Vasco Personal aXsGUARD Administratorhandbuch

E-mail Storage How To

Version 8.0.0

E-mail Storage How To - Version 8.0.0

Table of Contents

1. Introduction ...................................................................................................................... 1

1.1. About this Document ................................................................................................ 1

1.2. Examples used in this Guide ...................................................................................... 1

1.3. Documentation Sources ............................................................................................. 1

1.4. About the AXS GUARD ............................................................................................. 2

1.4.1. What is it? .................................................................................................... 2

1.4.2. Spare Units .................................................................................................. 2

1.4.3. Licensed Units .............................................................................................. 2

1.4.4. Configuration Wizards ..................................................................................... 3

1.5. About VASCO ......................................................................................................... 3

2. E-mail Server .................................................................................................................... 4

2.1. Overview ................................................................................................................ 4

2.2. Mail Transfer Agents and Mail Servers ......................................................................... 4

2.2.1. Basic Concept ............................................................................................... 4

2.2.2. Feature Activation .......................................................................................... 5

2.2.3. E-mail Firewall Policy Settings .......................................................................... 5

2.3. E-mail Domains ....................................................................................................... 6

2.4. Mail Client Protocols ................................................................................................. 7

2.4.1. POP3 .......................................................................................................... 7

2.4.2. IMAP ........................................................................................................... 7

2.4.3. POP3 vs. IMAP ............................................................................................. 7

2.5. Transport Layer Security (TLS) ................................................................................... 7

2.5.1. Purpose ....................................................................................................... 7

2.5.2. Configuration ................................................................................................. 8

2.6. E-mail Envelope, Header and Body ............................................................................. 8

2.6.1. Overview ...................................................................................................... 8

2.6.2. Mail Envelope ............................................................................................... 8

2.6.3. Header and Body .......................................................................................... 8

2.7. Aliases ................................................................................................................. 10

2.7.1. Definition .................................................................................................... 10

2.7.2. Configuration ............................................................................................... 10

2.8. Distribution Lists ..................................................................................................... 11

2.8.1. Definition .................................................................................................... 11

2.8.2. Configuration ............................................................................................... 12

2.9. Auto-Response Settings ........................................................................................... 13

2.9.1. Definition .................................................................................................... 13

2.9.2. Avoiding E-mail Loops .................................................................................. 13

2.9.3. Priorities ..................................................................................................... 14

2.9.4. User Level Configuration ............................................................................... 14

2.9.5. Auto-response for Distribution Lists .................................................................. 15

2.9.6. System Level Configuration ............................................................................ 15

2.10. Auto-deleting E-mail .............................................................................................. 16

2.10.1. Purpose .................................................................................................... 16

2.10.2. Configuration ............................................................................................. 16

2.11. Forwarding .......................................................................................................... 16

2.11.1. Definition .................................................................................................. 16

E-mail Storage How To - Version 8.0.0

2.11.2. Configuration ............................................................................................. 17

2.12. Quotas ................................................................................................................ 18

2.12.1. Definition .................................................................................................. 18

2.12.2. Setting User Quotas .................................................................................... 19

2.12.3. Quota Notifications ..................................................................................... 19

2.12.4. Viewing and Exporting Mail Quota ................................................................. 20

3. Mail Client Configuration .................................................................................................. 21

3.1. Overview ............................................................................................................... 21

3.2. POP3 ................................................................................................................... 21

3.3. IMAP .................................................................................................................... 24

4. Address Book Configuration ............................................................................................ 27

4.1. Overview ............................................................................................................... 27

4.2. LDAP Address Book ............................................................................................... 27

4.2.1. Definition .................................................................................................... 27

4.2.2. Server Configuration ..................................................................................... 27

4.2.3. Client Configuration ...................................................................................... 29

5. Webmail ......................................................................................................................... 31

5.1. Overview ............................................................................................................... 31

5.2. Supported Webmail Clients ...................................................................................... 31

5.3. Server Configuration ............................................................................................... 31

5.3.1. Feature Activation ........................................................................................ 31

5.3.2. Selecting your Webmail Client ........................................................................ 31

5.3.3. Group Configuration ..................................................................................... 33

5.3.4. User Configuration ....................................................................................... 34

5.3.5. Firewall Configuration .................................................................................... 34

5.3.6. Authentication Settings .................................................................................. 35

5.3.7. Customizing your Webmail Logo ..................................................................... 36

5.4. Accessing Webmail ................................................................................................. 37

6. POP3, IMAP and Webmail Logs ........................................................................................ 38

6.1. Overview ............................................................................................................... 38

6.2. Accessing the POP3 and IMAP Logs ......................................................................... 38

6.3. Accessing the Webmail Logs .................................................................................... 38

7. Troubleshooting .............................................................................................................. 39

8. Support .......................................................................................................................... 41

8.1. Overview ............................................................................................................... 41

8.2. If you encounter a problem ....................................................................................... 41

8.3. Return procedure if you have a hardware failure ........................................................... 41

Alphabetical Index ................................................................................................................ 45

E-mail Storage How To - Version 8.0.0

VASCO Products

VASCO Data Security, Inc. and/or VASCO Data Security International GmbH are referred to in this document

as ‘VASCO’. VASCO Products comprise Hardware, Software, Services and Documentation. This document

addresses potential and existing VASCO customers and has been provided to you and your organization for

the sole purpose of helping you to use and evaluate VASCO Products. As such, it does not constitute a license

to use VASCO Software or a contractual agreement to use VASCO Products.

Disclaimer of Warranties and Limitations of Liabilities

VASCO Products are provided ‘as is’ without warranty or conditions of any kind, whether implied, statutory,

or related to trade use or dealership, including but not limited to implied warranties of satisfactory quality,

merchantability, title, non-infringement or fitness for a particular purpose.

VASCO, VASCO DISTRIBUTORS, RESELLERS AND SUPPLIERS HAVE NO LIABILITY UNDER

ANY CIRCUMSTANCES FOR ANY LOSS, DAMAGE OR EXPENSE INCURRED BY YOU, YOUR

ORGANIZATION OR ANY THIRD PARTY (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF

PROFITS, BUSINESS INTERRUPTION OR LOSS OF DATA) ARISING DIRECTLY OR INDIRECTLY FROM

THE USE, OR INABILITY TO USE VASCO SOFTWARE, HARDWARE, SERVICES OR DOCUMENTATION,

REGARDLESS OF THE CAUSE OF THE LOSS, INCLUDING NEGLIGENCE, EVEN IF VASCO HAS

BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR IF THEY WERE FORESEEABLE. OUR

MAXIMUM AGGREGATE LIABILITY TO YOU, AND THAT OF OUR DISTRIBUTORS, RESELLERS AND

SUPPLIERS SHALL NOT EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. THE LIMITATIONS

IN THIS SECTION SHALL APPLY WHETHER OR NOT THE ALLEGED BREACH OR DEFAULT IS A

BREACH OF A FUNDAMENTAL CONDITION OR TERM, OR A FUNDAMENTAL BREACH. THIS SECTION

WILL NOT APPLY ONLY WHEN AND TO THE EXTENT THAT APPLICABLE LAW SPECIFICALLY

REQUIRES LIABILITY DESPITE THE FOREGOING EXCLUSIONS AND LIMITATIONS.

Intellectual Property and Copyright

VASCO Products contain proprietary and confidential information. VASCO Data Security, Inc. and/or VASCO

Data Security International GmbH own or are licensed under all title, rights and interest in VASCO Products,

updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights,

database rights and all other intellectual and industrial property rights. No part of these Products may be

transferred, disclosed, reproduced or transmitted in any form or by any means, electronic, mechanical or

otherwise, for any purpose, except as expressly permitted by VASCO or its authorized licensee in writing.

This document is protected under US and international copyright law as an unpublished work of authorship.

No part of it may be transferred, disclosed, reproduced or transmitted in any form or by any means, electronic,

mechanical or otherwise, for any purpose, except as expressly permitted in writing by VASCO or its authorized

licensee.

VASCO Trademarks

VASCO®,VACMAN®,IDENTIKEY®,aXsGUARD®,AXSGUARD®,DIGIPASS®,DIGIPASSasaService™,

MYDIGIPASS.COM™ and the ® logo are registered or unregistered trademarks of VASCO Data

Security,Inc.and/orVASCOData SecurityInternationalGmbH intheU.S. andothercountries. Othercompany

brand or product names or other designations, denominations, labels and/or other tags, titles, as well as all

URLs (Internet addresses) linked to such designations or communications (irrespective of whether protected

by intellectual property law or not), mentioned in VASCO Products may be the trademarks or registered

trademarks or be part of any other entitlement of their respective owners.

Other Trademarks

Citrix® and XenServer® are trademarks or registered trademarks of Citrix Systems, Inc. VMware® and

vSphere® are registered trademarks or trademarks of VMware, Inc. Hyper-V™ is a registered trademark of

Microsoft Corporation.

E-mail Storage How To - Version 8.0.0

Chapter 1. Introduction

1.1. About this Document

• This document has been written for AXS GUARD version 8.0.0 and is based on changes and features that

have been implemented since version 7.7.3.

• This document was last updated on 22 Sep 2014.

The AXS GUARD E-mail Storage How To serves as a reference source for technical personnel or system

administrators. It explains the concepts and configuration of e-mail storage on the AXS GUARD.

In Chapter 1, Introduction, we introduce the AXS GUARD and explain the difference between licensed and

spare units.

In Chapter 2, E-mail Server, we briefly explain the concept of e-mail, aliases, forwarding and other general

terms associated with e-mail. We also explain how to configure the various e-mail options and features on

the AXS GUARD.

In Chapter 3, Mail Client Configuration, we explain how to configure Outlook 2007 to read POP3 and IMAP

mail.

In Chapter 4, Address Book Configuration, we explain the use and configuration of the AXS GUARD Address

Book.

In Chapter 5, Webmail, we explain the Webmail feature of the AXS GUARD, which allows you to access e-

mails with an Internet browser.

In Chapter 6, POP3, IMAP and Webmail Logs, we take a look at the POP3, IMAP and Webmail logs.

In Chapter 7, Troubleshooting, we offer some solutions to solve difficulties.

In Chapter 8, Support, we explain how to request support, and return hardware for replacement.

1.2. Examples used in this Guide

All setups and configuration examples in this guide are executed as an advanced administrator. Some options

are not available if you log on as a full administrator or a user with lower privileges.

The administrator levels are explained in the system administration guide.

As software development and documentation are ongoing processes, screenshots shown in this guide

may slightly vary from the screens of the software version installed on your appliance.

1.3. Documentation Sources

Other documents in the set of AXS GUARD documentation include:

• AXSGUARDInstallationGuide, which explains how to set up the AXS GUARD, and is intended for technical

personnel or system administrators.

• How to guides, which provide detailed information on the configuration of each of the features available as

add-on modules (explained in Section 1.4.1, “What is it?”). These guides cover specific features such as:

• AXS GUARD Authentication

• AXS GUARD Firewall

E-mail Storage How To - Version 8.0.0 Chapter 1. Introduction

• AXS GUARD Single Sign-On

• AXS GUARD VPN

• AXS GUARD Reverse Proxy

• AXS GUARD Directory Services

Access to AXS GUARD guides is provided through the permanently on-screen Documentation button in the

AXS GUARD Administrator Tool.

Further resources available include:

• Context-sensitive help, which is accessible in the AXS GUARD Administrator Tool through the Help button.

This button is permanently available and displays information related to the current screen.

• Training courses covering features in detail can be organized on demand. These courses address all levels

of expertise. Please see http://www.vasco.com for further information.

1.4. About the AXS GUARD

1.4.1. What is it?

The AXS GUARD is an authentication appliance, intended for small and medium sized enterprises. In addition

to strong authentication, the AXS GUARD has the potential to manage all of your Internet security needs. Its

modular design means that optional features can be purchased at any time to support, for example, e-mail

and Web access control. The AXS GUARD can easily be integrated into existing IT infrastructures as a stand-

alone authentication appliance or as a gateway providing both authentication services and Internet Security.

Authentication and other features such as firewall, e-mail and Web access, are managed by security policies,

which implement a combination of rules, for example, whether a user must use a DIGIPASS One-Time

Password in combination with a static password for authentication. Security Policies are applied to specific

users or groups of users and can also be applied to specific computers and the entire system.

1.4.2. Spare Units

ASpare Unit isanunlicensed appliance,withlimited configuration possibilitiesandallows youtoswiftly replace

a defective appliance. It can also be licensed as a new appliance. In fact, all appliances can be considered

spare units until they are licensed.

Restoring to a Spare Unit is restricted to:

• the same hardware version (e.g. AG-3XXX, AG-5XXX or AG7XXX) as the unit being replaced.

• the same software version as the appliance being replaced (or a higher version on which data migration is

supported; please contact VASCO support ([email protected]) for guidance.

Once a backup is restored on a Spare Unit, full functionality is available. The configuration tool of the appliance

can then be accessed by any user with administrative privileges (see the AXS GUARD System Administration

How To.)

The license from the backup is also restored on the Spare Unit. However, an appliance with a restored license

onlyremains operational foragrace period of30days,during whichtheSystemAdministrator needstoacquire

a new license. If a new license has not been issued after this grace period, all services on the appliance will

be stopped. Only the Administrator Tool will remain accessible.

Contact VASCO support ([email protected]) to release the restored license of the original appliance. To

relicense the appliance, follow the same procedure as used during first-time licensing.

1.4.3. Licensed Units

With a licensed appliance, a user with full administrative privileges has access to all the configuration options

on the AXS GUARD. Use the sysadmin account to create a user with administrative privileges. Since the

E-mail Storage How To - Version 8.0.0 Chapter 1. Introduction

sysadmin user can create new administrators, you should change the default password of this account when

you log in to the appliance for the first time.

Licensing and accessing a fully operational in-service appliance requires the following steps:

1. Logging on to the AXS GUARD as the default sysadmin user and changing the sysadmin password

2. Creating a new user with full administration rights, which is required to configure the AXS GUARD

3. Licensing the appliance

1.4.4. Configuration Wizards

Use the configuration wizards to configure your system essentials more easily.

1.5. About VASCO

VASCO is a world leader in strong authentication and e-signature solutions, specializing in online accounts,

identities and transactions. As a global software company, VASCO serves a customer base of approximately

10,000 companies in over 100 countries, including approximately 1,500 international financial institutions. In

addition to the financial sector, VASCO’s technologies secure sensitive information and transactions for the

enterprise security, e-commerce and e-government industries.

For further information, please visit http://www.vasco.com.

E-mail Storage How To - Version 8.0.0

Chapter 2. E-mail Server

2.1. Overview

In this section, we provide a basic explanation of e-mail, the e-mail storage capabilities of the AXS GUARD

and its configuration. Topics covered in this section include:

• E-mail basics: The Mail Transfer Agent (MTA), e-mail domains, the e-mail envelope, headers and body.

• E-mail aliases: Alternative e-mail addresses for a mailbox.

• Distribution Lists: A compilation of multiple addressees in a single e-mail address.

• Automatic response capabilities: Automatic replies to the sender, e.g. vacation messages.

• E-mail forwarding: How to forward e-mails to another mailbox (e-mail address).

• E-mail quotas: The amount of authorized e-mail storage space reserved for a user.

• E-mail retrieval: Available protocols and methods to retrieve e-mails, such as IMAP, POP, Webmail and the

related configuration settings.

2.2. Mail Transfer Agents and Mail Servers

2.2.1. Basic Concept

E-mails travel across the Internet between their source and destination via servers, in the same way that

traditional paper mail travels the world via post offices (as illustrated below). On the Internet, the role of post

offices or sorting offices are assumed by Mail Transfer Agents or MTAs. The concept of e-mail varies slightly

from a traditional post office in that a Mail Server stores e-mails for an e-mail client and the e-mail client

retrieves and delivers them. Traditional mail is usually delivered, not retrieved. Mail Servers are sometimes

called Delivery Agents and Mail Clients are sometimes referred to as Mail User Agents (MUAs), e.g. MS

Outlook.

Figure 2.1. Analogy between E-mail and Paper MTA

• Similar to the infrastructure of traditional post offices, the MTA network links servers, such as the AXS

GUARD, across the world.

• E-mails are sent directly from a sender MTA to the receiver MTA, based on the MX records which are looked

up via a DNS request, unless configured otherwise on the sender MTA. For more information about DNS

andMXrecords, see theAXSGUARDPublic DNS HowTo,which is available byclickingon the permanently

available Documentation button in the Administrator tool.

• The Mail Client is a program for viewing, replying, forwarding, sorting, creating and deleting e-mails.

Common mail clients are Outlook, Outlook Express and Thunderbird.

E-mail Storage How To - Version 8.0.0 Chapter 2. E-mail Server

2.2.2. Feature Activation

In this section, we explain how to enable the AXS GUARD MTA and mail server.

1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is

accessible by clicking on the permanently available Documentation button.

2. Navigate to System > Feature Activation.

3. Expand E-mail.

4. Check the options as shown in the image below.

Figure 2.2. MTA and E-mail Feature Activation

2.2.3. E-mail Firewall Policy Settings

System-level settings

Do not allow any mail services on the AXS GUARD at the system level, except for the MTA (port 25).

Enforce user authentication instead.

Internet and DMZ access to SMTP port 25 on the AXS GUARD is granted by default. SMTP access from the

secure LAN, POP3 access and IMAP access are not permitted by default. More information about the AXS

GUARD Firewall is available in the AXS GUARD Firewall How To, which can be accessed by clicking on the

permanently available Documentation button in the Administrator Tool.

Granting e-mail Access to a Group

To grant e-mail access to users of a group, simply assign the predefined sys-email Dynamic Firewall Policy

to the appropriate group. The members of the group will then be able to use the services after successful

authentication.

1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is

accessible by clicking on the permanently available Documentation button.

2. Navigate to Users&Groups > Groups.

3. Select the group that needs access to AXS GUARD e-mail services.

4. Click on the Firewall tab.

5. Click on the Add Firewall Policy button.

6. Click on sys-email in the list.

7. Click on Update (see the image below).

The instructions above explain how to configure the Firewall for groups. See the AXS GUARD Firewall

How To for details about the configuration of the Firewall at the user and the computer level. The

Firewall How To is accessible via the Documentation button in the Administrator Tool.

E-mail Storage How To - Version 8.0.0 Chapter 2. E-mail Server

Figure 2.3. Assigning Mail Rights to a Group

2.3. E-mail Domains

A domain identifies company web sites, e-mail servers, but also other devices such as gateways and routers

via a common name. For example, microsoft.com is the domain name of Microsoft’s web sites and update

servers. A single web server can serve web sites for multiple domain names, but a single FQDN can

only point to one machine. For example, Apple Computer has the following web sites: www.apple.com,

www.info.apple.com and store.apple.com. Each of these sites could be hosted on different machines.

The AXS GUARD MTA allows you to handle mail for one or multiple domains. All e-mails for a configured

domain can either be handled and stored locally, forwarded to a specific computer or relayed out to a specific

SMTP server. Users only have one physical mailbox, even if they are a member of multiple local domains on

the AXS GUARD. All messages destined to a member of one of these domains are delivered to the same

physical mailbox.

For detailed information about e-mail domains and their configuration, see the AXS GUARD E-mail Relay How

To,whichcan be accessed by clickingonthepermanentlyavailable Documentation button in theAdministrator

Tool.

Figure 2.4. E-mail Domains

Andere Handbücher für Personal aXsGUARD

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Vasco Firewall Handbücher

Vasco

Vasco Personal aXsGUARD Bedienerhandbuch

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung