Actions - ESET MAIL SECURITY 4 - V4.2 FOR MICROSOFT EXCHANGE SERVER Installation Manual

The Background scanning option allows scanning of all messages in the system background. Microsoft Exchange
Server decides whether a background scan will run or not, based on various factors, such as the current system load,
the number of active users, etc. Microsoft Exchange Server keeps a record of scanned messages and the virus
signature database version used. If you are opening a message that has not been scanned by the most current virus
signature database, Microsoft Exchange Server sends the message to ESET Mail Security to be scanned before
opening the message in your e-mail client. You can choose to Scan only messages with attachment and filter based
on time received.
Since background scanning can affect system load (scanning is performed after each virus signature database update),
we recommend using scheduled scanning outside working hours. Scheduled background scanning can be configured
via a special task in the Scheduler/Planner. When you schedule a Background scanning task you can set the launch
time, the number of repetitions and other parameters available in the Scheduler/Planner. After the task has been
scheduled, it will appear in the list of scheduled tasks and as with the other tasks, you can modify its parameters,
delete it or temporarily deactivate the task.
Enabling the Scan RTF email bodies option activates scanning of RTF message bodies. RTF message bodies may
contain macro viruses.
NOTE: Plain text email bodies are not scanned by VSAPI.
4.2.4.4.1

Actions

In this section you can specify the actions to take if a message and/or attachment is evaluated as infected.
The Actions to take if cleaning not possible field allows you to block infected content or delete the message. This
action will be applied only if the automatic cleaning (defined in ThreatSense engine parameter setup > Cleaning) did
not clean the message.
The Message body deletion method option offers the choice to either delete the message body or rewrite the
message body with action information.
Attachment deletion method lets you decide to delete the message, truncate file attachment to zero size or replace
the infected file with action information.
If the Use VSAPI Quarantine option is enabled, infected messages will be stored in the email server quarantine. Please
note that this is the server's managed quarantine (not the client's quarantine or the quarantine mailbox). Infected
messages stored in mail server quarantine are inaccessible until they are cleaned with the latest virus signature
database.
By activating Rescan, you can scan messages and files that have already been scanned again.
37