McAfee SMEFCE-AI-DA - Email Security Service... Manual de instrucciones

McAfee SaaS Email

Protection Administrator

Guide

Updated: November 2012

Proprietary and Confidential

RESTRICTION ON USE, PUBLICATION,

OR DISCLOSURE OF PROPRIETARY

INFORMATION.

This document contains information that is

proprietary and confidential to McAfee. No

part of this document may be reproduced,

stored in a retrieval system, or transmitted, in

any form or by any means (electronic,

mechanical, photocopying, recording, or oth-

erwise) without prior written permission

from McAfee. All copies of this document

are the sole property of McAfee and must be

returned promptly upon request.

McAfee, Inc.

9781 South Meridian Blvd., Suite 400

Englewood, CO 80112 USA

Direct +1 720-895-5700

Fax +1 720-895-5757

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission 2

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission iii

Contents

Overview.....................................................................................................................1

Differences in Administration for Service Providers ............................................1

Account Management Necessary for Email Protection ........................................1

MX Record Validation ...........................................................................................2

Alias Domain Names ............................................................................................2

Auto-creation of Users .............................................................................................2

Email Filtering Policies ............................................................................................2

Types of Inbound Email Filtering ..........................................................................3

Types of Outbound Email Filtering .......................................................................8

Configurable Actions for Filtered Email ................................................................8

User-level Policy Configurations ..........................................................................10

Quarantine ...............................................................................................................10

Customizing the Interface ......................................................................................11

Licensed Branding ..............................................................................................11

Language Localization ........................................................................................12

Outbound Disclaimer ..........................................................................................12

Notifications ........................................................................................................13

Monitoring and Reporting ......................................................................................13

Optional Utilities .....................................................................................................13

Spam Control for Outlook® ...............................................................................13

Disaster Recovery Services ...................................................................................14

Fail Safe .............................................................................................................14

Email Continuity ..................................................................................................14

Access Email Protection Administration 15

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission iv

Who Can Access Email Protection Administration windows .............................15

Other Documents You Might Need .......................................................................19

Email Protection Documents ..............................................................................19

Web Protection Service Documents ...................................................................20

Message Archiving Documents ..........................................................................20

User Guides ........................................................................................................20

Ensure You Can Receive Email from Your Service Provider .............................20

Log on to the Control Console ..............................................................................20

Reset Your Password from the log on window ...................................................21

Check the Status of Email Protection on the Overview 25

Set up Your Servers 29

Confirm Your Inbound Servers Setup .................................................................29

Set up Additional Inbound Servers .......................................................................29

Delete an Inbound Server ...................................................................................30

Add IP Address of Outbound Server, If Necessary .............................................31

Delete an Outbound Server ................................................................................32

Set up a Smart Host (If Outbound Mail Defense is Turned on) ..........................32

Add an Outbound Email Disclaimer ....................................................................32

Redirect Your MX Records ....................................................................................33

Check Your MX Record ..........................................................................................34

Set up User Creation Mode — SMTP Discovery or Explicit ................................36

Customize Inbound Mail Filters 39

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission v

Enterprise or Service Provider Customer ............................................................39

Create a Custom Policy (Enterprise Customer Only) ..........................................41

Configure a Virus Filter ..........................................................................................43

Set Email Protection to Notify Users about Emails with Viruses ........................44

Configure a Spam Filter .........................................................................................45

Define the Action to Take on Spam ....................................................................46

Define Additional Words That Indicate Spam .....................................................47

Set up Spam Quarantine Reports ......................................................................50

Configure a Content Filter .....................................................................................53

Turn Off a Default Content Filter ........................................................................55

Custom Content Group .......................................................................................56

Notify Users about Spam Content ......................................................................57

Configure a Filter for HTML, Java Script, ActiveX, and Spam Beacons .............58

Configure Web Hyperlink Filters (ClickProtect) ..................................................60

Define an Attachment Filter ...................................................................................62

Filter by Attachment File Types .........................................................................62

Filter by Attachment File Name ..........................................................................65

Filter Zip File Attachments ..................................................................................66

Notify Users about Attachment Violations ..........................................................67

Allow or Deny Email to or from Specific Addresses ...........................................68

Allow Email from a Specific Address ..................................................................69

Deny Email from a Specific Address .................................................................70

Deny Email to a Specific Recipient ....................................................................72

Save a Copy of an Allow, Deny, or Recipient Shield List ...................................73

Add Allow, Deny, or Recipient Shield Addresses with a Batch File ....................73

Email Authentication ..............................................................................................73

Transport Layer Security ....................................................................................73

Enforced SPF .....................................................................................................75

Define the Format and Text of Notifications to Users .........................................80

Variables within a Notification .............................................................................80

Define the Format and Text of Virus Notifications ..............................................81

Define the Format and Text of Content Violation Notifications ...........................83

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission vi

Define the Format and Text of Attachment Violation Notifications .....................84

Email Authentication ...........................................................................................85

Disaster Recovery ..................................................................................................87

Assign a Group to the Custom Policy ..................................................................88

Customize Outbound Mail Filters 89

Create a Custom Outbound Policy .......................................................................89

Configure a Virus Filter ..........................................................................................90

Configure a Content Filter .....................................................................................90

Email Encryption for Content Groups .................................................................91

Define an Attachment Filter ...................................................................................92

Define the Format and Text of Notifications to Users .........................................92

Assign a Group to the Custom Policy ..................................................................92

Managing Quarantine Reports 93

Set up Quarantine Reports ....................................................................................93

Monitor Users’ Quarantined Email ........................................................................93

Primary Email Addresses, Aliases, and Public Domain Addresses ....................94

Search for Quarantined Email ............................................................................94

Interpret the Search Results ...............................................................................95

Sort the Search Results ......................................................................................96

Delete Quarantined Messages ...........................................................................97

Release Quarantined Messages ........................................................................97

View Quarantines Messages ..............................................................................97

Monitor Your Own Quarantine ............................................................................99

Set up Disaster Recovery Services 101

Administer Disaster Recovery Services .............................................................101

Set up Spooling for Disaster Recovery .............................................................101

Set up Notifications of Disaster Recovery ........................................................102

User-Level Policy Configuration 103

System Reports 105

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission vii

Email Protection Reports .....................................................................................105

View an Email Protection Report ........................................................................106

Traffic Overview ................................................................................................107

Traffic: Enforced TLS Report ............................................................................109

Traffic: Encryption ................................................................................................110

Threats: Overview ............................................................................................111

Threats: Viruses ...............................................................................................113

Threats: Spam .......................................................................................................115

Threats: Content ...................................................................................................117

Threats: Attachments ...........................................................................................119

Enforced TLS: Details ..........................................................................................121

Enforced SPF Report ............................................................................................122

ClickProtect: Overview .........................................................................................123

ClickProtect: Click Log ........................................................................................125

Quarantine: Release Overview ............................................................................126

Quarantine: Release Log .....................................................................................128

View Details of Log Items ....................................................................................130

User Activity ..........................................................................................................131

Event Log ..............................................................................................................133

Audit Trail ..............................................................................................................134

Inbound Server Connections ...............................................................................135

Disaster Recovery: Overview ..............................................................................137

Disaster Recovery: Event Log .............................................................................138

Email Protection Administrator Guide

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission viii

Administer MSP Connector .................................................................................139

Configure the MSP Connection ........................................................................139

Add Domains to the MSP Connection ..............................................................141

Turn on Exception Notifications for the MSP Connection .................................142

View an MSP Connector Audit Report .............................................................143

Administer Performance Reports .......................................................................147

Performance Report Descriptions ....................................................................148

Tips and Frequently Asked Questions 153

FAQs ................................................................................................................153

Tips/Techniques ...............................................................................................159

Email Protection Administrator Guide Differences in Administration for Service

November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission 1

1. Overview

McAfee®Saas Email Protection provides security services that safeguard corporations

from unsolicited spam email (junk mail), viruses, worms, and unwanted content at the

network perimeter before they can enter the internal network.

Multiple layers of McAfee Saas Email Protection provide secure and complete email

filtering to protect your users. You can enable or disable specific layers by changing the

licensed packages of features and/or through configuring the specific email policies in the

Control Console, the comprehensive graphical interface into McAfee Saas Email

Protection.

This document describes the tasks necessary to configure and maintain your McAfee Saas

Email Protection.

Differences in Administration for

Service Providers

This document is for use by Enterprise customers only. Service Provider customers do not

administer groups for Email Protection and therefore, do not assign groups to email

filtering policies. Instead, Service Provider customers assign policies directly to domains.

The capabilities for managing policies and groups, as described in this document, apply

only to Enterprise customers.

Account Management Necessary for

Email Protection

Account Management is a set of administrative windows you use to configure and manage

the entities that use or are affected by Email Protection (Email Protection), as well as the

Web Protection Service (WDS) and Message Archiving products. These entities include:

• Domains

•Users

• Other administrators, including other Customer Administrators, Domain

Administrators, Quarantine Managers, and Reports Managers

In addition, for Email Protection only, you use Account Management to administer groups

of users that share a common email filtering policy.

For more information, see Account Management Administrator Guide.

Auto-creation of Users Email Protection Administrator Guide

2 Proprietary: Not for use or disclosure outside McAfee without written permission. November 2012

MX Record Validation

You can validate that the MX Records that are configured for your domain are properly

redirected by entering the specific DNS and/or IP address for your MTA server. The

Control Console displays the MX Record configuration as reported by the authoritative

DNS server.

See Check Your MX Record.

Alias Domain Names

You can configure alias domain names that act as virtual domains using the configurations

and email addresses defined in the primary Domain name. Email addresses are created

automatically for alias domains (for example, [email protected] is

automatically created for jsmith@yourcompany.com), allowing the single user to receive

email for both addresses.

For more information, see Account Management Administrator Guide.

Auto-creation of Users

The Email Protection automatically creates new user accounts if all the following is true:

• SMTP Discovery is enabled. SMTP Discovery, which is enabled by default, is a

convenient way to add users to your service. However, this capability might also add

users who are not real users at your company and not add users who are real.

• SMTP discovery creates users that receive eight valid emails within a 24 hour period.

• A user account does not exist for the email address in the designated Domain.

• The emails were not addressed to an alias domain name.

For more information, see Set up User Creation Mode — SMTP Discovery or Explicit.

Email Filtering Policies

Email Protection has default inbound and outbound mail filters to block and clean

malicious email and to quarantine email that might be malicious. The filters are

configured by using policies, which are the parameters for the filters default policies are

automatically assigned to each of your domains.

You can customize the default inbound policy for any and each domain, or any and each

group, to fit your business Email Protection.

For more information, see Customize Inbound Mail Filters.

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Software de McAfee

McAfee

McAfee TSA00M005PAA - Total Protection Service Manual de usuario

McAfee

McAfee VLF09E002RAA - VirusScan Professional 2005 Manual de usuario

McAfee

McAfee DR SOLOMON S ANTI-VIRUS 8.5 Manual de usuario

McAfee

McAfee VIRUSSCAN ENTERPRISE 8.7I PATCH 1 - S... Manual de instrucciones

McAfee

McAfee MANAGEMENT EDITION 2.5 Manual de usuario

McAfee

McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual de usuario

McAfee

McAfee VCLCDE-AA-DA - VirusScan Command Line Scanner... Manual de usuario

McAfee

McAfee DTP-1650-MGRA - Network DLP Manager 1650... Manual de usuario

McAfee

McAfee AVDCDE-AA-AA - Active Virus Defense Suite Manual de usuario

McAfee

McAfee EBCACE-AA-HA - E-Business Client - PC Manual de usuario

McAfee

McAfee VPF40E001RAA - VirusScan 2005 - PC Manual de usuario

McAfee

McAfee SMB EDITIONS Manual de usuario

McAfee

McAfee Agent 4.0 Manual de instrucciones

McAfee

McAfee VIRUSSCAN ENTERPRISE Manual de usuario

McAfee

McAfee HISCDE-AB-IA - Host Intrusion Prevention Manual de usuario

McAfee

McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES... Manual de usuario

McAfee

McAfee MIS09EMB3RAA - Internet Security 2009 Manual de usuario

McAfee

McAfee TEECDE-AA-AA - Total Protection For Endpoint Manual de usuario

McAfee

McAfee MTP08EMB3RUA - Total Protection - PC Manual de usuario

McAfee

McAfee TSA00M005PAA - Total Protection Service Manual de usuario

McAfee

McAfee NAPCKE-AB-AA - VirusScan For NetApp Manual de usuario

McAfee

McAfee EPOLICY ORCHESTRATOR 4.0.2 - Manual de usuario

McAfee

McAfee TOTAL PROTECTION 2009 Manual de usuario

McAfee

McAfee VIRUSSCAN HOME EDITION 7.0 Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario