1.1. About this Document ....................1 1.2. Examples used in this Guide ..................1 1.3. Documentation Sources ..................... 1 1.4. About the AXS GUARD ..................... 2 1.4.1. What is it? ....................2 1.4.2. Spare Units ....................2 1.4.3. Licensed Units ....................2 1.4.4.
Page 4
VASCO customers and has been provided to you and your organization for the sole purpose of helping you to use and evaluate VASCO Products. As such, it does not constitute a license to use VASCO Software or a contractual agreement to use VASCO Products.
Chapter 1. Introduction 1.1. About this Document • This document has been written for AXS GUARD version 8.0.0 and is based on changes and features that have been implemented since version 7.7.3. • This document was last updated on 22 Sep 2014.
The AXS GUARD is an authentication appliance, intended for small and medium sized enterprises. In addition to strong authentication, the AXS GUARD has the potential to manage all of your Internet security needs. Its modular design means that optional features can be purchased at any time to support, for example, e-mail and Web access control.
Licensing and accessing a fully operational in-service appliance requires the following steps: 1. Logging on to the AXS GUARD as the default sysadmin user and changing the sysadmin password 2. Creating a new user with full administration rights, which is required to configure the AXS GUARD 3.
DNS request, unless configured otherwise on the sender MTA. For more information about DNS and MX records, see the AXS GUARD Public DNS How To, which is available by clicking on the permanently available Documentation button in the Administrator tool.
2.2.3. E-mail Firewall Policy Settings System-level settings Do not allow any mail services on the AXS GUARD at the system level, except for the MTA (port 25). Enforce user authentication instead. Internet and DMZ access to SMTP port 25 on the AXS GUARD is granted by default. SMTP access from the secure LAN, POP3 access and IMAP access are not permitted by default.
Each of these sites could be hosted on different machines. The AXS GUARD MTA allows you to handle mail for one or multiple domains. All e-mails for a configured domain can either be handled and stored locally, forwarded to a specific computer or relayed out to a specific SMTP server.
With IMAP, the messages remain on the mail server instead of being downloaded. When the mail client is started, it connects to the AXS GUARD mail server on TCP port 143. E-mail clients that use the IMAP protocol generally leave messages on the server, unless the user explicitly deletes them. This property makes backups easier.
Description No TLS TLS is not used. Opportunistic The AXS GUARD announces TLS support to the clients, but does not require its use. Mandatory POP and IMAP clients must use TLS. Table 2.1. POP3 and IMAP TLS Settings 2.6. E-mail Envelope, Header and Body 2.6.1.
In this section, we explain how to add an e-mail alias for a user on the AXS GUARD. 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button.
2.8.2. Configuration In this section, we explain how to add a distribution list on the AXS GUARD. 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button.
This is expected behavior. 2.9.2. Avoiding E-mail Loops Between AXS GUARD MTAs To avoid two or more AXS GUARD users from generating auto-response messages to each other in a never- ending loop, an additional header field (see Section 2.6, “E-mail Envelope, Header and Body”) is automatically...
General and check the May users change their auto-response settings? option. 2.9.4. User Level Configuration 1. Log on to the AXS GUARD as a regular user. For the procedure, see the AXS GUARD System Administration How To, which is accessible via the Documentation button.
2.11.1. Definition Messages sent to a mailbox on the AXS GUARD (i.e. a local mailbox) can be forwarded to one or more e- mail addresses. E-mail forwarding redirects e-mail going to one address and sends it to one or several other addresses.
In this section, we explain how to configure e-mail forwarding on the AXS GUARD. 1. Log on to the AXS GUARD as a regular user. The procedure is explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button.
There are two types of quotas: • Soft quotas: The soft quota is a warning limit. Once it is reached, the AXS GUARD automatically sends a notification to the user and the system administrator, requesting the user to remove and / or archive his / her messages.
Table 2.6. Overview of Quota Configuration Settings 2.12.3. Quota Notifications A mail quotum is the amount of space reserved on the server to house a user’s e-mails. The AXS GUARD mailbox quotas are specified individually, under Users & Groups > Users in the E-mail tab.
2.12.4. Viewing and Exporting Mail Quota 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which can be accessed via the Documentation button in the Administrator Tool. 2. Navigate to E-mail > Status > Mail Quota.
3.1. Overview In this section we explain how to configure your mail clients to access: • E-mail on the AXS GUARD POP3 server. • E-mail on the AXS GUARD IMAP server. For practical reasons, explanations are limited to Microsoft Outlook 2007.
• Incoming mail server: Enter the LAN IP address or internal FQDN of the AXS GUARD. • Outgoing mail server: Enter the LAN IP address or internal FQDN of the AXS GUARD. If you are using an external (ISP) SMTP server, enter its address or FQDN here.
• Incoming mail server: Enter the LAN IP address or internal FQDN of the AXS GUARD. • Outgoing mail server: Enter the LAN IP address or internal FQDN of the AXS GUARD. If you are using an external (ISP) SMTP server, enter its address or FQDN here.
Page 30
• Make sure that the entered user settings (user name and password) are identical to the ones entered on the AXS GUARD. • Make sure the user is authenticated on the client (SSO Authentication Utility). • Verify the user’s Firewall settings on the AXS GUARD (sys-email). 14. Click on Finish. Figure 3.11. Completing your IMAP Configuration...
In this section, we explain how to configure and update your AXS GUARD Address Book. Feature Activation 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button.
E-mail Storage How To - Version 8.0.0 4.2.3. Client Configuration In this section, we explain how to configure Microsoft Outlook 2007 to read information from the AXS GUARD Address Book. • Make sure the user is authenticated on the client (SSO Authentication Utility).
5.3. Server Configuration 5.3.1. Feature Activation 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button. 2. Navigate to System > Feature Activation.
Page 36
Field Description Use AXS GUARD services for Webmail Enable if your mail is stored on the AXS GUARD. Disable if your mail is stored on a separate server in your network. When disabled, you will be required to configure the folder and service settings for Webmail (see Table 5.2, “Webmail 3...
A user can overrule this default setting with a user-specific setting in the webmail interface. Service settings for Allow users This option allows users who are not registered on the AXS GUARD to Webmail tab unknown connect to the Webmail back-end server. GUARD IMAP Server Enter "localhost"...
5.3.4. User Configuration Make sure that the users have access to Webmail: 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button. 2. Navigate to Users & Groups > Users.
Chapter 5. Webmail E-mail Storage How To - Version 8.0.0 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button. 2. Navigate to Firewall > Policies > Static.
Client”. To change the default AXS GUARD logo to your company logo: 1. Log on to the AXS GUARD Administrator Tool as explained in the System Administration How To, which is accessible via the Documentation button in the Administrator Tool.
To access the AXS GUARD Webmail server: 1. Open an Internet browser, e.g. Internet Explorer. 2. In the URL field, enter https:// , followed by the FQDN or external IP address of the AXS GUARD, followed by a forward slash and webmail , e.g. https://axsguard.mydomain.com/webmail 3.
IMAP logs). 6.2. Accessing the POP3 and IMAP Logs 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button in the Administrator Tool. 2. Navigate to E-mail > Logs > POP3/IMAP.
Make sure the users are authorized to change their auto-response settings (see Section 2.9, “Auto-Response Settings”): 1. Log on to the AXS GUARD as explained in the AXS GUARD System Administration How To, which is accessible via the Documentation button. 2. Navigate to Users & Groups > General.
Recipient address is rejected when sending a message to <quota-status@systemdomain> The network from where the message is sent must be part of the AXS GUARD secure network zone or an alias thereof. An alternative is to whitelist the sender’s IP address or network range.
2. If there is no solution in the Knowledge Base, please contact the company which supplied you with the VASCO product. 3. If your supplier is unable to solve your problem, they will automatically contact the appropriate VASCO expert. For details about support capabilities by user, visit: http://www.vasco.com/support/support_services/...
Need help?
Do you have a question about the AXS GUARD and is the answer not in the manual?
Questions and answers