McAfee Email and Web Security Appliance 5.5, Installation Manual

Page: 48 / 60

• Reports are separately available for each customer or host, which removes the need for
complex filtering.
• If any behavior places the device on a reputation black list, only a virtual host is affected —
not the whole device.
Setting up the virtual hosts
The feature is available for SMTP scanning only. To specify the pool of inbound IP addresses
and the optional pool of outbound addresses, see the System | Virtual Hosting | Virtual
Networks page.
Managing the virtual hosts
Behavior Feature
Each virtual host has its own tab, where you can create its scanning policies. Email Policy
Each virtual host has its own tab, where you can configure MTA features specific for
that host. Email Configuration
You can view all queued email, or just queued email for each host. Queued Email
You can view all quarantined email, or just quarantined email for each host. Quarantined Email
You can view all reports, or just reports for each host. Reporting
Behavior between the device and MTAs
When the device receives email sent to the virtual host's IP address range, the virtual host:
• Responds to the SMTP conversation with its own SMTP Welcome banner.
• Optionally adds its own address information to the Received header.
• Scans the email according to its own policy.
When the device delivers email:
• The IP address is taken from an outbound address pool, or a physical IP address (if this is
not set).
• The receiving Mail Transfer Agent (MTA) sees the IP address of the virtual host.
• If there is a pool of addresses, the IP address will be selected "round robin."
• The EHLO response will be for the virtual host.
Exploring the appliance
Using policies to manage message scanning
McAfee Email and Web Security Appliance 5.5 Installation Guide 48