Installing Symantec Mail Security 6.x for Microsoft Exchange on an Exchange 2000 Server or an Exchange Server 2003 Cluster

Article:TECH86427  |  Created: 2007-01-19  |  Updated: 2014-05-14  |  Article URL http://www.symantec.com/docs/TECH86427
Article Type
Technical Solution


Issue



You want to know how to install Symantec Mail Security 6.x for Microsoft Exchange (SMSMSE) on a Microsoft Exchange 2000 Server or a Microsoft Exchange Server 2003 that is running Microsoft Clustering service.
 


Solution



Mail Security supports both "active/passive" and "active/active" configurations. However, Symantec recommends a configuration with one or more passive nodes. The two configuration types have different installation requirements.
 Note: The total number of nodes configured within the cluster does not impact the steps to install.

  • When you install Symantec Mail Security in a cluster environment, you must install the product individually on each cluster node. Do not use the remote installation feature. 




Active/passive cluster installation:

  • Mail Security is Microsoft cluster aware and does not require any specific settings prior to installing the product in a cluster with one or more passive nodes. Mail Security requires its own cluster resource.
  • Mail Security settings are stored in the registry and on the local hard drive of each individual server. The settings are duplicated on the shared hard disk storage that is added as a dependency for the Symantec Mail Security for Microsoft Exchange cluster resource. Any time an active node goes down and control transfers to a passive node, the passive node checks for the settings on the shared hard disk storage. The settings are then downloaded and applied to the passive node (which is now active). 
  • The Mail Security quarantine is stored on the shared hard disk storage. Exclude the quarantine from any AntiVirus scanning. Settings are copied to the shared hard disk storage when you deploy your changes. Ensure that there is sufficient room on the hard disk storage for the Mail Security shared settings and quarantine. 
  • When the Exchange Virtual Server group, which includes the Mail Security cluster resource, moves from one node to another, the following items are not transferred: 
      • Virus definitions and spam rules
      • Report database and generated reports
      • Spam statistics
      • Mailbox and public folder lists

  1. Configure LiveUpdate to perform regularly scheduled updates on each node in the cluster to ensure that your definitions stay current. Definitions are updated and stored locally, not on the shared hard disk storage. 
  2. Use a console installed on a computer that is not a cluster node to manage Mail Security on the cluster nodes. This lets you maintain independent Mail Security settings for each Exchange Virtual Server group.
  3. You must use the Internet Protocol (IP) address or the name of the Exchange Virtual Server nodes instead of the actual server IP address or name when managing Mail Security through the console.
  4. Before you install Mail Security on your Exchange cluster, take into account the following:
      • Mail Security must be installed with the same configuration and in the same location on all nodes of the cluster.
      • Only one Exchange Virtual Server may run on any cluster node at any time. If two Exchange Virtual Servers attempt to run on the same node, the behavior may be unpredictable.
      • You must always have at least one passive node for fail-over. Multiple fail-overs are supported only if multiple passive nodes are available.

  
To install Mail Security on an active/passive cluster 
Mail Security checks for the presence of a cluster environment during installation. The install prompts you to register a cluster resource Dynamic-Link Library (DLL) (Symantec Mail Security for Microsoft ExchangeMSEClusterresource.dll).

  • Register the DLL on only one of the cluster nodes. Do not attempt to register the cluster resource on multiple nodes.
  • Immediately after installation, the Symantec Mail Security service runs on each of the nodes.
  • Each node, including the passive node, should have an active instance of the Symantec Mail Security service.
  • After you configure the first instance of the cluster resource, the Symantec Mail Security service runs only on the currently active node(s).



Detailed information about installing SMSMSE (formerly known as Symantec Information Foundation Mail Security 6.x for Microsoft Exchange) is available in the document listed in the References section of this page. 


Post installation tasks
Once you have installed Mail Security on each node of the cluster, you need to:

  • Add the Cluster Service Account to the SMSMSE Admins group
  • Configure the cluster resource. 




To add the Cluster Service Account to the Symantec Mail Security for Microsoft Exchange Admins group

    1. On the Domain Controller click Start> Programs> Administrative Tools> Active Directory Users and Computers.
    2. Open Users.
    3. Right-click SMSMSE Admins
    4. Click Properties.
    5. On the "Members" tab, add the Cluster Service Account.
    6. On the Windows taskbar, click Start> Programs> Administrative Tools> Cluster Administrator.
    7. Right-click one of the nodes and click Stop Cluster Service.
    8. Once the cluster service stops, start it on the same node.
    9. Repeat steps 6 - 8 for each cluster node.



To configure the Symantec Mail Security for Microsoft Exchange cluster resource

The Symantec Mail Security for Microsoft Exchange cluster resource monitors and controls the Symantec Mail Security for Microsoft Exchange service. It is responsible for the following tasks:

  • Handles cluster events
  • Saves Mail Security settings for each Exchange Virtual Server to shared hard disk storage
  • Retrieves settings from shared hard disk storage and activates them on a given cluster node
  • Manages the Symantec Mail Security for Microsoft Exchange service


  1. On the Windows taskbar, click Start > Programs > Administrative Tools > Cluster Administrator.
  2. On the File menu, click New > Resource.
  3. In the New Resource dialog box do the following:
    1. In the Name text box, type a unique name for the resource.
    2. In the Resource Type drop-down list, click Symantec Mail Security for Microsoft Exchange

       
  4. Click Next.
  5. In the "Possible Owners dialog box", move the nodes for which you are creating the resource into the "Possible Owners list."
    • The nodes should be the same nodes on which Exchange Virtual Server can operate.

  6. Click Next.
  7. In the Dependencies dialog box, select the following dependencies: 
    1. Physical Disk (disk on which the settings are saved)
    2. Network Name
  8. Click Finish.
  9. Open the Exchange Virtual Server Group to which you just added the Symantec Mail Security resource.
  10. Right-click the Symantec Mail Security resource and click Bring Online.
  11. Repeat steps 1 through 10 for each Exchange Virtual Server group.



Active/active cluster installation

    You can install Mail Security on an active/active Microsoft Exchange cluster. However, Symantec recommends you have at least one passive node. Before you install Mail Security in an active/active Exchange 2000 Server or Exchange 2003 cluster, ensure that your environment meets the following requirements:
      • The cluster is a group of identical servers containing only two nodes.
      • Two Exchange Virtual Servers exist and are capable of running on either node in the cluster.

    To install Symantec Mail Security on an active/active cluster
    1. Log on to a node using an Administrator account that is a member of the Domain and Local Admin groups.
    2. Insert the Mail Security product CD into the CD-ROM drive.
    3. The installation directory should be on a local node (non-shared drive).
    4. In the Web Service Setup panel, type the IP address of the externally accessible network card of the current node (if not already present).
    5. The virtual Server IP address, the cluster IP address, or the name of the node are invalid entries
    6. Repeat steps 2-4 to install Mail Security on the remaining node.
    7. Restart the cluster service after you install Mail Security on each node of the cluster.
    8. Add each node to asset management so that you can manage the nodes from the console.
      • Note:Mail Security does not automatically detect the nodes in a cluster. Nodes must be added to asset management using their IP address.

 




Legacy ID



2007357269197798


Article URL http://www.symantec.com/docs/TECH86427


Terms of use for this information are found in Legal Notices