Before you install

Article:HOWTO82968  |  Created: 2012-12-04  |  Updated: 2014-04-08  |  Article URL http://www.symantec.com/docs/HOWTO82968
Article Type
How To


Subject


Before you install

Ensure that you meet all system requirements before you install Mail Security. Select the installation plan that best matches your organization's needs, and ensure that you have met the preinstallation requirements.

See System requirements

See Installing Symantec Mail Security for Microsoft Exchange

See Uninstalling Symantec Mail Security for Microsoft Exchange.

Install Mail Security on all of the following server roles in your organization:

  • Edge Transport servers, if available

  • Hub Transport servers

  • Mailbox servers

Install Mail Security on Mailbox servers in your organization.

Note:

If you configure Exchange 2010 Edge Transport Server to work with Exchange Server 2013, then you can install Mail Security on Exchange Server 2010 Edge Transport Server

If you want to install Mail Security on Exchange Server 2013, install the product on Mailbox servers in your organization.

Note:

The email flow architecture is changed significantly in Exchange Server 2013. When you send an email from a client, a receive connector receives it on any Mailbox server that is available in the site. For example, you want to send an email from Server A to a user on Server A where Mail Security is installed and there are multiple mailbox servers in that site. In this case, the email might go to any server in the site based on the availability of the server and would be routed back to Server A for delivery. If Mail Security is not installed on the other servers in the site and the email goes to one of these servers, then the email is not scanned. Therefore, ensure that you install Mail Security on all the Exchange 2013 Mailbox servers in the site for better protection.

You must uninstall and reinstall the product if you change the server role on which Mail Security is installed.

Do the following before you install the product:

  • If you have Symantec Brightmail™ AntiSpam on the same server on which you want to install Mail Security, you must uninstall Symantec Brightmail AntiSpam before you install Mail Security. It is recommended that you do not run Mail Security on the same server as Symantec Brightmail AntiSpam.

  • If you use the optional email tools feature of Symantec Endpoint Protection (SEP) or Symantec AntiVirus™ Corporate Edition (SAV-CE), you must uninstall the feature before you install Mail Security. These email tools are not compatible with Mail Security or Microsoft Exchange.

  • If you have any antivirus software that is on the server on which you want to install Mail Security, you must disable it before you install Mail Security.

    After installation but before you turn on the antivirus protection, configure your other antivirus programs to exclude certain folders from scanning.

    See About using Mail Security with other antivirus products

  • If you have any malware agent installed on the server on which you want to install Mail Security, you must disable it.

    Note:

    The Mail Security installer disables the Microsoft Exchange malware agent during installation. If the installer fails to disable the malware agent, then make sure that you disable it manually after the installation. Mail Security may not function properly if any other malware agent is enabled. Therefore, make sure that you disable the malware agent before you use Mail Security.

  • Log on as a Windows domain administrator to install Mail Security components correctly.

    See Software component locations

  • Modify your screen resolution to a minimum of 1024 x 768. Mail Security does not support a resolution less than 1024 x 768.

  • Configure the default receive connector for the Exchange Hub Transport server to permit connections from anonymous users.

Before you install Mail Security on Exchange 2010 mailbox role, you must specify a domain user account. The domain user account must fulfill the following criteria.

Before you install Mail Security on Exchange 2013 mailbox role, you must specify a domain user account. The domain user account must fulfill the following criteria.

  • Mail Security uses the domain user account as a service account and this account must have a mailbox.

  • The user must be a member of Organization Management group under the Microsoft Exchange Security Groups Organizational Unit.

  • By default, Organization Management group is a member of the local Administrators group on all the exchange servers in the organization. If not, then add the user to the local Administrators group.

  • You may use different user account for installations of Mail Security on other Exchange 2010 mailbox servers within that domain for better performance.

  • You may use different user account for installations of Mail Security on other Exchange 2013 mailbox servers within that domain for better performance.

  • When the user updates the password, the same password must be provided to the Mail Security Service on all Exchange 2010 mailbox role servers.

  • When the user updates the password, the same password must be provided to the Mail Security Service on all Exchange 2013 mailbox role servers.

Note:

While installing Mail Security on local Exchange 2010 Mailbox server, in the Logon Information screen, specify the domain user credentials in the User name and Password fields. Mail Security provides this user account Application Impersonation and Logon as service rights.

Note:

While installing Mail Security on local Exchange 2013 Mailbox server, in the Logon Information screen, specify the domain user credentials in the User name and Password fields. Mail Security provides this user account Application Impersonation and Logon as service rights.

Ensure that the following IIS Role Service components are installed when you install Mail Security on Windows Server 2008 for Exchange 2007 and 2010 servers. This installation is applicable for both remote installation and local installation.

Ensure that the following IIS Role Service components are installed when you install Mail Security on Windows Server 2008 for Exchange Serverversion. This installation is applicable for both remote installation and local installation.

  • Application Development - ASP.NET

  • Security - Windows Authentication, Basic Authentication, Digest Authentication

  • Management Tools - IIS management console, IIS 6 Scripting Tools


Legacy ID



SMSID0EYFAK_v82634657


Article URL http://www.symantec.com/docs/HOWTO82968


Terms of use for this information are found in Legal Notices