ADMINISTRATION GUIDE Version 5.1 Vircom copyright statement The contents of this manual are for informational use only and are subject to change without notice. Neither Vircom nor anyone else who has been involved in the creation or production of this manual assumes any responsibility or liability for any errors or inaccuracies that may occur in this manual, nor for any loss of anticipated profit or benefits, resulting from the use of this manual. This manual is protected by copyright laws and international treaties. Your right to copy this manual is limited by copyright law and the terms of your software license agreement. As the software licensee, you may make a reasonable number of copies or printouts, provided they are for your own use. Making unauthorized copies, adaptations, compilations or derivative works for any type of distribution is prohibited and constitutes a punishable violation of the law. Any references to names of actual companies, products, people and/or data used in screenshots are fictitious and are in no way intended to represent any real individual, company, product, event and/or data unless otherwise noted. directQuarantine™, modus™, and modusGate™ are all trademarks of Vircom ® ® ® Inc. Windows , Windows 2000 Server, Windows Server 2000/2003/ ® 2008, IIS, Internet Information Server, Windows Exchange Server, Active ® ® Directory, Windows SQL and Microsoft Outlook are either registered ® trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other products or services mentioned in this document are identified by the trademarks or service marks of their respective companies or organizations. modusGate is based on the Professional Internet Mail Services product licensed from the University of Edinburgh. Certain algorithms used in parts of this software are derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. Copyright © 1995-2011 Vircom Inc. Vircom Inc., 460 St. Catherine W, Suite 600, Montreal, QC, Canada, H3B 1A7 For more information, contact Customer Support at +1 514.845.8474, Toll- free at 1.888.484.7266, Sales at +1.514.845.1666, Ext. 1 or visit our website at www.vircom.com COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 2 SECTION 1 INTRODUCTION ABOUT THIS MANUAL 1 INTRODUCTION About this manual Intended audience This document is written for administrators installing and configuring the modusGate™ application in a Windows® Server environment. It is assumed that the reader is familiar with: • Microsoft® Windows® operating system. • Vircom concepts. • Microsoft SQL® servers. Purpose and scope This document is designed to provide you with instructions to install and configure modusGate Server and its web applications. Formatting The following formatting conventions are used in this document. conventions The text attribute Is used for Bold New terms defined for the first time. Hyperlink Clickable links to the referenced topic. Italic Titles used in cross-references and other Vircom documents. Franklin Gothic Book All output, text labels from a graphic user interface, font and for anything you would type into the user interface. <Key> Keyboard keys, like <Ctrl>, <Alt>, <Shift>, <Del>, etc. Product names The following product names are used in this guide. The term Means modusGate L Email relay gateway with network-level security only (does not include anti-virus or anti-spam protection). modusGate AS Email relay gateway with anti-spam protection, including phishing and attachment blocking, custom sieve scripts and a full year of SCA spam engine updates. modusGate AV Email relay gateway with anti-virus protection. Comes with a full year of virus protection from McAfee or Norman Data Defense. modusGate ASV Email relay with both anti-spam protection and anti- virus protection, including spam, phishing, virus and forbidden attachment blocking. Comes with a full year of virus protection from McAfee or Norman Data Defense. COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 4 HELP AND SUPPORT 1 INTRODUCTION Help and support Contact Vircom If you have specific questions concerning the use of one of our products, please contact the Technical Support team at Vircom Inc. Technical Support team Web: http://www.vircom.com E-mail: SECTION 2 GETTING STARTED CONFIGURATION REQUIREMENTS 2 GETTING STARTED Configuration requirements modusGate modusGate is a comprehensive email security gateway server that is compatible with Windows® Server 2003, Windows Server 2008, 2008 R2 integration and Virtual Machines (VM). It integrates with Microsoft® Exchange®, Lotus® ®D omino and any standard SMTP server. Because modusGate was designed primarily to work with Microsoft Exchange, this section of the document will focus on its configuration with Exchange and Active Directory. NOTE For deployment with Lotus Domino and other SMTP servers, please see our Knowledge Base for details: http://kbase.vircom.com/kbase/default.asp?id=1265&Lang=1&SID= Deployment Scenario 1: modusGate in the DMZ scenarios With this method, modusGate resides in the DMZ while the Exchange Server and other network resources are protected behind a firewall. Scenario 2: modusGate on the same subnet as Exchange Here, the firewall provides Network Address Translation (NAT) or simple port filtering. After modusGate is installed and configured, change the NAT rule to route mail to modusGate instead of directly to Exchange. COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 7 CONFIGURATION REQUIREMENTS 2 GETTING STARTED Scenario 3: modusGate installed on the Exchange Server Note that this setup is not recommended, but can suffice if mail traffic is quite low. In this option, modusGate must be configured to receive mail on Port 25, while Exchange must be modified to use a different port, e.g. 2525. System requirements The following are the recommended minimum system requirements for modusGate Server: Requirement Description Windows Server Windows Server 2003, 2008, 2008 R2 (64-bit) with OS the most recent Service Pack. Virtual Machines (VM) are also supported. NOTE modusGate Server cannot be installed on a Windows Web Edition Server (any version). ® ® CPU 2.13 GHz Intel Pentium IV processor. Disk 40 GB (or higher), 7200 RPM hard drive (mirrored is recommended) NTFS with Indexing disabled. Memory 1024 MB RAM. MDAC Microsoft Data Access Component 2.8 SP1 or higher. DNS Server Must be accessible by modusGate. IIS Internet Information Server, version 6.0 or higher. May be installed on the modusGate server or on a separate computer. .NET 3.5 SP1 and .NET Framework versions 3.5 SP1 and 4.0 Extended 4.0 Extended are both required. COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 8 CONFIGURATION REQUIREMENTS 2 GETTING STARTED Requirement Description SQL Server Microsoft SQL Server 2000, 2008, 2008R2 or SQL Server 2005 Express Edition. It is recommended that SQL be installed on a separate, standalone computer. IE 6 or above Required for WebMonitor and WebAdmin access. ® Adobe Acrobat Version 7 or higher, required to read the Reader administration guides. Database modusGate requires databases for several of its features. If you do not have a database server installed, the modusGate installation process includes requirements Microsoft SQL Server 2005 Express with advanced services. Note that Full Text Indexing is required for some features. Firewall If you plan to use a firewall, Vircom recommends that you do not use Windows Firewall as it can cause problems with internal communication configuration required by modusGate. Instead, use a hardware firewall to protect your network from unauthorized external access. COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 9 CONFIGURATION REQUIREMENTS 2 GETTING STARTED Exchange / Active Before you begin the modusGate installation, verify the following settings on your Exchange / Active Directory server to ensure proper communication Directory with modusGate: configuration Step Description 1 If using Exchange 2007 or 2010, check whether the Hub Transport or Edge Transport server role is installed. If either role exists, you must change the following message throttling settings under Set-ReceiveConnector: • MaxInboundConnectionPercentagePerSource: Change the value to 20% • MaxInboundConnectionPerSource: Change the value to 1000 NOTE For complete details, see the following Microsoft KB articles: Exchange 2007: http://technet.microsoft.com/en-us/library/ bb232205(EXCHG.80).aspx Exchange 2010: http://technet.microsoft.com/en-us/library/ bb232205.aspx#ReceiveConn 2 If you are using Exchange 2007 or 2010, it must be configured to accept mail relay from modusGate. Please use this Microsoft Technet article for configuration instructions: http://exchangepedia.com/2007/01/exchange-server-2007- how-to-allow-relaying.html 3 Ensure that you have an account with Read permissions on the Active Directory/Global Catalog; this account and its password will be required when configuring modusGate. You may use your Administrator (SA) account, but it is recommended to create a new account for this purpose. Follow the steps below to create a new account: 4 Log into the Domain Controller Server and go to Start > Programs > Administrative Tools > Active Directory Users and Computers. 5 Expand your domain name, right-click Users and select New > User. 6 Enter mgate in First name, copy it to User logon name and click Next. 7 Configure the Password, uncheck User must change password at next logon, check Password never expires, and click Next through the remaining screens to finish creating the user. 8 Click on View > Advanced Features. 9 Select Security, click on Add and enter mgate. 10 Under the Allow column, check Read and click Apply. COPYRIGHT © 2011 BY VIRCOM. REPRODUCTION AND DISCLOSURE PROHIBITED. 10