Upload Upgrade version. Cyberoam v7 User Guide
Реклама
Реклама
Product Licensing & Updates
Upgrade Cyberoam
Upgrade Cyberoam
Upload Upgrade version
Once the upgraded version update file is obtained (CD or Downloaded), upload the new version file.
Select
Help Æ Upload Upgrade
Type the file name with full path or select using ‘Browse’
Click Upload
Screen - Upload Upgrade version
Once the upgrade file is uploaded successfully, log on to Console to upgrade the version. Refer
Console guide for details.
194
Product Licensing & Updates
Upgrade Cyberoam
Module license
There are certain add-on modules that are not included in the basic Cyberoam software. These modules are not part of the default installation but enabled on request. Customer has to procure different license for enabling these add-on modules.
Select
Help Æ Register Add on Modules to view the list of Add-on modules. Screen shows whether these modules are registered or not and displays license expiry date if registered.
Screen – Add on Modules Registration
Status - ‘Demo’, if demo version of the module running
Status - ‘Unregistered’, if the module is not registered
To register a module click the module name link, it will open the module registration form.
Screen – Module registration
Screen Elements Description
Module Registration form
Public key
Product ID
Displays public key
Specify the Product ID
Unique ID
Register button
Register Demo button
Cancel button
Specify the Unique ID
Registers the module
Registers module as demo copy
Demo copy expires after 15 days
Cancels the current operation
Table - Module Registration screen elements
195
Product Licensing & Updates
Cyberoam User Guide
Company information
Company information
Use to update the company information provided at the time of registration
Select
Help Æ Company Information to view the company details.
Screen - Company Information
Screen Elements
Company Information
Company name
Description
Contact person
Displays company name under which Cyberoam is registered
Cannot be modified
Displays name of the contact person in the company, modify if required
Country, Zip, Phone, Fax
Email ID
Save button modify if required
Display Email ID of the contact person
Saves any of the modified details
Table - Company Information screen elements
196
Download
Cyberoam User Guide
Download
Clients
Clients
Cyberoam Client supports Users using following platforms:
Windows Enables Users using Windows Operating System to log-on to Cyberoam Server
Linux Enables Users using Linux Operating System to log-on to Cyberoam server
HTTP Enables Users using any other Operating System than Windows & Linux to log-on to
Cyberoam Server
Single Sign on Client Enables Windows-migrated Users to log on to Cyberoam using Windows
Username and password.
Depending on the requirement, download the Cyberoam Client.
Select
Help Æ Downloads to download Cyberoam Client
Screen – Download Clients
197
Download
Cyberoam User Guide
Print Manager
Print Manager
For Cyberoam to monitor and manage printer usage, printing policy module is to be registered and needs to install Cyberoam Print Manager.
Select
Help Æ Downloads to download Cyberoam Print Management
Screen – Download Print Manager
198
Download
Cyberoam User Guide
Documentation
Select
Help Æ Guides to download various guides
Documentation
Screen – Download Cyberoam Guides
199
Cyberoam User Guide Appendix A – Web Categories
Appendix A – Web Categories
The list includes all categories with a short description of each category.
Visit www.cyberoam.com
for latest updates
Category Name Description
Sexual Health &
Education
Porn
Nudity
Swimwear & Lingerie
Adult Content
Job Search
Photo Galleries
Image Banks
Advertisements
Web based Email
Chat
Sites providing information regarding Sexual Education and Sexual Health and sites providing Medicines to cure and overcome Sex related problems and difficulties, with no pornographic intent
Sites depicting or graphically describing sexual acts or activity, including exhibitionism and sites offering direct links to such sites. Sites providing information or catering Gay, Lesbian, or Bisexual images and lifestyles are also included in this category
Sites depicting nude or seminude human forms, singly or in groups, not overtly sexual in intent or effect. It includes Nude images of film stars, models, nude art and photography
Sites showing images of models and magazines offering lingerie /swimwear but not Nude or sexual images. It also includes Arts pertaining Adult images and shopping of lingerie
Adult sites not falling in “Porn, Nudity, Swimwear & Lingerie, Sex Education, and
Sexual Health & Medicines” will be included in “Adult Content” and which may contain material not suitable to be viewed for audience under 18
Sites offering information about or support the seeking of employment or employees
Sites providing photos of celebrities, models, and well-known personalities Such sites may also contain profiles or additional elements as long as the primary focus is on multi-celebrity photographs
Web sites and Servers whose primary function is to deliver Images
Sites providing advertising graphics or other pop ad content files
Sites providing Web based E-mail services or information regarding email services
Sites hosting Web Chat services or providing support or information about chat via HTTP or IRC
Dating and Matrimonial Sites assisting users in establishing interpersonal relationships, friendship, excluding those of exclusively gay, or lesbian or bisexual interest and
Matrimonial Sites providing photos and details of individuals seeking life partners
Portals Portals include web sites or online services providing a broad array of resources and services such as search engines, free email, shopping, news, and other features
Music
Astrology
Entertainment
Cricket
Sites providing songs and music and supporting downloads of MP3 or other sound files or that serve as directories of such sites
Sites showing predictions about Sun signs and into various subjects like
Education & Career, Love Relationships, etc.
Sites providing entertainment sources for Movies, Celebrities, Theatres, about or promote motion pictures, non-news radio and television, humor, Comics, Kids and Teen amusement, Jokes, and magazines
Sites providing Live Scores of cricket matches, Debates on Cricketers, Top 10
Cricketers, Cricket News, and forthcoming Cricket matches. Cricket Category is differentiated from Sports Category and solely devoted to Cricket activities
Games
Sports
Shares & Stock Market
Property & Real Estate
Sites providing information about or promote electronic games, video games, computer games, role-playing games, or online games
Sites providing any information about or promoting sports, active games, and recreation. All types of Sites providing information about Sports except Cricket
Sites providing charting, market commentary, forums, prices, and discussion of
Shares and Stock Market. It also includes sites dealing in online share trading and sites of stockbrokers
Sites providing information about renting, buying, selling, or financing residential, real estate, plots, etc.
200
Cyberoam User Guide Appendix A – Web Categories
Category Name Description
Shopping
Travel, Food and
Immigration
Computer Security &
Hacking
Sites providing information about hacking, computer security, sites providing
Anti-Virus solutions, including sites providing information about or promote illegal or questionable access to or use of computer or communication equipment, software, or databases
Sites whose primary purpose is providing freeware and shareware downloads of application, software, tools, screensavers, wallpapers, and drivers
Download Freeware &
Shareware
URL Translation Sites
ISP, Web Hosting
Finance
Sites offering Online translation of URLs. These sites access the URL to be translated in a way that bypasses the proxy server, potentially allowing unauthorized access
Sites enabling users to make telephone, lease line, ISDN, Cable, V-SAT connections via Internet or obtaining information for that purpose. Sites providing hosting services, or top-level domain pages of Web communities
Sites supporting searching the Web, groups, or indices or directories thereof Search Engines
Information Sites sponsoring or providing information about computers, software applications, database, operating system. Including sites providing information of hardware, peripherals, and services. Sites offering design, flash, graphics, multimedia, and web site designing tutorials, tools, advice and services
Commercial Banks Commercial Banks Category includes all Banking Sites i.e. International /
National Public or Private Sector Banks providing a wide range of services such as all types of Accounts and Cards, Fixed Deposits, and Loans.
Sites providing information on Money matters, investment, a wide range of financial services, economics and accounting related sites and sites of National
& International Insurance companies providing details for all types of Insurances
& Policies.
TeleCommunication
Electronics
Sites supporting Online purchases of consumer goods and services except: sexual materials, lingerie, swimwear, investments, medications, educational materials, computer software or hardware, alcohol, tobacco, travel, vehicles and parts, weapons. Also Sites of Showrooms, Stores providing shopping of consumer products
Sites providing information about traveling i.e. Airlines and Railway sites. Sites providing details about Hotels, Restaurants, Resorts, and information about worth seeing places. Sites that list, review, advertise, or promote food, dining, or catering services. Sites providing Visa, Immigration, Work Permit and Holiday &
Work Visa details, procedures and services
Sites offering current news and opinions, including those sponsored by newspapers, general-circulation magazines or other media. It also includes sites of advertising agencies and sites providing details of weather forecast
Sites offering telephone, wireless, long distance, and paging services. It also includes sites providing details about Mobile communications / cellular communications.
Sites providing information on manufacturing of electronics and electrical equipments, gadgets, instruments like air conditioners, Semi conductors,
Television, Storage Devices, LCD Projectors, Home Appliances, and Power
Systems etc.
Business & Economy
Spirituality
Science
Sites sponsored by or devoted to business firms, business associations, sites providing details for all types of industrial sector like Chemicals, Machinery,
Factory Automation, Cable and Wire, sites providing information about couriers and logistics, and Non-Alcoholic Soft drinks and Beverages.
Sites featuring articles on healing solutions in wellness, personal growth, relationship, workplace, prayer, articles on God, Society, Religion, and ethics
Sites providing news, research projects, ideas, information of topics pertaining to physics, chemistry, biology, cosmology, archeology, geography, and astronomy.
Educational Institutions Sites sponsored by schools, colleges, institutes, online education and other educational facilities, by non-academic research institutions or that relate to educational events and activities.
Education/Reference
Materials
Health & Medicine
Government
Sites offering books, reference-shelf content such as atlases, dictionaries, encyclopedias, formularies, white and yellow pages, and public statistical data
Sites providing information or advice on personal health and fitness. Sites of pharmaceutical companies and sites providing information about Medicines
Sites sponsored by countries, government, branches, bureaus, or agencies of any level of government including defense. Government associated Sites providing comprehensive details on Tax related issues excluding Government sites providing Visa and Immigration services.
201
Cyberoam User Guide Appendix A – Web Categories
Category Name Description
Arts & History Sites primarily exhibiting artistic techniques like creative painting, sculpture, poetry, dance, crafts, Literature, and Drama. Sites that narrate historical details about countries/places; events that changed the course of history forever; sites providing details and events of all wars i.e. World Wars, Civil Wars, and important persons of world historical importance.
Nature & Wild Life Sites providing information about Nature, explorations, discoveries, wild life, animals, birds, protecting endangered species, habitats, Animal sanctuaries, etc.
Human Rights & Liberty Sites advocating sand protecting Human Rights and Liberty to prevent discrimination and protect people from inhumane conduct in Society / wartime.
Sites advocating freedom of speech and providing documentaries dealing with social, political, and economic transformation.
Personal & Biography
Sites
Drugs
Includes personal sites of individuals and biographical sites of ordinary or famous personalities
Sites providing information about the cultivation, preparation, or use of prohibited drugs
Sites sponsored by museums, galleries, theatres, libraries, and similar institutions; also, sites whose purpose is the display of artworks.
Gambling
Government-military
Political Organizations
Violence
Sites sponsored by or providing information about political parties and interest groups focused on elections or legislation
Militancy and Extremist Sites offering information about groups advocating antigovernment beliefs or action
Alcohol and Tobacco Sites providing information about, promote, or support the sale of alcoholic beverages or tobacco products or associated paraphernalia
Hobbies & Recreation Sites providing information about or promote private and largely sedentary pastimes, but not electronic, video, or online games. Home life and family-related topics, including parenting tips, gay/lesbian/bisexual (non-pornographic sites), weddings, births, and funerals Foreign cultures, socio-cultural information
Sites featuring or promoting violence or bodily harm, including self-inflicted harm; or that gratuitously displaying images of death, gore, or injury; or featuring images or descriptions that are grotesque or frightening and of no redeeming value. These do not include news, historical, or press incidents that may include the above criteria
Weapons
Sites providing information about or promote gambling or support online gambling, involving a risk of losing money.
Sites sponsored by branches or agencies of the armed services and government organization.
Instant Messaging
Spyware and p2p
Phishing and Frauds
Sites providing information about, promote, or support the sale of weapons and related items
Sites enabling instant messaging
Sites or pages that download software that, without the user's knowledge, generates http traffic (other than simple user identification and validation) and
Sites providing client software to enable peer-to-peer file sharing and transfer
Sites gathering personal information (such as name, address, credit card number, school, or personal schedules) that may be used for malicious intent.
Crime and suicide
Kids
Advocating, instructing, or giving advice on performing illegal acts such as phone, service theft, evading law enforcement, lock-picking, burglary techniques and suicide
Sites designed specifically for kids
202
Cyberoam User Guide Appendix B – Application Protocol Categories
Appendix B – Application Protocol Categories
Group
File Transfer client
File sharing
Mail Protocol
Application
Name
Any
FTP yahoofilexfer imesh
Gnutella
Kazaa directconnect
POP3
IMAP
Definition
All Services
File Transfer Protocol is a method to transfer files from one location to another, either on local disks or via the Internet
Yahoo Messenger file transfer
Gnucleuslan P2P client
IMESH P2P client
Gnutella is a system in which individuals can exchange files over the Internet directly without going through a Web site. Gnutella is often used as a way to download music files from or share them with other Internet users
A decentralized Internet peer-to-peer (P2P) file-sharing program peer-to-peer (P2P) file-sharing program
Transport protocol used for receiving emails. another.
A protocol for retrieving e-mail messages
Media Player
Voice over IP wmplayer quickplayer
SIP
H323
Windows Media Player
Quick Time Player
(Session Initiation Protocol) Protocol for initiating an interactive user session that involves multimedia elements such as video, voice, chat, gaming, and virtual reality.
SIP works in the Application layer of the OSI communications model.
A standard approved by the International Telecommunication
Union (ITU) that defines how audiovisual conferencing data is transmitted across networks. It enables users to participate in the same conference even though they are using different videoconferencing applications.
Printing IPP
Network DHCP
SNMP
DNS
RDP
Remote logging Telnet nbns
SSH streaming data over the World Wide Web
(Internet Printing Protocol) Protocol used for printing documents over the web. IPP defines basic handshaking and communication methods, but does not enforce the format of the print data stream.
Protocol for assigning dynamic IP addresses to devices on a network
(Simple Network Management Protocol) Protocol for network management software. Defines methods for remotely managing active network components such as hubs, routers, and bridges
An Internet service that translates domain names to or from IP addresses, which are the actual basis of addresses on the
Internet.
(Remote Desktop Protocol) Protocol that allows a Windowsbased terminal (WBT) or other Windows-based client to communicate with a Windows XP Professional–based computer.
RDP works across any TCP/IP connection
NetBIOS Naming Service
Protocol for remote computing on the Internet.
It allows a computer to act as a remote terminal on another machine, anywhere on the Internet
(Secure Socket Shell) Protocol used for secure access to a
203
Cyberoam User Guide
Group
Application
Name
HTTP
ICMP
Definition
Appendix B – Application Protocol Categories
Protocol for moving hypertext files across the Internet. communications.
(Internet Control Message Protocol) A message control and errorreporting protocol
204
Appendix C - Interpreting Bandwidth usage graphs for Multiple Gateways
Appendix C - Interpreting Bandwidth usage graphs for Multiple Gateways
Total Data transfer Graph
View graph from System > View Bandwidth Usage > Total
Graph displays the total data transfer through both the gateways.
Maximum data transfer = 2702.45 (as per graph)
Gateway wise Composite Total Data transfer:
View graph from System > View Bandwidth Usage > Gatewaywise Composite
Graph displays the data transfer through both the gateways in succession
Data transfer for Gateway 1 = X MB
Data transfer for Gateway 2 = Total Data transfer - X MB
In case when there is no data transfer done through Gateway 2, orange color will be missing in the graph.
As per the graph
Data transfer for Gateway Icenet = 950.60
Data transfer for Gateway BSNL = 2702.45 – 950.60 = 1951.85 (app.)
205
Appendix D – Mail server deployment scenarios
Appendix D – Mail server deployment scenarios
Cyberoam can act as a full featured mail server able to receive and route email traffic and scan mails for spam or virus attributes.
This document contains a detailed discussion on typical scenarios of its deployment as well as mail scanning process for each deployment scenario.
Depending on the network architecture, Cyberoam can be deployed as mail server and Anti Virus and Anti Spam agent or can be integrated with the existing corporate email system. Following options for installation of Cyberoam are possible:
1. Mail server hosted in DMZ
2. Mail server hosted Externally at ISP and users individually accessing their mailbox
3. Mail server hosted Externally at ISP and internal intrapop server accessing the mailbox and users accessing the internal POP3/SMTP server
4. Mail server hosted Internally and IP address being forwarded
The below given sections discuss in detail the above scenarios and describe their advantages.
Case 1 - Mail server hosted in DMZ
In this installation, Cyberoam is placed between the Internet and the Mail server. To apply antivirus protection and antispam filtering for the SMTP traffic to the Mail server, complete email traffic must pass through Cyberoam.
After a successful installation, your next step is to configure and set up mail server parameters in
Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.
Network parameters
Cyberoam IP address – 192.168.1.200
Mail server IP address – 203.88.138.194 (hosted in DMZ)
Local Domain – elitecore.com
LAN (Internal Network) – 192.168.1.X
Mail scanning process:
1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)
2. Checks the mails for the presence of spam or virus attributes
3. Depending on the result of check, removes the infection if required
4. Forwards clean/infection free mails to the mail server via SMTP protocol
5. Mail server forwards mails to the internal users via POP3/IMAP protocol while forwards mails to the outside world through Cyberoam via SMTP protocol
206
Appendix D – Mail server deployment scenarios
207
Appendix D – Mail server deployment scenarios
Configuration steps
Step 1 Enable scanning for the mail server traffic
This is where you tell Cyberoam which connections must be scanned.
Source and destination are used to define the connection and the protocol is used to tell what to scan when connection matches the definition.
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194 as Destination IP address.
Define Action ‘Scan’ for SMTP protocol
The * in source IP address means scan ‘everything’ for mail server with SMTP protocol. This rule will avoid double scanning as Cyberoam receives – incoming and outgoing – mails through SMTP protocol only.
Step 2 Set up all local domains served by Cyberoam
This is where you tell Cyberoam which local domains - hosted in the mail server - should be scanned. a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Specify mail server IP address and port number to be used
Repeat steps a to c for each local domain if you have more than one domain
Note
Cyberoam will scan mails for the specified local domains only
Step 3 Set up all the IP addresses allowed to send/receive mail via Cyberoam
208
Appendix D – Mail server deployment scenarios
This is where you tell Cyberoam which network/IP addresses must be allowed to relay mails through Cyberoam
Go to Anti Virus > Mail > Mail Relay
Add Network as ‘192.168.1.’
Note
Please note that only the defined IP address will be allowed to relay mails.
User trying to send mails from any other address will receive Relay Denied message as follows:
Relaying Denied message
553 sorry, relaying denied from your location [IP address] (#5.7.1)
209
Appendix D – Mail server deployment scenarios
Test your Configuration:
If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails
Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.
Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Status: Not detected
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006
#158997, status: clean
Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: {TO: header missing}
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Method: Headers: Suspicious To
X-SpamTest-Status: Probable Spam
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006
#158675, status: clean
Note
X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.
In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.
If you are using Microsoft Outlook - right click the message, click Options and check the Internet
Header.
If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header
Test 2. Check whether relaying domains are able to relay mails or not
210
Appendix D – Mail server deployment scenarios
Case 2 - Mail server hosted externally at ISP and users individually accessing their mailboxes
In this installation, Cyberoam is placed between the Internet and LAN. To apply antivirus protection and antispam filtering for the SMTP traffic to the Mail server, complete email traffic must pass through Cyberoam.
Please note in this type of placement, traffic from any of external mail server e.g. yahoo to our mail server will not be scanned as that traffic does not pass through Cyberoam. Hence there is a chance that mail server be compromised.
After a successful installation, your next step is to configure and set up mail server parameters in
Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.
Network parameters
Cyberoam IP address – 192.168.1.200
Mail server IP address – 203.88.138.194
Local Domain – elitecore.com
LAN (Internal Network) – 192.168.1.X
Mail scanning process:
In this placement, scanning process for incoming and outgoing mails is different.
1. Cyberoam receives outgoing mails from the mail clients via SMTP protocol while receives the incoming mails via POP/IMAP protocol as mail clients request mail server for mails to the mail server.
2. Checks the mails for the presence of spam or virus attributes
3. Depending on the result of check, removes the infection if required
4. Cyberoam forwards clean/infection free outgoing mails to the mail server via SMTP protocol and forwards clean/infection free incoming mails to the mail clients via POP/IMAP protocol
211
Appendix D – Mail server deployment scenarios
212
Appendix D – Mail server deployment scenarios
Configuration steps
Step 1 Enable scanning for the POP3 traffic from mail server to Cyberoam. This rule is required as
LAN users will be receiving mails from mail server through Cyberoam via POP3.
This rule will scan the complete POP3 traffic from mail server passing through Cyberoam to LAN i.e. all the mails send to the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the individual.
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address
Define Action ‘Scan’ for POP3 protocol
Step 2 Enable scanning for the IMAP traffic from mail server to Cyberoam. This rule is required as
LAN users will be receiving mails from mail server through Cyberoam via IMAP.
This rule will scan the complete IMAP traffic from mail server passing through Cyberoam to LAN i.e. all the mails send to the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the individual.
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address
Define Action ‘Scan’ for IMAP protocol
Step 3 Enable scanning for the SMTP traffic from Cyberoam to mail server. This rule is required as
LAN users will be sending mails to the mail server through Cyberoam via SMTP
This rule will scan the complete SMTP traffic from LAN passing through Cyberoam to mail server i.e. all the mails send by the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the mail server.
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address
Define Action ‘Scan’ for SMTP protocol
Step 4 Set up all local domains served by Cyberoam
This is where you tell Cyberoam which local domains - hosted in the mail server - must be scanned.
213
Appendix D – Mail server deployment scenarios a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Specify mail server IP address and port number to be used
Repeat steps a to c for each local domain if you have more than one domain
Note
Cyberoam will scan mails for the specified local domains only
Step 3 Set up all the IP addresses allowed to send/receive mail via Cyberoam
This is where you tell Cyberoam which network/IP addresses should be allowed to relay mails through Cyberoam
Go to Anti Virus > Mail > Mail Relay
Add Network as ‘192.168.1.’
Note
Please note that only the defined IP address will be allowed to relay mails.
User trying to send mails from any other address will receive Relay Denied message as follows:
Relaying Denied message
553 sorry, relaying denied from your location [IP address] (#5.7.1)
214
Appendix D – Mail server deployment scenarios
Test Configuration:
If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails
Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.
Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Status: Not detected
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006
#158997, status: clean
Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: {TO: header missing}
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Method: Headers: Suspicious To
X-SpamTest-Status: Probable Spam
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006
#158675, status: clean
Note
X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.
In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.
If you are using Microsoft Outlook - right click the message, click Options and check the Internet
Header.
If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header
Test 2. Check whether relaying domains are able to relay mails or not
215
Appendix D – Mail server deployment scenarios
Case 3 - Mail server hosted externally at ISP and internal intrapop server accessing the mailbox and users accessing the internal POP3/SMTP server
In this installation, Cyberoam is placed between the Internet and LAN and one of the LAN machine acts as the internal intrapop server which communicates with the external mail server. LAN users receive and send mails through the internal intrapop server only.
After a successful installation, your next step is to configure and set up mail server parameters in
Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.
Network parameters
Cyberoam IP address – 192.168.1.200
Mail server IP address – 203.88.138.194
Local Domain – elitecore.com
LAN (Internal Network) – 192.168.1.X
Intrapop server – 192.168.1.10
Mail scanning process:
1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)
2. Checks the mails for the presence of spam or virus attributes
3. Depending on the result of check, removes the infection if required
4. Cyberoam forwards mails to the external mail server via SMTP protocol or forwards mails to the internal intrapop server via SMTP protocol and internal intrapop server forwards to the LAN users via POP3/IMAP protocol
216
Appendix D – Mail server deployment scenarios
217
Appendix D – Mail server deployment scenarios
Configuration steps
Step 1 Enable scanning for the SMTP traffic from mail server to internal intrapop server. This rule is required as intrapop server will be receiving mails from external mail server through Cyberoam via SMTP protocol
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter mail server IP address ‘203.88.135.194’ as source IP address and internal intrapop server ‘192.168.1.10’ as destination IP address
Define Action ‘Scan’ for SMTP protocol
Step 2 Enable scanning for the SMTP traffic from internal intrapop server to mail server. This rule is required as intrapop server will be sending mails to the external mail server through Cyberoam via SMTP protocol
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter internal intrapop server ‘192.168.1.10’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address
Define Action ‘Scan’ for SMTP protocol
Step 3 Set up all local domains served by Cyberoam
This is where you tell Cyberoam which local domains - hosted in the mail server - should be scanned. a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Specify mail server IP address and port number to be used
Repeat steps a to c for each local domain if you have more than one domain
Note
Cyberoam will scan mails for the specified local domains only
Step 4 Specify IP address of internal intrapop server as mails will be relayed from this IP address only.
Go to Anti Virus > Mail > Mail Relay
Add as ‘192.168.1.10’
218
Appendix D – Mail server deployment scenarios
Note
Please note that only the defined IP address will be allowed to relay mails.
User trying to send mails from any other address will receive Relay Denied message as follows:
Relaying Denied message
553 sorry, relaying denied from your location [IP address] (#5.7.1)
219
Appendix D – Mail server deployment scenarios
Test Configuration:
If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails
Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.
Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Status: Not detected
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006
#158997, status: clean
Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: {TO: header missing}
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Method: Headers: Suspicious To
X-SpamTest-Status: Probable Spam
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006
#158675, status: clean
Note
X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.
In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.
If you are using Microsoft Outlook - right click the message, click Options and check the Internet
Header.
If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header
Test 2. Check whether relaying domains are able to relay mails or not
220
Appendix D – Mail server deployment scenarios
Case 4 - Mail server hosted internally and IP address is forwarded
In this installation, Cyberoam is placed between the Internet and LAN and one of the LAN machine acts as the mail server which communicates with the Cyberoam.
After a successful installation, your next step is to configure and set up mail server parameters in
Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.
Network parameters
Cyberoam IP address – eth0 - 192.168.1.200 eth1 – 203.88.135.200
Local Domain – elitecore.com
LAN (Internal Network) – 192.168.1.X
Internal Mail server – 192.168.1.10
Mail scanning process:
1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)
2. Checks the mails for the presence of spam or virus attributes
3. Depending on the result of check, removes the infection if required
4. Cyberoam forwards mails to the external world via SMTP protocol or forwards mails to the internal mail server via SMTP protocol and internal mail server forwards to the LAN users via POP3/IMAP protocol
In this type of deployment, as mail server is hosted internally, all the incoming mails are delivered to the Cyberoam and not to the internal mail server. Hence scanning is to be done for the mail traffic for Cyberoam.
221
Appendix D – Mail server deployment scenarios
222
Appendix D – Mail server deployment scenarios
Configuration steps
Step 1 Enable scanning for Cyberoam
This is where you tell Cyberoam which connections should be scanned.
Source and destination are used to define the connection and the protocol is used to tell what to scan when connection matches the definition.
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter ‘*’ as source IP address and Cyberaom IP address ‘203.88.135.200’ as Destination
IP address.
Define Action ‘Scan’ for SMTP protocol
The * in source IP address means scan ‘everything’ for Cyberoam with SMTP protocol.
Step 2 Enable scanning for the SMTP traffic from mail server. This rule is required as internal mail server will be sending mails to the external world through Cyberoam via SMTP protocol
Go to Anti Virus > Mail > Enable Scanning and click ‘Create’
Enter mail server IP address ‘192.168.1.10’ as source IP address and ‘*’ as destination IP address
Define Action ‘Scan’ for SMTP protocol
Step 3 Set up all local domains served by Cyberoam
This is where you tell Cyberoam which local domains - hosted in the internal mail server - should be scanned. a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Enable routing and specify mail server IP address ‘192.168.1.10’ as the forwarded
IP address and port number to be used
Repeat steps a to c for each local domain if you have more than one domain
Note
Cyberoam will scan mails for the specified local domains only
223
Appendix D – Mail server deployment scenarios
Step 3 Specify IP address of internally hosted mail server as mails will be relayed from this IP address only.
Go to Anti Virus > Mail > Mail Relay
Add as ‘192.168.1.10’
Note
Please note that only the defined IP address will be allowed to relay mails.
User trying to send mails from any other address will receive Relay Denied message as follows:
Relaying Denied message
553 sorry, relaying denied from your location [IP address] (#5.7.1)
224
Appendix D – Mail server deployment scenarios
Test Configuration:
If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails
Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.
Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Status: Not detected
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006
#158997, status: clean
Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:
X-SpamTest-Info: Profile: Formal (309/051227)
X-SpamTest-Info: {TO: header missing}
X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)
X-SpamTest-Info: Profile: SysLog
X-SpamTest-Method: Headers: Suspicious To
X-SpamTest-Status: Probable Spam
X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release
X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006
#158675, status: clean
Note
X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.
In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.
If you are using Microsoft Outlook - right click the message, click Options and check the Internet
Header.
If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header
Test 2. Check whether relaying domains are able to relay mails or not
225
Appendix D – Mail server deployment scenarios
Glossary
Email Ports
For networks, a port means an endpoint to a logical connection. The port number identifies what type of port it is. Some default ports:
POP3 - port 110
IMAP - port 143
SMTP - port 25
HTTP - port 80
IMAP
IMAP (Internet Message Access Protocol) is an Internet standard for the reading and manipulation of e-mail messages stored on a server. Messages are stored on a remote server. An
IMAP e-mail client running on a local computer then contacts the server and uses IMAP to allow the user to see and manipulate their e-mail messages and mailboxes. IMAP differs from the common Post Office Protocol (POP) in that it allows the user to store messages on the server and manipulate them from their e-mail client, rather than having to download the messages and manipulate them on their local computer.
IP address
The numerical address of a computer or a web page. Internet protocols recognize a specific machine by this address and use DNS to translate from the IP address to the domain name.
LAN
LAN (Local Area Network) is a group of computers connected by a network, such as that in a single office, building or company.
Mail Client
An email client is a computer program that is used to read and send e-mail. Protocols supported by email clients include POP3 and IMAP. IMAP is optimized for storage of e-mail on the server, while the POP3 protocol generally assumes that the e-mail is downloaded to the client. The SMTP protocol is used by most email clients to send e-mail.
Mail Server
A mail server also called a mail transfer agent or MTA is a computer devoted to sending, receiving and storing mail. The mail client (the program you use to get your e-mail) connects to the mail server and retrieves any messages that are waiting for you.
POP3
POP (Post Office Protocol 3) is a communication protocol used by email client programs for receiving e-mail from a Mail Server. Your e-mail is stored on a server until you check your mail and download messages on your computer.
POP3 is a commonly implemented method of delivering email from the mail server to the client machine. Other methods include IMAP and Microsoft Exchange.
In other words, POP is an protocol for incoming mails.
SMTP
SMTP (Simple Mail Transfer Protocol) is a protocol for sending e-mail messages between servers.
Most e-mail systems that send mail over the Internet use SMTP to send messages from one server to another; the messages can then be retrieved with an e-mail client using either POP or
226
Appendix D – Mail server deployment scenarios
IMAP.
The SMTP protocol can only be used to send emails, not to receive them. In other words, SMTP is a protocol for outgoing mails.
SMTP is generally used to send messages from a mail client to a mail server; this is why you need to specify both the POP or IMAP server and the SMTP server when you configure your e-mail application.
SPAM
Spam is any unwanted email communications that you receive. It is usually in the form of advertising material that is sent to a large number of people at one time.
Virus
Virus is a self-replicating, malicious code that attaches itself to an application program or other executable system component and leaves no obvious signs of its presence and usually capable of causing great harm to files or other programs on the same computer.
227
Cyberoam User Guide Menu wise Screen and Table Index
Menu wise Screen and Table Index
228
Cyberoam User Guide Menu wise Screen and Table Index
229
Cyberoam User Guide Menu wise Screen and Table Index
Table – Assign Schedule to User based Committed Bandwidth policy screen elements............ 79
Screen - Remove IP address from IP address based Bandwidth policy screen elements........... 82
Table - Remove IP address from IP address based Bandwidth policy screen elements.............. 82
230
Cyberoam User Guide Menu wise Screen and Table Index
231
Cyberoam User Guide Menu wise Screen and Table Index
232
Cyberoam User Guide Menu wise Screen and Table Index
233
Cyberoam User Guide Menu wise Screen and Table Index
234
Cyberoam User Guide Menu wise Screen and Table Index
235
Cyberoam User Guide
Elitecore Technologies Ltd.
Corporate Office
904 Silicon Tower,
B/h Pariseema Building,
Off. C.G. Road,
Ahmedabad-380 006.
INDIA
Telephone: +91-79-26405600
Fax: +91-79-26407640
Bangalore Office
3 rd
floor, 19/1 Infantry Road Cross
Behind Medinova Diagnostic Centre
Bangalore-560 001.
INDIA
Telephone: +91-80-41517880/81
Fax: +91-80-41517883
Delhi Office
606 Mahatta Tower,
‘B’ Block
Community Centre,
Janakpuri,
New Delhi-110058.
INDIA
Telephone: +91-11-41589761/62
Fax: +91-11-41589760
Mumbai Office
Office 4, B/65, Stanford Plaza,
Off. New Link Road,
Andheri (W)
Mumbai-400 058.
INDIA
Telephone: +91-22-56951280/380
Fax: +91-22-56923363
U.S.A Office
600 Meadowland Parkway,
Suite 270,
Secaucus, New Jersey 07094
U.S.A.
Telephone: 201-484-7581
Fax: 201-777-2113
Australia Office
12 Peppercress Place,
Unit 33/1 Talavera road,
Macquire Business Park
North Ryde NSW 2113
Australia
Telephone: 61-298897368
Fax: 61-298897369
236
Изтегляне
Публичната връзка е актуализирана
Публичната връзка към вашия чат е актуализирана. You may view and manage your chat links after registration here.
Публична връзка към документа
Реклама
