How Groupshield Protects Exchange - McAfee GSSCDE-AA-DA - GroupShield Security Suite User Manual

® ™
McAfee GroupShield 7.0 User Guide
Each time, an email message is sent to or received from a source, GroupShield scans
it comparing it with a list of known viruses and suspected virus-like behavior.
GroupShield can also scan for content within the email message using rules and
policies defined within the GroupShield software.

How GroupShield protects Exchange?

GroupShield uses McAfee
(VSAPI) to scan all email messages.
Note
The anti-spam, anti-virus, and the content management engine scan the messages and
provide the result to GroupShield 7.0 before being written to the file system or being
read by the Microsoft
The anti-virus scanning engine and the anti-spam scanning engine compare the email
message with all the known signatures stored within the currently installed virus
definition (
using the selected heuristic detection methods.
The content management engine searches the email message for banned content as
specified in the content management policies running within the GroupShield
software.
If there are no viruses, banned/unwanted content in the email message, GroupShield
passes the information back to Microsoft
In case of a detection, GroupShield takes actions that are defined within its
configuration settings.
Note
Email server protection — McAfee GroupShield
McAfee GroupShield 7.0 integrates with Microsoft
protect against viruses that may be transmitted using your corporate email system.
Due to the close integration between your email server and GroupShield anti-virus
solution, GroupShield can do more than just protecting your email server from viruses.
It can:
®
Transport Scanner and Microsoft
®
For Microsoft Exchange Server 2003 (used as a Bridgehead Server) and Microsoft
Exchange Server 2007 (with Edge Transport or Hub Transport-only role), GroupShield
®
uses McAfee Transport Scanner (and not Microsoft
server. However, for Exchange Server 2003 Mailbox Server and Exchange 2007
MailBox Role, GroupShield provides additional scanning option using Microsoft VSAPI.
®
Exchange 2003/2007 users.
) files and anti-spam rules. The anti-virus engine also checks the message
DAT
The default actions may differ, depending on the installed version of Microsoft
Exchange and, where applicable, the chosen scanning method.
®
®
Exchange 2003/2007.
®
Exchange Server 2003/2007 to
8
Introduction
About GroupShield for Exchange
®
Virus Scanning API
Transport Scanner) to protect the
1
®
®