F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00

F-Secure Client

Security

Administrator’s Guide

"F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure

product names and symbols/logos are either trademarks or registered trademarks of F-Secure

Corporation. All product names referenced herein are trademarks or registered trademarks of their

respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of

others. Although F-Secure Corporation makes every effort to ensure that this information is accurate,

F-Secure Corporation will not be liable for any errors or omission of facts contained herein. F-Secure

Corporation reserves the right to modify specifications cited in this document without prior notice.

Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of

this document may be reproduced or transmitted in any form or by any means, electronic or

mechanical, for any purpose, without the express written permission of F-Secure Corporation.

This product may be covered by one or more F-Secure patents, including the following:

GB2353372 GB2366691 GB2366692 GB2366693 GB2367933 GB2368233

GB2374260

iii

Contents

About this Guide 10

Overview ............................................................................................................................ 11

Additional Documentation .................................................................................................. 13

Conventions Used in F-Secure Guides.............................................................................. 15

Chapter 1 Introduction 17

1.1 Overview ....................................................................................................................18

1.2 F-Secure Client Security Components and Features.................................................18

1.2.1 Virus and Spy Protection ................................................................................18

1.2.2 Internet Shield ................................................................................................21

1.2.3 Application Management ................................................................................ 22

1.3 Introduction to F-Secure Policy Manager...................................................................23

1.3.1 Main Components of F-Secure Policy Manager.............................................24

1.3.2 F-Secure Policy Manager Features................................................................25

1.4 Basic Terminology......................................................................................................26

Chapter 2 Installing F-Secure Policy Manager 28

2.1 Overview ....................................................................................................................29

2.2 System Requirements................................................................................................30

2.2.1 F-Secure Policy Manager Server ...................................................................30

2.2.2 F-Secure Policy Manager Console.................................................................32

2.3 Installation Steps........................................................................................................33

2.4 Uninstalling F-Secure Policy Manager .......................................................................55

Chapter 3 Introduction to F-Secure Policy Manager Anti-Virus Mode

User Interface 56

3.1 Overview ....................................................................................................................57

3.2 Policy Domains Tab ...................................................................................................58

3.3 Management Tabs .....................................................................................................58

3.3.1 Summary Tab ................................................................................................. 59

3.3.2 Outbreak Tab..................................................................................................66

3.3.3 Settings Tab ...................................................................................................68

3.3.4 Status Tab ....................................................................................................100

3.3.5 Alerts Tab .....................................................................................................108

3.3.6 Reports Tab..................................................................................................110

3.3.7 Installation Tab .............................................................................................111

3.3.8 Operations Tab.............................................................................................113

3.4 Toolbar .....................................................................................................................114

3.5 Menu Commands.....................................................................................................115

3.6 Settings Inheritance .................................................................................................118

3.6.1 How Settings Inheritance is Displayed on the User Interface.......................120

3.6.2 Locking and Unlocking all Settings on a Page at Once................................121

3.6.3 Settings Inheritance in Tables ......................................................................122

Chapter 4 Setting up the Managed Network 123

4.1 Overview ..................................................................................................................124

4.2 Logging in for the First Time ....................................................................................124

4.2.1 Logging In.....................................................................................................125

4.3 Creating the Domain Structure.................................................................................128

4.3.1 Adding Policy Domains and Subdomains.....................................................130

4.4 Adding Hosts............................................................................................................130

4.4.1 Windows Domains........................................................................................131

4.4.2 Autoregistered Hosts .................................................................................... 131

4.4.3 F-Secure Push Installations..........................................................................136

4.4.4 Policy-Based Installation ..............................................................................143

4.4.5 Local Installation and Updates with Pre-Configured Packages....................147

4.5 Local Installation ......................................................................................................152

4.5.1 Local Installation System Requirements ......................................................152

4.5.2 Installation Instructions .................................................................................154

4.6 Installing on an Infected Host...................................................................................155

4.7 How to Check That the Management Connections Work ........................................156

Chapter 5 Configuring Virus and Spyware Protection 157

5.1 Overview: What can Virus and Spyware Protection be Used for? ...........................158

5.2 Configuring Automatic Updates ...............................................................................159

5.2.1 How do Automatic Updates Work?...............................................................160

5.2.2 Automatic Updates Configuration Settings...................................................160

5.2.3 Configuring Automatic Updates from Policy Manager Server ......................161

5.2.4 Configuring Policy Manager Proxy ...............................................................162

5.2.5 Configuring Clients to Download Updates from Each Other ........................163

5.3 Configuring Real-Time Scanning .............................................................................164

5.3.1 Real-Time Scanning Configuration Settings.................................................164

5.3.2 Enabling Real-Time Scanning for the Whole Domain ..................................166

5.3.3 Forcing all Hosts to Use Real-Time Scanning..............................................167

5.3.4 Excluding Microsoft Outlooks's .pst File from Real-Time Scanning .............168

5.4 Configuring System Control .....................................................................................169

5.4.1 System Control Configuration Settings.........................................................169

5.4.2 System Control Server Queries (DeepGuard 2.0)........................................170

5.5 Configuring Rootkit Scanning (Blacklight)................................................................170

5.5.1 Rootkit Scanning Configuration Settings ......................................................171

5.5.2 Launching a Rootkit Scan for the Whole Domain.........................................171

5.6 Configuring E-mail Scanning....................................................................................172

5.6.1 E-mail Scanning Configuration Settings .......................................................172

5.6.2 Enabling E-mail Scanning for Incoming and Outgoing E-mails ....................174

5.7 Configuring Web Traffic (HTTP) Scanning...............................................................176

5.7.1 HTTP Scanning Configuration Settings........................................................176

5.7.2 Enabling Web Traffic Scanning for the Whole Domain ................................177

5.7.3 Excluding a Web Site from HTTP Scanning.................................................177

5.8 Configuring Spyware Scanning................................................................................179

5.8.1 Spyware Control Settings .............................................................................179

5.8.2 Setting up Spyware Control for the Whole Domain ......................................183

5.8.3 Launching Spyware Scanning in the Whole Domain....................................185

5.8.4 Allowing the Use of a Spyware or Riskware Component .............................186

5.9 Preventing Users from Changing Settings ...............................................................187

5.9.1 Setting all Virus Protection Settings Final.....................................................187

5.10 Configuring F-Secure Client Security Alert Sending ................................................188

5.10.1 Setting F-Secure Client Security to Send Virus Alerts to an E-mail Address188

5.10.2 Disabling F-Secure Client Security Alert Pop-ups ........................................190

5.11 Monitoring Viruses on the Network ..........................................................................190

5.12 Testing your Antivirus Protection .............................................................................190

Chapter 6 Configuring Internet Shield 192

6.1 Overview: What can Internet Shield be Used for? ...................................................193

6.1.1 Global Firewall Security Levels ....................................................................193

6.1.2 Security Level Design Principles ..................................................................195

6.2 Configuring Internet Shield Security Levels and Rules ............................................196

6.2.1 Selecting an Active Security Level for a Workstation ...................................196

6.2.2 Configuring a Default Security Level for the Managed Hosts.......................197

6.2.3 Adding a New Security Level for a Certain Domain Only ............................. 198

6.3 Configuring Network Quarantine..............................................................................201

6.3.1 Network Quarantine Settings........................................................................201

6.3.2 Enabling Network Quarantine in the Whole Domain ....................................201

6.3.3 Fine-Tuning Network Quarantine .................................................................202

6.4 Configuring Internet Shield Rule Alerts ....................................................................203

6.4.1 Adding a New Internet Shield Rule with Alerting ..........................................203

6.5 Configuring Application Control................................................................................207

6.5.1 Application Control Configuration Settings ...................................................209

6.5.2 Setting up Application Control for the First Time ..........................................210

6.5.3 Creating a Rule for an Unknown Application on Root Level.........................212

6.5.4 Editing an Existing Application Control Rule ................................................213

6.5.5 Disabling Application Control Pop-ups .........................................................214

6.6 How to use Alerts for Checking that Internet Shield Works? ...................................215

6.7 Configuring the Intrusion Prevention........................................................................216

6.7.1 Intrusion Prevention Configuration Settings .................................................217

6.7.2 Configuring IPS for Desktops and Laptops ..................................................218

Chapter 7 How to Check that the Environment is Protected 220

7.1 Overview ..................................................................................................................221

vii

7.2 How to Check the Protection Status from Outbreak Tab .........................................221

7.3 How to Check that all the Hosts Have the Latest Policy ..........................................221

7.4 How to Check that the Server has the Latest Virus Definitions................................222

7.5 How to Check that the Hosts have the Latest Virus Definitions ...............................222

7.6 How to Check that there are no Disconnected Hosts ..............................................223

7.7 Viewing Scanning Reports .......................................................................................223

7.8 Viewing Alerts ..........................................................................................................224

7.9 Creating a Weekly Infection Report .........................................................................225

7.10 Monitoring a Possible Network Attack......................................................................225

Chapter 8 Upgrading Software 227

8.1 Overview: Upgrading Software ................................................................................228

8.1.1 Using the Installation Editor..........................................................................228

Chapter 9 Local Host Operations 232

9.1 Overview ..................................................................................................................233

9.2 Scanning File Viruses Manually ...............................................................................233

9.3 Viewing the Latest Scanning Report on a Local Host ..............................................234

9.4 Adding a Scheduled Scan from a Local Host...........................................................234

9.5 Logging and Log File Locations on Local Hosts ......................................................235

9.5.1 The LogFile.log file .......................................................................................235

9.5.2 Packet Logging.............................................................................................236

9.5.3 The Action.log file .........................................................................................237

9.5.4 Other Log Files .............................................................................................239

9.6 Connecting to F-Secure Policy Manager and Importing a Policy File Manually.......239

9.7 Suspending Downloads and Updates ......................................................................240

9.8 Allowing Users to Unload F-Secure Products ..........................................................240

Chapter 10 Virus Information 242

10.1 Malware Information and Tools on the F-Secure Web Pages .................................243

10.2 How to Send a Virus Sample to F-Secure ...............................................................244

10.2.1 How to Package a Virus Sample ..................................................................244

10.2.2 What Should Be Sent ...................................................................................244

viii

10.2.3 How to Send the Virus Sample.....................................................................247

10.2.4 In What Language ........................................................................................247

10.2.5 Response Times...........................................................................................247

10.3 What to Do in Case of a Virus Outbreak? ................................................................248

Chapter 11 Setting Up the Cisco NAC Plugin 250

11.1 Introduction ..............................................................................................................251

11.2 Installing the Cisco NAC Plugin ...............................................................................251

11.2.1 Importing Posture Validation Attribute Definitions ........................................252

11.3 Attributes to be Used for Application Posture Token ...............................................252

Chapter 12 Advanced Features: Virus and Spyware Protection 254

12.1 Overview ..................................................................................................................255

12.2 Configuring Scheduled Scanning.............................................................................255

12.3 Advanced System Control Settings..........................................................................257

12.3.1 Notify User on a Deny Event ........................................................................257

12.3.2 Let an Administrator Allow or Deny Events from Other Users Programs.....258

12.3.3 Automatically Allow or Deny Events Requested by a Specific Application...258

12.4 Configuring Policy Manager Proxy...........................................................................260

12.5 Configuring Automatic Updates on Hosts from Policy Manager Proxy ....................260

12.6 Configuring a Host for SNMP Management.............................................................261

12.7 Excluding an Application from the Web Traffic Scanner ..........................................262

Chapter 13 Advanced Features: Internet Shield 263

13.1 Overview ..................................................................................................................264

13.2 Managing Internet Shield Properties Remotely........................................................264

13.2.1 Packet Logging.............................................................................................264

13.2.2 Trusted Interface ..........................................................................................265

13.2.3 Packet Filtering.............................................................................................266

13.3 Configuring Security Level Autoselection.................................................................266

13.4 Troubleshooting Connection Problems ....................................................................268

13.5 Adding New Services ...............................................................................................269

13.5.1 Creating a New Internet Service based on the Default HTTP ......................270

13.6 Setting up Dialup Control .........................................................................................278

13.6.1 Allowing and Blocking Phone Numbers........................................................278

13.6.2 Call Logging..................................................................................................279

Appendix A Modifying PRODSETT.INI 281

A.1 Overview ................................................................................................................. 282

A.2 Configurable Prodsett.ini Settings............................................................................282

Appendix B E-mail Scanning Alert and Error Messages 294

B.1 Overview ................................................................................................................. 295

Appendix C Products Detected or Removed During Client Installation 299

C.1 Overview ................................................................................................................. 300

Glossary 306

Technical Support 320

Overview .......................................................................................................................... 321

Web Club .........................................................................................................................321

Advanced Technical Support ...........................................................................................321

F-Secure Technical Product Training ...............................................................................322

ABOUT THIS GUIDE

Overview..................................................................................... 11

Additional Documentation.......................................................... 13

Andere Handbücher für ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00 -

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere F-SECURE Software Handbücher

F-SECURE

F-SECURE MOBILE SECURITY FOR S60 - Bedienungsanleitung

F-SECURE

F-SECURE PSB - ADMINISTRATORS GUIDE FOR CUSTOMERS Bedienungsanleitung

F-SECURE

F-SECURE ANTI-VIRUS - FOR MICROSOFT EXCHANGE Kurzanleitung

F-SECURE

F-SECURE POLICY MANAGER PROXY - Service-Handbuch

F-SECURE

F-SECURE MOBILE SECURITY 6 FOR WINDOWS MOBILE - Bedienungsanleitung

F-SECURE

F-SECURE MOBILE SECURITY FOR WINDOWS MOBILE - Bedienungsanleitung

F-SECURE

F-SECURE MOBILE SECURITY FOR UIQ - Bedienungsanleitung

F-SECURE

F-SECURE ANTI-VIRUS - FOR MICROSOFT EXCHANGE Service-Handbuch

F-SECURE

F-SECURE PSB E-MAIL AND SERVER SECURITY Bedienungsanleitung

F-SECURE

F-SECURE PSB Bedienungsanleitung

F-SECURE

F-SECURE ONLINE BACKUP 2.1 - WEB USER INTERFACE HELP Bedienungsanleitung

F-SECURE

F-SECURE INTERNET GATEKEEPER FOR LINUX 4.01 - Service-Handbuch

F-SECURE

F-SECURE CLIENT SECURITY 9.10 - RELEASE NOTES Bedienungsanleitung

F-SECURE

F-SECURE MOBILE SECURITY 2010 FOR ANDROID Bedienungsanleitung

F-SECURE

F-SECURE CLIENT SECURITY 9.01 - S Bedienungsanleitung

F-SECURE

F-SECURE PSB Service-Handbuch

F-SECURE

F-SECURE MOBILE SECURITY 6 FOR S60 - Bedienungsanleitung

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 Kurzanleitung

F-SECURE

F-SECURE LINUX SECURITY Bedienungsanleitung

F-SECURE

F-SECURE PSB - ADMINISTRATORS GUIDE FOR RESELLERS Bedienungsanleitung

F-SECURE

F-SECURE POLICY MANAGER PROXY 2.0 - Service-Handbuch

F-SECURE

F-SECURE CLIENT SECURITY 9.00 - QUICK Bedienungsanleitung

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00 - Service-Handbuch

F-SECURE

F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00 Service-Handbuch

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung