to
  • McAfee GSSCDE-AA-DA | User Guide - Page 158
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource Creating a new shared resource for anti-spam 1 In Policy Manager, click Shared Resource. The Shared Resources page appears. 2 In Scanners &
  • McAfee GSSCDE-AA-DA | User Guide - Page 159
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource 4 Enter the Instance name. 5 Enter the Maximum nesting level. 6 Enter the Maximum expanded file size (MB). 7 Enter the Maximum scan
  • McAfee GSSCDE-AA-DA | User Guide - Page 160
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource 5 In the Alerts pane, choose a Category. 6 Click Create New and perform steps of Creating a new alert on page 120. Creating a
  • McAfee GSSCDE-AA-DA | User Guide - Page 161
    McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Shared resource In File Filtering Rules, you can set up rules that apply to file name, file type, and file size. You
  • McAfee GSSCDE-AA-DA | User Guide - Page 162
    McAfee® GroupShield™ 7.0 User Guide New. The File Filtering Rule page appears. 4 Follow the instructions of Creating a new file filtering rule on page 125. Time unique Time slot name. 5 Under Select day and time, choose the desired day(s). 6 Choose All day or Selected hours one wants to put into
  • McAfee GSSCDE-AA-DA | User Guide - Page 163
    to configure the General settings, Microsoft Virus Scanning API (VSAPI) settings, and Transport Scan Settings. For Exchange Server 2003 By default, the McAfee® Transport Scanner is enabled and scans all the email messages. If you deselect Transport Scan Settings, Microsoft® Virus Scanning API (VSAPI
  • McAfee GSSCDE-AA-DA | User Guide - Page 164
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics On-access settings 2 In General, choose Allow Through or Remove depending on whether you want to allow the email message through or
  • McAfee GSSCDE-AA-DA | User Guide - Page 165
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics On-access settings „ Select Enabled to in case of GroupShield for Exchange Server 2007. After an email message is scanned, the McAfee® Transport Scanner assigns a stamp to the header of the email message. This prevents the email
  • McAfee GSSCDE-AA-DA | User Guide - Page 166
    McAfee® GroupShield™ 7.0 User Guide up to date. 6 Select Update Scan Stamp to perform background scanning up to date. When you Date and To Date fields to schedule the scan stamp update. You also have an option to select Till Date that are not older than the date/time Note mentioned in the setting.
  • McAfee GSSCDE-AA-DA | User Guide - Page 167
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics Notifications Notifications disabled through this option. By default, this feature is disabled. 7 Click Apply. Notification fields to use: „ %dts% - Date and Time „ %sdr% - Sender „ %ftr% - Filter „ %fln% - Filename „ %rul% - RuleName „
  • McAfee GSSCDE-AA-DA | User Guide - Page 168
    McAfee® GroupShield™ 7.0 User Guide „ %idy% - Scanned By „ %psn% - Policy Name „ %svr% - Server „ %avd% - AV DAT „ %ave% - AV Engine „ %rpt% - Recipient „ %rsn% - Reason „ %sbj% - Subject „ %ssc% - Spam score „ %ase% - Anti-
  • McAfee GSSCDE-AA-DA | User Guide - Page 169
    For more information on using McAfee Quarantine Manager, please see the McAfee Quarantine Manager v 4.1 Product Guide. Note Local database 1 database receives a query. 4 In Maximum item age (days), specify the maximum number of days an item will be held in the local quarantine database before
  • McAfee GSSCDE-AA-DA | User Guide - Page 170
    McAfee® GroupShield™ 7.0 User Guide 7 Click Apply. 11 Settings & Diagnostics User interface preferences User interface preferences You can use User Interface Preferences to configure user interface refresh, report, metric, graph
  • McAfee GSSCDE-AA-DA | User Guide - Page 171
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics Diagnostics 3 Select Anti-alias to size of debug files, and where they should be saved. You can configure the error reporting service settings and specify which events should be captured in the product log and event log by specifying
  • McAfee GSSCDE-AA-DA | User Guide - Page 172
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics Diagnostics „ \ „ \ „ authorized personnel (McAfee support engineer). Error reporting service 1 In the Error Reporting Service tab, select Enable to enable or disable the error reporting service. 2 Select
  • McAfee GSSCDE-AA-DA | User Guide - Page 173
    McAfee® GroupShield™ 7.0 User Guide 11 Settings & Diagnostics Product log „ \ 2 the product log entries to be deleted. „ Enter the Maximum age of entry to specify how many days an entry should remain in the database before it is deleted. 4 In Advanced section: „ Select Specify
  • McAfee GSSCDE-AA-DA | User Guide - Page 174
    McAfee® GroupShield™ 7.0 User Guide „ Description - Select the relevant description. You can select up to three search filters. Note 11 Settings & Diagnostics DAT settings 3 Choose the All Dates radio button to include all entries, else choose Date Range and choose the desired date range from the
  • McAfee GSSCDE-AA-DA | User Guide - Page 175
    McAfee® GroupShield™ 7.0 User Guide There are two tabs, Configuration and Site List. 11 from where automatic updates are downloaded. By default, GroupShield uses a site list that points to a McAfee site for automatic updates, but you can use a site list that points to a different location.
  • McAfee GSSCDE-AA-DA | User Guide - Page 176
    McAfee® GroupShield™ 7.0 User Guide 3 Click Apply. 11 Settings & Diagnostics Import and export configuration 176
  • McAfee GSSCDE-AA-DA | User Guide - Page 177
    guide 17 Corrupt content 135 Create a new alert 120 Create Sub-Policy 108 Creating a sub-policy 108 customer service Installing Anti-Spam for Exchange 31 Installing GroupShield 26 Introducing ProtectionPilot 151 Master policy 109 McAfee Quarantine Manager (MQM) 41 McAfee Quarantine Manager settings
  • McAfee GSSCDE-AA-DA | User Guide - Page 178
    McAfee® GroupShield™ 7.0 User Guide Product Log 173 product upgrades 19 professional services, McAfee resources 19 Protected Content 137 ProtectionPilot Installation 19 security vulnerabilities, releases for 19 ServicePortal, technical support 19 Shared resource 156 Signed Content 139 Silent
  • McAfee GSSCDE-AA-DA | User Guide - Page 179
  • McAfee GSSCDE-AA-DA | User Guide - Page 180
    700-1705-00 Copyright © 2007 McAfee, Inc. All Rights Reserved. mcafee.com
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180

User Guide
revision 1.0
McAfee
®
GroupShield
version 7.0
For Microsoft
®
Exchange