McAfee GSSCDE-AA-DA User Guide - Page 8

How GroupShield protects Exchange?, Email server protection - McAfee GroupShield

Page 8 highlights

McAfee® GroupShield™ 7.0 User Guide 1 Introduction About GroupShield for Exchange Each time, an email message is sent to or received from a source, GroupShield scans it comparing it with a list of known viruses and suspected virus-like behavior. GroupShield can also scan for content within the email message using rules and policies defined within the GroupShield software. How GroupShield protects Exchange? GroupShield uses McAfee® Transport Scanner and Microsoft® Virus Scanning API (VSAPI) to scan all email messages. For Microsoft® Exchange Server 2003 (used as a Bridgehead Server) and Microsoft® Exchange Server 2007 (with Edge Transport or Hub Transport-only role), GroupShield Note uses McAfee® Transport Scanner (and not Microsoft® Transport Scanner) to protect the server. However, for Exchange Server 2003 Mailbox Server and Exchange 2007 MailBox Role, GroupShield provides additional scanning option using Microsoft VSAPI. The anti-spam, anti-virus, and the content management engine scan the messages and provide the result to GroupShield 7.0 before being written to the file system or being read by the Microsoft® Exchange 2003/2007 users. The anti-virus scanning engine and the anti-spam scanning engine compare the email message with all the known signatures stored within the currently installed virus definition (DAT) files and anti-spam rules. The anti-virus engine also checks the message using the selected heuristic detection methods. The content management engine searches the email message for banned content as specified in the content management policies running within the GroupShield software. If there are no viruses, banned/unwanted content in the email message, GroupShield passes the information back to Microsoft® Exchange 2003/2007. In case of a detection, GroupShield takes actions that are defined within its configuration settings. The default actions may differ, depending on the installed version of Microsoft® Exchange and, where applicable, the chosen scanning method. Note Email server protection - McAfee GroupShield McAfee GroupShield 7.0 integrates with Microsoft® Exchange Server 2003/2007 to protect against viruses that may be transmitted using your corporate email system. Due to the close integration between your email server and GroupShield anti-virus solution, GroupShield can do more than just protecting your email server from viruses. It can: 8

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180

8
McAfee
®
GroupShield
7.0 User Guide
Introduction
About GroupShield for Exchange
1
Each time, an email message is sent to or received from a source, GroupShield scans
it comparing it with a list of known viruses and suspected virus-like behavior.
GroupShield can also scan for content within the email message using rules and
policies defined within the GroupShield software.
How GroupShield protects Exchange?
GroupShield uses McAfee
®
Transport Scanner and Microsoft
®
Virus Scanning API
(VSAPI) to scan all email messages.
The anti-spam, anti-virus, and the content management engine scan the messages and
provide the result to GroupShield 7.0 before being written to the file system or being
read by the Microsoft
®
Exchange 2003/2007 users.
The anti-virus scanning engine and the anti-spam scanning engine compare the email
message with all the known signatures stored within the currently installed virus
definition (
DAT
) files and anti-spam rules. The anti-virus engine also checks the message
using the selected heuristic detection methods.
The content management engine searches the email message for banned content as
specified in the content management policies running within the GroupShield
software.
If there are no viruses, banned/unwanted content in the email message, GroupShield
passes the information back to Microsoft
®
Exchange 2003/2007.
In case of a detection, GroupShield takes actions that are defined within its
configuration settings.
Email server protection — McAfee GroupShield
McAfee GroupShield 7.0 integrates with Microsoft
®
Exchange Server 2003/2007 to
protect against viruses that may be transmitted using your corporate email system.
Due to the close integration between your email server and GroupShield anti-virus
solution, GroupShield can do more than just protecting your email server from viruses.
It can:
Note
For Microsoft
®
Exchange Server 2003 (used as a Bridgehead Server) and Microsoft
®
Exchange Server 2007 (with Edge Transport or Hub Transport-only role), GroupShield
uses McAfee
®
Transport Scanner (and not Microsoft
®
Transport Scanner) to protect the
server. However, for Exchange Server 2003 Mailbox Server and Exchange 2007
MailBox Role, GroupShield provides additional scanning option using Microsoft VSAPI.
Note
The default actions may differ, depending on the installed version of Microsoft
®
Exchange and, where applicable, the chosen scanning method.