Administrator's Guide - Kerio Software Archive

Administrator's Guide - Kerio Software Archive Administrator's Guide - Kerio Software Archive

download.kerio.com
from download.kerio.com More from this publisher
11.07.2015 Views

Chapter 17Antivirus Control of Email And Attachment FilteringIn Kerio MailServer, you can check all incoming emails for viruses. The control can be performedby using two combinable methods. For this purpose, you can use either the internalMcAfee antivirus, or any of the external supported antiviruses.Immediately after the installation of Kerio MailServer, the internal McAfee antivirus is started.It is possible to support it by enabling any other of the supported external antivirus applications.Both antivirus programs can run concurrently. This provides for reliable protectionof your local network, since the virus databases updates will be performed faster (one of theantiviruses can react to a new virus occurrence a couple of hours sooner than the other). Theupdate speed is a key element of the protection against new viruses.Both antiviruses can be also switched off, but it is not recommended, because users are notprotected against infected emails.Kerio MailServer checks (independently of the antivirus) JPEG attachments for corruption andpresence of GDI+ exploit (a malicious code, usually with a virus, that can run the exploit uponsystem breakdown). All messages with such attachment will be deleted automatically.Figure 17.1Antivirus196

17.1 Integrated McAfee Anti-VirusBesides cooperation with an antivirus program, Kerio MailServer allows you to filter certain filetypes from email attachments (using file extension or MIME type), regardless of whether theyare infected by a virus or not. To specify these options, go to the Configuration → Attachmentfiltering section.17.1 Integrated McAfee Anti-VirusCheck Scan mail using McAfee Anti-virus engine in the Antivirus tab of the internal version.Note: The external McAfee Anti-Virus is not supported by Kerio MailServer.Check for updates everyInterval for automatic update of the antivirus database and of the antivirus itself (inhours). Information about updates can be found in the Security log (see chapter 22.4).Note: To enable automatic updates well-working connection to the Internet must be provided.Automated dialing is not supported. In case of dial-ups we recommend you toperform updates by hand (see below).Virus definition updates are downloaded via HTTP. If the Kerio MailServer is behind a firewallyou must allow for outbound communication over an appropriate TCP port (port 80by default).Click Update now to start the update of the virus database and antivirus software manually.When this button is pressed, the update progress window is displayed. Informationabout updates can be found in the Security log (see chapter 22.4).Note: The update progress window can be closed anytime by pressing the OK button (itis not necessary to wait until the update is finished).Current virus database is ...The time that has elapsed since the last successful update of the virus database (with anaccuracy of minutes).Last update check performedThe time elapsed from the last successful update attempt. The fact whether a new versionhas been available on the server is irrelevant.Warning: If the time is significantly (several times) greater than the interval set for automaticupdate, then the automatic updates are not working correctly. In this case werecommend updating the database manually and to inspect the Error and Security logsfor a failure explanation.17.2 Choosing an external module for an antivirus programParameters for antivirus control are set in the Content Filter → Antivirus section with theAntivirus tab. To use an external antivirus program, check Use external antivirus. This menushows the antivirus software which can be used for email scanning. The antivirus softwaremust be installed prior to making a selection (we recommend stopping the Kerio MailServerEngine before the antivirus installation).197

17.1 Integrated McAfee Anti-VirusBesides cooperation with an antivirus program, <strong>Kerio</strong> MailServer allows you to filter certain filetypes from email attachments (using file extension or MIME type), regardless of whether theyare infected by a virus or not. To specify these options, go to the Configuration → Attachmentfiltering section.17.1 Integrated McAfee Anti-VirusCheck Scan mail using McAfee Anti-virus engine in the Antivirus tab of the internal version.Note: The external McAfee Anti-Virus is not supported by <strong>Kerio</strong> MailServer.Check for updates everyInterval for automatic update of the antivirus database and of the antivirus itself (inhours). Information about updates can be found in the Security log (see chapter 22.4).Note: To enable automatic updates well-working connection to the Internet must be provided.Automated dialing is not supported. In case of dial-ups we recommend you toperform updates by hand (see below).Virus definition updates are downloaded via HTTP. If the <strong>Kerio</strong> MailServer is behind a firewallyou must allow for outbound communication over an appropriate TCP port (port 80by default).Click Update now to start the update of the virus database and antivirus software manually.When this button is pressed, the update progress window is displayed. Informationabout updates can be found in the Security log (see chapter 22.4).Note: The update progress window can be closed anytime by pressing the OK button (itis not necessary to wait until the update is finished).Current virus database is ...The time that has elapsed since the last successful update of the virus database (with anaccuracy of minutes).Last update check performedThe time elapsed from the last successful update attempt. The fact whether a new versionhas been available on the server is irrelevant.Warning: If the time is significantly (several times) greater than the interval set for automaticupdate, then the automatic updates are not working correctly. In this case werecommend updating the database manually and to inspect the Error and Security logsfor a failure explanation.17.2 Choosing an external module for an antivirus programParameters for antivirus control are set in the Content Filter → Antivirus section with theAntivirus tab. To use an external antivirus program, check Use external antivirus. This menushows the antivirus software which can be used for email scanning. The antivirus softwaremust be installed prior to making a selection (we recommend stopping the <strong>Kerio</strong> MailServerEngine before the antivirus installation).197

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!