Virus Scanning Pop Email - McAfee SG310 Administration Manual

Firewall menu options
Antivirus

Virus scanning POP email

The UTM Firewall appliance can scan email being sent by PCs on your LAN before delivering it to the
destination mail server.
Note: Scanning of IMAP and Web-based email is not supported.
The POP email page allows you to configure a transparent POP3 proxy that virus checks incoming email
before passing it to a real POP3 server for delivery to its addressee. In the majority of cases, minimal
changes will be required at each client POP application. When scanning finds a virus within a message
attachment, the POP3 proxy strips the attachment and body from the email and, in a rewritten message,
passes the original mail headers through to the original recipient, notifying them of the virus detection.
This service is configured differently depending on whether you want to scan all incoming email, or scan
only email being retrieved by specific PCs on your LAN.
Virus scanning all POP email
For each email client that is not retrieving email from the default POP server (this may be all email clients),
the email client's POP3 user name setting must be in the form of user@mail.isp.com, rather than simply
"user" — user is the POP3 login, and mail.isp.com is the POP3 mail server.
From the Firewall menu, click Antivirus > POP Email tab. The POP Based email page appears
1
(Figure ).
Figure 230 Pop-Based email
Select the Virus check POP based email checkbox.
2
Depending on your mail server environment, follow the appropriate steps below:
3
• If all of your internal email clients (such as Microsoft Outlook) are retrieving email from a single mail
server only:
• Enter it as the Default POP server.
• Clear the Allow connections to other POP servers checkbox.
• If most, but not all, of your internal email clients are retrieving email from a single mail server:
• Enter this as the Default POP server.
• Select the Allow connections to other POP servers checkbox.
• If there is no single mail server from which most of your internal email clients are retrieving email:
• Leave the Default POP server field blank.
• Select the Allow connections to other POP servers checkbox. The checkbox must be selected
if the Default POP server field is blank.
228 McAfee UTM Firewall 4.0.4 Administration Guide