F-SECURE INTERNET GATEKEEPER WINDOWS 2000-2003 SERVER 6.61... Manuale di servizio

F-Secure Internet

Gatekeeper

Windows 2000/2003 Server

Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure

product names and symbols/logos are either trademarks or registered trademarks of F-Secure

Corporation. All product names referenced herein are trademarks or registered trademarks of their

respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of

others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,

F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure

Corporation reserves the right to modify specifications cited in this document without prior notice.

Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of

this document may be reproduced or transmitted in any form or by any means, electronic or

mechanical, for any purpose, without the express written permission of F-Secure Corporation.

Kaspersky Lab.

This product includes software developed by the Apache Software Foundation (http://

This product includes code from SpamAssassin. The code in the files of the SpamAssassin distribution

All files in the SpamAssassin distribution fall under the same terms as Perl itself, as described in the

“Artistic License”.

This product may be covered by one or more F-Secure patents, including the following: B2353372,

GB2366691, GB2366692, GB2366693, GB2367933, GB2368233. #12000041-6E30

Contents

About This Guide 10

How This Guide is Organized ............................................................................................ 11

Conventions Used in F-Secure Guides.............................................................................. 13

Symbols .................................................................................................................... 13

Chapter 1 Introduction 15

1.1 Overview ....................................................................................................................16

1.2 How the Product Works .............................................................................................17

1.2.1 F-Secure Anti-Virus for Internet Gateways.....................................................17

1.2.2 F-Secure Anti-Virus for Internet Mail..............................................................19

1.2.3 F-Secure Content Scanner Server.................................................................21

1.3 Features.....................................................................................................................21

1.4 F-Secure Anti-Virus Mail Server and Gateway Products ...........................................24

Chapter 2 Deployment 26

2.1 Overview ....................................................................................................................27

2.2 Network Requirements...............................................................................................28

2.3 Deployment Scenarios...............................................................................................29

2.3.1 F-Secure Anti-Virus for Internet Gateways.....................................................29

2.3.2 F-Secure Anti-Virus for Internet Mail..............................................................34

Chapter 3 Installation 42

3.1 Recommended System Requirements ......................................................................43

3.1.1 Which SQL Server to Use for the Quarantine Database?..............................45

3.1.2 Web Browser Software Requirements ...........................................................46

3.2 Centrally Administered or Stand-alone Installation? ..................................................47

3.2.1 Installation Overview for Centrally Administered Installation..........................47

3.2.2 Installation Overview for Stand-alone Installation...........................................49

3.3 Installation Instructions...............................................................................................50

3.4 After the Installation ...................................................................................................69

3.4.1 Importing Product MIB files to F-Secure Policy Manager Console.................69

3.4.2 Configuring the Product..................................................................................70

3.5 Upgrading F-Secure Internet Gatekeeper..................................................................72

3.5.1 Upgrade Instructions ......................................................................................72

3.5.2 From the Try-Before-You-Buy Version...........................................................76

3.6 Uninstallation..............................................................................................................77

Chapter 4 Basics of Using F-Secure Internet Gatekeeper 78

4.1 Introduction ................................................................................................................79

4.2 Using F-Secure Policy Manager ................................................................................79

4.2.1 F-Secure Anti-Virus for Internet Gateways Settings.......................................80

4.2.2 F-Secure Anti-Virus for Internet Mail Settings................................................80

4.2.3 F-Secure Content Scanner Server Settings...................................................80

4.2.4 F-Secure Management Agent Settings ..........................................................81

4.2.5 Changing Settings That Have Been Modified During Installation or Upgrade81

4.3 Using F-Secure Internet Gatekeeper Web Console...................................................82

4.3.1 Logging in the F-Secure Internet Gatekeeper Web Console for the First Time .

4.3.2 Checking the Product Status..........................................................................86

Chapter 5 Administering F-Secure Anti-Virus for Internet Gateways 92

5.1 Overview - HTTP Scanning........................................................................................93

5.2 Configuring F-Secure Anti-Virus for Internet Gateways.............................................94

5.2.1 Network Configuration....................................................................................94

5.3 Configuring Web Traffic Scanning ...........................................................................107

5.3.1 Content Control ............................................................................................107

5.3.2 Notifications..................................................................................................115

5.3.3 Performance.................................................................................................119

5.3.4 Administration...............................................................................................122

5.3.5 Access Control .............................................................................................123

5.4 Monitoring Logs........................................................................................................127

5.4.1 Error Log.......................................................................................................128

5.4.2 Access Log...................................................................................................129

5.4.3 Logfile.log.....................................................................................................129

5.5 Viewing Statistics .....................................................................................................130

5.5.1 Viewing HTTP Scanning Statistics with F-Secure Internet Gatekeeper Web

Console130

5.5.2 Viewing Statistics with F-Secure Policy Manager Console ..........................135

5.6 Examples of HTTP Notifications ..............................................................................136

5.6.1 Virus Warning Message ...............................................................................137

5.6.2 Block Warning Message...............................................................................138

5.6.3 Banned Site Warning Message....................................................................139

Chapter 6 Administering F-Secure Anti-Virus for Internet Mail 140

6.1 Overview - SMTP Scanning.....................................................................................141

6.2 Configuring F-Secure Anti-Virus for Internet Mail ....................................................142

6.2.1 SMTP Settings..............................................................................................143

6.2.2 SMTP Connections.......................................................................................146

6.2.3 Content Scanner Servers.............................................................................149

6.2.4 Quarantine....................................................................................................151

6.2.5 Spooling........................................................................................................158

6.2.6 Logging.........................................................................................................162

6.2.7 Intranet Hosts...............................................................................................164

6.3 Configuring SMTP Traffic Scanning.........................................................................166

6.3.1 Inbound and Outbound Traffic......................................................................166

6.3.2 Receiving .....................................................................................................166

6.3.3 Spam Control................................................................................................172

6.3.4 Blocking........................................................................................................172

6.3.5 Virus Scanning .............................................................................................177

6.3.6 Virus Outbreak Response ............................................................................182

6.3.7 File Type Recognition...................................................................................183

6.3.8 Disclaimer.....................................................................................................185

6.3.9 Mail Delivery.................................................................................................187

6.3.10 Security Options...........................................................................................191

6.4 Monitoring Logs........................................................................................................195

6.5 Viewing Statistics .....................................................................................................199

6.5.1 Viewing Statistics with F-Secure Internet Gatekeeper Web Console...........199

6.5.2 Viewing Statistics with F-Secure Policy Manager.........................................206

6.6 Notifications..............................................................................................................208

Chapter 7 Administering F-Secure Content Scanner Server 209

7.1 Overview ..................................................................................................................210

7.2 Configuring F-Secure Content Scanner Server .......................................................211

7.2.1 Service Connections.....................................................................................211

7.3 Configuring Scanning Settings.................................................................................216

7.3.1 Virus Scanning .............................................................................................216

7.3.2 Spam Filtering ..............................................................................................220

7.3.3 Threat Detection...........................................................................................222

7.3.4 Advanced......................................................................................................224

7.4 Configuring and Viewing Statistics...........................................................................226

7.4.1 Configuring Virus Statistics...........................................................................226

7.4.2 Viewing Virus and Spam Statistics with F-Secure Internet Gatekeeper Web

Console227

7.4.3 Viewing Virus and Spam Statistics with F-Secure Policy Manager Console235

7.5 Monitoring Logs........................................................................................................239

7.5.1 Logfile.log.....................................................................................................239

Chapter 8 Administering F-Secure Spam Control 240

8.1 Introduction ..............................................................................................................241

8.2 Spam Control Settings .............................................................................................242

8.3 Realtime Blackhole List Configuration .....................................................................248

8.3.1 Enabling Realtime Blackhole Lists ...............................................................248

8.3.2 Optimizing F-Secure Spam Control Performance........................................250

Chapter 9 Administering F-Secure Management Agent 251

9.1 F-Secure Management Agent Settings....................................................................252

9.2 Configuring Alert Forwarding ...................................................................................254

Chapter 10 Quarantine Management 258

10.1 Introduction ..............................................................................................................259

10.2 Configuring Quarantine Options...............................................................................260

10.3 Searching the Quarantined Content.........................................................................260

10.4 Query Results Page.................................................................................................265

10.5 Viewing Details of a Quarantined Message .............................................................267

10.6 Reprocessing the Quarantined Content...................................................................268

10.7 Releasing the Quarantined Content.........................................................................269

10.8 Removing the Quarantined Content.........................................................................271

10.9 Deleting Old Quarantined Content Automatically.....................................................271

10.10Quarantine Database Settings.................................................................................273

10.11Quarantine Logging..................................................................................................273

10.12Quarantine Statistics................................................................................................273

Chapter 11 Security and Performance 275

11.1 Introduction ..............................................................................................................276

11.2 Optimizing Security..................................................................................................276

11.2.1 Virus Scanning .............................................................................................276

11.2.2 Access Control .............................................................................................277

11.2.3 Data Trickling................................................................................................277

11.3 Optimizing Performance...........................................................................................277

11.3.1 Virus Scanning .............................................................................................277

Chapter 12 Updating Virus and Spam Definition Databases 280

12.1 Overview..................................................................................................................281

12.2 Automatic Updates...................................................................................................281

12.3 Configuring Automatic Updates ...............................................................................282

12.3.1 Summary......................................................................................................283

12.3.2 Automatic Updates.......................................................................................286

12.3.3 Policy Manager Proxies................................................................................289

Chapter 13 Troubleshooting 291

13.1 Testing the Connections ..........................................................................................292

13.1.1 Checking that F-Secure Anti-Virus for Internet Gateways is Up and Running...

292

13.1.2 Checking that F-Secure Anti-Virus for Internet Mail is Up and Running.......292

13.1.3 Checking that F-Secure Content Scanner Server is Up and Running..........293

13.1.4 Checking that the Network Connection to the Original Mail Server is Working..

293

13.2 Starting and Stopping F-Secure Internet Gatekeeper Components ........................294

13.3 Frequently Asked Questions....................................................................................295

AppendixA Warning Messages 296

A.1 HTTP Warning Messages....................................................................................... 297

A.2 SMTP Warning Messages .......................................................................................298

A.3 Virus Outbreak Notification Messages.....................................................................299

AppendixB Specifying Hosts 300

B.1 Introduction ............................................................................................................. 301

B.2 Domain.....................................................................................................................301

B.3 Subnet......................................................................................................................301

B.4 IP Address................................................................................................................302

B.5 Hostname.................................................................................................................302

AppendixC Access Log Variables 304

C.1 List of Access Log Variables................................................................................... 305

AppendixD Mail Log Variables 309

D.1 List of Mail Log Variables........................................................................................ 310

AppendixE Configuring Mail Servers 312

E.1 Configuring the Network.......................................................................................... 313

E.2 Configuring Mail Servers..........................................................................................314

E.2.1 Lotus Domino ...............................................................................................314

E.2.2 Microsoft Exchange 5.5................................................................................315

E.2.3 Microsoft Exchange 2000.............................................................................315

AppendixF Advanced Deployment Options 319

F.1 Introduction ............................................................................................................. 320

F.2 Transparent Proxy....................................................................................................320

F.2.1 Examples......................................................................................................322

F.2.2 Transparent Proxy with Linux and Unix Based Systems..............................327

F.2.3 Transparent Proxy with Cisco, Nortel and Lucent........................................329

F.3 HTTP Load Balancing..............................................................................................329

F.3.1 Round-Robin DNS Based Load Balancing...................................................330

F.3.2 Load Balancing with Proxy Auto-Configuration (PAC) or Web Proxy Auto-Dis-

covery Protocol (WPAD)...............................................................................331

F.3.3 Load Balancing with Proxy or Firewall..........................................................333

F.3.4 Hardware and Software Load-balancing Solutions ......................................335

F.3.5 Load Balancing and High Availability with Clustering...................................337

F.4 Load Balancing With Windows Network Load Balancing Service............................339

F.4.1 Requirements...............................................................................................339

F.4.2 Setting Up Network Load Balancing Services..............................................340

F.5 Deployment Scenarios for Environments with Multiple Sub-domains......................349

F.5.1 Scenario 1: F-Secure Anti-Virus for Internet Mail as an Upstream Mail Transfer

Agent............................................................................................................349

F.5.2 Scenario 2: F-Secure Anti-Virus for Internet Mail as Interim Mail Transfer Agent

352

F.5.3 Scenario 3: F-Secure Anti-Virus for Internet Mail for each Sub-domain.......356

AppendixG Services and Processes 360

G.1 List of Services and Processes............................................................................... 361

AppendixH Error Codes 365

H.1 Introduction ............................................................................................................. 366

H.2 F-Secure Anti-Virus for Internet Gateways ..............................................................366

H.3 F-Secure Anti-Virus for Internet Mail........................................................................374

H.4 F-Secure Content Scanner Server...........................................................................391

Technical Support 409

Introduction ...................................................................................................................... 410

F-Secure Online Support Resources ...............................................................................410

Web Club .........................................................................................................................412

Virus Descriptions on the Web .........................................................................................412

About F-Secure Corporation

ABOUT THIS GUIDE

How This Guide is Organized..................................................... 11

Conventions Used in F-Secure Guides..................................... 13

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali F-SECURE Software

F-SECURE

F-SECURE ONLINE BACKUP - WEB USER INTERFACE HELP Manuale utente

F-SECURE

F-SECURE MOBILE SECURITY FOR WINDOWS MOBILE - Manuale utente

F-SECURE

F-SECURE POLICY MANAGER PROXY 2.0 - Manuale di servizio

F-SECURE

F-SECURE MOBILE SECURITY FOR S60 - Manuale utente

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 6.62 - Manuale di servizio

F-SECURE

F-SECURE MOBILE SECURITY 6 FOR S60 - Manuale utente

F-SECURE

F-SECURE ONLINE BACKUP Manuale utente

F-SECURE

F-SECURE CLIENT SECURITY 7.00 Manuale utente

F-SECURE

F-SECURE POLICY MANAGER 7.0 - Manuale di servizio

F-SECURE

F-SECURE LINUX SECURITY Manuale utente

F-SECURE

F-SECURE ANTI-VIRUS - FOR MICROSOFT EXCHANGE Guida di riferimento rapido

F-SECURE

F-SECURE INTERNET GATEKEEPER FOR LINUX 4.01 - Manuale di servizio

F-SECURE

F-SECURE POLICY MANAGER 9.0 Manuale di servizio

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 Guida di riferimento rapido

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00 - Manuale utente

F-SECURE

F-SECURE MOBILE SECURITY 3.1 FOR SYMBIAN Manuale utente

F-SECURE

F-SECURE CLIENT SECURITY 9.01 - S Manuale di istruzioni

F-SECURE

F-SECURE PSB Manuale di servizio

F-SECURE

F-SECURE PSB - ADMINISTRATORS GUIDE FOR CUSTOMERS Manuale utente

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00 - Manuale di servizio

F-SECURE

F-SECURE MOBILE SECURITY FOR UIQ - Manuale utente

F-SECURE

F-SECURE ANTI-VIRUS - FOR MICROSOFT EXCHANGE Manuale di servizio

F-SECURE

F-SECURE MOBILE SECURITY 6 FOR WINDOWS MOBILE - Manuale utente

F-SECURE

F-SECURE PSB - ADMINISTRATORS GUIDE Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente