Symantec™ Mail Security 8.1.x for Domino® Implementation Guide

Article:DOC5364  |  Created: 2012-02-17  |  Updated: 2013-12-17  |  Article URL http://www.symantec.com/docs/DOC5364
Article Type
Documentation


Environment

Description



Note: This document is applicable to all releases of 8.1.x.

Symantec™ Mail Security 8.1 for Domino® Implementation Guide

Contents

1. Introducing Symantec Mail Security for Domino
About Symantec Mail Security for Domino
Components of Mail Security
How Mail Security works
About Mail Security databases
About the scanning process
Integrating with other Symantec products
What you can do with Mail Security
Scan your Domino server for risks and violations
Protect against risks
Keep your protection up-to-date
Identify spam email
Enforce content filtering rules
Isolate infected documents
Analyze data and generate reports
Issue alerts when risks or violations are detected
Manage multiple Lotus Domino servers
Apply X-headers to messages for archiving
Where to get more information
2. Activating licenses
About licensing
Activating the license
If you do not have a serial number
Obtaining a license file
Installing product and content license files
Installing a Symantec Premium AntiSpam license file
After you install the Symantec Premium AntiSpam license file
Checking the license status
Receiving notification when a license is about to expire
If you want to renew a license
3. Managing your Domino servers
About managing your Domino servers
Managing multiple servers
About replicating Mail Security databases
Creating replica databases on an additional server
Managing server groups
Creating a server group
Copying settings to create a new server group
Removing a server from a server group
Deleting a server group
Checking the status of a server
4. Protecting your server from risks
How to protect your server from risks
Detecting risks
Configuring threat detection
Enabling mass-mailer worm-infected message cleanup
Configuring container file limits
Enabling security risk detection
Detecting malicious code in MIME files
5. Identifying spam
How to identify spam
Reducing false positives
Detecting spam using the standard antispam feature
Configuring the standard antispam feature
Detecting spam using Symantec Premium AntiSpam
Enabling and disabling Symantec Premium AntiSpam
Adjusting suspected spam scoring
Disabling the Sender Reputation Service lists
Specifying mail hosts that are internal to your organization
About the Mail Security SMTP proxy
Configuring the treatment of spam email messages
Automatically routing messages to a spam folder
6. Enforcing content rules
About content enforcement
Enabling content filtering scanning
Identifying internal email servers
Managing content filtering rules
Viewing the status of content filtering rules
Establishing the rule processing order
Enabling and disabling content filtering rules
Modifying a content filtering rule description
Deleting a content filtering rule
About creating a content filtering rule
Setting the basic options for a content filtering rule
Establishing rules based on user policies
Creating content filtering rule expressions
Limitations of using the attachment content attribute
Configuring the treatment of documents that contain content filtering rule violations
About match lists
How a match list works
Working with match lists
Creating a content filtering rule that uses a match list
About word categories
How dictionary-based content filtering works
Working with custom word categories
Creating a content filtering rule that uses word categories
Configuring file type detection
Improving content scanning performance
7. Scanning your server for risks and violations
About how Mail Security scans documents
What happens when a risk is detected
When Mail Security scans ID-signed documents
When malicious code is detected in a native MIME message
How Mail Security processes documents with multiple violations
Configuring global scanning options
Specifying what to scan during all scans
Inserting disclaimers in scanned messages
Configuring the treatment of documents that cannot be scanned
How to stop generating scan errors on partial messages
About preserving data before repairing or deleting documents
Specifying the directory for processing files during scans
Modifying the number of real-time processing threads
Scanning email messages in the Sent Mail folder
Performing real-time scanning
Enabling real-time scanning
Configuring the treatment of infected documents detected by real-time scanning
Performing manual scans
Specifying which databases to scan during a manual scan
Specifying what to scan during a manual scan
Configuring the treatment of infected documents detected by a manual scan
Initiating a manual scan
Performing scheduled scans
Enabling and disabling a scheduled scan
Modifying a scheduled scan description
Configuring basic settings for scheduled scans
Specifying the scanning schedule
Specifying what to scan during a scheduled scan
Configuring the treatment of infected documents detected by a scheduled scan
Deleting a scheduled scan
Configuring scanning optimization
About improving scanning performance
8. Issuing alerts
Issuing alerts when threats or violations are detected
Configuring basic alert options
Specifying alert conditions
Customizing alert messages
Logging alert statistics
Modifying an alert description
Deleting an alert
Issuing alerts for outbreaks
9. Logging data and generating reports
About logging Mail Security events
Enabling logging
Monitoring Mail Security events
Viewing message and incident documents
Viewing incident statistics
Generating reports
Considerations for generating reports
Viewing scan reports
Creating customized reports
Generating an incidents report spreadsheet
Generating a graphical report
Removing documents from the Log
Removing documents from the Log manually
Removing documents from the Log automatically
About scalable diagnostic messaging
Generating diagnostic messages
Specifying where the diagnostic information is logged
Using diagnostic messages to troubleshoot scan failures
Increasing the Domino server console window height to view more messages
10. Keeping your product up-to-date
Monitoring your version support status
About keeping your server protected
Updating protection with LiveUpdate
Performing updates automatically
Performing updates on demand
About performing LiveUpdate with other Symantec antivirus products on the same computer
Configuring a proxy server for LiveUpdate
Using LiveUpdate with a firewall or an internal LiveUpdate server
Configuring Rapid Release updates to occur automatically
Updating protection with Intelligent Updater
Managing definition files
Creating a Definitions database
Creating a new definition set
Changing the active definition set
Deleting older definition sets
11. Quarantining documents that contain risks or violations
About the Quarantine
About the Quarantine views
Assigning Quarantine roles
What happens when you release a document with multiple violations from the quarantine
What you can do in a quarantined document
Managing quarantined documents
Viewing a quarantined document
Creating a comment in a quarantined document
Modifying attachments
Releasing an infected document from the Quarantine
Releasing a scan error document from the Quarantine
Releasing a violation document from the Quarantine
Removing documents from the Quarantine database manually
Removing documents from the Quarantine automatically
A. Initiating tasks from the Domino server console
Performing commands from the server console
Performing manual scans from the server console
Checking the status of your licenses
B. Regular expressions for content filtering rules
About using regular expressions
About metacharacters
The order that Mail Security evaluates metacharacters
Examples of regular expressions
C. Understanding statistics data
Understanding the Threat/Security Risk, Content Filtering, and Scan Error Statistics data
Understanding the Spam Statistics data
D. Troubleshooting
Troubleshooting status errors
About server status errors
About license installation status errors
About scan status errors
About LiveUpdate status errors
Troubleshooting Rapid Release FTP errors
Troubleshooting user interface errors and issues
Resolving the user interface access error
Redisplaying documents that no longer appear in embedded views
Troubleshooting errors opening a Mail Security database
Troubleshooting errors when attempting to open a server group document
Troubleshooting errors when Mail Security attempts to connect to the server

Attachments

smsdom_implementation_guide.pdf (3.5 MBytes)

Legacy ID



v21361942_v21361945


Article URL http://www.symantec.com/docs/DOC5364


Terms of use for this information are found in Legal Notices