|
|
Frequently Asked Questions
|
|
|
| Q: |
SMTP Messages Accumulate in the F-Secure Anti-Virus for Internet Mail Spool? |
| A: |
If SMTP messages start to accumulate in the spool directory, the most probable reason is that the network
connection to F-Secure Content Scanner Server or the original Mail Transfer Agent (a Mail Server) is broken.
If the problem is not network-related, it is recommended to reboot the machines running F-Secure Anti-Virus for Internet Mail and F-Secure Content Scanner Server.
If F-Secure Anti-Virus for Internet Mail reports a scanning error for a particular mail, you can see the
contents of the mail by stopping F-Secure Anti-Virus for Internet Mail and viewing the files in the
spool directory.
To deliver the mails in the spool directory without scanning, it is recommended to change the following settings with F-Secure Administrator:
Inbound/Outbound Mail / Receiving / Accept Mail = Reject Temporarily
Inbound/Outbound Mail / Virus Scanning / Scan for Viruses = Don't Scan Inbound/Outbound Messages
Start the operation Flush Spool Directory and distribute policies.
NOTE! After the mails have been delivered, change the settings back to the original values. |
| Q: |
How can I check that the Network Connection to the Original MTA is Working? |
| A: |
You can test if the network connection to the original MTA is working properly by opening a telnet connection to the MTA (default port 25) from the host running F-Secure Anti-Virus Agent for Internet Mail.
If you get a textual response, it means that the network connection is working.
If you get Connection to the host lost or any other error message, it means that the connection was unsuccessful.
|
| Q: |
How can I check that F-Secure Content Scanner Server is Up and Running? |
| A: |
You can test if the product is running by opening a telnet (telnet [ip address] 18971) connection to the F-Secure Content Scanner Server machine to the port 18971
(if you have specified a different FNP/SCIP port, use that port instead). If you get the cursor blinking in the upper left corner,
it means that the connection has been established and F-Secure Content Scanner Server can accept incoming connections. If you get
Connection to the host lost or other error message or if the cursor does not go to the upper left corner, it means that the connection
was unsuccessful.
|
| Q: |
How can I check that F-Secure Anti-Virus for Internet Mail is Up and Running? |
| A: |
You can test if the product is running by opening a telnet connection from the F-Secure Anti-Virus for Internet Mail machine to the port it is running on (usually 25).
If you get the following response, it means the connection is working:
220 F-Secure Anti-Virus for Internet Mail ready
If you get Connection to the host lost or any other error message, it means that the connection was unsuccessful.
To test the network connection at the same time, it is recommended to run telnet from a host that will send mails to F-Secure Anti-Virus for Internet Mail.
See “F-Secure Anti-Virus for Internet Mail Services, Devices and Processes” on page 163 in the F-Secure Anti-Virus for Internet Mail manual for a list of services that must be running to work properly.
|
| Q: |
F-Secure Anti-Virus for Internet Mail Strips Entire Message, what is wrong? |
| A: |
Apparently, users send an e-mail in Microsoft Exchange Rich Text or HTML format. When an e-mail is not in plain
text format, the e-mail program creates special attachments that carry extra information about the
message body, formatting styles, any pictures it might have, used fonts, etc. For example, if Microsoft
Exchange Rich Text format is used, Microsoft Outlook creates an attachment called Winmail.dat that
includes the encoded message body and even attached files. If HTML format is used, Microsoft Outlook
sends the message body as text/html part and all other message parts that are used in the message – for
example images and multimedia files - as plain attachments.
For security reasons, F-Secure Anti-Virus for Internet Mail treats anything but plain text e-mail parts as
attachments, thus stripping the Winmail.dat file and the other MIME message parts, if "Strip Attachments"
setting is set to strip "All Files". To solve the problem, set "Strip Attachments" to strip "All Attachments
except Allowed" and add Winmail.dat to the list of allowed attachments. This way the F-Secure Anti-Virus for
Internet Mail does not remove Winmail.dat, but it is able to remove all other attachments embedded in the
message.
|
| Q: |
What archive file formats does F-Secure Content Scanner Server support? |
| A: |
F-Secure Content Scanner Server supports the following file formats:
ARJ, BZ2, CAB, GZ, JAR, LZH, RAR, TAR, TGZ, ZIP. |
| Q: |
Why I cannot send SMTP alerts to more than one email address? |
| A: |
It is known problem in versions 4.x of F-Secure
Management Agent (FSMA) cannot send SMTP alerts to
more than one SMTP address.
|
| Q: |
What is the difference between Content Scanner Server and F-Secure Anti-Virus for Microsoft Exchange/Internet Mail/Lotus Domino/Firewalls? |
| A: |
Content Scanner Server is a part of F-Secure Anti-Virus for Mail Servers and Gateways'
products. It consists of several components which work together and provide the actual
virus scanning service. Content Scanner Server communicates with the F-Secure
Anti-Virus Agent installed on the actual mail server or gateway. According to the keycode
used in the installation, different components will be installed - for example, components
needed only with F-Secure Anti-Virus for Internet Mail are not installed when F-Secure
Anti-Virus for Microsoft Exchange is being installed. |
| Q: |
Does F-Secure Anti-Virus for Internet Mail support SMTP Extensions (ESMTP)? |
| A: |
No, only regular SMTP is supported at the moment. |
| Q: |
Which platforms can Content Scanner Server be installed on? |
| A: |
The supported platforms are:
- Windows NT Server and Advanced Server, Service Pack 4 or later
- Windows 2000 Server and Advanced Server, Service Pack 1 or later
|
| Q: |
What does error code 27 mean? |
| A: |
The F-Secure Content Scanner Server was installed with the wrong key-code.
Reinstall CSS with the F-Secure Anti-Virus for Internet Mail keycode. |
| Q: |
Why do you recommend to install the product on Windows NT/2000 Server? |
| A: |
Windows NT/2000 Server is better adapted to network services than Workstation;
which is, by definition, just designed to be a workstation. Microsoft's license agreements
also states that server products must be installed on the server version of the operating
system. More information about differences between Windows NT Workstation and Server
can be found at the following location:
http://agent.microsoft.com/NTWorkstation/news/mktbulletins/ntwvnts.asp |
| Q: |
What does error code 8 mean? |
| A: |
Network problems are preventing the agent from contacting the F-Secure Content
Scanner Server. Check the network settings and physical network connectivity. |
| Q: |
Can I run any anti-virus programs locally on my F-Secure Content Scanner Server and at the same time have my e-mail traffic protected by F-Secure Anti-Virus for Microsoft Exchange/Lotus Domino/Internet Mail/Firewalls on the same server? |
| A: |
No it is not possible in the current version of the Content Scanner Server 6.0x.
Content Scanner Server 6.0x and F-Secure Anti-Virus for Server does not work together
on the same server. However, if this is necessary you can install the previous version of
the Content Scanner Server 5.01. Packet of the Content Scanner Server 5.01 contain
local F-Secure Anti-Virus for Server. |
| Q: |
What happens to e-mails if the F-Secure Content Scanner Server machine is down? |
| A: |
The messages stay in Microsoft Exchange server spool directory and when the
Content Scanner Server is up and running again, the e-mails are sent to be scanned as
usual.
NOTE! In very large, performance-critical installations, you will benefit from having backup
F-SecureContent Scanner Server(s). Backup Content Scanner Servers will be used when
the primaryone becomes unavailable. Each F-Secure Content Scanner Server should be
installed on a dedicated machine. |
| Q: |
When installing the product I get an error message: Setup initialization error: Setup has detected that unInstallShield is in use. Please close unInstallShield and restart setup. Error 432. |
| A: |
This error occurs when installing F-Secure Anti-Virus for Internet Mail on Windows
2000 without administrator rights to the local machine. Log in with an administrator
account and restart the installation. |
| Q: |
What about management features? Does the product work with F-Secure Policy Manager? |
| A: |
All F-Secure Mail Server and Gateway
products, can be fully managed with the F-Secure Policy Manager. |
| Q: |
Can I use the same F-Secure Administrator that I am already using with Workstation Suite? |
| A: |
Yes, you can. You just need to import the appropriate mib-files. (For instructions please see
the appropriate product manual). |
| Q: |
Can I use the same F-Secure Policy Manager Server that I am already using with Workstation Suite? |
| A: |
Yes, you can. |
| Q: |
Do I need to use F-Secure Policy Manager Server or can I use a shared directory (CommDir)? |
| A: |
Both solutions are supported.
Note: In small environments both the Policy Manager Server and Content Scanner
Server may be installed on the same machine, but in general, especially if there is lots of
traffic going through the system, this is not recommended. |
| Q: |
What alerting and reporting features are available? |
| A: |
F-Secure Anti-Virus for Microsoft Exchange supports all the same methods such as
alerting as F-Secure Policy Manager; SMTP, etc. You can send a warning message to
the recipient of the e-mail and an administrator as well. |
| Q: |
How are the virus database updates done? |
| A: |
Please see the possible options at the
database update page. |
| Q: |
F-Secure Anti-Virus for Microsoft Exchange/Internet Mail/Lotus Domino/Firewalls found a virus in .zip but could not disinfect it. Why? |
| A: |
F-Secure Anti-Virus for Microsoft Exchange can not disinfect files inside archives.
However, an infected archive file is placed to the F-Secure Content Scanner Server
quarantine folder (\Program Files\F-Secure\Content Scanner Server\Quarantine) and an
administrator can extract and remove malicious code from it manually using F-Secure
Anti-Virus for Workstations or Servers.
NOTE! F-Secure Anti-Virus for Workstation or Server does not disinfect inside archives
automatically. You have to extract it and remove malicious code from it manually. |
| Q: |
Can I use remote installation to install F-Secure Anti-Virus for Microsoft Exchange, FSAV for Internet Mail, FSAV for Firewalls and FSAV for Lotus Domino? |
| A: |
No you can not. F-Secure Anti-Virus for Mail Servers and Gateways products
can not be installed remotely at the moment. |
| Q: |
Can I install CSS to support multiple F-Secure Anti-Virus Mail Server and Gateway products? |
| A: |
Yes, you can.
Install first CSS with the keycode for one product then run the same setup program and
enter the keycode for the other product you want the CSS to support to additionally install
components required. When running setup.exe for the second time (with the second
product's key code), the setup program will ask to confirm the installation of the first
product and you just need to enter again the keycode for it.
This (multiple keycodes feature) is supported in CSS 6.01 and later. |