KAPERSKY ANTI-VIRUS 5.5 - FOR MICROSOFT EXCHANGE SERVER 2000-2003, Руководство администратора, Страница: 41 / 143

CHAPTER 5. ANTI-VIRUS
PROTECTION
The main task of Kaspersky Anti-Virus is scanning mail traffic and disinfection of
mail messages using the information contained in the current (latest) version of
the anti-virus database.
Depending on the anti-virus protection level selected by the administrator (see
section 5.1, page 43), the application allows detection of:
•
malicious objects;
•
potentially dangerous objects;
•
objects that are not potentially dangerous, but may be a part of software
used for development of such objects;
All mail messages arriving to the Exchange server are scanned in the real-time
mode. The processing is provided both for the incoming and outgoing traffic. The
traffic routed by the Exchange server can also be scanned. In order to decrease
the load on the server, you can disable the scan of the transit mail traffic (details
see para 5.3, page 47).
When the traffic scan mode is enabled, the application remains loaded in the
computer's RAM and the
E-mail Interceptor analyzes the mail traffic received
from the Exchange server and transfers it to the Anti-Virus Scan Subsystem.
The Anti-Virus Scan Subsystem processes the e-mail messages based on the
settings as follows:
•
scans and analyzes the object using the anti-virus database;
•
if an e-mail message or its part is infected, the application processes the
detected object in accordance with the selected settings (details see para
5.4, page 51);
•
before the processing, a copy of the object can be saved in the backup
storage.
If the anti-virus server protection is enabled (details see para 5.1, page 43), then
starting and stopping of the traffic scan will be performed simultaneously with the
starting and stopping of the Microsoft Exchange Server.
When using Microsoft Exchange Server 2000 , the incoming mail will be
scanned irrespective of the mail client application and the mail protocol
used. Outgoing messages will be scanned only if an Microsoft Ex-
change Server compatible client (as for example, Microsoft Outlook)
and MAPI protocol are used for sending e-mail messages. In all other
cases outgoing messages will not be scanned as they are not trans-
ferred to the backup storage on the protected server.