User manual F-SECURE INTERNET GATEKEEPER WINDOWS 2000-2003 SERVER 6.61 ADMINISTRATOR GUIDE

[. . . ] F-Secure Internet Gatekeeper Windows 2000/2003 Server Administrator's Guide "F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. [. . . ] Treat as Unsafe - Archives with exceeding nested levels are always quarantined. The maximum nesting level is not verified if scanning inside archives is disabled. Suspect password protected archives Password protected archives cannot be scanned. Select whether to treat them as safe or unsafe. As password protected archives cannot be inspected without knowing the password, the user who receives a password protected archive should have up-to-date virus protection on the workstation if the archives are treated as safe. Treat as Safe - Password protected archives are considered to be safe and allowed to pass through without being scanned. Treat as Unsafe - Password protected archive files which contain file(s) with extensions that are not allowed are considered to be unsafe and blocked at the gateway. Allowed extensions can be specified with the 'Extensions Allowed in Password Protected Archives' setting. CHAPTER 7 Administering F-Secure Content Scanner Server 219 There is a security risk associated with password protected archives because their content cannot be inspected without a password that is known only to the sender and (in most of the cases) the recipient. If the recipients do not have any virus protection on their workstations, or if the virus protection is not up-to-date, malicious code in a password protected archive can get through. Password protected archives are not detected if scanning inside archives is disabled. Acceptable unpacked Specify the acceptable unpacked size (in size threshold kilobytes) for archive files. If the unpacked size of an archive file exceeds this threshold, the server will consider the archive suspicious and corresponding action will be taken. Scan extensions inside archives Specify a list of files, separated by spaces, that are scanned inside archives. To specify files with no extension, type a dot ('. '). *HTM". Extensions allowed in Specify a list of file extensions, separated by spaces, that are allowed in password protected password protected archives. archives You can also use wildcards: '?' matches exactly one character, '*' matches any number of characters, including zero (0) characters. File extensions are used for recognizing the file types in password protected archives. Max scan timeout Specify how long a scan task can be carried out before it is automatically cancelled. 220 7. 3. 2 Spam Filtering The number of spam scanner instances can be configured in F-Secure Content Scanner Server / Settings / Spam Filtering. Figure 7-4 Spam Filtering settings Number of spam scanner Specify the number of Spam Scanner instances instances to be created and used for spam analysis. As one instance of the spam scanner is capable of processing one mail message at a time, this setting defines how many messages will undergo spam analysis simultaneously. The default value is 3. CHAPTER 7 Administering F-Secure Content Scanner Server 221 You might need to modify this setting if you enable Realtime Blackhole Lists (DNSBL/ RBL) for spam filtering. For more information, see "Enabling Realtime Blackhole Lists", 248 and "Optimizing F-Secure Spam Control Performance", 250. The server must be restarted after this setting has been changed. For instructions, see "Starting and Stopping F-Secure Internet Gatekeeper Components", 294. [. . . ] Please include the following information with your support request: > > > > > > Version numbers of F-Secure Management Agent, F-Secure Anti-Virus for Internet Gateways, F-Secure Anti-Virus for Internet Mail, F-Secure Content Scanner Server, version number of F-Secure Anti-Virus for File Servers, if it is installed on the same computer, and possibly the version numbers of F-Secure Policy Manager Server and F-Secure Policy Manager Console if you use centralized administration. Description how F-Secure components are configured. The name and the version number of the operating system on which F-Secure products and protected systems are running. For Windows, include the build number and Service Pack number. [. . . ]