Installation Guide
Page 3
... Account Management For information about product feature and function, installation, and configuration. Also, you can visit our Web site at the following URL: www.symantec.com/techsupp/ent/enterprise.html Select your product documentation. For example, the Technical Support group works with a current maintenance agreement may vary based on which the problem occurred, in a timely fashion. Technical Support Symantec Technical Support maintains support centers globally. Contacting Technical Support Customers with Product Engineering and Symantec Security...
... Account Management For information about product feature and function, installation, and configuration. Also, you can visit our Web site at the following URL: www.symantec.com/techsupp/ent/enterprise.html Select your product documentation. For example, the Technical Support group works with a current maintenance agreement may vary based on which the problem occurred, in a timely fashion. Technical Support Symantec Technical Support maintains support centers globally. Contacting Technical Support Customers with Product Engineering and Symantec Security...
Installation Guide
Page 7
... 26 Supported browsers 26 Supported LDAP servers 26 System requirements for Windows 26 System requirements for Solaris 27 System requirements for Linux 27 Installing on Windows 27 Installing on Solaris and Linux 30 Setting up 32 Logging in 33 Registering your system 33 Configuring your system 34 Setting up a Scanner 38 Completing setup 42 Adding more Scanners 42 Setting mail filtering policies 42 Testing Scanners 43 Accessing...
... 26 Supported browsers 26 Supported LDAP servers 26 System requirements for Windows 26 System requirements for Solaris 27 System requirements for Linux 27 Installing on Windows 27 Installing on Solaris and Linux 30 Setting up 32 Logging in 33 Registering your system 33 Configuring your system 34 Setting up a Scanner 38 Completing setup 42 Adding more Scanners 42 Setting mail filtering policies 42 Testing Scanners 43 Accessing...
Installation Guide
Page 10
... Scan within messages and attachments. Inbound and outbound content controls True file type recognition for users and groups. View a list of Symantec Mail Security: Table 1-1 New features for . An easy-to look for Symantec Mail Security (all users) Category Features Description Threat protection features Improved email firewall Protects against phishing attacks, using the Sender Policy Framework (SPF), Sender ID, or both. Sender Authentication Protects against directory-harvest attacks, denial-of occurrences to -use authoring tool lets administrators create...
... Scan within messages and attachments. Inbound and outbound content controls True file type recognition for users and groups. View a list of Symantec Mail Security: Table 1-1 New features for . An easy-to look for Symantec Mail Security (all users) Category Features Description Threat protection features Improved email firewall Protects against phishing attacks, using the Sender Policy Framework (SPF), Sender ID, or both. Sender Authentication Protects against directory-harvest attacks, denial-of occurrences to -use authoring tool lets administrators create...
Installation Guide
Page 11
...); for each user Improved reporting and monitoring Extensive set of detailed information about a message, including the filtering processing applied to Enterprise Vault and an archival email address or disk location. Expanded IP-based access administration control capabilities Control which hosts and networks can be taken, actions and individually or in email being sent to a message. Control over delivery-queue processing Aliasing Distribution lists automatically expanded, mail filtered and...
...); for each user Improved reporting and monitoring Extensive set of detailed information about a message, including the filtering processing applied to Enterprise Vault and an archival email address or disk location. Expanded IP-based access administration control capabilities Control which hosts and networks can be taken, actions and individually or in email being sent to a message. Control over delivery-queue processing Aliasing Distribution lists automatically expanded, mail filtered and...
Installation Guide
Page 13
... configuration of all the Scanner hosts. Use the Control Center to administer all Symantec Mail Security instances at your system, including system logs and extensive customizable reports. Scanner and Control A single Symantec Mail Security host performs both system-wide and host-specific details. Multiple Scanners can view their quarantined spam messages and set their messages will not pass through the SMTP gateway. The Control Center provides the Setup Wizard, for adding new Scanners. End users...
... configuration of all the Scanner hosts. Use the Control Center to administer all Symantec Mail Security instances at your system, including system logs and extensive customizable reports. Scanner and Control A single Symantec Mail Security host performs both system-wide and host-specific details. Multiple Scanners can view their quarantined spam messages and set their messages will not pass through the SMTP gateway. The Control Center provides the Setup Wizard, for adding new Scanners. End users...
Installation Guide
Page 16
...TCP 443 Used to retrieve filters liveupdate.symantecliveupdate.symantec.com TCP 80 Used to retrieve automatic antivirus updates liveupdate.symantec.com TCP 80 Used to retrieve automatic antivirus updates update.symantec.com TCP 21 Used to retrieve Rapid Response antivirus updates Where to get more information The Symantec Mail Security documentation set consists of the following manuals: ■ Symantec Mail Security Administration Guide ■ Symantec Mail Security Planning Guide ■ Symantec Mail Security Installation Guide ■ Symantec Mail Security Getting Started
...TCP 443 Used to retrieve filters liveupdate.symantecliveupdate.symantec.com TCP 80 Used to retrieve automatic antivirus updates liveupdate.symantec.com TCP 80 Used to retrieve automatic antivirus updates update.symantec.com TCP 21 Used to retrieve Rapid Response antivirus updates Where to get more information The Symantec Mail Security documentation set consists of the following manuals: ■ Symantec Mail Security Administration Guide ■ Symantec Mail Security Planning Guide ■ Symantec Mail Security Installation Guide ■ Symantec Mail Security Getting Started
Installation Guide
Page 20
..., and Anti-Relay list data (optional, for users of Symantec Mail Security for SMTP 4.x only) Disabling other antivirus programs If you have other antivirus programs installed on your MTA (usually port 25) on the installation host if you must specify a 'custom' installation) ■ On Windows, the C:\windows\tmp directory ■ On Linux and Solaris, anything under /var/tmp For information on excluding directories from scanning: ■ The MTA data directory (which you...
..., and Anti-Relay list data (optional, for users of Symantec Mail Security for SMTP 4.x only) Disabling other antivirus programs If you have other antivirus programs installed on your MTA (usually port 25) on the installation host if you must specify a 'custom' installation) ■ On Windows, the C:\windows\tmp directory ■ On Linux and Solaris, anything under /var/tmp For information on excluding directories from scanning: ■ The MTA data directory (which you...
Installation Guide
Page 21
... no installations of port 25 for this system. Designating an alternate MTA for alerting (optional) Once you have installed Symantec Mail Security for SMTP and have begun filtering email, you can also telnet to remove it, as LISTENING or ESTABLISHED, it answers. ■ To check on Windows: Launch a Command window and type: netstat -an | find either product installed, you must remove them . Note: These two methods will be listed...
... no installations of port 25 for this system. Designating an alternate MTA for alerting (optional) Once you have installed Symantec Mail Security for SMTP and have begun filtering email, you can also telnet to remove it, as LISTENING or ESTABLISHED, it answers. ■ To check on Windows: Launch a Command window and type: netstat -an | find either product installed, you must remove them . Note: These two methods will be listed...
Installation Guide
Page 22
... SMTP 4.x (optional) If you wish to keep data from your existing installation of Symantec Mail Security for SMTP 4.x for SMTP Administration Guide. The autogenerated whitelist data is stored in the file named SMSSMTP_cw.txt file. Table 2-1 Default locations for SMTP Before you install However, if you stop the filter-hub or the MTA service, these files under the directory in the settings for SMTP 4.x. The blacklist, Local Routing list, and Anti-Relay list data is stored in this version...
... SMTP 4.x (optional) If you wish to keep data from your existing installation of Symantec Mail Security for SMTP 4.x for SMTP Administration Guide. The autogenerated whitelist data is stored in the file named SMSSMTP_cw.txt file. Table 2-1 Default locations for SMTP Before you install However, if you stop the filter-hub or the MTA service, these files under the directory in the settings for SMTP 4.x. The blacklist, Local Routing list, and Anti-Relay list data is stored in this version...
Installation Guide
Page 23
... login access, so you do so, you will use for user and group creation may vary depending on how your system is configured to the local passwd file; Before you install on Windows. Users and groups for a Control Center installation Create the following error at the end of Scanners and the Control Center are completed before you run the Symantec Mail Security for SMTP installer. Please check your Windows server, click Control Panel > Add/Remove...
... login access, so you do so, you will use for user and group creation may vary depending on how your system is configured to the local passwd file; Before you install on Windows. Users and groups for a Control Center installation Create the following error at the end of Scanners and the Control Center are completed before you run the Symantec Mail Security for SMTP installer. Please check your Windows server, click Control Panel > Add/Remove...
Installation Guide
Page 25
Optionally, you can use admin user names or file/directory paths that include doublebyte characters. For example, port 25 for inbound and port 26 for SMTP. Before you upgrade If you are reinstalling this version of Symantec Mail Security for SMTP, you must ensure that your existing installation does not use one each for for inbound and outbound mail traffic. System requirements This section lists system requirements for running Symantec Mail Security for outbound...
Optionally, you can use admin user names or file/directory paths that include doublebyte characters. For example, port 25 for inbound and port 26 for SMTP. Before you upgrade If you are reinstalling this version of Symantec Mail Security for SMTP, you must ensure that your existing installation does not use one each for for inbound and outbound mail traffic. System requirements This section lists system requirements for running Symantec Mail Security for outbound...
Installation Guide
Page 30
... displayed. To install Symantec Mail Security for SMTP does not support installation paths containing doublebyte charaters. The Installation Type screen is not present, it into a location that you plan to install Symantec Mail Security for SMTP in the following section describes how to proceed. Note: Symantec Mail Security for SMTP on Solaris or Linux 1 As root, or using an options file. If the correct version of the files and directories as described at the same time, running . The license...
... displayed. To install Symantec Mail Security for SMTP does not support installation paths containing doublebyte charaters. The Installation Type screen is not present, it into a location that you plan to install Symantec Mail Security for SMTP in the following section describes how to proceed. Note: Symantec Mail Security for SMTP on Solaris or Linux 1 As root, or using an options file. If the correct version of the files and directories as described at the same time, running . The license...
Installation Guide
Page 32
.... 11 Enter an IP address, CIDR, or subnet mask, and type 0 to use the Setup Wizard are actually site defaults that you can later vary for SMTP Setting up If you installed Control Center, you are started automatically. The Installation Parameters Summary screen is displayed. 13 Verify the list of this machine), the Control Center IP panel is displayed. The port number you specify for Tomcat to...
.... 11 Enter an IP address, CIDR, or subnet mask, and type 0 to use the Setup Wizard are actually site defaults that you can later vary for SMTP Setting up If you installed Control Center, you are started automatically. The Installation Parameters Summary screen is displayed. 13 Verify the list of this machine), the Control Center IP panel is displayed. The port number you specify for Tomcat to...
Installation Guide
Page 33
... fonts must support UTF-8. 4 Enter the default username and password, which you installed the Control Center. Select the language you wish to operate the Quarantine and end user views of the settings you specify using a non-English locale setting, you see the License Registration panel. Registering your system The first time you access the Control Center, you will see a security alert message, accept the self-signed certificate to you by Symantec...
... fonts must support UTF-8. 4 Enter the default username and password, which you installed the Control Center. Select the language you wish to operate the Quarantine and end user views of the settings you specify using a non-English locale setting, you see the License Registration panel. Registering your system The first time you access the Control Center, you will see a security alert message, accept the self-signed certificate to you by Symantec...
Installation Guide
Page 35
... import a text file containing a list of local domains, one of the following: ■ If you are setting up To specify administrator, local domain, and locale settings 1 On the Administrator Settings panel, specify an email address for the administrator and click Next. You must set up a Scanner on another machine you must install a Scanner on that Symantec Mail Security for SMTP should be routed to a specific host and port. The System Locale panel is displayed...
... import a text file containing a list of local domains, one of the following: ■ If you are setting up To specify administrator, local domain, and locale settings 1 On the Administrator Settings panel, specify an email address for the administrator and click Next. You must set up a Scanner on another machine you must install a Scanner on that Symantec Mail Security for SMTP should be routed to a specific host and port. The System Locale panel is displayed...
Installation Guide
Page 37
... conflict with the port used for that the mail server responds. You can select a host from the list. Connections panel, specify by IP address the internal mail servers from which this Scanner will see if an address/port is in use; Local Relay panel next. You can also specify a port. A typical value is a downstream mail server such as port 25. You can use for outbound mail. 2 If desired, change the port specification for SMTP 37 Setting up 5 On...
... conflict with the port used for that the mail server responds. You can select a host from the list. Connections panel, specify by IP address the internal mail servers from which this Scanner will see if an address/port is in use; Local Relay panel next. You can also specify a port. A typical value is a downstream mail server such as port 25. You can use for outbound mail. 2 If desired, change the port specification for SMTP 37 Setting up 5 On...
Installation Guide
Page 38
... not make any changes. If you check Enable MX lookup for this host, you are adding a Scanner on a machine different from the one hosting your settings, or Cancel to download the latest antispam filters and antivirus definitions, and the default antivirus definition download schedule will use default MX lookup, select a host from the Control Center. When the configuration is complete. Add a Scanner Use the Add Scanner Wizard to the Symantec Mail Security for SMTP Administration Guide...
... not make any changes. If you check Enable MX lookup for this host, you are adding a Scanner on a machine different from the one hosting your settings, or Cancel to download the latest antispam filters and antivirus definitions, and the default antivirus definition download schedule will use default MX lookup, select a host from the Control Center. When the configuration is complete. Add a Scanner Use the Add Scanner Wizard to the Symantec Mail Security for SMTP Administration Guide...
Installation Guide
Page 42
... set of default policies designed for that server. You can use default MX lookup, select a host from the Control Center. Review the following sections to deliver the mail. 8 Click Next. 9 On the Setup Wizard Summary panel, review the settings shown. 10 If you must specify a host name (not an IP address) for most enterprise installations. For outbound mail addressed to perform. You can alter this host, you are in Setting up Symantec Mail Security for SMTP Adding...
... set of default policies designed for that server. You can use default MX lookup, select a host from the Control Center. Review the following sections to deliver the mail. 8 Click Next. 9 On the Setup Wizard Summary panel, review the settings shown. 10 If you must specify a host name (not an IP address) for most enterprise installations. For outbound mail addressed to perform. You can alter this host, you are in Setting up Symantec Mail Security for SMTP Adding...
Installation Guide
Page 53
... host manually when the installation procedure is a sample options file for your platform and type: sudo ./install -silent -options ■ For Windows: launch a command window, navigate to the Windows installation directory on the product CD in the installation procedure, do one of this file to replace the default values provided with the values you can replace them with the -options command line installation flag. The default values are available on the product CD and type: install.bat -silent -options...
... host manually when the installation procedure is a sample options file for your platform and type: sudo ./install -silent -options ■ For Windows: launch a command window, navigate to the Windows installation directory on the product CD in the installation procedure, do one of this file to replace the default values provided with the values you can replace them with the -options command line installation flag. The default values are available on the product CD and type: install.bat -silent -options...
Installation Guide
Page 58
... on the Symantec applications that you to manage and respond to incidents from threat and vulnerability from Symantec clients, gateways, servers, and Web servers. The Symantec Security Information Manager allows you can assign to the Information Manager: ■ Firewall events ■ Definition Update events ■ Message events The Symantec Incident Manager evaluates the impact of incidents on the event management capabilities of normalized event data for Information Manager-enabled security products like Symantec Mail Security for managing security events...
... on the Symantec applications that you to manage and respond to incidents from threat and vulnerability from Symantec clients, gateways, servers, and Web servers. The Symantec Security Information Manager allows you can assign to the Information Manager: ■ Firewall events ■ Definition Update events ■ Message events The Symantec Incident Manager evaluates the impact of incidents on the event management capabilities of normalized event data for Information Manager-enabled security products like Symantec Mail Security for managing security events...