McAfee SG310, Руководство администратора

Страница: 236 / 412

236 McAfee UTM Firewall 4.0.4 Administration Guide
Firewall menu options
Antispam (TrustedSource)
• Default: 10
• Can be a value of 1 or greater
9
In the Debug Level field, enter a value for the debugging level in the System Log
• Valid range: 1 (least verbose) through 4 (most verbose). Levels 3 and 4 display the TrustedSource
scores in the Syslog.
• Default: 1
10
[Optional] Select a White list address group. Each address in this group will be allowed through the SMTP
proxy regardless of its TrustedSource Reputation score.
11
[Optional] Select a Black list address group. Each address in this group will be denied access to the SMTP
proxy regardless of their TrustedSource Reputation score.
Note: The address groups for white lists and black lists can be modified on the addresses page (Firewall >
Definitions > Addresses). See Creating an Address Group .
12
Click Submit.
The appliance now uses the TrustedSource reputation service to filter inbound email. You can test the
configuration in the TrustedSource Tests page.
Testing TrustedSource
Use this procedure to test your TrustedSource configuration. The TrustedSource Tests page allows you to
test the configuration of your TrustedSource query engine. You can also use this page to query the
reputation of a given server, which allows you to more finely-tune your reputation threshold. If this test is
failing to return a reputation, it could mean that your UTM Firewall appliance has not been registered for
TrustedSource correctly or that your DNS settings are not correct. There may be a delay for your
TrustedSource license to become activated. Please allow four (4) hours for your license to become
activated.
1
Select Firewall > Antispam > TrustedSource Tests tab. The TrustedSource Reputation Score Test
page appears (
Figure 236 ).
Figure 236 Antispam —TrustedSource Tests page
2
Enter the IP address for which the test will attempt to get a TrustedSource rating.
Format: a.b.c.d
3
[Optional] Adjust the number of seconds in the Network Timeout field. This value defines the time-out
for network activity. Typically, the default is adequate and should only be changed if there are time-out
issues. A value of zero (0) disables the time-out specified in this page and defaults to any internal time-out
values present in the network infrastructure.
• Default: 15.
• Allowed values: Must be a value of zero (0) or greater.
4
Click Test. A successful test returns a rating. An unsuccessful test returns a reputation retrieval failed
message, which could be due to either the license not being activated or an invalid IP address being
entered.