Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Configure DLP Email Prevent

Created: 06 Feb 2012 | 4 comments
Mike S.'s picture
0 0 Votes
Login to vote

I am configuring email prevent with google mail for my company. Exchange was easy and we configured a load balancer correctly and got it to work right off the bat.

Our DCS group is now having issues configuring an F5 to forward the mail through our email prevent server. They say that our F5 cannot see the server and they believe that it is because of the port not being configured correctly on email prevent. The only port that I can think of is under configure and it says port 8100. I tried to set it to port 25 but it will not go that low. Also I have turned windows firewall off till we can figure this out.

 

Has anyone had any issues setting up an F5 as a load balancer to forward mail to the email prevent server? Did I miss and configurations?

Comments

Huxtable's picture
06
Feb
2012
0 Votes 0
Login to vote

try setting it to a higher

try setting it to a higher port number and test that out?  Just make sure you change the port on the N. prevent server to match what you specify in server settings.  

 

Turning off windows firewall will help, but I would make sure you can telnet to (specified port) and also 8100. Incidents get transferred back to enforce on that port, and mail is obviously going to go through the box on (specified port).  

 

Mike S.'s picture
07
Feb
2012
1 Vote +1
Login to vote

I was able to figure out to

I was able to figure out to change the port number to 25 by changing line RequestProcessor.MTAResubmitPort and RequestProcessor.ServerSocketPort. The F5 is able to see the server using TCP now.

Now we are going to see if we can get google mail to flow. this is not as easy as exchange where there is a connector.

 

Also is there an optimal configuration for load balancing and any authentication on inbound connections?

Huxtable's picture
07
Feb
2012
0 Votes 0
Login to vote

Network prevent only does

Network prevent only does load balancing on the next hop mta by specifying 1 or more IP/Hostnames.  

kishorilal's picture
28
Mar
2012
0 Votes 0
Login to vote

See the below steps

Hi Mike,

Please find the below steps and need to configure right port and ip addresses.

Select Enble DLP for the outbound Scanner host.

1. In Route Outbound Mail to DLP Servers, add the IP address or name of the DLP Email Prevent server and set the port to 10025.

2. In Accept Scanned Mail from DLP Servers, add the IP address of the Email Prevent server.

3. Save the settings.

On Vontu DLP Enforce server:

1. Login to DLP console.

2. Go to System -> Overview -> Email Prevent server -> Configure.

3. Configure the Email Prevent to reflect mode and save the settings.

4. On same page, open Server settings.

5. Change the RequestProcessor.MTAResubmitPort from 10026 to 25.

6. Save the settings.