Installing Symantec Mail Security for Microsoft Exchange 6 on a Microsoft Exchange 2007 cluster

Article:TECH90319  |  Created: 2008-01-23  |  Updated: 2013-10-30  |  Article URL http://www.symantec.com/docs/TECH90319
Article Type
Technical Solution


Subject

Issue



You want to know how to install Symantec Mail Security for Microsoft Exchange (SMSMSE) 6 on a Microsoft Exchange 2007 cluster.

 


Solution



SMSMSE supports single copy clusters (SSC) and cluster continuous replication (CCR). The two configuration types have different installation requirements. Only the mailbox role can be clustered.

When you install SMSMSE in a cluster environment, you must install the product individually on each node of the cluster. Do not use the remote installation feature.

WARNING:
If you are using Windows Server 2008 you must install SMSMSE 6.0.6 or later. Earlier versions of SMSMSE 6 are not supported on Windows Server 2008.
If you are installing SMSMSE 6.0.9 or later, you must first install Microsoft Messaging API and Collaboration Data Objects 1.2.1. For details, read How to install Symantec Mail Security for Microsoft Exchange 6.0.9 on Exchange 2007.

Single Copy Clusters (SCC)

  • SMSMSE is Microsoft cluster aware and does not require any specific settings prior to installing the product in a cluster with one or more passive nodes. SMSMSE requires its own cluster resource.
  • SMSMSE settings are stored in the registry and on the local hard drive of each individual server. The settings are duplicated on the hard drive of the shared storage that is used as a dependency for the SMSMSE cluster resource. Any time an active node goes down and control transfers to a passive node, the passive node checks for the settings on the shared hard disk storage. The settings are then downloaded and applied to the passive node (which is now active).
  • The SMSMSE quarantine is stored on the shared storage. Exclude the quarantine from any file-level antivirus scanning. Settings are copied to the shared hard disk storage when you deploy your changes. Ensure that there is sufficient room on the hard disk storage for the SMSMSE shared settings and quarantine.
  • When the clustered mailbox server (CMS) group and the SMSMSE cluster resource move from one node to another the following items are not transferred:
    • Virus definitions and spam rules
    • Report database and generated reports
    • Spam statistics
    • Mailbox and public folder lists
  • Configure LiveUpdate to perform regularly scheduled updates on each node in the cluster to ensure that your definitions stay current. Definitions are updated and stored locally, not on the shared storage.
  • Use a console installed on a computer that is not a node in the cluster to manage SMSMSE on the nodes of the cluster. This lets you maintain independent SMSMSE settings for each clustered mailbox server. You must use the internet protocol (IP) address or the name of the clustered mailbox server instead of the IP address or server name of the individual node when managing SMSMSE through the console.
  • Before you install SMSMSE on your Exchange cluster, take into account the following:
    • SMSMSE must be installed on all active and passive nodes of the cluster.
    • Only one clustered mailbox server (CMS) may run on any node at any time. If two CMSs attempt to run on the same node, the results are undefined.
    • There must be an available passive node to fail to. Multiple failovers are supported only if multiple passive nodes are available.
    • SMSMSE must be installed with the same configuration and in the same location on all nodes of the cluster.


To install SMSMSE on a single copy cluster (SCC)
SMSMSE checks for the presence of a cluster environment during installation. The install prompts you to register a cluster resource dynamic-link library (DLL) file (SMSMSEClusterresource.dll).

  • Register the DLL on only one of the nodes of the cluster. Do not attempt to register the cluster resource on multiple nodes.
  • Immediately after installation, the SMSMSE service runs on each of the nodes.
  • Each node, including the passive node, should have an active instance of the SMSMSE service.
  • After you configure the first instance of the cluster resource, the SMSMSE service runs only on the currently active node.


The chapter, “Installing Symantec Mail Security for Microsoft Exchange," in the Symantec Mail Security for Microsoft Exchange Implementation Guide, includes step-by-step instructions about the installation of SMSMSE.

The implementation guides are available from this Web site:
http://www.symantec.com/business/support/documentation.jsp?language=english&view=manuals&pid=51980

There are multiple SMSMSE implementation guides available from the above Web site. Be sure to download the one for the SMSMSE version you are installing.

Post installation tasks
Once you have installed SMSMSE on each node of the cluster, you need to:

  1. If you are using Microsoft Windows Server 2003 add the Cluster Service Account to the SMSMSE Admins group.
  2. Configure the cluster resource.


To add the Cluster Service Account to the SMSMSE Admins group (Microsoft Windows Server 2003 only)

  1. On the Domain Controller click Start > Programs > Administrative Tools > Active Directory Users and Computers.
  2. Open Users.
  3. Right-click SMSMSEAdmins.
  4. Click Properties.
  5. On the "Member Of" tab, add the Cluster Service Account.
  6. On the Windows taskbar, click Start > Programs > Administrative Tools > Cluster Administrator.
  7. Right-click one of the nodes and click Stop Cluster Service.
  8. Once the cluster service stops, start it on the same node.
  9. Repeat steps 6 - 8 for each node in the cluster.


To configure the SMSMSE cluster resource
When the SMSMSE resource is created, the SMSMSE service on all nodes stops and the service startup is changed to manual. This occurs because the service is running under the control of the SMSMSE cluster resource.
The SMSMSE cluster resource monitors and controls the SMSMSE service. It is responsible for the following tasks:

  • Handles cluster events
  • Saves SMSMSE settings for each clustered mailbox server to shared hard disk storage
  • Retrieves settings from shared hard disk storage and activates them on a given node of the cluster
  • Manages the SMSMSE service


Microsoft Windows Server 2003

  1. On the Windows taskbar, click Start > Programs > Administrative Tools >Cluster Administrator.
  2. Select the clustered mailbox server and launch the New Resource Wizard.
  3. Name the resource. You must assign a unique name to each resource.
  4. Select Symantec Mail Security for Microsoft Exchange as the resource type, and then click Next.
  5. Choose the nodes for which the resource is being created, and then click Next. The nodes should be the same as those on which the clustered mailbox server can operate.
  6. Choose the dependencies for this resource. The required dependencies are:

    Physical Disk Resource (disk on which the settings are saved)
    Clustered Mailbox Server Network Name resource
     
  7. Repeat steps 2 through 6 for each clustered mailbox server.


Microsoft Windows Server 2008

  1. On the Windows taskbar, click Start > Programs > Administrative Tools > Failover Cluster Administrator.
  2. Right-click the clustered mailbox server and click Add a resource > More resources > Add Symantec Mail Security for Microsoft Exchange.
  3. Right-click the SMSMSE resource which is under Other Resources.
  4. On the Advanced Policies tab make sure the nodes for which the resource is being created are listed. The nodes should be the same as those on which the clustered mailbox server can operate.
  5. On the Dependencies tab add the dependencies for this resource. The required dependencies are:

    Physical Disk Resource (disk on which the settings are saved)
    Clustered Mailbox Server Network Name resource
     
  6. Repeat steps 2 through 5 for each CMS server group.


Cluster continuous replication installation
Note: Do not install or configure an SMSMSE cluster resource when using cluster continuous replication.
 

  1. Log on to a node using an Administrator account that is a member of the Domain and Local Admin groups.
  2. Insert the SMSMSE product CD into the CD-ROM drive. The installation directory should be on a local node (non-shared drive).
  3. In the Web Service Setup panel, type the IP address of the externally accessible network card of the current node (if not already present). The virtual Server IP address, or the cluster IP address, or the name of the node are invalid entries
  4. Repeat steps 2-3 to install SMSMSE on the remaining node.
  5. Restart the cluster service after you install SMSMSE on each node of the cluster.
  6. Add each node to asset management so that you can manage the nodes from the console. SMSMSE does not automatically detect the nodes in a cluster. Nodes must be added to asset management using their IP address.





 



Legacy ID



2008092313215954


Article URL http://www.symantec.com/docs/TECH90319


Terms of use for this information are found in Legal Notices