Trend Micro ScanMail for Microsoft Exchange Getting Started Guide

More documents

Recommendations

Info

Managing Outbreak Situations Establishing and Maintaining Security for Your Exchange Servers Outbreaks happen when viruses/malware, Trojans, worms, or other spyware/grayware suddenly attack many Exchange servers or personal computers on your network. There are many reasons why an attack might occur such as out-of-date components, poor configuration of anti-virus software, or a new malware arising for which there is not yet a pattern file. Outbreaks are a critical time when administrators must endure a chaotic, time-consuming process of communication—often to global and decentralized groups within their organizations. The actions that administrators take when outbreaks happen, can be broken down into four general stages: 1. Confirming the security incidence is a legitimate problem and not a false alarm 2. Responding to the security incidence 3. Analyzing the security incidence 4. Recovering the Exchange servers and mailboxes ScanMail has some very useful features that can assist administrators in every stage of an outbreak. Consider the following features when an outbreak threatens: 1. To confirm that the security incident is truly a malware outbreak: Check the Trend Micro Web site for virus alerts and the latest security advisory information. http://www.trendmicro.com/vinfo/ Check ScanMail notifications. ScanMail can be set to automatically send alerts when outbreak conditions exist. In addition, ScanMail can be set to notify administrators or other designated individuals when ScanMail takes actions against detected threats. For a quick analysis of the security incident, view the ScanMail Summary screen or create a one-time report. For more detailed information about the security incident, query the logs. 5-5
Trend Micro ScanMail for Microsoft Exchange Getting Started Guide 5-6 2. Responding Use the manual update to immediately download the latest ScanMail components. Refer to Updating ScanMail starting on page 5-4. Follow-up the update with a manual scan of the entire information store. Use the Trend Micro recommended defaults such as IntelliScan and ActiveAction or set even more aggressive scanning filters. If you know exactly what you are scanning for, select Specified files from the Virus Scan screen and type the name of the file for ScanMail to detect. 3. Analyzing Perform a Log Query to discover information about the attack. The log contains such useful information as the time and date, sender and receiver, and infected attachment names. If you need some assistance to help analyze the security problem, send your virus/malware case to the Trend Micro Virus Response Service. https://premium.trendmicro.com/virusresponse/en/us/VRS/logon /logon.asp If you need more assistance, contact Trend Micro support. See Contacting Technical Support on page 6-2. 4. Recovering When you have restored your Exchange environment, consider changing your configurations and security policies. Consider the following points: Set ScanMail to backup files before taking action and then set very aggressive configurations. This allows ScanMail to detect and eliminate many threats without taking irreversible actions. Monitor the results using the real-time monitor or by generating logs and reports. Use the Server Management tool to quickly and easily replicate configurations from one secure and tested ScanMail server to another.
Page 1:
TM TREND MICRO TM ScanMail TM for M
Page 4:
The user documentation for Trend Mi
Page 7 and 8:
Trend Micro ScanMail for Microsoft
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108: Trend Micro ScanMail for Microsoft
Page 157: Trend Micro ScanMail for Microsoft
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218:
Page 219 and 220:
Page 221 and 222:
Page 223 and 224:
Page 225 and 226:
Page 227 and 228:
Page 229 and 230:
Page 231 and 232:
Page 233 and 234:
Page 235 and 236:
Page 237 and 238:
Page 239 and 240:
Page 241 and 242:
Page 243 and 244:
Page 245 and 246:
Page 247 and 248:
Page 249:
show all

Trend Micro ScanMail for Microsoft Exchange Getting Started Guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?