You can also specify a port. If you check Enable MX lookup for this host, you must specify a host name (not an IP address) for that server.
For outbound mail addressed to a non-local domain, there is typically no relay host to specify. If you choose Use default MX lookup, the Scanner will use Internet MX records to deliver the mail.
7 Click Next.
8 On the Setup Wizard Summary panel, review the settings shown. 9 If you are satisfied with the settings, click Finish to save them.
If not, click Back to revise your settings, or Cancel to end without saving any changes.
When the configuration is complete, the Scanner will contact Symantec to download the latest antispam filters and antivirus definitions, and the default antivirus definition download schedule will be in place (if you have installed an antivirus license). You can alter this schedule from the Control Center. Refer to the Symantec Mail Security for SMTP Administration Guide for more information.
Setting up a Scanner
The instructions in this section only apply if you are adding a Scanner on a machine different from the one hosting your Control Center.
Add a Scanner
Use the Add Scanner Wizard to set up a Scanner.
Note: None of the settings you specify using the wizard are final until you click Finish at the end of the wizard. If you step through all the panels of the wizard and do not click Finish, you will not make any changes to configuration settings. To configure host IP settings
1 If you are adding your first Scanner, you will now see the Add Scanner Wizard. Skip to step 3. If you’re adding a subsequent Scanner, from the Control Center, click Settings > Hosts.
2 On the Hosts page, click Add and then click Next.
3 On the Scanner Host Settings panel, identify your new Scanner by typing a description and a name or IP address.
To register the Scanner
1 On the License Registration page, click Browse to find your .slf file.
2 Select your .slf file and click Open to return to the License Registration page. 3 If your Scanner will be using a proxy server for communications with
Symantec, check the Use HTTP Proxy box and complete the proxy configuration fields.
4 Click Register.
If registration was successful, the License Registration page is redisplayed. If there was an error, you will see error text at the top of the page.
Note: For registration and ongoing operations, Symantec Mail Security for SMTP communicates with Symantec Security Response over a secure connection. If registration has failed, ensure that your network is configured to permit outbound connections to Symantec on port 443. 5 If you have another .slf file for a different feature, repeat this procedure. 6 When all your .slf files are successfully registered, click Next.
7 Continue with “To specify mail filtering settings” in the next section. To specify mail filtering settings
1 On the Mail Filtering panel, specify how you will use this Scanner.
You can choose to filter inbound mail, outbound mail, or both inbound and outbound mail.
■ If you choose to filter inbound mail, you will see the Inbound Mail
Filtering panel. Click Next and proceed with step 2.
■ If you choose to filter outbound mail only, you will see the Outbound Mail Filtering panel. Click Next and proceed with “To specify outbound mail filtering settings” on page 37.
2 On the Inbound Mail Filtering panel, choose the IP address to use for inbound mail.
You can use the Test button to ensure that the mail server responds. 3 If desired, change the port specification for inbound mail, and then click
Next.
4 On the Inbound Mail Filtering - Connections panel, specify the mail servers from which this Scanner will accept inbound mail.
You can choose All IP addresses or specify IP addresses or hostnames. A typical choice would be All IP addresses, thus allowing the Scanner to accept mail from any MTA on the Internet.
37 Installing Symantec Mail Security for SMTP
Setting up
If you specify one or more IP addresses, you must include the IP address of the Control Center so that Spam Quarantine and Suspect Virus Quarantine can release messages.
After you add the first entry, the IP address of the Control Center is added automatically and selected. If you are using a different IP address for the Control Center, or have the Control Center and Scanner installed on different machines, you must add the new IP address and disable the one that was added automatically.
Warning: If you are deploying this Scanner behind a gateway, and are specifying one or more IP addresses instead of All IP addresses, you must add the IP addresses of ALL upstream mail servers in use by your
organization. Upstream mail servers that are not specified here may be classified as spam sources.
5 Click Next.
6 On the Inbound Mail Filtering - Local Relay panel, specify the internal host to which this Scanner will relay inbound mail after filtering is complete. You can select a host from the list or define a new host. A typical value is a downstream mail server such as your corporate mail server.
You can also specify a port. If you check Enable MX lookup for this host, you must specify a host name (not an IP address) for that server.
7 If you chose to filter only inbound mail, click Next and proceed to step 9 in To specify outbound mail filtering settings”.
If you chose to filter inbound and outbound mail, click Next and proceed to step 1 in “To specify outbound mail filtering settings”.
To specify outbound mail filtering settings
1 On the Outbound Mail Filtering panel, choose the IP address to use for outbound mail.
2 If desired, change the port specification for outbound mail.
In most cases this should be left as port 25. If you are using a single NIC and IP for both inbound and outbound mail, ensure that this port is different from the one you specified for inbound mail.
You can use the Test button to ensure that the mail server responds. 3 Click Next.
4 On the Outbound Mail Filtering - Connections panel specify by IP address or CIDR range the internal mail servers from which this Scanner will accept outbound mail.
If you chose to filter only outbound mail, you will see the Outbound Mail Filtering - Local Relay panel next. Click Next and proceed to step 5. If not, click Next and skip to step 7.
5 On the Outbound Mail Filtering - Local Relay panel, specify the internal host to which this Scanner will relay outbound mail after filtering is complete. You can define a new host or select a host from the list. A typical value is a downstream mail server such as your corporate mail server.
You can also specify a port. If you check Enable MX lookup for this host, you must specify a host name (not an IP address) for that server.
6 Click Next.
7 On the Outbound Mail Filtering - Nonlocal Relay panel, specify how you want to relay outbound mail after filtering is complete.
You can use default MX lookup, select a host from the list, or define a new host.
You can also specify a port. If you check Enable MX lookup for this host, you must specify a host name (not an IP address) for that server.
For outbound mail addressed to a non-local domain, there is typically no relay host to specify. If you choose Use default MX lookup, the Scanner will use Internet MX records to deliver the mail.
8 Click Next.
9 On the Setup Wizard Summary panel, review the settings shown. 10 If you are satisfied with the settings, click Finish to save them.
If not, click Back to revise your settings, or Cancel to end without saving any changes.
When the configuration is complete, the Scanner will contact Symantec to download the latest antispam filters and antivirus definitions, and the default antivirus definition download schedule will be in place (if you have installed an antivirus license). You can alter this schedule from the Control Center. Refer to the Symantec Mail Security for SMTP Administration Guide for more information.