McAfee SG310 Administration Manual page 236

Firewall menu options
Antispam (TrustedSource)
• Default: 10
• Can be a value of 1 or greater
In the Debug Level field, enter a value for the debugging level in the System Log
9
• Valid range: 1 (least verbose) through 4 (most verbose). Levels 3 and 4 display the TrustedSource
scores in the Syslog.
• Default: 1
[Optional] Select a White list address group. Each address in this group will be allowed through the SMTP
10
proxy regardless of its TrustedSource Reputation score.
[Optional] Select a Black list address group. Each address in this group will be denied access to the SMTP
11
proxy regardless of their TrustedSource Reputation score.
Note: The address groups for white lists and black lists can be modified on the addresses page (Firewall >
Definitions > Addresses). See
Click Submit.
12
The appliance now uses the TrustedSource reputation service to filter inbound email. You can test the
configuration in the TrustedSource Tests page.
Testing TrustedSource
Use this procedure to test your TrustedSource configuration. The TrustedSource Tests page allows you to
test the configuration of your TrustedSource query engine. You can also use this page to query the
reputation of a given server, which allows you to more finely-tune your reputation threshold. If this test is
failing to return a reputation, it could mean that your UTM Firewall appliance has not been registered for
TrustedSource correctly or that your DNS settings are not correct. There may be a delay for your
TrustedSource license to become activated. Please allow four (4) hours for your license to become
activated.
Select Firewall > Antispam > TrustedSource Tests tab. The TrustedSource Reputation Score Test
1
page appears
Figure 236 Antispam —TrustedSource Tests page
Enter the IP address for which the test will attempt to get a TrustedSource rating.
2
Format: a.b.c.d
[Optional] Adjust the number of seconds in the Network Timeout field. This value defines the time-out
3
for network activity. Typically, the default is adequate and should only be changed if there are time-out
issues. A value of zero (0) disables the time-out specified in this page and defaults to any internal time-out
values present in the network infrastructure.
• Default: 15.
• Allowed values: Must be a value of zero (0) or greater.
Click Test. A successful test returns a rating. An unsuccessful test returns a reputation retrieval failed
4
message, which could be due to either the license not being activated or an invalid IP address being
entered.
236 McAfee UTM Firewall 4.0.4 Administration Guide
Creating an Address
(Figure 236).
Group.