McAfee GroupShield 7.0 ForMicrosoft Exchange, User Manual

Page: 8 / 180

8
McAfee
®
GroupShield
™
7.0 User Guide Introduction
About GroupShield for Exchange
1
Each time, an email message is sent to or received from a source, GroupShield scans
it comparing it with a list of known viruses and suspected virus-like behavior.
GroupShield can also scan for content within the email message using rules and
policies defined within the GroupShield software.
How GroupShield protects Exchange?
GroupShield uses McAfee
®
Transport Scanner and Microsoft
®
Virus Scanning API
(VSAPI) to scan all email messages.
The anti-spam, anti-virus, and the content management engine scan the messages and
provide the result to GroupShield 7.0 before being written to the file system or being
read by the Microsoft
®
Exchange 2003/2007 users.
The anti-virus scanning engine and the anti-spam scanning engine compare the email
message with all the known signatures stored within the currently installed virus
definition (
DAT
) files and anti-spam rules. The anti-virus engine also checks the message
using the selected heuristic detection methods.
The content management engine searches the email message for banned content as
specified in the content management policies running within the GroupShield
software.
If there are no viruses, banned/unwanted content in the email message, GroupShield
passes the information back to Microsoft
®
Exchange 2003/2007.
In case of a detection, GroupShield takes actions that are defined within its
configuration settings.
Email server protection — McAfee GroupShield
McAfee GroupShield 7.0 integrates with Microsoft
®
Exchange Server 2003/2007 to
protect against viruses that may be transmitted using your corporate email system.
Due to the close integration between your email server and GroupShield anti-virus
solution, GroupShield can do more than just protecting your email server from viruses.
It can:
Note
For Microsoft
®
Exchange Server 2003 (used as a Bridgehead Server) and Microsoft
®
Exchange Server 2007 (with Edge Transport or Hub Transport-only role), GroupShield
uses McAfee
®
Transport Scanner (and not Microsoft
®
Transport Scanner) to protect the
server. However, for Exchange Server 2003 Mailbox Server and Exchange 2007
MailBox Role, GroupShield provides additional scanning option using Microsoft VSAPI.
Note
The default actions may differ, depending on the installed version of Microsoft ®
Exchange and, where applicable, the chosen scanning method.