Upgrade Guide GFI MailEssentials

Upgrade Guide GFI MailEssentials
GFI MailEssentials 2012 Upgrade Guide
A guide to upgrading from previous versions of GFI MailEssentials and
GFI MailSecurity
Applies to GFI MailEssentials 2012 Service Release 4
The information and content in this document is provided for informational purposes only and is
provided "as is" with no warranty of any kind, either express or implied, including but not limited to
the implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
GFI Software is not liable for any damages, including any consequential damages, of any kind that
may result from the use of this document. The information is obtained from publicly available
sources. Though reasonable effort has been made to ensure the accuracy of the data provided, GFI
makes no claim, promise or guarantee about the completeness, accuracy, recency or adequacy of
information and is not responsible for misprints, out-of-date information, or errors. GFI makes no
warranty, express or implied, and assumes no legal liability or responsibility for the accuracy or
completeness of any information contained in this document.
If you believe there are any factual errors in this document, please contact us and we will review
your concerns as soon as practical.
Windows, Exchange, IIS, .NET, Internet Explorer, Outlook, SQL Server and Microsoft are either
registered trademarks or trademarks of Microsoft Corporation in the United States and/or other
countries.
All product and company names herein may be trademarks of their respective owners.
GFI MailEssentials is copyright of GFI SOFTWARE Ltd. - 1999-2013GFI Software Ltd. All rights
reserved.
Document Version: 1.5.0
Last updated (month/day/year): 07/03/2013
1 Important upgrade notes
1.1 Scope
The scope of this document is to provide:
1. Important upgrade notes related to upgrading to GFI MailEssentials 2012 SR4.
2. Upgrade instructions.
IMPORTANT
Ensure that the version you are upgrading from meets the minimum version listed
below:
Product
Restriction
GFI MailEssentials
Minimum version to upgrade from: GFI MailEssentials 12 with all Service Releases
installed.
GFI MailSecurity
Minimum version to upgrade from: GFI MailSecurity 10.1 with all Service Releases
installed.
IMPORTANT
Upgrade is not reversible; you cannot downgrade to the previous version you had
installed.
1.2 Introduction
GFI MailEssentials 2012 introduced a number of changes to the functionality previously available in
GFI MailEssentials 2010 and GFI MailSecurity 2011 that have important implications to be aware of
when upgrading.
This chapter reviews:
Important changes in GFI MailEssentials 2012
The meaning of these changes and the potential implications to be aware of when upgrading.
Use the Upgrading from a previous version and Appendix 1 - Installation & upgrade instructions
chapters for information on how to upgrade your product.
1.3 New and updated feature list
Refer to this list before upgrading to this version of GFI MailEssentials.
1.3.1 Merging of GFI MailEssentials and GFI MailSecurity
2
1.3.2 New Web-based user interface
3
1.3.3 Antivirus engines in GFI MailEssentials 2012 EmailSecurity Edition vs GFI MailSecurity
3
1.3.4 Integrated Reporting
4
1.3.5 Removed Email Archiving
4
GFI MailEssentials
1 Important upgrade notes | 1
1.3.6 Other Updates
4
1.3.1 Merging of GFI MailEssentials and GFI MailSecurity
The anti-spam capabilities of GFI MailEssentials 2010 have now been merged with the email security
functionality of GFI MailSecurity 2011 to create a single on-premise solution. This provides for easier
management of the solution and a more logical implementation of two complementary solutions.
GFI MailEssentials 2012 is available in 3 Editions, with upgrade paths as described below:
Figure 1: Upgrade paths to GFI MailEssentials 2012
INFO:
Review system requirements before upgrading, especially if upgrading from GFI
MailEssentials 2010 to the Unified Protection Edition.
The hardware requirements for GFI MailEssentials 2012 are:
Processor: Minimum: 1Ghz; Recommended: 2GHz with multiple cores
Available Memory (RAM): Minimum: 1.2GB; Recommended: 1.5GB
Free Disk Space: Minimum: 6GB; Recommended: 10GB
Microsoft® .NET Framework 4
For more information, refer to Hardware requirements (page 13).
GFI MailEssentials
1 Important upgrade notes | 2
TIP
Note that if your current installation is:
GFI MailEssentials 2010, and upgrading to Anti-Spam Edition only, or
GFI MailSecurity 2011, and you plan to upgrade to EmailSecurity Edition only
the features of the other edition will be in trial mode for 30 days. This is especially
important for customers upgrading from GFI MailEssentials 2010 to GFI MailEssentials
2012 Anti-Spam Edition, where the EmailSecurity Edition will be in trial mode for 30
days, with the anti-viruses enabled.
To disable/unload all the Antiviruses and remove their impact on the memory footprint
of the product:
1. From within GFI MailEssentials 2012, select Settings > General
Screenshot 1: Scanning Manager
2. From the Scanning Manager, unselect Enable EmailSecurity and click Apply.
1.3.2 New Web-based user interface
GFI MailEssentials extends the GFI MailSecurity 2011 web based interface to provide both a combined
dashboard, configuration quarantine and reporting for both anti-spam & email security. This enables
customers to manage this application using a web interface without installing anything on their PC.
The user interface for email management features (disclaimers\auto replies\email monitoring\list
server\pop2exchange) is still in MMC.
1.3.3 Antivirus engines in GFI MailEssentials 2012 EmailSecurity Edition vs GFI MailSecurity
There are some differences in the antivirus engines available with GFI MailEssentials 2012
EmailSecurity Edition as opposed to GFI MailSecurity:
The GFI VIPRE and BitDefender antivirus engines are bundled with GFI MailEssentials 2012
EmailSecurity Edition (as opposed to the BitDefender and Norman antivirus engines in GFI MailSecurity);
The McAfee, Kaspersky and Norman antivirus engines are available as optional with GFI MailEssentials 2012 EmailSecurity Edition (as opposed to McAfee, Kaspersky and AVG in GFI MailSecurity).
Customers upgrading to GFI MailEssentials 2012 EmailSecurity Edition from GFI MailSecurity will
therefore get the GFI VIPRE antivirus engine instead of the Norman antivirus engine, and customers
who had licensed the AVG antivirus engine will get the Norman antivirus engine instead.
GFI MailEssentials
1 Important upgrade notes | 3
Figure 2: Antivirus engines in GFI MailEssentials 2012 EmailSecurity Edition vs GFI MailSecurity
IMPORTANT
The AVG antivirus engine is being discontinued, with updates for GFI MailSecurity
customers being available till the end of April 2013; these customers must therefore
upgrade to GFI MailEssentials 2012 EmailSecurity Edition by April 30, 2013.
1.3.4 Integrated Reporting
Reporting within GFI MailEssentials 2012 is now fully integrated and no other software (for example
GFI ReportCentre) is required. This simplifies the management and use of this feature.
IMPORTANT
Data is not imported from old system to new GFI MailEssentials 2012 reporting.
This is not planned to change. Users should keep using old system for historical data.
1.3.5 Removed Email Archiving
While already removed in the latest Service Releases for the previous version of GFI MailEssentials,
this feature was still available for customers who had previously used this feature. This has now been
removed from GFI MailEssentials since GFI MailArchiver does a much better job of archiving email.
IMPORTANT
Customers who were using this feature will lose it upon upgrade.
It is highly recommended to install a fully-fledged archiving solution such as
GFI MailArchiver to ensure that you get all the benefits of such a solution.
1.3.6 Other Updates
The list below shows other features that were added and updated to add functionality and ease of
use, and which should not have an impact when upgrading.
Access control is now configurable through the web interface and provides more granular settings for configuration, reporting and dashboard access
GFI MailEssentials
1 Important upgrade notes | 4
Added ability to apply disclaimers based on priority. As in GFI MailEssentials 2010, only 1 of each
type of disclaimers is applied (domain based, group based, user based), but unlike the former
version, they will be applied based on the configured priorities.
Import & export keywords in Content Filtering rules
Quarantine search folders have been extended so as to support search folders for spam email
Quarantine searches now search for both Spam and Malware blocked emails
Anti-Spam Synchronization Agent now supports synchronization of items deleted from Whitelists
and Blocklist
Checking sender display name within the GFI MailEssentials 2010 Keyword Checking filter has
been added as an option in the Keyword Filtering rules
Content Filtering rules can now have groups configured in the list of users to whom the rules
apply\don’t apply
Dashboard has been updated to include a link which shows additional details for the processed
email, including the email’s Message ID
Switchboard will now indicate if email processing is enabled or disabled
When installed on a Microsoft® Exchange 2007/2010 machine with Hub Transport role only, the
option to enable or disable virus scanning on internal emails is now also available
Zombie check option, which was based on the SORBS DNS Blocklist in GFI MailEssentials 2010 ,
has been changed to an entry in the DNS Blocklists
UNICODE support has been implemented in all email processing performed by GFI MailEssentials
2012
GFI MailEssentials
1 Important upgrade notes | 5
2 Changes in GFI MailEssentials 2012 Service Release 1
2.1 Changes to SPF
In the first release of GFI MailEssentials 2012, SPF (Sender Policy Framework) had been simplified, and
was part of the SpamRazer filter as a feature that could be turned on/off through a checkbox. The
aim was to simplify overall product use.
SPF is used to detect spoofed emails and is sometimes placed before the Whitelist to detect emails
that have a whitelisted sender, but in reality do not originate from the domain of the whitelisted
sender. This was no longer possible in the first release of GFI MailEssentials 2012, since SPF was part
of the SpamRazer filter.
IMPORTANT
SPF as a stand alone filter was re-introduced in GFI MailEssentials 2012 SR1. Effectively,
the exact SPF functionality previously available in GFI MailEssentials 2010 is now
available in GFI MailEssentials 2012 SR1, and it is again possible to place the SPF filter
before the whitelist to detect spoofed emails. At the same time, the additional SPF
check in the SpamRazer filter introduced in the first release of GFI MailEssentials 2012 is
also retained, providing the ability of basing the SpamRazer spam score on the SPF
check as well.
2.2 Changes to Keyword Checking
When working on the first release of GFI MailEssentials 2012, indications were that the Keyword
Checking feature in GFI MailEssentials 2010 and earlier versions was not adding value in terms of
spam detection rates – given correct configuration of other features. Keyword Checking was also
prone to false positives.
As a technology, Keyword Checking is today not very effective for spam filtering; it has however other
applications such as filtering inappropriate language and avoiding inadvertent data leaks. As a result,
when combining the Keyword Checking functionality previously available in GFI MailEssentials 2010
and GFI MailSecurity 2011, the choice was to drop the Keyword Checking feature in GFI MailEssentials
2010 while retaining the Keyword Checking functionality from GFI MailSecurity 2011. While offering
the same capabilities to detect keywords in an email’s body or subject, the latter also offered the
option of defining different Keyword Checking rules for different users and groups.
However, the Keyword Checking functionality in the first release of GFI MailEssentials 2012 was
always running before the Whitelist features. This meant that senders/recipients in the Whitelists
could not be excluded from the Keyword Checking filter, even though it was still possible to exclude
particular users from a specific Keyword Checking rule by adding them to the rule’s exception list.
Furthermore, the Keyword Checking feature in the first release of GFI MailEssentials 2012 only
allowed quarantining an email to the administrator managed quarantine, delete it, or save it to a
folder on disk. It did not provide forwarding the email elsewhere, tagging , delivery to a mailbox
subfolder or the Exchange Junk E-mail folder, or quarantining to the user managed quarantine.
Because of this, utilizing Keyword Checking in GFI MailEssentials 2012 for anti-spam purposes
extensively was not encouraged.
A number of customers, however, indicated that they still wanted to make use of this filter for spam
blocking, and the inability to place it after the Whitelist, as well as the restricted spam actions
available, was a problem.
GFI MailEssentials
2 Changes in GFI MailEssentials 2012 Service Release 1 | 6
IMPORTANT
The Keyword Checking functionality previously present in GFI MailEssentials 2010 and
earlier versions is now reintroduced in GFI MailEssentials 2012 SR1 due to customer
demand. This means that the exact Keyword Checking functionality, previously available
in GFI MailEssentials 2010, is now available in GFI MailEssentials 2012 SR1, and it is
again possible to place the Keyword Checking filter after the whitelist to avoid false
positives. All the spam actions are also available with the Keyword Checking filter again,
including the ability to forward the email elsewhere, tag it, deliver it to a mailbox
subfolder or the Exchange Junk E-mail folder, or quarantine it to the user managed
quarantine.
2.3 Various bug fixes
For a list of bug fixes fixed in GFI MailEssentials 2012 SR1, refer to http://go.gfi.com/?pageid=ME_
SR1_issuesfixed
GFI MailEssentials
2 Changes in GFI MailEssentials 2012 Service Release 1 | 7
3 Changes in GFI MailEssentials 2012 Service Release 2
3.1 Support for Microsoft® Windows Server 2012
As from SR2, GFI MailEssentials can now be installed on Microsoft Windows Server 2012. The following
editions/combinations are supported:
Microsoft® Windows Server 2012 with Microsoft® Exchange Server 2010 SP3
Microsoft® Windows Server 2012 Standard and DataCenter
3.2 Various bug fixes
For a list of bug fixes fixed in GFI MailEssentials 2012 SR2, refer to http://go.gfi.com/?pageid=ME_
SR2_issuesfixed
GFI MailEssentials
3 Changes in GFI MailEssentials 2012 Service Release 2 | 8
4 Changes in GFI MailEssentials 2012 Service Release 3
4.1 Header Checking
This feature is now added back to GFI MailEssentials due to customer demand. For detailed
information, refer to the user guide available from http://go.gfi.com/?pageid=GFI_Manuals
4.2 Added Report Scheduling and Custom Reports
Reporting within GFI MailEssentials now enables configuring reports to run on a specific schedule.
Report output can also be customized to be saved to disk or sent by email on generation.
4.3 Added support for German, Spanish, Italian and Russian
GFI MailEssentials and its supporting documentation is now localized in German, Spanish, Italian and
Russian.
4.4 Added support for Microsoft Windows IIS and Exchange 2003 Clusters
GFI MailEssentials and/or GFI MailSecurity running in Microsoft Windows IIS and Exchange 2003
Clusters can now be upgraded to GFI MailEssentials and all functionality is retained as per previous
version of the product.
4.5 Added support for upgrades from VIPRE Email Security for Exchange
Customers running VIPRE Email Security for Exchange on their networks can upgrade to GFI
MailEssentials while maintaining the majority of their existing configuration. For detailed information
on upgrading from VIPRE Email Security for Exchange to GFI MailEssentials, refer to the Vipre Email
Security for Exchange to GFI MailEssentials guide, available from:http://go.gfi.com/?pageid=ME_
VPXUpgrade.
4.6 Added Personal Whitelists and Blocklists
This new feature allows users to configure their own Whitelists and Blocklists enabling them to block
or allow emails from specific email addresses without administrator intervention. Furthermore, a
user's Personal Whitelist and Blocklist applies only for that users, as opposed to the global whitelist
and blocklist. This also enables existing VIPRE Email Security for Exchange customers to retain this
aspect of their current functionality. For detailed information, refer to the user guide available from
http://go.gfi.com/?pageid=GFI_Manuals
4.7 Added Anti-Spoofing filters
This new filter checks emails received with a sender email address claiming to originate from your
own domain against a list of IP addresses by GFI MailEssentials. If the sender IP address is not on the
list of own-domain server IP addresses, email is blocked For detailed information, refer to the user
guide available from http://go.gfi.com/?pageid=GFI_Manuals
GFI MailEssentials
4 Changes in GFI MailEssentials 2012 Service Release 3 | 9
5 Changes in GFI MailEssentials 2012 Service Release 4
5.1 Spam Digest
This feature is now added back to GFI MailEssentials due to customer demand. For detailed
information, refer to the user guide available from http://go.gfi.com/?pageid=GFI_Manuals
5.2 Various bug fixes
For a list of bug fixes fixed in GFI MailEssentials 2012 SR4, refer to http://go.gfi.com/?pageid=ME_
SR4_issuesfixed
GFI MailEssentials
5 Changes in GFI MailEssentials 2012 Service Release 4 | 10
6 Upgrading a previous version
GFI MailEssentials enables you to upgrade existing installations of GFI MailEssentials and/or
GFI MailSecurity. The following restrictions on versions apply:
Product
Restriction
GFI MailEssentials
Minimum version to upgrade from: GFI MailEssentials 12 with all Service Releases installed.
GFI MailSecurity
Minimum version to upgrade from: GFI MailSecurity 10.1 with all Service Releases installed.
If upgrading an installation with a previous version of GFI MailEssentials, GFI MailEssentials is installed
with Anti-Spam and Anti-Phishing features fully licensed and the Anti-Virus and Anti-Malware on a 30
day trial period. Likewise, if upgrading an installation where only GFI MailSecurity is installed, only
the Anti-Virus and Anti-Malware features are fully licensed, while the Anti-Spam and Anti-Phishing
features are on a 30 day trial period. Installations where both GFI MailEssentials and GFI MailSecurity
are installed are upgraded to have both Anti-Spam/Anti-Phishing and Anti-Virus/Anti-Malware
features fully licensed.
For more information on GFI MailEssentials licensing, refer to http://go.gfi.com/?pageid=ME_
adminManualEN
IMPORTANT
Before upgrading to the latest version of GFI MailEssentials, ensure your system meets
the minimum system requirements. For more information, refer to Hardware
requirements (page 13).
INFO
For detailed information on upgrading from VIPRE Email Security for Exchange to GFI
MailEssentials, refer to:
http://go.gfi.com/?pageid=ME_VPXUpgrade.
6.1 Upgrade Procedure
IMPORTANT
Upgrade is not reversible; you cannot downgrade to the previous version you had
installed.
Select the configuration option that best describes your setup from the list below.
Previous installation on SMTP Server/Microsoft Exchange Server 2003
Previous installation on Microsoft Exchange Server 2007/2010
Updating to a newer version of GFI MailEssentials
Previous installation on SMTP Server/Microsoft® Exchange Server 2003
Only previous version of GFI MailSecurity is installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
GFI MailEssentials
6 Upgrading a previous version | 11
describes how to run the installation of GFI MailEssentials. (page 16). Following the installation, also
complete the GFI MailEssentials Post Install Wizard. For more information, refer to The postinstallation wizard loads automatically after installing GFI MailEssentials the first time. It enables
configuration of the most important settings of GFI MailEssentials. (page 19).
Only previous version of GFI MailEssentials is installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
describes how to run the installation of GFI MailEssentials. (page 16).
Both previous versions of GFI MailEssentials and GFI MailSecurity are installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
describes how to run the installation of GFI MailEssentials. (page 16).
Previous installation on Microsoft® Exchange Server 2007/2010
Only previous version of GFI MailSecurity is installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
describes how to run the installation of GFI MailEssentials. (page 16). Following the installation, also
complete the GFI MailEssentials Post Install Wizard. For more information, refer to The postinstallation wizard loads automatically after installing GFI MailEssentials the first time. It enables
configuration of the most important settings of GFI MailEssentials. (page 19).
Only previous version of GFI MailEssentials is installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
describes how to run the installation of GFI MailEssentials. (page 16).
Both previous versions of GFI MailEssentials and GFI MailSecurity are installed
Install GFI MailEssentials as if installing for the first time. For more information, refer to This section
describes how to run the installation of GFI MailEssentials. (page 16).
Updating to a newer versions of GFI MailEssentials
The GFI MailEssentials installer also enables you to upgrade an existing version of the current
generation of GFI MailEssentials to a newer version; for example, from a Beta version to Release
version.
To upgrade, launch the latest installer on the server where GFI MailEssentials is installed. After
accepting the End User License Agreement, installer detects existing installation and shows the
previous version installation path. Click Next to upgrade and Finish on completion.
NOTE
For upgrades on Microsoft® Exchange 2007/2010 the Post Installation wizard is
displayed after the installation and only displays the list of Microsoft® Exchange server
roles detected and the GFI MailEssentials components required. Click Next to install the
required GFI MailEssentials components and Finish to complete Post-Install wizard.
GFI MailEssentials
6 Upgrading a previous version | 12
7 Appendix 1 - Installation & upgrade instructions
The scope of this chapter is to help you install GFI MailEssentials on your network with minimum
configuration effort.
Topics in this chapter:
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
Hardware requirements
Processor
Available Memory (RAM)
Free Disk Space
Software requirements
Antivirus and backup software
Firewall port settings
13
13
13
13
13
15
15
7.0.1 Hardware requirements
The minimum hardware requirements for GFI MailEssentials are:
7.0.2 Processor
Minimum: 1Ghz
Recommended: 2GHz with multiple cores
7.0.3 Available Memory (RAM)
Minimum: 1.2GB
Recommended: 1.5GB
7.0.4 Free Disk Space
Minimum: 6GB
Recommended: 10GB
NOTE
Hardware requirements depend on a range of factors including email volume, and
number of Anti Virus engines enabled in GFI MailEssentials. The requirements specified
above are required for GFI MailEssentials only.
7.0.5 Software requirements
Supported Operating Systems
Windows® Server 2003 Standard or Enterprise (x86 or x64)(including R2) or later (including
Microsoft® Windows Server 2012 - Standard and DataCenter editions).
Supported Mail Servers
GFI MailEssentials can be installed on the following mail servers without any further configuration.
Microsoft® Exchange Server 2013
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 13
NOTE
Information Store Protection (VSAPI) is not supported on Microsoft® Exchange Server
2013 because VSAPI was removed from Microsoft® Exchange Server 2013 by Microsoft.
Microsoft® Exchange Server 2010
Microsoft® Exchange Server 2007 SP1 or higher
Microsoft® Exchange Server 2003
GFI MailEssentials can also be installed in an environment with any SMTP compliant mail server. In this
case, GFI MailEssentials should be installed on the gateway/perimeter server so that spam is filtered
before reaching the mail server.
Supported Internet browsers
GFI MailEssentials can be used with the following Internet browsers:
Microsoft Internet Explorer 8 or later
Google Chrome version 22.0.1229.94 (October 10, 2012) or later.
Mozilla Firefox version 16.0.2 (October 26, 2012) or later.
Other required components
Internet Information Services (IIS®) World Wide Web service
Internet Information Services (IIS®) SMTP service - Except when installing on Microsoft®
Exchange 2007 /2010 server
Microsoft.NET ® Framework 4
ASP.NET ® 4.0
Windows® Authentication role and Static Content services - Required when installing on
Microsoft® Windows Server 2008/2008R2
MSMQ - Microsoft® Messaging Queuing Service - for more information how to install MSMQ, refer
to:
http://go.gfi.com/?pageid=ME_MSMQ
NOTE
For more information on how to install pre-requisites on Microsoft Windows® Server
2008 refer to:
http://go.gfi.com/?pageid=ME_Win2008
For more information on how to install pre-requisites on Microsoft Windows® Server
2012 refer to:
http://go.gfi.com/?pageid=ME_Win2012
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 14
NOTE
GFI MailEssentials Information Store Protection cannot be used if any other software is
registered to make use of Microsoft® Exchange VSAPI.
NOTE
GFI MailEssentials can also be installed in virtual environments such as Microsoft®
Hyper-V and VMWare virtualization software.
Microsoft Virtual Server cluster group resource with a physical disc cluster. This is required
ONLY for environments running Microsoft® Exchange 2003 clusters.
NOTE
For more information on how to create a Resource Group for an Exchange Virtual Server
in a Windows Server Cluster, refer to: http://go.gfi.com/?pageid=ME_
Clusterresourcegrouphowto.
7.0.6 Antivirus and backup software
Antivirus and backup software scanning may cause GFI MailEssentials to malfunction. This occurs
when such software denies access to certain files required by GFI MailEssentials.
Disable third party antivirus and backup software from scanning the following folders:
32-bit installations (x86)
64-bit installations (x64)
<..\Program Files\Common Files\GFI>
<..\Program Files (x86)\Common Files\GFI>
<GFI MailEssentials installation path>\GFI\MailEssentials\
<..\Inetpub\mailroot> - if installed on a gateway machine.
<..\Program Files\Exchsrvr\Mailroot> - if installed on the same machine as Microsoft® Exchange 2003
<..\Program Files\Microsoft\Exchange Server\TransportRoles> - if installed on the same machine as Microsoft® Exchange
2007
<..\Program Files\Microsoft\Exchange Server\V14\TransportRoles> - if installed on the same machine as Microsoft®
Exchange 2010
<..\Program Files\Microsoft\Exchange Server\V15\TransportRoles> - if installed on the same machine as Microsoft®
Exchange 2013
7.0.7 Firewall port settings
Configure your firewall to allow the ports used by GFI MailEssentials.
Port
Description
53 - DNS
Used by the following anti-spam filters:
IP DNS Blocklist
SpamRazer
URI DNS Blocklist
20 & 21 FTP
GFI MailEssentials
Used by GFI MailEssentials to connect to ftp.gfi.com and retrieve latest product version information.
7 Appendix 1 - Installation & upgrade instructions | 15
Port
Description
80 - HTTP
Used by GFI MailEssentials to download product patches updates for:
SpamRazer
Anti-Phishing
Bayesian Analysis
Antivirus definition files
Trojan and executable scanner
Email Exploit engine
GFI MailEssentials downloads from the following locations:
http://update.gfi.com
http://update.gfisoftware.com
http://support.gfi.com
*.mailshell.com
*.spamrazer.gfi.com
NOTE
GFI MailEssentials can also be configured to download updates through a proxy server.
8013, 8015,
8021 Remoting
These ports are used for inter-process communication. No firewall configuration is required to allow
connections to or from the remoting ports since all the GFI MailEssentials processes run on the same
server.
NOTE
Ensure that no other applications (except GFI MailEssentials) are listening on these ports. If other
applications are using this ports, these ports can be changed.
389/636 LDAP/LDAPS
This port is used in these scenarios:
Microsoft® Exchange environment - Required if the server running GFI MailEssentials does not
have access/cannot get list of users from Active Directory, for example, in a DMZ environment or
other environments which do not use Active Directory.
Lotus Domino mail server environment - Required to get email addresses from Lotus Domino
server.
Other SMTP mail server environments - Required to get email addresses from SMTP server.
This section describes how to run the installation of GFI MailEssentials.
1. Download the appropriate GFI MailEssentials build for your type of machine. Use GFI MailEssentials 32-bit (x86) setup for 32-bit systems and the 64-bit (x64) setup for 64-bit systems.
2. Before running installation wizard, ensure that:
You are logged on using an account with administrative privileges.
The machine where GFI MailEssentials is going to be installed, meets the specified system
requirements.
Configure your firewall to allow GFI MailEssentials to connect to GFI servers.
Disable third-party antivirus and backup software from scanning folders used by GFI MailEssentials.
If installing GFI MailEssentials on an email gateway or relay/perimeter server, configure that
machine to act as a gateway.
Save any pending work and close all open applications on the machine.
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 16
5. GFI MailEssentials installation restarts Microsoft® Exchange or Microsoft IIS® SMTP services. This
is required to allow GFI MailEssentials components to register correctly.
NOTE
It is recommended to install GFI MailEssentials at a time when restarting these services
has the least impact on your network.
1. Run the GFI MailEssentials setup program.
2. Select the language to use with this installation of GFI MailEssentials and click Install.
NOTE
Language selection is not reversible. You will need to reinstall GFI MailEssentials to
change the language selected at this stage.
3. Click Next in the Welcome page.
4. Select whether to check for newer versions/builds of GFI MailEssentials and click Next.
5. Read the license agreement and click I accept the terms in the license agreement if you
accept the terms and conditions. Click Next.
6. Key in the administrator’s email address in the Administrator Email and enter License Key.
Click Next.
NOTE
'Evaluation' is no longer accepted as a license key. Access the GFI website customer area
to upgrade your license key before starting the upgrade process.
7. Select the mode that GFI MailEssentials will use to retrieve the list of email users.
Option
Description
Yes, all email users are
available on Active Directory.
Rules will be based on Active
Directory users.
Active Directory mode
GFI MailEssentials will retrieve the list of users from Active Directory. Selecting this
option means that GFI MailEssentials is being installed behind your firewall and that
it has access to the Active Directory containing ALL your email users.
No, I do not have
Active Directory or my
network does not have access
to Active Directory (DMZ)
SMTP mode
Select this mode if you are installing GFI MailEssentials on a machine that does not
have access to the Active Directory containing the complete list of all your email
users. This includes machines on a DMZ or machines that are not part of the Active
Directory domain.
In this mode, GFI MailEssentials automatically populates the list of local users using
the sender’s email address in outbound emails. The list of users can also be managed
from the GFI MailEssentials General Settings node.
Click Next.
8. In the IIS Setup dialog, configure the following options:
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 17
NOTE
Default settings are typically correct for most installations.
Option
Description
The website to create the GFI MailEssentials virtual
directory
Select the website where you want to host the GFI MailEssentials virtual directories.
The GFI MailEssentials Configuration
virtual directory
Specify a name for the GFI MailEssentials virtual directory.
The GFI MailEssentials Quarantine
RSS feeds virtual directory
Specify a name for the GFI MailEssentials Quarantine RSS feeds virtual directory.
SMTP Server Setup
Select the SMTP Server that GFI MailEssentials binds to. By default, GFI MailEssentials binds to
your Default SMTP Virtual Server. If you have multiple SMTP virtual servers on your domain,
you can bind GFI MailEssentials to any available SMTP virtual server.
NOTES
1. If you are installing on a Microsoft® Exchange Server 2007/2010/2013 machine this
option is not shown since Microsoft® Exchange has its own built-in SMTP server.
2. After installation, you can still bind GFI MailEssentials to another SMTP virtual
server from the GFI MailEssentials Configuration.
Click Next.
9. Select folder where to install GFI MailEssentials and click Next.
NOTE
When the installation is an upgrade, GFI MailEssentials installs in the same location as
the previous installation.
10. Click Install to start the installation process.
NOTE
If you are prompted to restart the SMTP services, click Yes.
11. On completion, click Finish.
NOTE
For new installations, setup will launch the Post-Installation Wizard. For more
information, refer to The post-installation wizard loads automatically after installing
GFI MailEssentials the first time. It enables configuration of the most important settings
of GFI MailEssentials. (page 19).
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 18
The post-installation wizard loads automatically after installing GFI MailEssentials the first time. It
enables configuration of the most important settings of GFI MailEssentials.
1. Click Next in the welcome page.
2. In the DNS Server dialog, select:
Option
Description
Use the same DNS server used
by this server
Select this option to use the same DNS server that is used by the operating system
where GFI MailEssentials is installed.
Use an alternate DNS server
Select this option to specify a custom DNS server IP address.
Click Test DNS Server to test connection with the specified DNS server. If test is unsuccessful, specify
another DNS server. Click Next.
3. In the Proxy Settings dialog, specify how GFI MailEssentials connects to the Internet. If the
server connects through a proxy server click Configure proxy server… and specify proxy settings. Click Next.
4. In the Inbound email domains dialog specify all the domains to scan for viruses and spam. Any
local domains that are not specified in this list will not be scanned. Click Next.
NOTE
When adding domains, select Obtain domain’s MX records and include in perimeter
servers list to retrieve the domain’s MX records and automatically add them to the
perimeter SMTP servers list (configured in the next step).
5. In the SMTP Servers dialog specify how the server receives external emails. If emails are routed
through other servers before they are forwarded to GFI MailEssentials, add the IP address of the
other servers in the list. For more information about perimeter SMTP servers refer to:
http://go.gfi.com/?pageid=ME_PerimeterServer
When using hosted email security products GFI MAX MailProtection, GFI MAX MailEdge or GFI
MailEssentials Online, enable checkbox Emails are also filtered by…. For more information refer
to: http://go.gfi.com/?pageid=ME_MAXMPME.
Click Next.
6. In the Default anti-spam action dialog select the default action to be taken when emails are
detected as spam.
NOTE
This action applies to anti-spam filters only. Malware filters automatically quarantine
blocked emails.
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 19
NOTE
When installing on Microsoft® Exchange 2010 and the default action selected is Move to
mailbox sub-folder, a user with impersonation rights must be created. Select whether
to let GFI MailEssentials automatically create the user or manually specify the
credentials and click Set impersonation rights to assign the required rights to the
specified user. This user must be dedicated to this feature only and the credentials must
not be changed. For more information refer to http://go.gfi.com/?pageid=ME_
SpamExch2010.
Click Next.
7. When installing on Microsoft® Exchange Server 2007/2010, the list of Microsoft® Exchange
server roles detected and GFI MailEssentials components required is displayed. Click Next to
install the required GFI MailEssentials components.
8. Click Finish to finalize the installation.
GFI MailEssentials installation is now complete and the email protection system is up and running.
NOTE
To re-run the Post-Installation wizard, from command prompt, navigate to the GFI
MailEssentials installation folder and run the following command:
e2kwiz.exe clean
GFI MailEssentials
7 Appendix 1 - Installation & upgrade instructions | 20
USA, CANADA AND CENTRAL AND SOUTH AMERICA
15300 Weston Parkway, Suite 104 Cary, NC 27513, USA
Telephone: +1 (888) 243-4329
Fax: +1 (919) 379-3402
ussales@gfi.com
ENGLAND AND IRELAND
Magna House, 18-32 London Road, Staines, Middlesex, TW18 4BP, UK
Telephone: +44 (0) 870 770 5370
Fax: +44 (0) 870 770 5377
sales@gfi.com
EUROPE, MIDDLE EAST AND AFRICA
GFI House, San Andrea Street, San Gwann, SGN 1612, Malta
Telephone: +356 2205 2000
Fax: +356 2138 2419
sales@gfi.com
AUSTRALIA AND NEW ZEALAND
83 King William Road, Unley 5061, South Australia
Telephone: +61 8 8273 3000
Fax: +61 8 8273 3099
sales@gfiap.com
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising