InterScan TM Security Virtual Appliance - Online Help Home

566 Pages·2012·7.16 MB·English

by  Trend Micro

8.2

InterScanTM Messaging
Security Virtual Appliance
Hybird SaaS Email Security
Administrator’s Guide
m
Messagiing SSecurity

Trend Micro, Incorporated reserves the right to make changes to this document and to
the products described herein without notice. Before installing and using the software,
please review the readme files, release notes, and the latest version of the applicable user
documentation, which are available from the Trend Micro website at:
http://docs.trendmicro.com
Trend Micro, the Trend Micro t-ball logo, InterScan, and Control Manager are
trademarks or registered trademarks of Trend Micro, Incorporated. All other product or
company names may be trademarks or registered trademarks of their owners.
Copyright © 2003-2012 Trend Micro, Incorporated. All rights reserved.
Document Part No. MSEM84991/110727
Release Date: July 2012
Patents Pending
The user documentation for Trend Micro™ InterScan™ Messaging Security Virtual
Appliance is intended to introduce the main features of the software and installation
instructions for your production environment. Read it before installing or using the
software.
Detailed information about how to use specific features within the software are available
in the online help file and the online Knowledge Base at Trend Micro’s website.
Trend Micro is always seeking to improve its documentation. Your feedback is always
welcome. Please evaluate this documentation on the following site:
http://www.trendmicro.com/download/documentation/rating.asp
Contents
Contents
Preface
What’s New ......................................................................................................xxii
Audience ..........................................................................................................xxvi
InterScan Messaging Security Virtual Appliance Documentation .........xxvi
Document Conventions ..............................................................................xxvii
Section 1: Getting Started
Chapter 1: Introducing InterScan Messaging Security Virtual
Appliance
About IMSVA .................................................................................................1-2
IMSVA Main Features and Benefits ............................................................1-2
About Cloud Pre-Filter ................................................................................1-11
About Email Encryption .............................................................................1-11
About Spyware and Other Types of Grayware ........................................1-12
About Web Reputation ................................................................................1-13
About Trend Micro Control Manager .......................................................1-13
Integrating with Control Manager .........................................................1-14
Trend Micro™ Smart Protection Network™ ..........................................1-17
Email Reputation .....................................................................................1-17
File Reputation .........................................................................................1-17
Web Reputation .......................................................................................1-17
Smart Feedback ........................................................................................1-18
Chapter 2: Getting Started
Opening the IMSVA Web Management Console .....................................2-2
iii
Trend Micro™ InterScan™ Messaging Security Virtual Appliance Administrator’s Guide
Using the Online Help ...............................................................................2-3
Viewing the Web Management Console Using Secure Socket Layer .....2-3
Creating an SSL Certificate .......................................................................2-4
Setting Up a Child Device ..............................................................................2-5
Using Smart Search .........................................................................................2-7
Changing the Management Console Password ..........................................2-7
Configuring Proxy Settings ............................................................................2-7
IMSVA Services ...............................................................................................2-8
Starting or Stopping Services ....................................................................2-9
Chapter 3: Configuring User Accounts
Managing Administrator Accounts ...............................................................3-2
Adding Administrator Accounts ...................................................................3-2
Editing or Deleting Administrator Accounts ..............................................3-5
Chapter 4: Using the Configuration Wizard
Performing Basic Configuration with the Configuration Wizard ............4-2
Configuring IMSVA with the Configuration Wizard ................................4-2
Step 1: Configuring System Settings ........................................................4-4
Step 2: Configuring Deployment Settings ..............................................4-5
Step 3: Configuring SMTP Routing .........................................................4-6
Step 4: Configuring Notification Settings ...............................................4-7
Step 5: Configuring the Update Source ..................................................4-8
Step 6: Configuring LDAP Settings ........................................................4-9
Step 7: Configuring Internal Addresses ................................................4-13
Step 8: Configuring Control Manager Server Settings ........................4-14
Step 9: Activating the Product ................................................................4-15
Step 10: Verifying Settings Summary ....................................................4-16
Chapter 5: Updating Components
Updating Scan Engine and Pattern Files .....................................................5-2
iv
Contents
Specifying an Update Source .........................................................................5-3
Performing a Manual Update ........................................................................5-3
Rolling Back a Component Update .............................................................5-5
Configuring Scheduled Update .....................................................................5-5
Updating the System and Application Files ................................................5-7
Chapter 6: Getting Started with Cloud Pre-Filter
Understanding Cloud Pre-Filter ...................................................................6-2
Mail Flow with and without Cloud Pre-Filter .......................................6-2
Cloud Pre-Filter and IMSVA Communication .....................................6-3
Cloud Pre-Filter Terminology ..................................................................6-4
Creating a Cloud Pre-Filter Account ...........................................................6-5
Chapter 7: Getting Started with Email Encryption
Understanding Email Encryption ................................................................7-2
Using Email Encryption ...........................................................................7-3
Registering for Email Encryption ................................................................7-3
Contact Information ..................................................................................7-3
Managing Domains .........................................................................................7-4
Registering Domains .................................................................................7-5
Section 2: Configuring IMSVA and Cloud
Pre-Filter
Chapter 8: Configuring Cloud Pre-Filter
Understanding Cloud Pre-Filter Policies .....................................................8-2
Considerations .......................................................................................8-3
Creating a Cloud Pre-Filter Policy ................................................................8-3
Step 1: Domain Settings ............................................................................8-4
Step 2: Configuring Condition Settings ..................................................8-7
v
Trend Micro™ InterScan™ Messaging Security Virtual Appliance Administrator’s Guide
Step 3: Configuring Filter Settings .........................................................8-10
Verifying Cloud Pre-Filter Works ...............................................................8-13
Configuring DNS MX Records ..................................................................8-13
Inbound Server Address ..........................................................................8-14
Inbound Server Address Example ....................................................8-14
Configuring MX Records Example .......................................................8-14
Example Assumptions ........................................................................8-15
Suggested IMSVA Settings When Using Cloud Pre-Filter .....................8-17
Disabling Cloud Pre-Filter ...........................................................................8-19
Chapter 9: Configuring IP Filtering Settings
IP Filtering Service ..........................................................................................9-2
Using Email Reputation .................................................................................9-2
Preparing Your Message Transfer Agent for Use With Email Reputation
Services ........................................................................................9-2
Using the Email Reputation Management Console ..............................9-3
Configuring IP Filtering .................................................................................9-8
Step 1: Enabling Email Reputation and IP Profiler ..............................9-8
Step 2: Adding IP Addresses to the Approved List ..............................9-9
Step 3: Adding IP Addresses to the Blocked List ...............................9-10
Step 4: Enabling IP Profiler Rules .........................................................9-11
Step 5: Configuring Email Reputation ..................................................9-18
Displaying Suspicious IP Addresses and Domains ..................................9-20
Chapter 10: Scanning SMTP Messages
Scanning SMTP Messages ............................................................................10-2
Configuring SMTP Routing .........................................................................10-2
Configuring SMTP Settings ....................................................................10-2
Configuring Connections Settings .........................................................10-3
Configuring Message Rule Settings .......................................................10-7
About Domain-Based Delivery .................................................................10-11
Configuring Domain-based Delivery Settings ..............................10-11
vi
Contents
Chapter 11: Configuring Transport Layer Security Settings
About Transport Layer Security .................................................................11-2
Prerequisites for Using TLS with IMSVA ................................................11-3
Obtaining a Digital Certificate ...............................................................11-3
Ensure that the Certificate Format is Valid .........................................11-3
Upload the Certificate .............................................................................11-3
Configuring TLS Settings for Messages Entering IMSVA .....................11-4
Configuring TLS Settings for Messages Exiting IMSVA .......................11-6
Deploying IMSVA in TLS Environments ................................................11-7
Example of General Settings for TLS ..................................................11-7
TLS Levels for Messages Entering IMSVA ....................................11-8
TLS Levels for Messages Exiting IMSVA ......................................11-8
Configuring Upstream TLS Settings ...................................................11-11
Configuring Downstream TLS Settings .............................................11-13
Creating and Deploying Certificates in IMSVA .....................................11-13
Creating the Certificate Authority Key and Certificate ....................11-14
Creating the IMSVA Key and Certificate ...........................................11-15
Creating the Keys and Certificates for other Servers .......................11-16
Signing the IMSVA Certificate ............................................................11-18
Deploying TLS Certificates ..................................................................11-20
Importing Certificates ......................................................................11-20
Configuring Postfix ...........................................................................11-20
Enabling the TLS Support in Outlook Express ...........................11-21
Chapter 12: Configuring POP3 Settings
Scanning POP3 Messages ............................................................................12-2
Understanding POP3 Scanning .............................................................12-2
Requirements ............................................................................................12-3
Enabling POP3 Scanning ............................................................................12-3
Configuring POP3 Settings .........................................................................12-4
vii
Trend Micro™ InterScan™ Messaging Security Virtual Appliance Administrator’s Guide
Section 3: IMSVA Policies
Chapter 13: Managing Policies
Managing Policies ..........................................................................................13-2
How the Policy Manager Works .................................................................13-2
Chapter 14: Common Policy Objects
Configuring Common Policy Objects ........................................................14-2
Understanding Address Groups .................................................................14-3
Creating Address Groups ........................................................................14-4
Editing or Deleting an Address Group .................................................14-8
Exporting an Address Group ...............................................................14-10
Using the Keyword & Expression List ....................................................14-11
Configuring an Expression ...................................................................14-12
About Regular Expressions ..................................................................14-15
Using Compliance Templates ....................................................................14-21
Configuring Compliance Templates ....................................................14-22
Compliance Template Expressions .....................................................14-23
Compliance Template Keyword Lists .................................................14-28
Using the Notifications List .......................................................................14-33
Adding or Modifying a Policy Notification ........................................14-34
Using Stamps ...............................................................................................14-37
Creating Stamps ......................................................................................14-38
Using the DKIM Approved List ..............................................................14-40
Using the Web Reputation Approved List ..............................................14-42
Adding to the Web Reputation Approved List .................................14-42
Chapter 15: Internal Addresses
Configuring Internal Addresses ..................................................................15-2
Adding an Address Group ......................................................................15-4
Searching for Users or Groups ..............................................................15-5
viii