McAfee Quarantine Manager 6.
COPYRIGHT Copyright © 2008 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.
Contents 1 2 Introducing McAfee Quarantine Manager 5 Product features and how they work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . New features in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
® ™ McAfee Quarantine Manager 6.0 User Guide 8 Contents Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Connected McAfee Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . QuickSearch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Product Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
® ™ McAfee Quarantine Manager 6.0 User Guide Contents Managing your account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 14 15 About DB Suite Utility 83 Configuring the source database settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Converting the database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Creating McAfee Quarantine Manager user accounts . . . . . . . . . . . . . . . . . . . . .
® ™ McAfee Quarantine Manager 6.
1 Introducing McAfee Quarantine Manager ® McAfee Quarantine Manager consolidates the quarantine and anti-spam management functionality of multiple McAfee products. It provides a central point to analyze and act upon emails and files that have been quarantined. Items are quarantined because they are spam, phish, viruses, potentially unwanted programs or unwanted content. While McAfee Quarantine Manager is effective in managing unsolicited bulk email or spam.
® ™ McAfee Quarantine Manager 6.0 User Guide Introducing McAfee Quarantine Manager New features in this release Manage user or global blacklist and whitelist. Carry out quarantine tasks such as releasing messages or submitting samples to McAfee AVERT Labs. Configure the storage and aging of quarantined items (overriding user settings). Manage users, email digests, database, and product logs. Manage logging, debug tracing, product log, and error reporting service.
® ™ McAfee Quarantine Manager 6.0 User Guide Introducing McAfee Quarantine Manager Using this guide Integrating with ePolicy Orchestrator 4.0 — Testing the McAfee Quarantine Manager integration with ePolicy Orchestrator version 4.0. Types of Interfaces — Descriptions of the types of interfaces: Interface for administrators and Interface for users.
® ™ McAfee Quarantine Manager 6.0 User Guide Introducing McAfee Quarantine Manager Getting product information Note: Supplemental information; for example, another method of executing the same command. Note Tip: Suggestions for best practices and recommendations from McAfee for threat prevention, performance and efficiency. Tip Caution: Important advice to protect your computer system, enterprise, software installation or data.
2 Pre-Installation Information and Tasks The pre-installation chapter provides information that is important to consider before installing McAfee Quarantine Manager version 6.0. Topics covered are: Pre-Installation scenarios System requirements Migrating the database from previous version to version 6.0 Pre-Installation scenarios ® You must log on to Microsoft Windows as an administrator. This gives you relevant rights and permissions to install Quarantine Manager software.
® ™ McAfee Quarantine Manager 6.0 User Guide Pre-Installation Information and Tasks System requirements System requirements Before you install McAfee Quarantine Manager, ensure that your server meets these minimum requirements. Table 2-1 Minimum System Requirements Processor Intel Pentium 4, 2.
® ™ McAfee Quarantine Manager 6.0 User Guide Pre-Installation Information and Tasks Migrating the database to version 6.0 4 Install McAfee Quarantine Manager 6.0 DB Suite utility. See Installing McAfee Quarantine Manager 6.0 DB Suite utility on page 19. 5 Click Start | Programs | McAfee | McAfee Quarantine Manager DB Suite. The McAfee Quarantine Manager DB Suite 6.0 window appears. 6 Click DB Maintenance.
® ™ McAfee Quarantine Manager 6.0 User Guide Pre-Installation Information and Tasks Migrating the database to version 6.
3 Quick Setup This chapter provides the quickest way to install and begin using the McAfee Quarantine Manager version 6.0 software. Setting up McAfee Quarantine Manager version 6.0 includes the following steps: 1 Installing MySQL for McAfee Quarantine Manager 6.0 on page 16 2 Installing McAfee Quarantine Manager version 6.
® ™ McAfee Quarantine Manager 6.
4 Installing the Software Installing McAfee Quarantine Manager software consists of these topics: Accessing the software What’s included in the software? Installing MySQL for McAfee Quarantine Manager 6.0 Installing McAfee Quarantine Manager version 6.0 server Configuring your MySQL database Configuring your Microsoft SQL Server database Installing McAfee Quarantine Manager 6.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Installing MySQL for McAfee Quarantine Manager 6.0 MySQL for McAfee Quarantine Manager 6.0 (MQM60MySQL.ZIP) McAfee Quarantine Manager DB Suite (MQMDBSuite.ZIP) ePolicy Orchestrator package (MQM6POLICIES.ZIP and MQM6REPORTS.ZIP) Installing MySQL for McAfee Quarantine Manager 6.0 If you want to deploy MySQL for McAfee Quarantine Manager 6.0 using ePolicy Orchestrator 4.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Installing McAfee Quarantine Manager version 6.0 9 Click Next. The Ready to Install the Application dialog box appears. 10 Click Next to display the Updating System dialog box. A progress bar indicates the features being copied and installed. 11 Click Finish to complete the installation. Installing McAfee Quarantine Manager version 6.0 If you want to deploy McAfee Quarantine Manager 6.0 using ePolicy Orchestrator 4.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Configuring your MySQL database Configuring your MySQL database This section tells you how to configure your MySQL version 5.0 database with McAfee Quarantine Manager. Use this task to configure your MySQL database: 1 Click Start | Programs | McAfee | Quarantine Manager | DB Management UI. You can also configure your database by clicking Configure Database from the administrator logon page.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Installing McAfee Quarantine Manager 6.0 DB Suite utility 2 In the Database Configuration page, select the Database Type as SQL Server and specify the IP address or host name of the database server, user name and password to access the database, and database name of the newly created blank database. 3 Select Create McAfee Quarantine Manager schema. This will create a new schema in the database to be used with McAfee Quarantine Manager.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Testing your installation Testing your installation When you have completed installation of McAfee Quarantine Manager, McAfee recommends testing the installation to ensure that the software is installed properly and can quarantine viruses, spam, phish, potentially unwanted programs, and unwanted content within email messages.
® ™ McAfee Quarantine Manager 6.0 User Guide Installing the Software Uninstalling McAfee Quarantine Manager Removing MySQL for McAfee Quarantine Manager Use the DB Suite utility to back up the database. Note 1 Using an administrative account, log on to the computer where MySQL for McAfee Quarantine Manager is installed. 2 Click Start | Settings | Control Panel. 3 Double-click Add/Remove Programs. The Add/Remove Program Properties dialog box appears.
® ™ McAfee Quarantine Manager 6.
5 Integrating with ePolicy Orchestrator 4.0 This chapter describes how to configure McAfee Quarantine Manager using McAfee ePolicy Orchestrator management software version 4.0. To use this chapter effectively, you need to be familiar with ePolicy Orchestrator 4.0. ePolicy Orchestrator 4.0 provides a scalable platform for centralized policy management and enforcement on your security products and systems on which they reside.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 3 In How to add systems, select Deploy agents and add systems to the current group (My Organization). Note To add systems without deploying agents, select Add systems to the current group (My Organization), but do not deploy agents option. To deploy agent at a later time, perform steps under the topic Deploying an ePolicy Orchestrator agent on page 24.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Installation Installation Checking in the McAfee Quarantine Manager package You can check in the McAfee Quarantine Manager software package from the Master Repository page. Master Repository is the central location for all McAfee updates residing on the ePolicy Orchestrator server. It retrieves user-specified updates from McAfee site or user-defined source sites.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Installation Run this task at every policy enforcement interval (Windows only) Run update after successful product deployment (4.0 or above) 10 Click Next to schedule this task as needed. 11 Click Next to view a summary of the task, then click Save. 12 In the Systems tab, select a group and a computer where you want to install McAfee Quarantine Manager 6.0.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Installation 8 In Products to deploy, select MySQL for McAfee Quarantine Manager 6.0 from the drop-down list and select the Action as Install. You can also specify command-line arguments to custom install MySQL for McAfee Quarantine Manager on the client computer without the default values. Separate multiple parameters with a space. For example: INSTALLDIR="C:\MySQL" SUPERID="superduper@mqm.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Configuring policies for McAfee Quarantine Manager 2 Click Configuration | Extensions | Install Extension. The Install Extension dialog box appears. 3 Click Browse, select the extension file MQM6POLICIES.ZIP and click OK.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Introducing ePolicy Orchestrator 4.0 dashboard 6 Select McAfee Default or My Default as desired. The McAfee Default policies are read-only and cannot be edited, renamed, or deleted. Note 7 Type a New policy name. 8 Click OK, then Save. Enforcing Policies You can enforce a policy to multiple managed systems within a group. 1 Using an administrative account, log on to the ePolicy Orchestrator server.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Reporting 6 Click OK. 7 Repeat step 4 and 5 for the remaining monitors. 8 Click Save. The Make Active dialog box appears. 9 Click Yes to add this new dashboard to your active set. Table 5-3 Dashboard Options Options Description Dashboard Name Specifies the name of the dashboard you select. Dashboard Size Specifies the dimensions (by number of dashboard monitors) of the selected dashboard.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Systems Creating a new query If the pre-defined query on the left side does not serve your purpose, ePolicy Orchestrator enables you to create your own query. 1 Using an administrative account, log on to the ePolicy Orchestrator server. 2 Click Reporting | New Query. The Result Type page appears. 3 On the left pane, select a desired data type that the query must retrieve and click Next. The Chart page appears.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Uninstalling the McAfee Quarantine Manager Sending an agent wake-up call 1 Using an administrative account, log on to the ePolicy Orchestrator server. 2 Click Systems. 3 Select a group in the System Tree. 4 Select the desired Computer Name(s) of that group. 5 Click More Actions | Wake Up Agent. The Wake Up Agents page appears.
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Uninstalling the McAfee Quarantine Manager 11 Click Next to view a summary of the task, then click Save. 12 In the Systems tab, select a group and a computer where you want to uninstall McAfee Quarantine Manager 6.0. To uninstall McAfee Quarantine Manager from all computers in a group, click Select all in the page. Note 13 Send an agent wake-up call. (see Sending an agent wake-up call on page 32).
® ™ McAfee Quarantine Manager 6.0 User Guide Integrating with ePolicy Orchestrator 4.0 Uninstalling the McAfee Quarantine Manager 3 Click the Delete link of the McAfee Quarantine Manager package. 4 To remove the MySQL for McAfee Quarantine Manager package, repeat Steps 2 and 3, then delete the link of MySQL for McAfee Quarantine Manager. Removing the policy extension 1 Using an administrative account, log on to the ePolicy Orchestrator server. 2 Click Configuration.
6 Types of Interfaces McAfee Quarantine Manager 6.0 has two types of user interface: Interface for administrators Interface for users Interface for administrators To access the administrators’ user interface, click Start | Programs | McAfee | Quarantine Manager | Administrator UI. You can also log on to the administrator user interface, by clicking the following link: Note http:///MQMAdminUI/0409/LogOn.html Use https:///MQMAdminUI/0409/LogOn.html for secure logon.
® ™ McAfee Quarantine Manager 6.0 User Guide Types of Interfaces Interface for users Manage the purge old items. Set up and schedule email digests for end users. Set up logging, product log, debug tracing, and error reports. Set up port numbers and server addresses to communicate with McAfee products. Manage administrator users like Super Admin and Domain Admin. Manage domains and their administrators.
® ™ McAfee Quarantine Manager 6.0 User Guide Types of Interfaces Interface for users McAfee Quarantine Manager allows users to: Maintain their McAfee Quarantine Manager account. View and maintain a personal blacklist and whitelist. Forward any messages incorrectly identified as spam or phish or that contain potentially unwanted programs or unwanted content to the administrator for release.
® ™ McAfee Quarantine Manager 6.
7 Getting Started with the Interface for administrators The user interface provides critical function for Quarantine Manager administrators. It is important for the administrators to know how well their server is being protected from spam, phish, viruses, potentially unwanted programs, and unwanted content. Dashboard is your interface to the Quarantine Manager.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for administrators Viewing the dashboard Viewing the dashboard The dashboard provides an overview of the statistics of quarantined items, latest detections, graphical view of these detections, product information, quicksearch and connected McAfee products.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for administrators Viewing the dashboard Magnify Graph — To specify the magnification percentage of the Detections graph. This helps you to view an enlarged graph. Reset — To clear the statistics of quarantined items. Caution Clicking Reset clears all the statistics of the corresponding administrator. These changes are also reflected in the Super Administrator account.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for administrators Viewing graphical reports 5 Type the sender, recipient or subject for the quarantined item, then click Search. Product Information The Product Information tab shows the version of McAfee Quarantine Manager you are running, and lists the Service Packs and HotFixes installed. Viewing graphical reports The Graphical Reports section gives an explicit view of quarantined items in a graph.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for administrators Viewing graphical reports 2 Click Advanced tab. 3 Select up to three filters from this list: Subject Recipient Reason Ticket Number Detection Name Score 4 Select All Dates or a desired Date Range from the drop-down lists. 5 Select Bar Graph or Pie Chart as required. 6 If you select Pie Chart, select to Query on, from the drop-down list.
® ™ McAfee Quarantine Manager 6.
8 Managing Quarantined Items Quarantined Items is used to view information about emails that contains spam, phish, viruses, potentially unwanted programs, unwanted content, and all items. You can use up to three search filters to narrow your search. Topics covered are: Searching a quarantined item Viewing search results Spam Spam is an unwanted email message, specifically unsolicited bulk messages.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Quarantined Items Searching a quarantined item Searching a quarantined item Use wildcards like “*” and ‘?’ in the search field. Use “*” to match to any number of characters and use “?”to match a single character. Use “\\” to match any ‘\’ character in the search field. Note 1 Click Quarantined Items | . The page appears. 2 Select any of these search filters: Subject — To search by the subject line of the email.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Quarantined Items Viewing search results Select the quarantined items to add the email address of the sender to the global blacklist, so that messages from this sender are blocked in the future. Select a record from the View Results pane, then click Blacklist. Select the quarantined items to add the email address of the sender to the global blacklist and delete it, so that messages from this sender are blocked and deleted in the future.
® ™ McAfee Quarantine Manager 6.
9 Managing Blacklists and Whitelists A blacklist is a list of email addresses that a user does not want to receive emails from. With McAfee Quarantine Manager, users can create a personal blacklist, which is used in addition to the global or group blacklists you maintain. Messages from blacklisted addresses are always treated as spam. Every email sent to a user is matched against the appropriate blacklists and, if a match is found, they will not receive the message.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Blacklists and Whitelists Organizing blacklists and whitelists You can submit the sender of a selected email for adding to a blacklist or to a whitelist. You can submit a user’s contact list to their personal whitelist. You can store blacklists and whitelists for individual users, for specific groups or for your entire organization.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Blacklists and Whitelists Importing blacklists and whitelists Group blacklists and whitelists This tab is only available for the Super Administrator account. Note To add an email address to the groups list: 1 Click Blacklists and Whitelists | Organization, then select the Group Blacklists and Whitelists tab. 2 Select the group you wish to modify and click Edit.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Blacklists and Whitelists Exporting blacklists and whitelists You can import users’ existing blacklists and whitelists from McAfee products. For example, once you install the software you can import users’ personal blacklists and whitelists, so that user’s can make use of them in McAfee Quarantine Manager. You can also import the global blacklists and whitelists.
10 Managing User Submissions Users can identify spam, phish, and other unwanted messages that have appeared in their Inboxes, as well as messages that have been incorrectly quarantined, and can submit them to you for release. McAfee Quarantine Manager users can release items they believe should not be considered as spam. Any other type of quarantined items must be submitted to you if the user believes they should be released from quarantine. Only you can decide what to do with these items.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing User Submissions Searching user submissions Searching user submissions Use wildcards like “*” and ‘?’ in the search field. Use “*” to match to any number of characters and use “?”to match a single character. Use “\\” to match any ‘\’ character in the search field. Note 1 Click User Submissions | Submitted . 2 Select up to three of these search filters: Subject — To search by the subject line of the email.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing User Submissions Viewing search results Select quarantined items to submit to McAfee labs for sample analysis. Select a record from the View Results pane, click Submit to McAfee Labs. Note This helps in refining the scanner rules and recognizing future detections. For immediate action on a sample, you can either blacklist or whitelist the sender.
® ™ McAfee Quarantine Manager 6.
11 Managing Settings and Diagnostics You can use the Settings and Diagnostics option for a number of tasks involving users, email digests, databases, product logs, and McAfee products. You can also carry out these diagnostic operations: For users, you can select the type of detection to be carried out on users’ mailboxes, and can specify how long quarantined items will be held for before being purged. In addition, you can authenticate, and if necessary, delete or reset a user’s account.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing users Communications Advanced Settings Managing users With the User Management option, you can specify how users are authenticated, determine what types of quarantined items they are allowed to see, and specify how long those items are kept. You can authenticate users, set their access parameters, as well as manage their accounts.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing users Quarantine Manager Accounts — To authenticate using existing quarantine manager user specific account. Lotus Domino — To authenticate using existing lotus domino server specific account. Specify the IP address of the lotus domino server in the Server field. Restore — To restore the default configuration of this administrator.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Configuring and scheduling email digests Delete users not found in the LDAP server - To delete the user accounts that are not found in the LDAP server, from the McAfee Quarantine Manager database. In Scheduler section, you can select: Never — To specify never to synchronize users. Days — To specify how frequently, in days, the user synchronization task should take place, and at what time of day.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Configuring and scheduling email digests Months — To specify on what day of the month and in which month(s) the digest mails should be sent. You can also specify at what time of day the digest mails should be sent. From the When section, specify the time when the digest should be sent, for all options except Never.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing the database Table 11-1 Digest email options Option Description %WHITE_LIST% The user’s whitelist. %ADD_BLACK_LIST% A textbox to allow users to add email addresses to their blacklist. %ADD_WHITE_LIST% A textbox to allow users to add email addresses to their whitelist. %SET_EXP_DELAY% A textbox used to set the number of days that items are quarantined. %UI% The URL of the user interface.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing the database General To set up various quarantine options, select the General tab to display the general database management options. 1 To set up the maximum size of items that will be quarantined, select the General tab. 2 In the Maximum Item Size (MB), type the maximum number of megabytes per item for storage. Larger files are rejected and returned to their McAfee product(s) point of origin.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Viewing the product log Email Address — To purge the quarantined items for the specified user(s). Run Now — To start the purge task for the specified user(s). Viewing the product log You can use Product Log to set up search filters that help you find information in the product log and view the results of the search. To search for detections: 1 Click Settings and Diagnostics | Product Log. The Product Log page appears.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Configuring diagnostics Logging In the Logging tab, you can specify the types of events to be logged. 1 Under Product Log, select Information to Product Log, Warnings to Product Log, and Errors to Product Log to include these events in the product log. 2 Under Windows Event Log, select Information to Windows Event Log, Warnings to Windows Event Log, and Errors to Windows Event Log to include these events into the event log.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Configuring communications 3 In Maximum File Size (MB), specify the maximum size (in megabytes) of the debug log file. When the file reaches this size, logging continues but the oldest entries are overwritten. The default value is 100MB. 4 Select No limit to specify no size limit of the debug log file. Logging continues until it reaches the maximum size of the file.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing Advanced Settings Default configuration You can use the Default tab to configure the McAfee product(s) port number and the mail server address. 1 In Port Number, specify the McAfee Quarantine Manager port on which to receive communications from McAfee products. McAfee Quarantine Manager service needs to be restarted and all connected McAfee product(s) must be reconnected if this value is modified.
® ™ McAfee Quarantine Manager 6.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing Settings and Diagnostics Managing Advanced Settings IP Address — To specify the IP address of the SMTP server that can route the notifications during database downtime. Administrator ID — To specify the email address of the database administrator or McAfee Quarantine Manager administrator intended to receive the notification during database downtime.
® ™ McAfee Quarantine Manager 6.
12 Managing administrators With Admin Management you can add a new administrator, add an alias administrator, manage available administrators, delete administrators, create or modify domain administrators, add or import domains and modify the accounts. Managing administrators consists of these topics: Adding an Alias/Domain administrator Managing Domains Adding an Alias/Domain administrator You can add a domain administrator to manage specific domains and its users.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing administrators Managing domains Add Alias — To add an alias administrator account to the current administrator. Add Domain Admin— To add a Domain administrator. Administrators List — To view the list of available administrator users. This depends on the user logged on. You can modify or delete an existing user with the available options. To save the settings, you need to click Apply after deleting the user.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing administrators Managing domains 5 Click Apply to save the changes. Modifying my account 1 Log on to an administrator account. 2 In Admin Management | Manage Admins, click Modify for the desired domain in the Managed Administrators List section. 3 Edit the administrator description, email account or password information. 4 Click Apply to save the changes.
® ™ McAfee Quarantine Manager 6.0 User Guide Managing administrators Managing domains Cancel — To cancel all the changes made, and return to the previous page.
13 Getting Started with the Interface for Users When you begin using McAfee Quarantine Manager, there are two ways the server can verify your identity: If your organization uses a Microsoft Exchange or Lotus mail server, and your administrator has enabled Active Directory authentication, you can log on to McAfee Quarantine Manager with the user name and password of the Active Directory account.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Searching a quarantined item Managing Your Account Searching a quarantined item Use wildcards like “*” and ‘?’ in the search field. Use “*” to match to any number of characters and use “?”to match a single character. Use “\\” to match any ‘\’ character in the search field. Note The main menu is used to view information about emails that contain spam, phish, potentially unwanted programs, and unwanted content.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Submitting a spam sample Select the quarantined items to add the sender’s email address to the global whitelist and release it, so that future messages from this sender are not blocked. Select a record from the View Results pane and click Whitelist&Release. Select the quarantined items to add the sender’s email address to the global blacklist, so that future messages from this sender are blocked.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Managing your account If you use Microsoft Outlook to handle your email, you can also use the McAfee Customer Submission Tool to add addresses to your whitelist or blacklist. Note For further information, please refer to the McAfee Customer Submission Tool documentation. Managing your account From the user interface, click Your Account.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Managing your account 2 To add an email address to the list, type the address in the Email Address field and click Add. The address shows up in the Members column of the screen, and in the Delete column. 3 Click Apply to save the changes. 4 To delete an individual email address from the blacklist, click . 5 To delete all email addresses in the blacklist, click Delete All.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Managing your account 5 Click OK. in the Delete column next to the alias you want to 6 To delete an email alias, click delete. 7 Click OK, then Apply to save the changes. Changing your password Note You cannot change the password if the authentication mode is set as Active Directory or Lotus Domino. 1 Click the Settings tab. 2 Under New password, type your new password.
® ™ McAfee Quarantine Manager 6.0 User Guide Getting Started with the Interface for Users Managing your account Reassigning users Only the administrator has privileges to modify the reassigned users. End-users can only view the reassigned user list. Note You can use the Email Reassignment tab to assign the existing quarantined items of one user to another. Reassigning users must be done before deleting a user from the Active Directory server. Note 1 Click the Email Reassignment tab.
® ™ McAfee Quarantine Manager 6.
14 About DB Suite Utility The McAfee Quarantine Manager DB Suite utility helps you to convert the database from MySQL to Microsoft SQL server and vice-versa, configure the source database settings, migrate older versions of the database to the newer version and create bulk user accounts.
® ™ McAfee Quarantine Manager 6.0 User Guide About DB Suite Utility Converting the database Converting the database You can use the DB Conversion tab to convert from one database to another, such as converting a MySQL database to Microsoft SQL Server database or vice-versa to store the quarantined items in the destination database. To convert a database: 1 Click Start | Programs | McAfee | McAfee Quarantine Manager DB Suite. The McAfee Quarantine Manager DB Suite 6.0 window appears.
® ™ McAfee Quarantine Manager 6.0 User Guide About DB Suite Utility Creating McAfee Quarantine Manager user accounts To create users: 1 From the Create MQM users tab, specify the delimiter to differentiate the fields in the input file. Options are Comma, Pipe, Tab, and Semicolon. Figure 14-1 User creation 2 Select Input file contains header if the first line of the input file contains header information. 3 Click Browse to locate the input file that contains the list of user information.
® ™ McAfee Quarantine Manager 6.0 User Guide About DB Suite Utility Maintaining the database users Maintaining the database users You can use the DB Maintenance tab to create or delete database users, change the database users password and migrate the previous version database to version 6.0. This tab is applicable only if you are using MySQL database. Note To create a new database user: 1 Click Start | Programs | McAfee | McAfee Quarantine Manager DB Suite. The McAfee Quarantine Manager DB Suite 6.
® ™ McAfee Quarantine Manager 6.0 User Guide About DB Suite Utility Archiving or Retrieving the existing MySQL database Archiving or Retrieving the existing MySQL database You can archive or retrieve the existing MySQL database only using command line arguments given below: To backup or archive the existing database: 1 Click Start | Run, type services.msc, then click OK. 2 From the Services window, stop the McAfee Quarantine Manager service.
® ™ McAfee Quarantine Manager 6.
15 Frequently Asked Questions Where can I find out more about the effect of a virus? Visit our website. See the Virus Information Library in http://vil.nai.com. What should I do if I find a new virus? If you suspect you have a file that contains a virus and the anti-virus software engine does not recognize it, please send us a sample. For information, See WebImmune in https://www.webimmune.net/default.asp. How do I contact Technical Support? See http://www.mcafee.com/us/support/ for details.
® ™ McAfee Quarantine Manager 6.0 User Guide Frequently Asked Questions Which versions of McAfee Quarantine Manager can be upgraded or migrated to this version? You can migrate from version 4.1 Patch 1, 4.1.1, and 5.0 Patch 1 to this version. See Migrating the database to version 6.0 on page 10. How long does it take to convert data from MySQL database to Microsoft SQL server database? It takes approximately one hour to convert 45GB data. See Converting the database on page 84.
® ™ McAfee Quarantine Manager 6.0 User Guide Frequently Asked Questions c Click Files on the left pane and modify the following parameters on the right pane: Initial size for Data file = (~30GB) Autogrowth for Data file= 1GB Initial size for log file= 1GB Autogrowth for Log file = 512MB d Click Options on the left pane and change the Recovery model to Simple on the right pane. e Right-click Database Instance and click Properties.
® ™ McAfee Quarantine Manager 6.
Index A group 51 about import 51 database users 86 organize 50 DB Suite utility 83 dbsuite 83 access quick 6 account active directory 58 add administrator 71 alias 71 blacklist 50 domains 72 extensions 27 policy extension 27 configuration 80 password 80 client computer 25, 26 columns 47 assign 73 response 62 schedule 60 before 18 communications 66 Microsoft SQL Server 18 MySQL 18 source database 83 SQL Server 18 connected 41 connected McAfee products 41 contact 89 user-based 61 digest mail 61
® ™ McAfee Quarantine Manager 6.
® ™ McAfee Quarantine Manager 6.
Copyright © 2008 McAfee, Inc. All Rights Reserved. mcafee.
