AVG 9.0 Email Server Edition User Manual Document revision 90.1 (9. 10. 2009) C opyright AVG Technologies C Z, s.r.o. All rights reserved. All other trademarks are the property of their respective owners. This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, C opyright (C ) 1991-2, RSA Data Security, Inc. C reated 1991. This product uses code from C -SaC zech library, C opyright (c) 1996-2001 Jaromir Dolecek (dolecek@ics.muni.cz).
Contents ........................................................................................................................ 4 1. Introduction ........................................................................................................................ 5 2. AVG Installation Requirements 5 2.1 Operation.......................................................................................................... Systems Supported ....................................................................
........................................................................................................................ 36 6. AVG for Kerio MailServer .......................................................................................................... 36 6.1 Configuration .......................................................................................................... 36 6.1.1 Antivirus ..........................................................................................................
1. Introduction This user manual provides comprehensive documentation for AVG 9.0 Email Server Edition. Congratulations on your purchase of AVG 9.0 Email Server Edition! AVG 9.0 Email Server Edition is one of a range of award winning AVG products designed to provide you with peace of mind and total security for your PC. As with all AVG products AVG 9.
2. AVG Installation Requirements 2.1. Operation Systems Supported AVG 9.0 Email Server Edition is intended to protect e-mail servers running under the following operating systems: · Windows 2008 Server Edition (x86 and x64) · Windows 2003 Server (x86, x64 and Itanium) SP1 · Windows 2000 Server SP4 + Update Rollup 1 2.2.
· Intel Pentium CPU 1.8 GHz · 600 MB of free hard drive space (for installation purposes) · 512 MB of RAM memory 2.4. Uninstall Previous Versions If you have an older version of AVG Email Server installed, you will need to uninstall it manually before installing AVG 9.0 Email Server Edition. You must manually perform the uninstallation of the previous version, using the standard windows functionality.
At the beginning of the setup, all system libraries versions will be examined. If it is necessary to install newer libraries, the installer will rename the old ones with a .delete extension. They will be deleted after the system restart. Service Pack for MS Exchange 2007 Server (optional): http://www.microsoft.com/downloads/details.aspx?FamilyID=44c66ad6-f185-4a1da9ab-473c1188954c&displaylang=en AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
3. AVG Installation Process To install AVG on your computer, you need to get the latest installation file. You can use the installation file from the CD that is a part of your box edition but this file might be out-of-date. Therefore we recommended getting the latest installation file online. You can download the file from the AVG website (at http://www.avg.com/download? prd=msw). During the installation process you will be asked for your license number.
Attention: Here you are choosing the language for the installation process only. You are not selecting the language for the AVG application - this can be specified later on during the installation process! 3.2. License Agreement The License Agreement dialog provides the full wording of the AVG license agreement. Please read it carefully and confirm that you have read, understood and accept the agreement by checking the I have read license agreement checkbox and pressing the Accept button.
3.4. Select Installation Type The Select Installation Type dialog offers the choice of two installation options: Standard Installation and Custom Installation. For most users, it is highly recommended to keep to the Standard Installation that installs AVG in fully automatic mode with settings predefined by the program vendor. This configuration provides maximum security combined with the optimal use of resources.
Press the Next button to continue the installation process. If in the previous step you have selected the standard installation, you will be redirected directly to the Setup Summary dialog. If custom installation was selected you will continue with the Destination Folder dialog. 3.6. Custom Installation - Destination Folder AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
The Destination folder dialog allows you to specify the location where AVG should be installed. By default, AVG will be installed to the program files folder located on drive C:. If you want to change this location, use the Browse button to display the drive structure, and select the respective folder. Press the Next button to confirm. 3.7. Custom Installation - Component Selection The Component Selection dialog displays an overview of all AVG components that can be installed.
· Additional Installed Languages - you can define which language(s) AVG should be installed in. Check the Additional installed languages item and then select the desired languages from the respective menu. Basic overview of the individual server components: · Anti-Spam Server for MS Exchange Checks all incoming e-mail messages and marks unwanted e-mails as SPAM. It uses several analyzing methods to process each e-mail message, offering maximum possible protection against unwanted e-mail messages.
3.9. Setup Summary The Setup Summary dialog provides an overview of all parameters of the installation process. Please make sure all the information is correct. If so, press the Finish button to continue. Otherwise, you can use the Back button to return to the respective dialog and correct the information. 3.10. Installing The Installing dialog shows the progress of the installation process, and does not require any intervention.
· AVG for Kerio MailServer AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
4. E-mail Scanner for MS Exchange Server 2007 4.1. Overview The AVG for MS Exchange Server 2007 configuration options are fully integrated within the AVG 9.0 Email Server Edition as server components. Basic overview of the individual server components: · Anti-Spam - Anti-Spam Server for MS Exchange Checks all incoming e-mail messages and marks unwanted e-mails as SPAM. It uses several analyzing methods to process each e-mail message, offering maximum possible protection against unwanted e-mail messages.
· EMS (routing) - E-mail Scanner for MS Exchange (routing Transport Agent) Checks all incoming, outgoing and internal e-mail messages going through the MS Exchange HUB role. Available for MS Exchange 2007 and can be installed for HUB role only. · EMS (SMTP) - E-mail Scanner for MS Exchange (SMTP Transport Agent) Checks all e-mail messages coming through the MS Exchange SMTP interface. Available for MS Exchange 2007 only and can be installed for both EDGE and HUB roles.
Here you can check messages divided into several tabs according to their severity. See configuration of individual components for amending the severity and reporting. By default there are displayed only results for the last two days. You can change the displayed period by amending the following options: o Show last - insert preferred days and hours. o Show selection - choose a custom time and date interval. o Show all - Displays results for the whole time period.
The working buttons are as follows: · Settings - use this button to open settings of the component. · Back - press this button to return to the Server components overview. You will find more information on individual settings of all components in the chapters below. 4.2. E-mail Scanner for MS Exchange (routing TA) To open the settings of E-mail Scanner for MS Exchange (routing transport agent) , select the Settings button from the interface of the component.
· Enable component - uncheck to disable the whole component. · Language - select preferred component language. · Certify messages - check this if you wish to add a certification note to all scanned messages. You can customize the message in the next field. The Logging settings section: · Log file size - choose a preferred size of the log file. Default value: 100 MB. The Scanning properties section: · Use Heuristics - check this box to enable heuristic analysis method during scanning.
4.3. E-mail Scanner for MS Exchange (SMTP TA) The configuration for the E-mail Scanner for MS Exchange (SMTP Transport Agent) is exactly the same as in the case of routing transport agent. For more information please see the E-mail Scanner for MS Exchange (routing TA) chapter above. There are also these sub-items available in the following tree structure: · Detection actions · Mail filtering 4.4.
The Basic Settings section contains the following options: · Enable component - uncheck to disable the whole component. · Language - select preferred component language. The Logging settings section: · Log file size - choose a preferred size of the log file. Default value: 100 MB. The Scan settings section: · Background Scan – you can enable or disable the background scanning process here. Background scanning is one of the features of the VSAPI 2.0/2.5 application interface.
can change the threads count here. The default number of threads is computed as 2 times the ‘number_of_processors’ + 1. The minimum number of threads is computed as ('number of processors'+1) divided by 2. The maximum number of threads is computed as 'Number of Processors' multiplied by 5 + 1. If the value is the minimum or lesser value or the maximum or greater, the default value is used.
· http://support.microsoft.com/default.aspx?scid=kb;enus;328841&Product=exch2k - for information on Exchange and antivirus software interaction · http://support.microsoft.com/default.aspx?scid=kb;en-us;823166 for information on additional VSAPI 2.5 features in Exchange 2003 Server application. There are also these sub-items available in the following tree structure: · Detection actions · Mail filtering 4.5.
The actions are available for the following items: · Infections · PUP (Potentially Unwanted Programs) · Warnings · Information Use the roll-down menu to choose an action for each item: · None - no action will be taken. · Move to Vault - the given threat will be moved to Virus Vault. · Remove - the given threat will be removed. To select a custom subject text for messages that contain the given item/threat, check the Mark subject with... box and fill-in a preferred value.
4.6. Mail Filtering In the Mail Filtering sub-item you can choose which attachments should be automatically removed, if any. The following options are available: · Remove attachments - check this box to enable the feature. · Remove all executable files - removes all executables. · Remove all documents - removes all document files. · Remove files with these comma separated extensions - fill the box with file extensions you wish to automatically remove. Separate the extensions with comma. AVG 9.
5. E-mail Scanner for MS Exchange Server 2000/2003 5.1. Overview The E-mail Scanner for MS Exchange Server 2000/2003 configuration options are fully integrated within the AVG 9.0 Email Server Edition as a server component. The server components include the following: Basic overview of the individual server components: · Anti-Spam - Anti-Spam Server for MS Exchange Checks all incoming e-mail messages and marks unwanted e-mails as SPAM.
maximum possible protection against unwanted e-mail messages. · EMS (VSAPI) - E-mail Scanner for MS Exchange (VSAPI) Checks all e-mail messages stored in user mailboxes. If any viruses are detected, they are moved to the Virus Vault, or completely removed. Double-click a required component to open its interface.
and reporting. By default there are displayed only results for the last two days. You can change the displayed period by amending the following options: o Show last - insert preferred days and hours. o Show selection - choose a custom time and date interval. o Show all - Displays results for the whole time period. Use Refresh button to reload the results. · Refresh statistical values - updates stats displayed above. · Reset statistical values - resets all the stats to zero.
5.3. E-mail Scanner for MS Exchange (VSAPI) This item contains settings of the E-mail Scanner for MS Exchange (VSAPI). The Basic Settings section contains the following options: · Enable component - uncheck to disable the whole component. · Language - select preferred component language. The Logging settings section: · Log file size - choose a preferred size of the log file. Default value: 100 MB.
application interface. It provides threaded scanning of the Exchange Messaging Databases. Whenever an item that has not been scanned with the latest AVG virus base update is encountered in the users’ mailbox folders, it is submitted to AVG for Exchange 2007 Server to be scanned. Scanning and searching for the not examined objects runs in parallel. A specific low priority thread is used for each database, which guarantees other tasks (e.g.
access the message that is being scanned (the default value is 180 seconds). The Scanning properties section: · Use Heuristics - check this box to enable heuristic analysis method during scanning. · Report Potentially Unwanted Programs and Spyware threats - check this option to report the presence of potentially unwanted programs and spyware. · Scan inside archives - check this option to let the scanner look also inside archived files (zip, rar, etc.
5.4. Detection_Actions In the Detection actions sub-item you can choose automatic actions that should take place during the scanning process. The actions are available for the following items: · Infections · PUP (Potentially Unwanted Programs) · Warnings · Information Use the roll-down menu to choose an action for each item: · None - no action will be taken. AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
· Move to Vault - the given threat will be moved to Virus Vault. · Remove - the given threat will be removed. 5.5. Mail Filtering In the Mail Filtering sub-item you can choose which attachments should be automatically removed, if any. The following options are available: · Remove attachments - check this box to enable the feature. · Remove all executable files - removes all executables. · Remove all documents - removes all document files.
comma. AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
6. AVG for Kerio MailServer 6.1. Configuration The anti-virus protection mechanism is integrated directly into the Kerio MailServer application. In order to activate e-mail protection of Kerio MailServer by the AVG scanning engine, launch the Kerio Administration Console application.
6.1.1.
· If a part of message cannot be scanned (e.g. encrypted or corrupted file) This frame specifies the action to be taken when part of the message or attachment cannot be scanned: o Deliver the original message with a prepared warning — the message (or attachment) will be delivered unchecked. The user will be warned that the message may still contain viruses. o Reject the message as if it was virus — the system will react the same way as when a virus was detected (i.e.
6.1.2. Attachment Filter In the Attachment Filter menu there is a list of various attachment definitions: You can enable/disable filtering of mail attachments by selecting the Enable attachment filter checkbox. Optionally you can change the following settings: · Send a warning to sender that the attachment was not delivered The sender will receive a warning from Kerio MailServer, that he/she has sent a message with a virus or blocked attachment.
The message without its infected or prohibited attachment will be (apart from the actions selected below) forwarded to the specified e-mail address. This can be used to verify the correct functioning of the antivirus and/or attachment filter. In the list of extensions, each item has four fields: · Type – specification of the kind of attachment determined by the extension given in the Content field. Possible types are File name or MIME type.
filtered. · In the If a mail message contains an attachment where field you can select the type of attachment (File name or MIME type). You can also choose a particular extension from the offered extensions list, or you can type the extension wildcard directly. In the Then field you can decide whether to block the defined attachment or accept it. AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.
7. Anti-Spam Configuration 7.1. Anti-Spam Interface You will find the Anti-Spam server component's dialog in the Server Components section (left menu). It contains a brief information about the functionality of the server component, information on its current status (Anti-Spam Server for MS Exchange component is active.), and some statistics. Available links: · Scan Results Opens a new dialog where you can review anti-spam scan results: AVG 9.
Here you can check messages detected either as a SPAM (unwanted messages) or a Phishing attempt (an effort to steal your personal data, banking details, identity etc.). By default there are displayed only results for the last two days. You can change the displayed period by amending the following options: o Show last - insert preferred days and hours. o Show selection - choose a custom time and date interval. o Show all - Displays results for the whole time period.
· Settings - use this button to open Anti-Spam settings. · Back - press this button to return to the Server components overview. 7.2. Anti-Spam Principles Spam refers to unsolicited e-mail, mostly advertising a product or service that is mass mailed to a huge number of e-mail addresses at a time, filling recipients’ mail boxes. Spam does not refer to legitimate commercial e-mail for which consumers have given their consent.
In this dialog you can also select more or less aggressive scoring measures. The AntiSpam filter assigns each message a score (i.e. how similar the message content is to SPAM) based on several dynamic scanning techniques. You can adjust the Mark message as spam if the score is greater or equal to setting by either typing the value (0 to 100) or by moving the slider left or right (using the slider, the range of values is limited to 50-90).
There are the following options to choose from: · A specific e-mail client - if you use one of the listed e-mail clients (MS Outlook, Outlook Express, The Bat!, Mozilla Thunderbird), simply select the respective option · Folder with EML files - if you use any other e-mail program, you should first save the messages to a specific folder (in .eml format), or make sure that you know the location of your e-mail client message folders.
In this dialog, please select the folder with the messages you want to use for training. Press the Add folder button to locate the folder with the .eml files (saved e-mail messages). The selected folder will then be displayed in the dialog. In the Folders contain drop-down menu, set one of the two options - whether the selected folder contains wanted (HAM), or unsolicited (SPAM) messages.
Note: In case of Microsoft Office Outlook, you will be prompted to select the MS Office Outlook profile first. In the Folders contain drop-down menu, set one of the two options - whether the selected folder contains wanted (HAM), or unsolicited (SPAM) messages. Please note that you will be able to filter the messages in the next step, so the folder does not have to contain only training e-mails. A navigation tree of the selected e-mail client is already displayed in the main section of the dialog.
7.3.3. Message filtering options In this dialog, you can set filtering of the e-mail messages. If you are sure that the selected folder contains only messages you want to use for training, select the All messages (no filtering) option. If you are unsure about the messages contained in the folder, and you want the wizard to ask you about every single message (so that you can determine whether to use it for training or not), select the Ask for each message option.
7.4. Performance The Engine performance settings dialog (linked to via the Performance item of the left navigation) offers the Anti-Spam component performance settings. Move the slider left or right to change the level of scanning performance ranging between Low memory / High performance modes. · Low memory - during the scanning process to identify spam, no rules will be used. Only training data will be used for identification.
if you have a valid reason to do so. Any changes to this configuration should only be done by expert users! 7.5. RBL The RBL item open an editing dialog called Realtime Blackhole Lists: In this dialog you can switch on/off the Query RBL servers function. The RBL (Realtime Blackhole List) server is a DNS server with an extensive database of known spam senders.
unless you are an experienced user and really need to change these settings! Note: Enabling this feature may, on some systems and configurations, slow down the e-mail receiving process, as every single message must be verified against the RBL server database. No personal data is sent to the server! 7.6. Whitelist The Whitelist item opens a dialog with a global list of approved sender e-mail addresses and domain names whose messages will never be marked as spam.
· Edit - press this button to open a dialog, where you can manually enter a list of addresses (you can also use copy and paste). Insert one item (sender, domain name) per line. · Import - if you already have a text file of email addresses/domain names prepared, you can simply import it by selecting this button. The input file must be in plain text format, and the content must contain only one item (address, domain name) per line.
Once you have such a list of senders and/or domain names prepared, you can enter them by either of the following methods: by direct entry of each e-mail address or by importing the whole list of addresses at once. The following control buttons are available: · Edit - press this button to open a dialog, where you can manually enter a list of addresses (you can also use copy and paste). Insert one item (sender, domain name) per line.
8. AVG Settings Manager The AVG Settings Manager is a tool suitable mainly for smaller networks that allows you to copy, edit and distribute AVG configuration. The configuration can be saved to a portable device (USB flash drive etc.) and then applied manually to chosen stations.
installation of AVG. · Store local AVG configuration to a file Use this button to save the AVG configuration file (.pck) of the local AVG installation. If you did not set a password for the Allowed actions, you may experience the following dialog: Answer Yes if you wish to set the password for access to Allowed items now and then fill-in the required information and confirm your choice. Answer No to skip the password creation and continue to save the local AVG configuration to a file.
user attention, but the progress will be fully visible. o Show installation wizard - the installation will be visible and user will need to manually confirm all steps. Use either the Download button to download the latest available AVG installation package directly from the AVG website to the selected folder or manually put the AVG installation package into that folder. You can use the Proxy button to define a proxy server settings if your network requires this for a successful connection.
9. FAQ and Technical Support Should you have any problems with your AVG, either business or technical, please refer to the FAQ section of the AVG website at http://www.avg.com. If you do not succeed in finding help this way, contact the technical support department by email. Please use the contact form accessible from the system menu via Help / Get help online. AVG 9.0 Email Server Edition © 2009 C opyright AVG Technologies C Z, s.r.o. All rights reserved.