Symantec 10765539 - Mail Security For SMTP Technical manual

Symantec Mail Security

for SMTP

Planning Guide

Symantec Mail Security for SMTP

Planning Guide

The software described in this book is furnished under a license agreement and

may be used only in accordance with the terms of the agreement.

April 17, 2006

logo, Symantec TurnTide, and SESA are U.S. registered trademarks of Symantec

Corporation. LiveUpdate, LiveUpdate Administration Utility, Symantec AntiVirus, and

Symantec Security Response are trademarks of Symantec Corporation. Other names may

be trademarks of their respective owners.

The product described in this document is distributed under licenses restricting its use,

copying, distribution, and decompilation/reverse engineering. No part of this document

may be reproduced in any form by any means without prior written authorization of

Symantec Corporation and its licensors, if any.

THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED

CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED

WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-

INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH

DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL

NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION

WITH THE FURNISHING PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE

INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE

WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be “commercial computer

software” and “commercial computer software documentation” as defined in FAR

Sections 12.212 and DFARS Section 227.7202.

Symantec Corporation

20330 Stevens Creek Blvd.

Cupertino, CA 95014

http://www.symantec.com

Printed in the United States of America.

10987654321

Technical support

As part of Symantec Security Response, the Symantec global Technical Support

group maintains support centers throughout the world. The Technical Support

group’s primary role is to respond to specific questions on product feature/

function, installation, and configuration, as well as to author content for our

Web-accessible Knowledge Base. The Technical Support group works

collaboratively with the other functional areas within Symantec to answer your

questions in a timely fashion. For example, the Technical Support group works

with Product Engineering as well as Symantec Security Response to provide

Alerting Services and Virus Definition Updates for virus outbreaks and security

alerts.

Symantec technical support offerings include:

■A range of support options that give you the flexibility to select the right

amount of service for any size organization

■Telephone and Web support components that provide rapid response and

up-to-the-minute information

■Upgrade insurance that delivers automatic software upgrade protection

■Content Updates for spam and virus definitions, and security signatures

that ensure the highest level of protection

■Global support from Symantec Security Response experts, which is

available 24 hours a day, 7 days a week worldwide in a variety of languages

for those customers enrolled in the Platinum Support Program

■Advanced features, such as the Symantec Alerting Service and Technical

Account Manager role, offer enhanced response and proactive security

support

Please visit our Web site for current information on Support Programs. The

specific features available may vary based on the level of support purchased and

the specific product that you are using.

Licensing and registration

If the product that you are implementing requires registration and/or a license

key, the fastest and easiest way to register your service is to access the

Symantec licensing and registration site at www.symantec.com/certificate.

Alternatively, you may go to www.symantec.com/techsupp/ent/enterprise.html,

select the product that you wish to register, and from the Product Home Page,

select the Licensing and Registration link.

Contacting Technical Support

Customers with a current support agreement may contact the Technical

Support group via phone or online at http://www.symantec.com/enterprise/

Customers with Platinum support agreements may contact Platinum Technical

Support via the Platinum Web site at https://www-secure.symantec.com/

platinum/

When contacting the Technical Support group, please have the following:

■Product release level

■Hardware information

■Available memory, disk space, NIC information

■Operating system

■Version and patch level

■Network topology

■Router, gateway, and IP address information

■Problem description

■Error messages/log files

■Troubleshooting performed prior to contacting Symantec

■Recent software configuration changes and/or network changes

Customer Service

To contact Enterprise Customer Service online, go to http://www.symantec.com,

select the appropriate Global Site for your country, then choose Service and

Support. Customer Service is available to assist with the following types of

issues:

■Questions regarding product licensing or serialization

■Product registration updates such as address or name changes

■General product information (features, language availability, local dealers)

■Latest information on product updates and upgrades

■Information on upgrade insurance and maintenance contracts

■Information on Symantec Value License Program

■Advice on Symantec's technical support options

■Nontechnical presales questions

■Missing or defective CD-ROMs or manuals

Contents

Chapter 1 Introducing Symantec Mail Security for SMTP

Key features ............................................................................................................ 7

Functional overview .............................................................................................. 8

Architecture ............................................................................................................ 9

New features for all users ...................................................................................10

Changes for Symantec Mail Security for SMTP users ................................... 11

New feature names ...................................................................................... 13

Discontinued features ................................................................................. 13

Changes for Symantec Brightmail Antispam users ....................................... 13

Where to get more information ......................................................................... 15

Chapter 2 Planning your deployment

General deployment considerations ................................................................. 17

MTA usage .................................................................................................... 17

Configuring Scanners .................................................................................. 17

Positioning with other filtering products ................................................ 18

Filtering internal deliveries ....................................................................... 18

LDAP compatibility ..................................................................................... 18

Load balancing ............................................................................................. 19

Adjusting MX records .................................................................................. 19

Adjusting RAM and MySQL threads ......................................................... 19

Deployment models ............................................................................................. 20

Basic gateway deployment ......................................................................... 20

Multi-tier gateway deployment ................................................................. 21

Post-gateway deployment .......................................................................... 23

Chapter 3 Configuring message filtering

Understanding email filtering ........................................................................... 25

Notes on filtering actions ........................................................................... 25

Deployment considerations ............................................................................... 26

6Contents

Chapter 4 Understanding system requirements

Hardware and software requirements ............................................................. 27

Minimum hardware requirements ............................................................ 27

Minimum software requirements ............................................................. 28

Reserved ports .............................................................................................. 31

Factors that affect performance ....................................................................... 32

Hardware components that affect performance .................................... 32

Environmental factors that affect performance .................................... 33

Settings that affect performance .............................................................. 33

Index

Chapter 1

Introducing Symantec Mail

Security for SMTP

This chapter includes the following topics:

■Key features

■Functional overview

■Architecture

■New features for all users

■Changes for Symantec Mail Security for SMTP users

■Changes for Symantec Brightmail Antispam users

■Where to get more information

Key features

Symantec Mail Security for SMTP offers enterprises an easy-to-deploy,

comprehensive gateway-based email security solution through the following:

■Antispam technology – Symantec’s state-of-the-art spam filters assess and

classify email as it enters your site.

■Antivirus technology – Virus definitions and engines protect your users

from email-borne viruses.

■Content Compliance – These features help administrators enforce corporate

email policies, reduce legal liability, and ensure compliance with regulatory

requirements.

■Group policies and filter policies – An easy-to-use authoring tool lets

administrators create powerful, flexible ad hoc filters for userss and groups.

8Introducing Symantec Mail Security for SMTP

Functional overview

You can deploy Symantec Mail Security for SMTP in different configurations to

best suit the size of your network and your email processing needs.

A Symantec Mail Security for SMTP host can be deployed in the following ways:

■Scanner – Deployed as a Scanner, a Symantec Mail Security for SMTP host

filters email. Your installation can have one or many Scanners. Symantec

Mail Security for SMTP runs alongside your email or groupware server(s).

■Control Center – Deployed as a Control Center, a Symantec Mail Security for

SMTP host is a Web-based configuration and administration center. Use it to

configure and manage email filtering, SMTP routing, system settings, and

all other functions. Your enterprise-wide deployment of Symantec Mail

Security for SMTP can have multiple Scanners but only one Control Center,

from which you configure and monitor all the Scanner hosts.

The Control Center provides status for all Symantec Mail Security for SMTP

hosts in your system, system logs, and extensive customizable reporting.

Use it to configure both system-wide and host-specific details.

The Control Center provides the Setup Wizard, for initial configuration of

all Symantec Mail Security for SMTP instances at your site, and also the

Add Scanner Wizard, for adding new Scanners.

It also hosts the Spam and Suspect Virus Quarantines, for storage of spam

and virus messages respectively. End users can access the Control Center to

view their quarantined spam messages and set their preferences for

language filtering and blocked and allowed senders. Alternatively, you can

configure the Spam Quarantine for administrator-only access.

■Scanner and Control Center – A single Symantec Mail Security for SMTP

host performs both functions.

Note: Symantec Mail Security for SMTP provides neither mailbox access for end

users nor message storage; it is not intended for use as the only MTA in your

email infrastructure.

Note: Symantec Mail Security for SMTP does not filter messages that don’t flow

through the SMTP gateway. For example, if two mailboxes reside on the same

MS Exchange server, or on different Exchange servers the same organization,

messages will not pass through Symantec Mail Security for SMTP filters.

9Introducing Symantec Mail Security for SMTP

Architecture

Your Symantec Mail Security for SMTP installation processes a email message

as follows. For the sake of discussion, our sample message passes through the

Filtering Engine to the Transformation Engine without being rejected.

10 Introducing Symantec Mail Security for SMTP

New features for all users

■The incoming connection arrives at the inbound MTA via TCP/IP.

■The inbound MTA accepts the connection and moves the message to its

inbound queue.

■The Filtering Hub accepts a copy of the message for filtering.

■The Filtering Hub consults the LDAP SyncService directory to expand the

message’s distribution list.

■The Filtering Engine determines each recipient’s filtering policies.

■The message is checked against Blocked/Allowed Senders Lists defined by

administrators.

■Virus and configurable heuristic filters determine whether the message is

infected.

■Content Compliance filters scan the message for restricted attachment types

or keywords, as defined in configurable dictionaries.

■Spam filters compare message elements with current filters published by

Symantec Security Response to determine whether the message is spam. At

this point, the message may also be checked against end-user defined

Language settings.

■The Transformation Engine performs actions per recipient based on

filtering results and configurable Group Policies.

New features for all users

Table 1-1 lists features that are new for both Symantec Mail Security for SMTP

users and Symantec Brightmail Antispam users.

Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam

Category Features Description

Threat

protection

features

Improved Email Firewall Protects against directory harvest attacks, denial of service

attacks, spam attacks, and virus attacks.

Sender Authentication Protects against phishing attacks, using the Sender Policy

Framework (SPF), Sender ID, or both.

Improved virus protection Additional virus verdicts protect against suspected viruses,

spyware and adware, and encrypted attachments.

Email messages that may contain viruses can be delayed in the

Suspect VIrus Quarantine, then refiltered, with updated virus

definitions, if available. This feature can be effective in defeating

virus attacks before they are widely known.

View a continuously updated list available of virus definitions.

This manual suits for next models

Table of contents

Other Symantec Software manuals

Symantec

Symantec WISESCRIPT EDITOR 8.0 - REFERENCE FOR WISE PACKAGE STUDIO... Service manual

Symantec

Symantec WISE VIRTUAL PACKAGE EDITOR 8.0 - REFERENCE FOR WISE PACKAGE STUDIO... Service manual

Symantec

Symantec XGS-4728F User manual

Symantec

Symantec ALTIRIS BARCODE SOLUTION 7.0 - V1.0 User manual

Symantec

Symantec ANTIVIRUS 5.2 - FOR NETWORK ATTACHED STORAGE User manual

Symantec

Symantec CONFLICTMANAGER 8.0 - REFERENCE V1.0 Service manual

Symantec

Symantec PCANYWHERE - PACKAGER IMPLEMENTATION GUIDE... User manual

Symantec

Symantec SOFTWARE MANAGER 8.0 - REFERENCE FOR WISE PACKAGE STUDIO... Service manual

Symantec

Symantec SERVICEDESK 7.0 - CUSTOMIZATION GUIDE User manual

Symantec

Symantec BRIGHTMAIL GATEWAY SMALL BUSINESS EDITION User manual

Symantec

Symantec ALTIRIS CLIENT MANAGEMENT SUITE 7.0 SP2 -... User manual

Symantec

Symantec ALTIRIS CLIENT MANAGEMENT SUITE 7.0 SP2 -... User manual

Symantec

Symantec WISESCRIPT PACKAGE EDITOR 8.0 - REFERENCE FOR WISE PACKAGE STUDIO... Service manual

Symantec

Symantec MONITOR PACKS FOR SERVERS 7.0 - SP2 S Instruction Manual

Symantec

Symantec 14541094 - pcAnywhere Host & Remote User manual

Symantec

Symantec ALTIRIS SECURITY EXPRESSIONS User manual

Symantec

Symantec ALTIRIS DEPLOYMENT SOLUTION 7.1 - V1 User manual

Symantec

Symantec ALTIRIS CLIENT MANAGEMENT SUITE 7.0 SP2 -... User manual

Symantec

Symantec WINDOWS INSTALLER EDITOR 7.0 SP2 - REFERENCE FOR WISE INSTALLATION EXPRESS... User manual

Symantec

Symantec 64203 - Norton Internet Security 4.0 User manual

Symantec

Symantec ALTIRIS ASSET MANAGEMENT SUITE 7.0 - V1.0 User manual

Symantec

Symantec 10547849 - Mail Security For SMTP User manual

Symantec

Symantec 10551441 - AntiVirus Corporate Edition Service manual

Symantec

Symantec ALTIRIS 7.0 SP2 - MANAGEMENT SOLUTION User manual

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Novell

Novell GROUPWISE 8 - INTERNET AGENT manual

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual