Symantec 10765539 - Mail Security For SMTP Planning Manual

Planning guide

Advertisement

Quick Links

Symantec Mail Security
for SMTP
Planning Guide

Advertisement

Table of Contents
loading

Summary of Contents for Symantec 10765539 - Mail Security For SMTP

  • Page 1 Symantec Mail Security for SMTP Planning Guide...
  • Page 2 April 17, 2006 Copyright notice Copyright © 2006 Symantec Corporation. All rights reserved. Symantec, the Symantec logo, Symantec TurnTide, and SESA are U.S. registered trademarks of Symantec Corporation. LiveUpdate, LiveUpdate Administration Utility, Symantec AntiVirus, and Symantec Security Response are trademarks of Symantec Corporation.
  • Page 3: Technical Support

    Technical support As part of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. The Technical Support group’s primary role is to respond to specific questions on product feature/ function, installation, and configuration, as well as to author content for our Web-accessible Knowledge Base.
  • Page 4: Contacting Technical Support

    Recent software configuration changes and/or network changes ■ Customer Service To contact Enterprise Customer Service online, go to http://www.symantec.com, select the appropriate Global Site for your country, then choose Service and Support. Customer Service is available to assist with the following types of...
  • Page 5: Table Of Contents

    Functional overview ....................8 Architecture ......................9 New features for all users ................... 10 Changes for Symantec Mail Security for SMTP users ........11 New feature names ..................13 Discontinued features ................. 13 Changes for Symantec Brightmail Antispam users ........13 Where to get more information .................
  • Page 6 6 Contents Chapter 4 Understanding system requirements Hardware and software requirements ............. 27 Minimum hardware requirements ............27 Minimum software requirements ............. 28 Reserved ports ....................31 Factors that affect performance ............... 32 Hardware components that affect performance ........32 Environmental factors that affect performance ........
  • Page 7: Introducing Symantec Mail Security For Smtp

    ■ Where to get more information ■ Key features Symantec Mail Security for SMTP offers enterprises an easy-to-deploy, comprehensive gateway-based email security solution through the following: Antispam technology – Symantec’s state-of-the-art spam filters assess and ■ classify email as it enters your site.
  • Page 8: Functional Overview

    You can deploy Symantec Mail Security for SMTP in different configurations to best suit the size of your network and your email processing needs. A Symantec Mail Security for SMTP host can be deployed in the following ways: Scanner – Deployed as a Scanner, a Symantec Mail Security for SMTP host ■...
  • Page 9: Architecture

    Introducing Symantec Mail Security for SMTP Architecture Architecture Your Symantec Mail Security for SMTP installation processes a email message as follows. For the sake of discussion, our sample message passes through the Filtering Engine to the Transformation Engine without being rejected.
  • Page 10: New Features For All Users

    Group Policies. New features for all users Table 1-1 lists features that are new for both Symantec Mail Security for SMTP users and Symantec Brightmail Antispam users. Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam...
  • Page 11: Changes For Symantec Mail Security For Smtp Users

    Specify user-based and total limits, configure automatic message capabilities limits deletions. Changes for Symantec Mail Security for SMTP users For users of Symantec Mail Security for SMTP 4.1, Version 5.0 provides a host of expanded and improved capabilities. In addition to the new features listed in...
  • Page 12 Group Policies enable you to specify groups of users, based on email addresses, domains, or IP addresses, and customize mail filtering for each group. See the Symantec Mail Security for SMTP Administration Guide for more information. In addition, if you were using Version 4.1 without Premium AntiSpam, Version 5.0, with or without Premium AntiSpam provides much more extensive...
  • Page 13: New Feature Names

    Settings > Virus > Exclude Scanning tab Routing Settings > Hosts > Edit > SMTP tab Discontinued features The following Symantec Mail Security for SMTP 4.1 features are not included in Symantec Mail Security for SMTP 5.0: Auto-generated whitelist ■...
  • Page 14 Most importantly, you will now find a Policies menu at the top level, breaking out Group Policies (under the Settings menu in Symantec Brightmail Antispam 6.0.3), and including other items as well. See the Symantec Mail Security for SMTP Administration Guide for an updated...
  • Page 15: Where To Get More Information

    Symantec Mail Security also includes a comprehensive help system that contains conceptual and procedural information. You can visit the Symantec Web site for more information about your product. The following online resources are available: Provides access to the technical support Knowledge www.symantec.com/...
  • Page 16 16 Introducing Symantec Mail Security for SMTP Where to get more information...
  • Page 17: Planning Your Deployment

    Symantec Mail Security for SMTP contains a Message Transfer Agent (MTA), which processes and relays messages to support filtering activities. Note: Symantec Mail Security for SMTP provides neither mailbox access for end users nor message storage; it is not suitable for use as the only MTA in your email infrastructure.
  • Page 18: Positioning With Other Filtering Products

    Filtering internal deliveries You can force internal mail through Symantec Mail Security for SMTP to avoid propagation of viruses and spam generated by email mass-mailing worms that may have been picked up by individuals via Web browsing or downloading.
  • Page 19: Load Balancing

    SMTP Administration Guide. Load balancing Symantec Mail Security for SMTP is not intended to be used for load balancing. Administrators can associate only one host name or IP address as the MTA to which email is relayed. You must implement multiple Scanners to perform load balancing.
  • Page 20: Deployment Models

    20 Planning your deployment Deployment models Tomcat and increasing the number of listener and consumer threads in MySQL improves performance. Deployment models You can deploy Symantec Mail Security for SMTP in the following ways: Basic gateway deployment ■ Multi-tier gateway deployment ■...
  • Page 21: Multi-Tier Gateway Deployment

    Some smaller organizations do not have dedicated gateway servers or a ■ gateway layer. Instead, they deploy gateway servers and internal mail servers on the same computers. Symantec Mail Security for SMTP cannot be installed on the server running ■ Exchange. Multi-tier gateway deployment Note: This model may be implemented with one or more Scanner hosts.
  • Page 22 22 Planning your deployment Deployment models Compared with basic gateway deployment, this configuration eliminates a ■ single point of failure for message scanning. This model allows administrators to take individual Scanners offline for ■ maintenance without incurring downtime. This scenario enables load balancing of filtered mail across multiple ■...
  • Page 23: Post-Gateway Deployment

    Scanner hosts. As shown below, MTAs at the gateway layer accept unfiltered mail from the Internet then relay it to Symantec Mail Security for SMTP. The system filters mail from the gateway layer and relays mail to other MTAs downstream.
  • Page 24 24 Planning your deployment Deployment models...
  • Page 25: Configuring Message Filtering

    Deployment considerations ■ Understanding email filtering Symantec Mail Security for SMTP provides a wide variety of actions for filtering email, and allows you to either set identical options for all users, or specify different actions for distinct users or groups.
  • Page 26: Deployment Considerations

    This setting is useful for testing. Spam and suspected spam are still counted as such in message statistics for reports. Deliver the message to Symantec Mail Security for SMTP supports the Symantec Spam Folder Agent for recipient's Spam folder Exchange using X-header markup for Microsoft Exchange 5.5 and Exchange 2000 internal messaging systems.
  • Page 27: Understanding System Requirements

    Chapter Understanding system requirements This chapter includes the following topics: Hardware and software requirements ■ Factors that affect performance ■ Hardware and software requirements This section gives detailed requirements for each supported platform. Minimum hardware requirements Hardware requirements vary depending on the number of email users and the amount of email traffic.
  • Page 28: Minimum Software Requirements

    Following are the minimum software requirements for Symantec Mail Secuity for SMTP. Note: Symantec Mail Security for SMPTP does not support Scanners running on different platforms within the same email filtering evinronment; all Scanners must use the same operating system (for example, Linux or Windows).
  • Page 29 Spam Folder Agent: Exchange 5.5, Exchange 2000, or Exchange Server Support 2003 Symantec Spam Folder Agent for Domino: Lotus Domino 5, 6, or 6.5 Exchange foldering using Spam Confidence Level: Symantec Mail Security for SMTP must be installed on an Exchange Server 2003 server.
  • Page 30 Accounts and Symantec Mail Security for SMTP software runs as user directories mailwall in the bmi group. See the Symantec Mail Security for SMTP Installation Guide for more information. Alias Create a mail alias for the mailwall account so that all mail sent to mailwall is read by an administrator.
  • Page 31: Reserved Ports

    Understanding system requirements Hardware and software requirements Reserved ports The following tables list ports reserved for Symantec Mail Security for SMTP components and functions. Reserved ports are classified as either locally bound (Table 4-4) or external listening (Table 4-5). Table 4-4...
  • Page 32: Factors That Affect Performance

    32 Understanding system requirements Factors that affect performance Factors that affect performance The performance of Symantec Mail Security for SMTP can be affected by many factors. This section provides guidelines regarding those factors, and suggestions that may improve performance. Overall performance involves several factors, some depending on the configuration and deployment options you choose, and others depending on external factors, such as the percentage of your organization’s email that is...
  • Page 33: Environmental Factors That Affect Performance

    Types of end-users (ISP or enterprise) ■ Settings that affect performance The choices you make when configuring Symantec Mail Security for SMTP affect its performance. Filtering performance considerations Multiple group policies – If a message has more than one recipient, each with different group policies, then the Scanner may need to bifurcate the message (split it into one or more messages) for modification prior to delivery.
  • Page 34 ■ Set Spam Quarantine message retention to 7 days. ■ Note: For information on these operations, refer to the Symantec Mail Security for STMP Administration Guide. Control Center performance considerations The Control Center is used to start and stop servers; view logs and reports; set configuration options;...
  • Page 35 Number of end users logging into the Spam Quarantine interface – More ■ connections to end users results in more overhead for the system. Symantec recommends Spam Quarantine for user populations of 30,000 users or less. LDAP server throughput – LDAP lookups for message recipients against a ■...
  • Page 36 36 Understanding system requirements Factors that affect performance...
  • Page 37 17 deployment hardware requirements 27, 28 considerations 17 help 15 gateway 20 how Symantec Mail Security appliances work 8 models 20 multi-tier gateway 21, 22 post-gateway 23 key features 7 email filtering, overview 25 environmental factors that affect performance 33...
  • Page 38 38 Index advantages 21 considerations 22 MX records, adjusting 19 performance Control Center 34 environmental factors 33 factors affecting 32 filtering 33 LDAP 35 log levels 34 settings 33 Spam Quarantine 35 ports, reserved 31 positioning with other filtering products 18 post-gateway deployment 23 advantages 23 considerations 23...

This manual is also suitable for:

Mail security for smtp

Table of Contents