■
Role of Control Center host - In cases where the Control Center host is also a
busy Scanner host, the Scanner and Control Center must share the resources
of a single appliance machine, which may affect performance.
Quarantine and LDAP performance considerations
Consider the following Quarantine and LDAP performance implications.
■
Number of messages expected per day into Quarantine - The more messages
placed in the Quarantine, the larger the database, and the more processing
required. Reduce the maximum size of the Quarantine database by deleting
spam, or by reducing spam retention time.
■
Number of end users logging into the Quarantine interface - More connections
to end users results in more overhead for the system.
■
LDAP server throughput - LDAP lookups for message recipients against a
limited capacity LDAP server will severely impair Quarantine performance.
Ensure you have adequate capacity on your LDAP server.
■
Message queues - Because the Quarantine database is stored on the Control
Center appliance, Quarantine's SMTP server may slow down, causing the
Scanner’s delivery MTA to back up when the destination MTA is accepting
messages either slowly or not at all. If this occurs, some legitimate mail
messages may be delayed.
■
HTTPS use - Secure HTTP connections are encrypted. Encrypting and
decrypting the data in both directions, per connection, is secure but is also
more CPU intensive than HTTP. Also, the larger your HTTPS key size, the
more CPU cycles it may consume.
Ports used by Symantec Mail Security
The following tables list ports reserved for Symantec Mail Security for SMTP
components and functions. These assignments may differ slightly depending on
your environment and filtering types (inbound, outbound, or both).
Table 2-1
Reserved ports for the Symantec Mail Security Appliance
Description
To
From
Protocol
Port
Rapid response antivirus updates
Internet
Appliance
TCP
21
SSH connectivity to the
appliance (CLI)
Internal Appliance
Addresses
Management
hosts
TCP
22
Inbound internet mail traffic
Appliance
Internet
TCP
25
21
Understanding system requirements
Ports used by Symantec Mail Security