InterScanTM Messaging Security Virtual Appliance - Online Help ...

Mail Areas and Queues
4. Select Allow end user to deliver quarantined mail in EUQ directly to allow end
users to deliver quarantined messages directly to the recipient. The message
bypasses all rules except virus scanning rules.
5. Select Enable single sign-on to allow end users to log on to the EUQ console
directly if they have logged on using their domain user name and password.
6. Select Allow end users to retrieve quarantined email messages with alias
email addresses to allow end users to retrieve quarantined email messages using
alias email addresses configured in Microsoft Exchange.
7. Select Control the "auto add" approved Sender behavior when an end user
reprocesses a message to allow or prevent end users from adding a sender
automatically when a message is being processed.
8. Select Enable NTLM to allow end users single sign-on access the EUQ console
using the NTLM authentication protocol.
9. To enable Kerberos single sign-on:
a. Select Enable Kerberos to allow end users single sign-on access the EUQ
console using Kerberos authentication protocol.
b. Create a new user account in your domain for the host on which IMSVA is
installed.
c. On the Active Directory domain controller, use the following command to
generate a keytab file for IMSVA:
C:\>ktpass.exe -out filename -princ HTTP/instance@REALM
-mapuser account -ptype KRB5_NT_PRINCIPAL -pass password
Where:
filename is where the generated keytab file will be stored. For example,
C:\test.keytab.
instance is the hostname of the computer where IMSVA is installed. For
example, imsva.test.com.
REALM is the uppercase name of the realm you want to authenticate with,
normally the same with the domain name on DNS server. For example,
TEST.COM.
account is the account created for IMSVA. For example, user@test.com.
password is the password of the account.
d. Click Browse… to locate the generated keytab file.
24-21