Symantec BRIGHTMAIL - SYM ANTISPAM AND, Руководство по установке

Страница: 17 / 160

Symantec Brightmail AntiSpam Overview
Installation Guide 11
The Cleaner creates a configurable advisory text message. This message informs the user
that the infected attachment has been cleaned, deleted, or delivered without cleaning. The
Cleaner inserts the original message, if delivered, as an attachment to the advisory
message. The Cleaner also places a special identifying line in the message header so that
the message is not filtered again for viruses.
Brightmail Conduit
Having up-to-date filters is imperative to ensure the highest success rate of filtering and
blocking unwanted email. Filter updates are accomplished through a dialogue between the
BLOC and the Brightmail Conduit, a component that runs at your site. The Conduit
handles all such communication at your site. The Conduit runs on each Brightmail
Scanner that contains a Brightmail Server.
The Conduit polls a secure Web site every minute to check for the availability of new
filters from the BLOC. If new filters are available, the Conduit retrieves the updated filters
using secure HTTPS file transfer. After authenticating the filters, the Conduit notifies the
Brightmail Server to begin using the updated filters. The Conduit also manages statistics,
both for use by the BLOC and by the Brightmail Control Center, which aggregates the
statistics from Brightmail Scanners to create consolidated reports.
Brightmail Quarantine
Brightmail Quarantine (Quarantine) provides users direct Web-based access to spam
messages that Symantec software has sidelined into the Quarantine database for them.
Users can check for misidentified messages, resend messages to their inbox, and delete or
search messages. An administrator account provides access to all quarantined messages.
Quarantine stores spam messages in the Symantec Brightmail AntiSpam MySQL database
on the Brightmail Control Center computer. A Notifier process periodically sends users a
reminder to check their spam messages in Quarantine. Spam messages older than a
customizable time period are deleted automatically by an Expunger process. A Java-based
Web Server presents the Quarantine interface to users.
Spam Foldering and Submissions
Symantec Brightmail AntiSpam features the Spam Folder Agent and the Symantec Spam
Folder Agent for Domino, designed to work on Microsoft Exchange and Lotus Domino
Servers, respectively. Installed separately from the standard Brightmail installation, these
agents create a subfolder and a server-side filter in each user’s mailbox. This filter gets
applied to messages that the Brightmail Scanner identifies as spam, routing spam into each
user’s spam folder. The spam folder agents relieve end users and administrators of the
burden of using their mail clients to create filters. The Symantec Spam Folder Agent for
Domino also allows users to submit missed spam and false positives to Symantec.