Administration Guide
Page 2
... INVALID. and 6,654,787. Symantec Mail Security for SMTP 5.0 is distributed under licenses restricting its affiliates in other countries. April 27, 2006 Copyright notice Copyright © 1998-2006 Symantec Corporation. Symantec Mail Security for SMTP Administration Guide The software...THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are U.S. Symantec, the Symantec logo, Brightmail, LiveUpdate, SESA, and Norton AntiVirus are deemed to be trademarks of America. 10 9 8 7 6 5 4 3 2 1 Other ...
... INVALID. and 6,654,787. Symantec Mail Security for SMTP 5.0 is distributed under licenses restricting its affiliates in other countries. April 27, 2006 Copyright notice Copyright © 1998-2006 Symantec Corporation. Symantec Mail Security for SMTP Administration Guide The software...THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are U.S. Symantec, the Symantec logo, Brightmail, LiveUpdate, SESA, and Norton AntiVirus are deemed to be trademarks of America. 10 9 8 7 6 5 4 3 2 1 Other ...
Administration Guide
Page 7
... Quarantine 148 Configuring Suspect Virus Quarantine port for incoming email .......148 Configuring the size for Suspect Virus Quarantine 148 Testing Symantec Mail Security for SMTP Verifying normal delivery 151 Verifying spam filtering 151 Testing antivirus filtering 152 Verifying filtering to the Spam Quarantine 153 Configuring alerts and logs Configuring alerts 155 Viewing logs ...157...
... Quarantine 148 Configuring Suspect Virus Quarantine port for incoming email .......148 Configuring the size for Suspect Virus Quarantine 148 Testing Symantec Mail Security for SMTP Verifying normal delivery 151 Verifying spam filtering 151 Testing antivirus filtering 152 Verifying filtering to the Spam Quarantine 153 Configuring alerts and logs Configuring alerts 155 Viewing logs ...157...
Administration Guide
Page 10
10 Contents Appendix D Glossary Index Editing antivirus notification messages Modifying notification files 231 Changing the notification file character set 232 Editing messages in the notification file 232 Notification file contents 233
10 Contents Appendix D Glossary Index Editing antivirus notification messages Modifying notification files 231 Changing the notification file character set 232 Editing messages in the notification file 232 Notification file contents 233
Administration Guide
Page 11
... policies, reduce legal liability, and ensure compliance with regulatory requirements. ■ Group policies and filter policies - Virus definitions and engines protect your site. ■ Antivirus technology - 1 Chapter About Symantec Mail Security for SMTP This chapter includes the following topics: ■ Key features ■ Functional overview ■ Architecture ■ Where to -deploy, comprehensive gateway-based...
... policies, reduce legal liability, and ensure compliance with regulatory requirements. ■ Group policies and filter policies - Virus definitions and engines protect your site. ■ Antivirus technology - 1 Chapter About Symantec Mail Security for SMTP This chapter includes the following topics: ■ Key features ■ Functional overview ■ Architecture ■ Where to -deploy, comprehensive gateway-based...
Administration Guide
Page 55
.... 2 Click LiveUpdate. 3 Click Enable Rapid Response updates. Excluding files from Symantec Security Response. Symantec Mail Security for and install non-default definitions. While Rapid Response definitions are published more ...frequently (every 10 minutes) than automatic update definitions, they are not as thoroughly tested. Configuring Rapid Response updates Rapid Response updates retrieve the very latest virus definitions from virus scanning You can also update antivirus...
.... 2 Click LiveUpdate. 3 Click Enable Rapid Response updates. Excluding files from Symantec Security Response. Symantec Mail Security for and install non-default definitions. While Rapid Response definitions are published more ...frequently (every 10 minutes) than automatic update definitions, they are not as thoroughly tested. Configuring Rapid Response updates Rapid Response updates retrieve the very latest virus definitions from virus scanning You can also update antivirus...
Administration Guide
Page 151
7 Chapter Testing Symantec Mail Security for SMTP This chapter includes the following are using default installation settings for SMTP is filtering your installed MDA is working properly with the subject line Normal Delivery Test to the Spam Quarantine The following topics: ■ Verifying normal delivery ■ Verifying spam filtering ■ Testing antivirus filtering ■ Verifying...
7 Chapter Testing Symantec Mail Security for SMTP This chapter includes the following are using default installation settings for SMTP is filtering your installed MDA is working properly with the subject line Normal Delivery Test to the Spam Quarantine The following topics: ■ Verifying normal delivery ■ Verifying spam filtering ■ Testing antivirus filtering ■ Verifying...
Administration Guide
Page 152
...if filtering is working correctly by the word [Spam]. 7 Send a message that does not contain a virus to allow for SMTP Testing antivirus filtering To test spam filtering with the same subject prefixed by sending a test message containing a pseudo-virus. Virus test files are located ...to which you sent the message. For the SMTP Server setting on this account, specify the IP address of virusinfected messages. 152 Testing Symantec Mail Security for the cleaning of an enabled Scanner. 2 Compose an email message addressed to an account on the machine running the Scanner. 3 Give...
...if filtering is working correctly by the word [Spam]. 7 Send a message that does not contain a virus to allow for SMTP Testing antivirus filtering To test spam filtering with the same subject prefixed by sending a test message containing a pseudo-virus. Virus test files are located ...to which you sent the message. For the SMTP Server setting on this account, specify the IP address of virusinfected messages. 152 Testing Symantec Mail Security for the cleaning of an enabled Scanner. 2 Compose an email message addressed to an account on the machine running the Scanner. 3 Give...
Administration Guide
Page 156
...the status of your antispam license has expired. These errors are caused by problems in the replication of LDAP data from Symantec Security Response. Antivirus license expired An alert is blocking a queue. The first expiration warning is sent because of replication errors. LDAP Scanner ... expired An alert is sent because of a nonresponsive component. Only messages that log at the error level cause alerts. Contact your antivirus license has expired. A component is not responding or working An alert is sent when your certificates by problems in directory synchronization. ...
...the status of your antispam license has expired. These errors are caused by problems in the replication of LDAP data from Symantec Security Response. Antivirus license expired An alert is blocking a queue. The first expiration warning is sent because of replication errors. LDAP Scanner ... expired An alert is sent because of a nonresponsive component. Only messages that log at the error level cause alerts. Contact your antivirus license has expired. A component is not responding or working An alert is sent when your certificates by problems in directory synchronization. ...
Administration Guide
Page 226
... that are sent to the Information Manager Table C-4 lists the firewall events that Symantec Mail Security for SMTP can send to the Information Manager. Table C-5 Definition Update events that Symantec Mail Security for SMTP can send to the Information Manager. 226 Integrating Symantec Mail Security with Symantec Security Information Manager Interpreting events in the Information Manager Table C-3 Settings for Administrative and...
... that are sent to the Information Manager Table C-4 lists the firewall events that Symantec Mail Security for SMTP can send to the Information Manager. Table C-5 Definition Update events that Symantec Mail Security for SMTP can send to the Information Manager. 226 Integrating Symantec Mail Security with Symantec Security Information Manager Interpreting events in the Information Manager Table C-3 Settings for Administrative and...
Administration Guide
Page 228
228 Integrating Symantec Mail Security with Symantec Security Information Manager Interpreting events in the Information Manager Administration events that Symantec Mail Security for SMTP can send to the ... filters old SES_EVENT_VIRUS_DEFINITION_UPDATE_FAI Major LED (92054) symc_defupdate Antivirus filters old SES_EVENT_LIST_UPDATE_FAILED (92059) Critical symc_defupdate Antispam license expired SES_EVENT_VIRUS_DEFINITION_UPDATE_FAI Critical LED (92054) symc_defupdate Antivirus license expired SES_EVENT_CONFIGURATION_CHANGE (92008) Informational symc_config_update Certificate ...
228 Integrating Symantec Mail Security with Symantec Security Information Manager Interpreting events in the Information Manager Administration events that Symantec Mail Security for SMTP can send to the ... filters old SES_EVENT_VIRUS_DEFINITION_UPDATE_FAI Major LED (92054) symc_defupdate Antivirus filters old SES_EVENT_LIST_UPDATE_FAILED (92059) Critical symc_defupdate Antispam license expired SES_EVENT_VIRUS_DEFINITION_UPDATE_FAI Critical LED (92054) symc_defupdate Antivirus license expired SES_EVENT_CONFIGURATION_CHANGE (92008) Informational symc_config_update Certificate ...
Administration Guide
Page 231
D Appendix Editing antivirus notification messages Whenever Symantec Mail Security for SMTP sidelines and processes a message for modifying it. Although it is not necessary for you wish. This section explains the format of the action taken. Symantec Mail Security for locales that the original message is...Modifying notification files The notification files are located at: C:\Program Files\Symantec\SMSSMTP\scanner\etc\ Windows /opt/Symantec/SMSSMTP/scanner/etc/ UNIX The notification file used by Symantec Mail Security for SMTP depends on your locale: Notification.en_US.UTF-8.xml US ...
D Appendix Editing antivirus notification messages Whenever Symantec Mail Security for SMTP sidelines and processes a message for modifying it. Although it is not necessary for you wish. This section explains the format of the action taken. Symantec Mail Security for locales that the original message is...Modifying notification files The notification files are located at: C:\Program Files\Symantec\SMSSMTP\scanner\etc\ Windows /opt/Symantec/SMSSMTP/scanner/etc/ UNIX The notification file used by Symantec Mail Security for SMTP depends on your locale: Notification.en_US.UTF-8.xml US ...
Administration Guide
Page 232
... the shortest message. In the XML file, each containing a block of information, depending on the disposition of the message. Symantec Mail Security for SMTP chooses the encoding method (quoted-printable or base64) that use the Latin 2 character set (ISO 8859-2), which ...Symantec Mail Security for SMTP successfully cleans a message, it is constructed with an tag. There are several tags, each notification message is not used. Do not modify any other tags or structures. Note: The Notification.xml file also contains a content-transfer-encoding element. 232 Editing antivirus...
... the shortest message. In the XML file, each containing a block of information, depending on the disposition of the message. Symantec Mail Security for SMTP chooses the encoding method (quoted-printable or base64) that use the Latin 2 character set (ISO 8859-2), which ...Symantec Mail Security for SMTP successfully cleans a message, it is constructed with an tag. There are several tags, each notification message is not used. Do not modify any other tags or structures. Note: The Notification.xml file also contains a content-transfer-encoding element. 232 Editing antivirus...
Administration Guide
Page 233
... malicious virus and has been deleted because the Symantec decomposer cannot modify its container. Editing antivirus notification messages 233 Notification file contents Notification file contents This section shows the full contents of the Notification.en_US.UTF-8.xml file which contains text for notifications issued by Symantec Mail Security for SMTP as it may contain files...
... malicious virus and has been deleted because the Symantec decomposer cannot modify its container. Editing antivirus notification messages 233 Notification file contents Notification file contents This section shows the full contents of the Notification.en_US.UTF-8.xml file which contains text for notifications issued by Symantec Mail Security for SMTP as it may contain files...
Administration Guide
Page 234
...the error: was not scanned because it is too large. was not scanned for viruses because it is corrupted (Symantec decomposer reports ). This message has been processed by Symantec AntiVirus. If you are able to open it, use caution when doing so as it is encrypted. This message ...has been processed by Symantec AntiVirus. ]]> was not scanned for scanning was exceeded. The message was not scanned for viruses because ...
...the error: was not scanned because it is too large. was not scanned for viruses because it is corrupted (Symantec decomposer reports ). This message has been processed by Symantec AntiVirus. If you are able to open it, use caution when doing so as it is encrypted. This message ...has been processed by Symantec AntiVirus. ]]> was not scanned for scanning was exceeded. The message was not scanned for viruses because ...
Administration Guide
Page 235
...this email an error occurred. Contact the sender of this message so he or she can resend it to you sent has been processed by Symantec AntiVirus. For more information on your computer. You may want to you. ]]> The message you . Contact the sender of this message so ...he or she can resend it to install or update antivirus software on antivirus tips and technology, visit http://www.symantec.com Headers of this email an error occurred. ERROR: During the processing of infected message:
...this email an error occurred. Contact the sender of this message so he or she can resend it to you sent has been processed by Symantec AntiVirus. For more information on your computer. You may want to you. ]]> The message you . Contact the sender of this message so ...he or she can resend it to install or update antivirus software on antivirus tips and technology, visit http://www.symantec.com Headers of this email an error occurred. ERROR: During the processing of infected message:
Administration Guide
Page 236
Headers of infected message: ]]> ]]> For more information on your computer. 236 Editing antivirus notification messages Notification file contents The message you sent has been processed by Symantec AntiVirus. ]]> You may want to install or update antivirus software on antivirus tips and technology, visit http://www.symantec.com.
Headers of infected message: ]]> ]]> For more information on your computer. 236 Editing antivirus notification messages Notification file contents The message you sent has been processed by Symantec AntiVirus. ]]> You may want to install or update antivirus software on antivirus tips and technology, visit http://www.symantec.com.
Administration Guide
Page 237
... can use any of recipients. adware Programs that pertains to use this feature to access a network. Symantec Mail Security for use of a security policy that secretly gather personal information through challenge/response, time-based code sequences, or other information that ...of the operating system or another computer. antivirus A subcategory of a password, certificate, PIN, or other techniques. A person who oversees the operation of filtering (but not from virus filtering). Agent A component of Symantec Mail Security for installing programs on the true type...
... can use any of recipients. adware Programs that pertains to use this feature to access a network. Symantec Mail Security for use of a security policy that secretly gather personal information through challenge/response, time-based code sequences, or other information that ...of the operating system or another computer. antivirus A subcategory of a password, certificate, PIN, or other techniques. A person who oversees the operation of filtering (but not from virus filtering). Agent A component of Symantec Mail Security for installing programs on the true type...
Administration Guide
Page 251
... Senders Lists about 97 add, delete senders 100 disable, edit, enable senders 101 end user lists 79 end user lists, via Symantec Outlook Spam Plug-in 210 export data from 104 import data for 104 reasons to use 97 annotate messages 106 antispam filters creating ...antispam policies 85 language-based 80 sender authentication 105 Spam Quarantine 117 verify filtering 151 verify filtering to Spam Quarantine 153 antivirus filters create antivirus policies 83 Suspect Virus Quarantine 143 test 152 architectural overview 13 archive messages 109 attachment lists 110 attachments determining your policy ...
... Senders Lists about 97 add, delete senders 100 disable, edit, enable senders 101 end user lists 79 end user lists, via Symantec Outlook Spam Plug-in 210 export data from 104 import data for 104 reasons to use 97 annotate messages 106 antispam filters creating ...antispam policies 85 language-based 80 sender authentication 105 Spam Quarantine 117 verify filtering 151 verify filtering to Spam Quarantine 153 antivirus filters create antivirus policies 83 Suspect Virus Quarantine 143 test 152 architectural overview 13 archive messages 109 attachment lists 110 attachments determining your policy ...