Planning Guide
Page 2
... MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. Symantec Corporation 20330 Stevens Creek Blvd. Symantec Mail Security for SMTP Planning Guide The software described in this book is distributed under a license agreement and may be trademarks of America. 10 9 8 7 6 5 4 3 2 1 No part...
... MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. Symantec Corporation 20330 Stevens Creek Blvd. Symantec Mail Security for SMTP Planning Guide The software described in this book is distributed under a license agreement and may be trademarks of America. 10 9 8 7 6 5 4 3 2 1 No part...
Planning Guide
Page 3
... and easiest way to register, and from Symantec Security Response experts, which is available 24 hours a day, 7 days a week worldwide in a variety of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. Symantec technical support offerings include: ■ A ... enrolled in the Platinum Support Program ■ Advanced features, such as the Symantec Alerting Service and Technical Account Manager role, offer enhanced response and proactive security support Please visit our Web site for our Web-accessible Knowledge Base. The ...
... and easiest way to register, and from Symantec Security Response experts, which is available 24 hours a day, 7 days a week worldwide in a variety of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. Symantec technical support offerings include: ■ A ... enrolled in the Platinum Support Program ■ Advanced features, such as the Symantec Alerting Service and Technical Account Manager role, offer enhanced response and proactive security support Please visit our Web site for our Web-accessible Knowledge Base. The ...
Planning Guide
Page 4
...Technical Support Customers with a current support agreement may contact the Technical Support group via phone or online at https://www-secure.symantec.com/ platinum/ When contacting the Technical Support group, please have the following: ■ Product release level ■ ... gateway, and IP address information ■ Problem description ■ Error messages/log files ■ Troubleshooting performed prior to contacting Symantec ■ Recent software configuration changes and/or network changes Customer Service To contact Enterprise Customer Service online, go to assist with Platinum...
...Technical Support Customers with a current support agreement may contact the Technical Support group via phone or online at https://www-secure.symantec.com/ platinum/ When contacting the Technical Support group, please have the following: ■ Product release level ■ ... gateway, and IP address information ■ Problem description ■ Error messages/log files ■ Troubleshooting performed prior to contacting Symantec ■ Recent software configuration changes and/or network changes Customer Service To contact Enterprise Customer Service online, go to assist with Platinum...
Planning Guide
Page 5
Contents Chapter 1 Chapter 2 Chapter 3 Introducing Symantec Mail Security for SMTP Key features ...7 Functional overview 8 Architecture ...9 New features for all users 10 Changes for Symantec Mail Security for SMTP users 11 New feature names 13 Discontinued features 13 Changes for Symantec Brightmail Antispam users 13 Where to get more information 15 Planning your deployment General deployment considerations 17 MTA usage ...17...
Contents Chapter 1 Chapter 2 Chapter 3 Introducing Symantec Mail Security for SMTP Key features ...7 Functional overview 8 Architecture ...9 New features for all users 10 Changes for Symantec Mail Security for SMTP users 11 New feature names 13 Discontinued features 13 Changes for Symantec Brightmail Antispam users 13 Where to get more information 15 Planning your deployment General deployment considerations 17 MTA usage ...17...
Planning Guide
Page 7
...; Key features ■ Functional overview ■ Architecture ■ New features for all users ■ Changes for Symantec Mail Security for SMTP users ■ Changes for Symantec Brightmail Antispam users ■ Where to get more information Key features Symantec Mail Security for SMTP offers enterprises an easy-to -use authoring tool lets administrators create powerful, flexible ad hoc filters for...
...; Key features ■ Functional overview ■ Architecture ■ New features for all users ■ Changes for Symantec Mail Security for SMTP users ■ Changes for Symantec Brightmail Antispam users ■ Where to get more information Key features Symantec Mail Security for SMTP offers enterprises an easy-to -use authoring tool lets administrators create powerful, flexible ad hoc filters for...
Planning Guide
Page 8
... configure the Spam Quarantine for administrator-only access. ■ Scanner and Control Center - Note: Symantec Mail Security for SMTP does not filter messages that don't flow through Symantec Mail Security for SMTP filters. 8 Introducing Symantec Mail Security for SMTP Functional overview Functional overview You can deploy Symantec Mail Security for SMTP in different configurations to best suit the size of your network and your site, and...
... configure the Spam Quarantine for administrator-only access. ■ Scanner and Control Center - Note: Symantec Mail Security for SMTP does not filter messages that don't flow through Symantec Mail Security for SMTP filters. 8 Introducing Symantec Mail Security for SMTP Functional overview Functional overview You can deploy Symantec Mail Security for SMTP in different configurations to best suit the size of your network and your site, and...
Planning Guide
Page 9
For the sake of discussion, our sample message passes through the Filtering Engine to the Transformation Engine without being rejected. Introducing Symantec Mail Security for SMTP 9 Architecture Architecture Your Symantec Mail Security for SMTP installation processes a email message as follows.
For the sake of discussion, our sample message passes through the Filtering Engine to the Transformation Engine without being rejected. Introducing Symantec Mail Security for SMTP 9 Architecture Architecture Your Symantec Mail Security for SMTP installation processes a email message as follows.
Planning Guide
Page 10
.... ■ Spam filters compare message elements with updated virus definitions, if available. New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam Category Threat protection features Features Improved Email Firewall Sender Authentication Improved virus protection Description Protects against...message is checked against phishing attacks, using the Sender Policy Framework (SPF), Sender ID, or both Symantec Mail Security for SMTP users and Symantec Brightmail Antispam users. Email messages that are widely known. This feature can be delayed in defeating virus...
.... ■ Spam filters compare message elements with updated virus definitions, if available. New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam Category Threat protection features Features Improved Email Firewall Sender Authentication Improved virus protection Description Protects against...message is checked against phishing attacks, using the Sender Policy Framework (SPF), Sender ID, or both Symantec Mail Security for SMTP users and Symantec Brightmail Antispam users. Email messages that are widely known. This feature can be delayed in defeating virus...
Planning Guide
Page 11
... of several supported LDAP synchronization for . Reports can access your Control Center. Changes for Symantec Mail Security for SMTP users For users of multiple actions available. Introducing Symantec Mail Security for SMTP 11 Changes for Symantec Mail Security for SMTP users Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam Category Features Description Inbound and outbound content controls True file type recognition for...
... of several supported LDAP synchronization for . Reports can access your Control Center. Changes for Symantec Mail Security for SMTP users For users of multiple actions available. Introducing Symantec Mail Security for SMTP 11 Changes for Symantec Mail Security for SMTP users Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam Category Features Description Inbound and outbound content controls True file type recognition for...
Planning Guide
Page 12
Note that many of users based on filtered messages. See the Symantec Mail Security for SMTP Administration Guide for SMTP 5.0 by the message tracking feature. 12 Introducing Symantec Mail Security for SMTP Changes for Symantec Mail Security for SMTP users Table 1-2 Table 1-1, additional new features for Symantec Mail Security for each group. For each category of email, you can specify groups of the reporting features in SMS...
Note that many of users based on filtered messages. See the Symantec Mail Security for SMTP Administration Guide for SMTP 5.0 by the message tracking feature. 12 Introducing Symantec Mail Security for SMTP Changes for Symantec Mail Security for SMTP users Table 1-2 Table 1-1, additional new features for Symantec Mail Security for each group. For each category of email, you can specify groups of the reporting features in SMS...
Planning Guide
Page 13
... product name has changed, if you were a Symantec Brightmail Antispam user you will find the user interface for Symantec Mail Security for SMTP 5.0 quite familiar. Most features are new features. For users of Symantec Brightmail Antispam, Symantec Mail Security for SMTP 5.0 features that have similar names to Table 1-3 Version 4.1 to Version 5.0 Symantec Mail Security for SMTP 4.1 Symantec Mail Security for SMTP 5.0 Feature Name Feature Name Accounts Administration Custom...
... product name has changed, if you were a Symantec Brightmail Antispam user you will find the user interface for Symantec Mail Security for SMTP 5.0 quite familiar. Most features are new features. For users of Symantec Brightmail Antispam, Symantec Mail Security for SMTP 5.0 features that have similar names to Table 1-3 Version 4.1 to Version 5.0 Symantec Mail Security for SMTP 4.1 Symantec Mail Security for SMTP 5.0 Feature Name Feature Name Accounts Administration Custom...
Planning Guide
Page 14
... other items as legal disclaimers or marketing tag lines, to populate groups for Group Policies. 14 Introducing Symantec Mail Security for SMTP Changes for Symantec Brightmail Antispam users Table 1-4 the new features listed in Table 1-1, additional new features for Symantec Brightmail Antispam users only are listed in place. Most importantly, you will now find some changes...
... other items as legal disclaimers or marketing tag lines, to populate groups for Group Policies. 14 Introducing Symantec Mail Security for SMTP Changes for Symantec Brightmail Antispam users Table 1-4 the new features listed in Table 1-1, additional new features for Symantec Brightmail Antispam users only are listed in place. Most importantly, you will now find some changes...
Planning Guide
Page 15
...; Symantec Mail Security for SMTP Installation Guide ■ Symantec Mail Security for SMTP Administration Guide ■ Symantec Mail Security for SMTP Getting Started Symantec Mail Security also includes a comprehensive help .html www.enterprisesecurity. You can visit the Symantec Web site for more information In addition to this Planning Guide, your product. Introducing Symantec Mail Security for SMTP 15 Where to get more information Where to get more information about your Symantec Mail Security...
...; Symantec Mail Security for SMTP Installation Guide ■ Symantec Mail Security for SMTP Administration Guide ■ Symantec Mail Security for SMTP Getting Started Symantec Mail Security also includes a comprehensive help .html www.enterprisesecurity. You can visit the Symantec Web site for more information In addition to this Planning Guide, your product. Introducing Symantec Mail Security for SMTP 15 Where to get more information Where to get more information about your Symantec Mail Security...
Planning Guide
Page 17
...can dedicate Scanners to specific functions. In such cases, you can use as the only MTA in your email infrastructure. MTA usage Symantec Mail Security for SMTP contains a Message Transfer Agent (MTA), which processes and relays messages to add a Scanner. Depending on your network. 2 Chapter ... ■ General deployment considerations ■ Deployment models General deployment considerations This section provides information about integrating Symantec Mail Security for SMTP into your filtering requirements and messaging environment, you may want one Scanner to filter inbound...
...can dedicate Scanners to specific functions. In such cases, you can use as the only MTA in your email infrastructure. MTA usage Symantec Mail Security for SMTP contains a Message Transfer Agent (MTA), which processes and relays messages to add a Scanner. Depending on your network. 2 Chapter ... ■ General deployment considerations ■ Deployment models General deployment considerations This section provides information about integrating Symantec Mail Security for SMTP into your filtering requirements and messaging environment, you may want one Scanner to filter inbound...
Planning Guide
Page 18
.... This is being sent to Spam Quarantine. Filtering internal deliveries You can force internal mail through Symantec Mail Security for SMTP to fit the needs of viruses and spam generated by individuals via Web browsing or downloading. LDAP compatibility Symantec Mail Security for SMTP supports LDAP for authentication. While the same source may also be used for synchronization purposes...
.... This is being sent to Spam Quarantine. Filtering internal deliveries You can force internal mail through Symantec Mail Security for SMTP to fit the needs of viruses and spam generated by individuals via Web browsing or downloading. LDAP compatibility Symantec Mail Security for SMTP supports LDAP for authentication. While the same source may also be used for synchronization purposes...
Planning Guide
Page 19
...the previous MTA's MX record from DNS. ■ Block off the MTA from the Internet using LDAP SyncService, see the Symantec Mail Security for SMTP should do one host name or IP address as a higherweighted MX record in addition to the system. You must point incoming...of spam are not good choices. To prevent spammers from the old server to Symantec Mail Security for SMTP. ■ When naming Symantec Mail Security for SMTP, ensure that receives inbound messages, you simply list Symantec Mail Security for load balancing. Tomcat provides the Web-based interface, and MySQL is not ...
...the previous MTA's MX record from DNS. ■ Block off the MTA from the Internet using LDAP SyncService, see the Symantec Mail Security for SMTP should do one host name or IP address as a higherweighted MX record in addition to the system. You must point incoming...of spam are not good choices. To prevent spammers from the old server to Symantec Mail Security for SMTP. ■ When naming Symantec Mail Security for SMTP, ensure that receives inbound messages, you simply list Symantec Mail Security for load balancing. Tomcat provides the Web-based interface, and MySQL is not ...
Planning Guide
Page 20
...Basic gateway deployment This is the logical and effective place to deploy Symantec Mail Security for SMTP. ■ When you deploy the system closer to the gateway, you can deploy Symantec Mail Security for SMTP in MySQL improves performance. On all configured server computers, port 443...consumer threads in the following figure shows Symantec Mail Security for SMTP deployed at the outermost gateway layer, processing inbound and outbound mail, providing Secure Email Services, and relaying mail to other relay layers or to the user-facing mail server layer. Figure 2-1 Basic gateway ...
...Basic gateway deployment This is the logical and effective place to deploy Symantec Mail Security for SMTP. ■ When you deploy the system closer to the gateway, you can deploy Symantec Mail Security for SMTP in MySQL improves performance. On all configured server computers, port 443...consumer threads in the following figure shows Symantec Mail Security for SMTP deployed at the outermost gateway layer, processing inbound and outbound mail, providing Secure Email Services, and relaying mail to other relay layers or to the user-facing mail server layer. Figure 2-1 Basic gateway ...
Planning Guide
Page 21
... Center behind the first gateway layer. ■ Some smaller organizations do not have secure gateways with one or more Scanner hosts. Instead, they deploy gateway servers and internal mail servers on the server running . Planning your deployment 21 Deployment models Considerations ■... and Spam Quarantine databases. ■ Inbound traffic may be installed on the same computers. ■ Symantec Mail Security for SMTP in a multi-tier gateway deployment, with this model. Figure 2-2 Multi-tier gateway deployment Advantages ■ This configuration meets a ...
... Center behind the first gateway layer. ■ Some smaller organizations do not have secure gateways with one or more Scanner hosts. Instead, they deploy gateway servers and internal mail servers on the server running . Planning your deployment 21 Deployment models Considerations ■... and Spam Quarantine databases. ■ Inbound traffic may be installed on the same computers. ■ Symantec Mail Security for SMTP in a multi-tier gateway deployment, with this model. Figure 2-2 Multi-tier gateway deployment Advantages ■ This configuration meets a ...
Planning Guide
Page 23
... the Internet then relay it to the system, which must then read , stored, and forwarded) then sent to Symantec Mail Security for SMTP. Such redundancy may be implemented with one or more SMTP gateway MTAs and one or more Scanner hosts. Considerations ■ This configuration limits Scanner functionality as IP-based defenses are nullified. ■...
... the Internet then relay it to the system, which must then read , stored, and forwarded) then sent to Symantec Mail Security for SMTP. Such redundancy may be implemented with one or more SMTP gateway MTAs and one or more Scanner hosts. Considerations ■ This configuration limits Scanner functionality as IP-based defenses are nullified. ■...