RiskFilter in a cluster set up | Surf Control 5.2.4 specification

5

RISKFILTER SYSTEM MANAGEMENT CONSOLE

The RiskFilter Tab

A lower MX preference number gives higher priority than a lower one. In Figure 5-25, e-mail is sent in the following way:

•E-mail sent to site A.com round-robins between mail exchangers 1, 2,and 3, because each RiskFilter appliance has the same MX preference of 5.

•The same thing happens for e-mail sent to site B.com. If site A is down (e.g., with a network failure), the sending mail server will route e-mail to the fourth (failover) MX record, which is the address of a server in a different physical location.

For the described failover to work properly, RiskFilter appliances at site A are configured to accept messages for site B, and RiskFilter appliances at site B are configured to accept messages for site A.

The failover servers have static routes configured so that RiskFilter knows where to route the e-mail. There are also advanced load-balancing switches that can be used for these purposes. These switches offer a variety of load-balancing algorithms, in addition to round-robin delivery, which provide efficient load distri- bution and timely failover. Using load-balancing switches may improve the overall efficiency of your SMTP infrastructure.

RiskFilter in a cluster set up. You can set up RiskFilter in a cluster and use the wizard to set the IPs of the master and slave/s:

Figure 5 - 26 RiskFilter in a cluster set up

•Internet – E-mails coming into slave. Slaves can only be accessed via port 25 from the internet.

•Network 1 – Used for communication between master and slave.

•Network 2 – The network where the internal servers lie. This network holds mail servers and the RiskFilter administration clients.

To configure multiple NICs, see Multi-NIC configuration in RiskFilter on page 142.

152 Administrator’s Guide

SurfControl RiskFilter - E-mail V5.2.4

Image 157

Surf Control 5.2.4 manual RiskFilter in a cluster set up

Contents

SurfControl RiskFilter E-mail Contents Policy Manager Riskfilter System Management Console Appendix Chapter Managing Your Messages with Riskfilter HOW Riskfilter Works Control ConnectionRelay Control Mail Exchanger IP Address MX Preference Load Balancing with Riskfilter Load balancing with RiskFilter Riskfilter System Management Console Launching Surfcontrol RiskfilterHttps//hostnameoripaddress10000 Https//hostnameoripaddress/admin Riskfilter Management Console AdministratorOpening the RiskFilter Management Console Before YOU Start System Settings What can be Configured in the System Settings TAB? System Settings TABTerminology Used Select General Configuration from the System Settings tab ConfigurationGeneral Postmaster e-mail address Admin Console Other SettingsSession Timeout Smtp greeting Editing User Directories User Directories Open the User Directories screen Deleting a User Directory Click Add in the User Directories screen Microsoft Active Directory Select IBM Ldap Server IBM Ldap server Click Add in the User Directories screen Select Generic Ldap Generic Ldap Esmtp Server Information Validation settings Local Database Recipient File To add a local database Click Add Secure Proxy Select General Secure Proxy from the System Settings tabLocal Database Add/Edit Address screen is displayed Select Enable Webmail Proxy Select Enable POP3 ProxySelect Enable Imap Proxy Select General Directories from the System Settings tab Setting up the storage directoriesLogs and Archives Notifications Certificate Importing Certificates Select General Certificate from the System Settings tabExporting Certificates Certificate Signing Request Connection Settings Receive SettingsConnection Control Allow Access List Smtp Greeting Delay 16 The Directory Attack Control screen Directory Attack Control Relay Control SPF Authentication ConfigurationControlling relaying of messages Allowing relaying to specific domains Relay for Internal Senders Adding details of domains Recipient ValidationAdd validation servers 19 The Message Control screen Message Control 20 Set what action is taken on messages Exception Control To configure exception control Adding an IP or subnet address to the blacklist Black List Adding domain or e-mail addresses to the blacklist Importing and exporting Lists Adding an IP or subnet address to the White List White ListDynamic White List Receive Settings Setting up the destination domains Send SettingsDOMAIN-BASED Delivery Delivering the messages Select Forward mail to the following Smtp servers Using TLS authentication Transport Layer Security Advanced Delivery Traffic Control Send Settings Account Manager User Management Specifying Administrator Access Changing the Administrator Account Password Setting up Administrator Access Personal E-MAIL Manager Editing Administrator AccountsSelect Account Manager from the User Management menu Setting up the PEM message 31 What the user sees Personal E-mail Manager Exporting lists of users Adding usersImporting lists of users Setting up End User Control End-user Bypass Anti-Spam SettingEND-USER Control User List Authenticating PEM users User Authentication Authenticating remote users Update NOW License & Updates AVA and ASA License Expired Updating your Anti-Spam Agent Definitions Select the Anti-Virus Agent Update check box Scheduled UpdateUpdating the Anti-Virus Agent License Status Select the Anti-Spam Agent Update check boxUpdating the Anti-Spam Agent Updating Component Licenses Manually setting up a license server Update ServerViewing component licenses User Number Exceeded License Server Select Help Contact Support from the System Settings tab Admin Guide Contact SupportHelp Submitting a Support Request Configuration Wizard Firstboot Wizard KEY Points Key Points Policy Manager Policy Manager TAB What can be Configured in the Policy Manager TAB? Defining Users Creating a PolicyDefining the Action Global Policy Filter List Defining the Rules Importing and Exporting Lists Address Group Deleting Address Groups Adding Queues Queue Manager Select Queue Manager from the Policy Manager tab Editing a Queue Surfcontrol Dictionaries Dictionary ManagerEditing SurfControl Dictionary properties Adding words to the SurfControl Dictionaries Changing the value of words in the SurfControl DictionariesDeleting a word or phrase Create a new dictionary Custom Dictionaries Importing a SurfControl Dictionary Pack Importing Dictionaries Worthlesstab space15 balancetab space10 Creating a unicode text file Exporting a dictionary Importing a unicode text fileSelect Import from a Unicode text file Creating a NEW SUB-POLICY Global Policy 15 Enter the details of the new Sub-policy Select Global Policy from the Policy Manager tab Deleting a SUB-POLICY Editing a SUB-POLICYAdding Filters to the Policy 18 The Global Policy Filter List screen Defining a Filter Creating a new filter ANTI-VIRUS Agent FilterEditing the Anti-Virus Agent Filter Select Global Policy Filters from the Policy Manager tab Global Policy Select Anti-Spam Agent DFP ANTI-SPAM Agent Filters Select Anti-Spam Agent Heuristics Configuring the Anti-Spam Agent Heuristics Filter Select Anti-Spam Agent LexiRules Configuring the Anti-Spam Agent LexiRules Filter 23 The Internet Threat Database Filter screen Internet Threat Database Filter Editing the Internet Threat Database Filter Standard DisclaimerSelect the Internet Threat Database Filter and click Next Select the Standard Disclaimer Filter Editing the Standard Disclaimer Filter Editing the General Content Filter General Content FilterSelect the General Content Filter and click Next Editing the Advanced Content Filter Advanced Content FilterSelect the Advanced Content Filter and click Next 27 The Expression screen Using the Expression List Using Logical Operators RiskFilter and Gateway and Innovation Examples showing the use of OperandsRiskFilter or Gateway or Innovation Occur gateway Assume Frequency =2 28 Message Attachment Filter screen Message Attachment Filter Select the Message Attachment Filter and click Next Editing the Message Attachment Filter Creating a new Content Guardian filter Content GuardianSelect the Internet Content Guardian Filter and click Next Adding a filtering rule Deleting a filtering rule Dictionary Threshold FilterHow the Dictionary Threshold Filter works Select the Dictionary Threshold Filter and click Next Configuring the Dictionary Threshold Filter Global Policy KEY Points Key Points Reports & Logs Reports and Logs TAB What can be Configured in the Reports and Logs TAB? Server status monitoring Dashboard Querying the Master Report Master ReportSelect Master Report from the Reports and Logs tab Select Specified date range from the Logs for list box Master Report Querying the Message Report Message Report Querying the Policy Report Policy Report Querying the Virus Report Virus Report Querying the Spam Report Spam Report Querying the Connection Report Connection Report Connection Report System Report Managing Isolated Messages Isolated MessagesSelect Isolated Messages from the Reports and Logs tab Click View Messages Isolated Messages Managing the Virus Messages Virus MessagesSelect Virus Messages from the Reports and Logs tab 14 An Archived message Managing Spam Messages Spam MessagesSelect Spam Messages from the Reports and Logs tab To view a message click the subject Managing Archived Messages Archived MessagesSelect Archived Messages from the Reports and Logs tab Export Messages View Messages Reprocess MessagesClick Reprocess Messages 19 Select the check box alongside the message Querying Deferred Messages Deferred MessagesSelect Deferred Messages from the Reports and Logs tab 22 An Archived message KEY Points Key Points RiskFilter System Management Console Overview What can be Configured with the System Management CONSOLE? Rfmngr Account Accessing the Riskfilter System Management Console Webmin TAB What can be Configured in the Webmin TAB? IP access control Webmin ConfigurationSelect Webmin Configuration from the Webmin tab Webmin Actions LOG Select Logging from the Webmin Configuration screen Select Language from the Webmin Configuration screenLanguage Ports and Addresses Proxy Servers Webmin Servers IndexAdding Webmin Servers Select Webmin Servers Index in the Webmin System TAB What can be Configured in the System TAB? Change Passwords Bootup and ShutdownSelect Change Passwords in the System tab Historic System Statistics Select Multi Gateway Policy Routing in the System tab Multi Gateway Policy Routing Network Interfaces Network Configuration Setting up additional NICs Multi-NIC configuration in RiskFilterEnter an IP Address Routing and Gateways 11 The Create Bootup Interface screen DNS Client Select DNS Client from the Network Configuration tab 15 Host Addresses Host Addresses System Time Running ProcessesSelect System Time in the System tab Click Sync system time System and Server Status Riskfilter TAB What can be Configured in the Riskfilter TAB? Riskfilter Backup Manager Riskfilter Services Manager Click Complete Riskfilter Cluster Wizard 25Load balancing Load balancing with RiskFilter 26 RiskFilter in a cluster set up Select Web Access Manager in the RiskFilter tab Riskfilter WEB Access Manager 28 The Update RiskFilter-E-mail screen Update Riskfilter E-MAIL KEY Points Key Points Appendix # sudo /etc/init.d/smgd status Using the Command Line Interface QTOOL.SH Clean queues Using the Command Line Interface Using the Command Line Interface Using the Command Line Interface Example 6 uninstalling the RiskFilter software UNINSTALL.SH All items were successfully uninstalled Internet Theat Database Categories Internet Threat Database CategoriesCore / Liability Categories Productivity Categories Core / Liability Categories Productivity Categories Other Special Events Index Administrator’s Guide SurfControl RiskFilter E-mail SurfControl RiskFilter E-mail Administrator’s Guide OpenSSL Sun RPC Apache Software License, Version Expat XML Parser Toolkit SPFJava Ldap