eScan Blog
eScan Website
eScan Forum
eScan Feeds From eScan Wiki
(Difference between revisions)
| Revision as of 06:43, 29 July 2015 Webmktg (Talk | contribs) (→'''Description''') ← Previous diff |
Current revision Webmktg (Talk | contribs) (→'''Description''') |
||
| Line 221: | Line 221: | ||
| '''The Report for Mail Anti Virus window''' | '''The Report for Mail Anti Virus window''' | ||
| - | This window displays the report for the Mail Anti Virus module for a given range of dates in a tabular format when you click the Generate Report button. | + | This window displays the report for the Mail Anti Virus module for a given range of dates filtered by the User accounts on the system(Admin User can access reports of all other user accounts but other users can access reports of their own account only), the generated report is displayed in a tabular format when you click the Generate Report button. |
| | | ||
| - | [[Image:MailAV_Report.jpg|center]] | + | [[Image:MailAV_1Report.jpg|center]] |
| | | ||
| - | ::'''c. Generate Report''' - You should select a range of dates and then click this button to generate a report for the Mail Anti Virusmodule for that range of dates. | + | ::'''c. Generate Report''' - You should select a range of dates and Filter by option and then click this button to generate a report for the Mail Anti Virusmodule for that range of dates. |
Current revision
[edit]
eScan Version 11(and above) Online Help
Mail Anti-Virus (eMail Scanning)
This section provides the description and settings of eScan's Mail Anti-Virus for scanning of emails.
Contents |
[edit]
Description
This module scans all incoming and outgoing e-mails for viruses, spyware, adware, and other malicious objects. It also helps you send virus warnings to client computers and allows you to view archived e-mails and reports on the Mail Anti Virus activities. By default, Mail Anti Virus scans only the incoming e mails and attachments but you can configure it to scan outgoing e-mails and attachments as well. It helps you notify the sender or system administrator whenever you receive an infected e-mail or attachment.
In addition, Mail Anti-Virus lets you archive e-mails and e-mail attachments so that you do not need to worry about losing your important e-mails. You can also configure it to compress large e-mail attachments automatically to conserve bandwidth.
When you select the Mail Anti-Virus icon, the tabbed page of shows you options for configuring the module and helps you view reports on the recent scans performed by ‘e Scan. The details regarding each of the sections in the right pane are as follows:
[edit]
Configuration section
This section provides you with information regarding the status of Mail Anti Virus and the action that it will take when it detects a malicious object.
- Mail Anti Virus Status - It shows whether the Mail Anti Virus module is running or not.
- Action - It shows the action that ‘e Scan will perform if a malicious object is detected.
In addition, you can configure the following settings.
- Start/Stop - This link enables or disables the Mail Anti Virus module. You can easily switch the Mail Anti Virus module from the Start state to the Stop state and vice versa by using this link.
- Settings - This link opens the Mail Anti Virus Settings dialog box, which helps you configure the Mail Anti Virus settings.
The Mail Anti Virus Settings dialog box
You can configure Mail Anti Virus for real time monitoring by using this dialog box.This dialog box contains several tabs that allow you to configure settings for scanning e-mails; compressing and decompressing attachments; addressing security vulnerabilities, and archiving e-mails.
I. Scan Options:-
This tab allows you to select the e-mails to be scanned and action that should be performed when a security threat is encountered during a scan operation.
This tab helps you configure the following settings.
- a) Block Attachments Types -
- This section provides you with a predefined list of file types that are often used by virus writers to embed viruses. Anye mail attachment having an extension included in this list will be blocked or deleted by MWL at the gateway level. You can add file extensions to this list as per your requirements. As a best practice, you should avoid deleting the file extensions that are present in the Block Attachments Types list by default.
- Add - You should click this button to add the file extension of the file format that youneed to block. This button is only enabled when you type the file extension in the Block Attachments Types box.
- Delete - You can click this button toremove an extension from the existing list of blocked file extensions.
- Advanced - You should click this button to open the Advanced Scan Option dialogbox. This dialog box helps you configure advanced options for scanning e mails.
- The Exclude Attachment Option dialog box
It allows you to define list of file extensions that will be excluded from scanning by eScan.
- Exclude Attachments (White List) - This list is empty by default. You can add file names and file extensions that should not be blocked by ‘e Scan. You can also configure eScan to allow specific files even though if the file type is blocked. For example, if you have listed *.pif in the list of blocked attachments and you need to allow an attachment with the name abcd.pif,you can add abcd.pif to the Exclude Attachments list. Adding *.pif files in this section will allow all *.pif to be delivered. MicroWorld recommends you to add theentire file name like abcd.pif.
- Add - You should click this button if youneed to add a file type to the whitelist.
- Delete - This option helps you delete afile type from whitelist.
- Save - You can click this button to save the settings that you have made within this dialog box.
- b) Action -
- This section helps you configure the actions to be performed on infected e mails. These operations are as follows:
- Disinfect - [Default] This option is selected by default. You should select this option if you need Mail Anti-Virus to disinfect infected e mails or attachments.
- Delete - You should select this option causes if you need Mail Anti-Virus to delete infected e mails or attachments.
- Quarantine Infected Files - [Default] This check box is selected by default. You should select this check box if you need Mail Anti-Virus to quarantine infected e mails or attachments.
- Quarantine Path - The default path for storing quarantined e mails or attachments is C:\Program Files\eScan\QUARANT. You can specify a path of your choice by clicking Browse.
- c) Port Settings - You need to specify which ports on the SMTP Mail Server should be used for incoming and outgoing e mails so that ‘e Scan can scan the e mails sent or received via those ports.
- Mail Server Settings - If you configure this setting, ‘e Scan will send e mail notifications about the actions that it should perform when it detects infected e mails. This setting helps you create outbreak alerts, and create warning messages and notifications that ‘e Scan should send when it detects any security breach. The mail server settings that you need to configure are as follows:
- SMTP Mail Server - You need to specify the IP address of the SMTP Mail Server of your organization or Internet Service Provider (ISP). The default value of the IP address of an SMTP Mail Server is 127.0.0.1.
- SMTP Port - You need to specify a port number for the SMTP Mail Server of your organization or ISP. The default value for the port number of an SMTP Mail Server is 25.
- User Authentication (Opt.) - You need to provide the user name if the mail server of your organization or ISP requires authentication to send e mails.
- Authentication Password (Opt.) - You need to provide the password if the mail server of your organization or ISP requires authentication to send e mails.
- d) Port Settings for eMail - You can also specify the ports for incoming and outgoing e mails so that ‘e Scan can scan the e mails sent or received via those ports.
- Outgoing Mail (SMTP)- You need to specify a port number for SMTP. The default value of this port number is 25.
- Incoming Mail (POP3) - You need to specify a port number for POP3. The default value of this port number is 110.
- Scan Outgoing Mails - You should select this check box if you need to Mail Anti-Virus to scan outgoing emails.
II. Archiving – This screen helps you configure settings for archiving e mails and e mail attachments.
- The following configuration options are available on this screen.
- Archive eMails - This option helps you archive or back up all e mails that you have sent or received. Mail Anti-Virus provides you with the facility of backing up your e mails to a given folder. The default path for storing archived e mails is as follows: %UserProfile%\Application Data\MicroWorld\eScan\Archive. The eMail Archive Directory box is disabled by default. Therefore, to specify the path of the backup folder, you need to select the Archive eMails check box.
- View Archived eMails - When you click this button, the View Archived eMails window is displayed.
- The following configuration options are available on this screen.
- The View Archived eMails window
- This window shows the list of e-mails that have been archived by Mail Anti-Virus.
- The View Archived eMails window
- In this window, you can configure the following settings.
- Folder Path - You can specify the path of the folder where you need to store the archived e-mails.
- File Types - You can specify the e-mails in specific formats to be archived by specifying the formats in this box.
- Show Attachments - You can use this option to specify whether the e-mails with attachments should be displayed in the table.
- Open eMail(s) with MailClient - You can select this option to specify whether the Mail Anti-Virus should open the e-mails with the MailClient when you double-click the corresponding rows in the table.
- Refresh - You can refresh the rows in the table by clicking this button.
- Stop - You can stop Mail Anti-Virus from displaying messages by clicking this button.
- View - You can view a specific message by clicking it and then clicking this button.
- Find - You can find a specific e-mail message based on search criteria such as the sender’s e-mail address, the recipient’s e-mail address, subject, contents of the message, date before which it was received and the data after which it was received.
- Delete - You can delete a message by first selecting it in the table and then clicking this button.
- Message Source - You can view the contents of the e-mail message by clicking this button.
- 3. Archive Attachments. You should select this check box if you need to archive or back up all sent or received e mail attachments to a given folder. However, to specify the path of the backup folder, you need to select the Archive Attachments check box because the Attachments Archive Directory box is disabled by default. The default path for storing archived e mail attachments is as follows: %UserProfile%\Application Data\MicroWorld\eScan\Archive\Attachments.
- 4. Do not Archive attachments of type. At times, you may not require e-mail attachments of a specific file type. In that case, you can excluded certain file types, such as *.VCF, *.HTM, and *.HTML, from being archived by adding them to the Do not Archive attachments of type list.
- Add. You can click this button to add a file name or file type to the Do not Archive attachments of type list.
- Delete. You can click this button to delete a file name or file type from the Do not Archive attachments of type list.
[edit]
Notification
This link opens the Notification Settings dialog box, which helps you configure the notification settings for the Mail Anti Virus module. By configuring this module, you can send e mails to specific recipients when malicious code is detected in an e-mail or e-mail attachment.
The Notification Settings dialog box
- This dialog box helps you configure the notification settings for sending alerts and warning messages to the senders or recipients of an infected message.
- You can configure the following notification settings.
- a. Virus Alerts - [Default] You should select this check box if you need Mail Anti-Virus to alert you when it detects a malicious object in an e-mail.
- b. Warning Mails - You configure this setting if you need Mail Anti Virus to send warning e mails and alerts to a given sender or recipient. The default sender is escanuser@escanav.com and the default recipient is postmaster.
- Attachment Removed Warning To Sender. [Default] You should select this check box if you need Mail Anti-Virus to send a warning message to the sender of an infected attachment. Mail Anti-Virus sends this e-mail when it encounters a virus-infected attachment in an e-mail. The content of the e-mail that is sent is displayed in the preview box.
- Attachment Removed Warning To Recipient. [Default] You should select this check box if you need Mail Anti-Virus to send a warning message to the recipient when it removes an infected attachment. The content of the e-mail that is sent is displayed in the preview box.
- Virus Warning To Sender. [Default] You should select this check box if you need Mail Anti-Virus to send a virus-warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.
- Virus Warning To Recipient. [Default] You should select this check box if you need Mail Anti-Virus to send a virus-warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.
- Content Warning To Sender. You should select this check box if you need Mail Anti-Virus to send a content warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.
- Content Warning To Recipient. [Default] You should select this check box if you need Mail Anti-Virus to send a content warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.
- c. Delete Mails From User - You can configure ‘e Scan to automatically delete e mails that have been sent by specific users. For this, you need to add the e mail addresses of such users to the Delete Mails From User list. The Delete Mails From User section is disabled by default. As you type in some text in the Delete Mails From User box and add e-mail addresses, the appropriate UI elements will be enabled.
- Add - You can click this button to add an e mail address to the list.
- Delete - You can click this button to delete an e mail address from the list.
- Remove All - You can click this button to delete the all an e mail addresses or domains from the list.
[edit]
Reports
- This section displays the following information.
- Total Mails Scanned. It shows the total number of mails scanned by Mail Anti Virus on a real-time basis.
- Total Infected Objects. It shows the total number of infected objects found by Mail Anti Virus on a real-time basis.
- In addition, you can view the following reports.
- a. View Archived Mails – This link opens the View Archived eMails window.
- (See the section on the View Archived eMails window under Archiving.)
- b. View Report – This link opens the Report for Mail Anti Virus window. This window displays the summary of infected e mails and the action taken by Mail Anti Virus on such e mails.
The Report for Mail Anti Virus window
This window displays the report for the Mail Anti Virus module for a given range of dates filtered by the User accounts on the system(Admin User can access reports of all other user accounts but other users can access reports of their own account only), the generated report is displayed in a tabular format when you click the Generate Report button.
- c. Generate Report - You should select a range of dates and Filter by option and then click this button to generate a report for the Mail Anti Virusmodule for that range of dates.
