User manual KASPERSKY LAB SECURITY 6.0 FOR MICROSOFT EXCHANGE SERVER 2007 ADMINISTRATOR GUIDE

[. . . ] THE ADMINISTRATOR'S GUIDE KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 Dear User!We hope that this documentation helps you in your work and answers your questions about this software product. This document is the property of Kaspersky Lab: all rights to this document are reserved by the copyright laws of the Russian Federation, and by international treaties. Illegal reproduction and distribution of this document or parts thereof will result in civil, administrative or criminal liability in accordance with the laws of the Russian Federation. [. . . ] The user can additionally specify restrictions on the backup storage size, and the length of an object's storage period (see section «Configuring the backup storage settings» on page 64). Compliance with these restrictions is checked when a new object copy is saved to backup storage, and also as a regular background task (once per minute). The application performs the following actions: if the allowed number of objects in the backup storage is exceeded, the application will remove the required number of the "oldest" objects; if the backup storage size is limited and there is not enough free disk space to save the new object, the application will free the required space by again deleting the "oldest" objects; if the object storage period is limited, the application will remove objects which have been stored for longer than the limit. The Backup folder allows you to: Viewing the backup storage (see section «Viewing the backup storage» on page 57); edit the backup settings (see section «Viewing the backup storage» on page 57); manage backed-up objects: view their properties (see section «Viewing properties of a backed-up object» on page 59), restore them (see section «Restoring objects from backup storage» on page 63), send them for analysis (see section «Sending objects for analysis» on page 63) and remove them (see section «Deleting objects from backup storage» on page 64). This child node is included in each node representing a managed Kaspersky Security server. 56 BACKUP STORAGE Quick filtering and custom filters can be configured to enable convenient viewing and searching of the backup storage area (see the section «Quick filtering of objects» on page 59), and the section on custom filters (see section «Backup storage filters» on page 60). Filters created for backup storage are displayed in the Backup folder as subfolders, with the names assigned by the administrator when the filters were created. IN THIS SECTION Viewing the backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Viewing properties of a backed-up object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Quick filtering of objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Backup storage filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Restoring objects from backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Sending objects for analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Deleting objects from backup storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Configuring the backup storage settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 VIEWING THE BACKUP STORAGE To view backup storage: Open the Kaspersky Security 6. 0 for Microsoft Exchange Server 2007 node in the console tree, select the node corresponding to the required server, and open the Backup folder in the console tree. 57 KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 The results pane contains the full list of all objects in backup storage (see the figure below). Figure 24: Viewing the backup storage In addition to the standard email message attributes (Sender, Recipients, Cc, Subject, Sent time, Delivery time), this table displays the following information for each object: Name - attachments will retain their original names, while the body of the message will be saved as <message body>. Type - the type of object saved in the backup storage (Message body or Attachment) indicates where the infected object was detected. Status ­ the status assigned to the object following the anti-virus scan (see section «Selecting actions to be performed on objects» on page 47). Please note that backup storage contains the object copy created before the application modified it. For a disinfected object, the Status field displays its status after the change. Size - the size of the corresponding object in bytes. Virus - the name of the virus found in the object. Detected in folder - the path to the server folder in which the infected object was found (applicable only for servers acting in Mailbox mode). If the application rescans an object stored in backup storage using new databases and its status changes, the object's status in backup storage will be updated. You can perform ascending and descending sorting of the data contained in the table by any column. [. . . ] (ii) Support Services will terminate unless renewed annually by payment of the then-current annual support charge and by successful completion of the Support Services Subscription Form again. (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privacy Policy, which is deposited on ww. kaspersky. com/privacy, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. (iv) "Support Services" means: (a) Daily updates of the anti-virus database; (b) Free software updates, including version upgrades; (c) Extended technical support via e-mail and phone hotline provided by Vendor and/or Reseller; 113 KASPERSKY SECURITY 6. 0 FOR MICROSOFT EXCHANGE SERVER 2007 (d) Virus detection and disinfection updates 24 hours per day. The Software is protected by copyright laws. [. . . ]