InterScanTM Messaging Security Virtual Appliance - Online Help ...

Trend Micro InterScan Messaging Security Virtual Appliance Administrator’s Guide
27-10
4. Select Allow end user to deliver quarantined mail in EUQ directly to allow end
users to deliver quarantined messages directly to the recipient. The message
bypasses all rules except virus scanning rules.
5. Select Allow end users to retrieve quarantined email messages with alias
email addresses to allow end users to retrieve quarantined email messages using
alias email addresses configured in Microsoft Exchange.
6. Select Control the "auto-add" approved sender behavior when an end user
reprocesses a message and select a value from the drop-down list.
7. Select Enable NTLM to allow end users single sign-on access the EUQ console
using the NTLM authentication protocol.
8. To enable Kerberos single sign-on:
a. Select Enable Kerberos to allow end users single sign-on access to the EUQ
console using Kerberos authentication protocol.
b. Create a new user account in your domain for the host on which IMSVA is
installed.
c. On the Active Directory domain controller, use the following command to
generate a keytab file for IMSVA:
C:\>ktpass.exe -out filename -princ HTTP/instance@REALM
-mapuser account -ptype KRB5_NT_PRINCIPAL -pass password
Where:
filename is where the generated keytab file will be stored. For example,
C:\test.keytab.
instance is the hostname of the computer where IMSVA is installed. For
example, imsva.test.com.
REALM is the uppercase name of the realm you want to authenticate with,
normally the same with the domain name on DNS server. For example,
TEST.COM.
account is the account created for IMSVA. For example, user@test.com.
password is the password of the account.
d. Click Browse… to locate the generated keytab file.
e. Click Upload to upload the keytab file to IMSVA.