Upgrading to MailMarshal Version 6.0 SMTP Technical White Paper April 19, 2005

Transcription

1 Contents Introduction... 3 Case 1: Standalone MailMarshal SMTP Server... 3 Case 2: Array of MailMarshal SMTP Servers Additional Resources Upgrading to MailMarshal Version 6.0 SMTP Technical White Paper April 19, 2005 This document describes the process required to upgrade from MailMarshal version 5.x SMTP to MailMarshal version 6.0 SMTP in two typical environments: Standalone MailMarshal version 5.x SMTP processing server Array of MailMarshal version 5.x SMTP processing servers If you are upgrading to an array of MailMarshal version 6.0 SMTP processing servers, additional steps may be required. The process described in this technical reference helps you meet the following product upgrade and data migration objectives: Upgrade the product to MailMarshal version 6.0 SMTP Migrate your MailMarshal version 5.x SMTP data to MailMarshal version 6.0 SMTP In an array scenario, move your MailMarshal version 6.0 SMTP Array Manager to another computer and repeat the product upgrade and migration process on additional nodes This document cannot be a definitive guide to all possible environments. For best results, use the information in this document along with specific knowledge of your environment to plan your MailMarshal SMTP product upgrade and data migration. For more information, see Additional Resources on page 38 or contact Marshal Technical Support..

2 THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, MARSHAL LIMITED PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU. This document and the software described in this document may not be lent, sold, or given away without the prior written permission of Marshal Limited, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non-disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of Marshal Limited. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data. This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. Marshal Limited may make improvements in or changes to the software described in this document at any time Marshal Limited, all rights reserved. U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R (for Department of Defense (DOD) acquisitions) and 48 C.F.R and (for non-dod acquisitions), the government s rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the license agreement. Check Point, FireWall-1, VPN-1, Provider-1, and SiteManager-1 are trademarks or registered trademarks of Check Point Software Technologies Ltd. Firewall Suite, MailMarshal, Security Reporting Center, and WebMarshal are trademarks or registered trademarks of Marshal Limited. All other company and product names mentioned are used only for identification purposes and may be trademarks or registered trademarks of their respective companies.

3 Introduction This document guides you through the process of upgrading from MailMarshal version 5.x SMTP to MailMarshal version 6.0 SMTP. To complete the product upgrade and data migration processes, you may have to complete a number of steps on various computers in your existing MailMarshal SMTP installation. This document presents the following typical MailMarshal SMTP configurations and the steps required to upgrade each to MailMarshal version 6.0 SMTP: Case 1: A standalone MailMarshal version 5.x SMTP processing server. For more information, see Case 1: Standalone MailMarshal SMTP Server on page 3. Case 2: An array of MailMarshal version 5.x SMTP processing servers in a DMZ. For more information see Case 2: Array of MailMarshal SMTP Servers on page 14. Note: If you are using Microsoft Desktop Engine (MSDE) as your database, references in this document to Microsoft SQL Server (SQL) also apply to MSDE. Case 1: Standalone MailMarshal SMTP Server If your current MailMarshal SMTP version 5.x installation uses an array of MailMarshal processing servers in a Demilitarized Zone (DMZ), skip to Case 2: Array of MailMarshal SMTP Servers, starting on page 14. If your current MailMarshal SMTP version 5.x installation uses a standalone MailMarshal processing server, continue with the following the steps. Standalone: Before and After the Upgrade to MailMarshal Version 6.0 SMTP The following figure illustrates a typical MailMarshal version 5.x SMTP configuration using a standalone processing server. Upgrading to MailMarshal Version 6.0 SMTP 3

4 Frequently, the MailMarshal s SMTP erver also hosts the MS SQL Server and acts as internal server. There may or may not be a DMZ in this configuration. The following figure shows the minor configuration changes that occur when you upgrade a standalone MailMarshal version 5.x SMTP server. The primary change is that the MailMarshal SMTP server now also hosts the MailMarshal SMTP Array Manager. In the upgraded configuration, you can add additional processing servers to MailMarshal SMTP to create an array of processing servers, called nodes. The upgrade also creates a new MailMarshal version 6.0 SMTP database. Using MailMarshal version 6.0 SMTP, you can also offer end users the Web-based Spam Quarantine Management tool if you deploy Microsoft Internet Information Services (IIS). Standalone: Product Upgrade and Data Migration Process Checklist The following checklist identifies the steps required to upgrade a standalone MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP Array Manager and migrate data from your MailMarshal version 5.x SMTP database. The checklist also provides cross-references to detailed instructions for each step. Complete the steps in the following order. Standalone Upgrade Procedure Checklist 1. Back up important MailMarshal SMTP configuration and database files. For more information, see Standalone Step 1: Back Up Important MailMarshal SMTP Data on page Upgrade the standalone MailMarshal version 5.x SMTP Master to MailMarshal version 6.0 SMTP. For more information, see Standalone Step 2: Upgrading to a MailMarshal Version 6.0 SMTP Array Manager on page Run the MailMarshal SMTP Migration Wizard to migrate your database records and quarantined , archive, and log files. For more information, see Standalone Step 3: Migrating Your Data to MailMarshal Version 6.0 SMTP on page Technical Reference

5 Standalone Step 1: Back Up Important MailMarshal SMTP Data The first step in the upgrade process is to back up important MailMarshal version 5.x SMTP database and configuration data files. The following table lists the files to back up and refers you to additional information. File Name or Extension Typical Location Description *.mmr MailMarshal version 5.0 SMTP server MailMarshal version 5.x SMTP configuration information. For more information, see Backing Up the MailMarshal SMTP Configuration on page 5. filetype.cfg *.xml usergroups.txt MailMarshal version 5.x database install path install path\config install path\config MS SQL Server computer Additional MailMarshal SMTP configuration data, SpamCensor extended rules, and your MailMarshal SMTP user group definitions. For more information, see Back Up Custom Information on page 6. Microsoft SQL Server (SQL) database. For more information, see NetIQKB29284 at Quarantined and archived which is migrated from MailMarshal version 5.x SMTP to MailMarshal version 6.x SMTP will be unavailable in a MailMarshal version 5.x SMTP Console. If you wish to retain access to this with a MailMarshal version 5.5 SMTP Console you can back up the contents of your \Rulesets folder. The contents of the \Rulesets folders can be very large depending on your volume of and your retention period. Backing Up the MailMarshal SMTP Configuration Back up your MailMarshal version 5.x SMTP configuration before you upgrade to MailMarshal version 6.0 SMTP. It is important to preserve your MailMarshal version 5.x SMTP configuration, however the configuration cannot be imported to MailMarshal version 6.0 SMTP. To back up the MailMarshal version 5.x SMTP configuration files: 1. Start the MailMarshal version 5.x SMTP Configurator on the MailMarshal SMTP Master processing server. 2. On the Tools menu, click Server Properties. 3. On the Server Properties window, select the General tab. 4. Click Export. 5. Specify a storage location and file name, and then click Save. 6. Click OK. Upgrading to MailMarshal Version 6.0 SMTP 5

6 Back Up Custom Information When you configure MailMarshal SMTP to enforce your policies, MailMarshal SMTP stores your custom settings in a number of files. Use standard Windows techniques to back up the following files. Filename and extension Typical file location Description filetype.cfg install path Additional MailMarshal SMTP configuration data you have customized *.xml install path\config SpamCensor extended rules usergroups.txt install path\config Your MailMarshal SMTP user group definitions For example, if you installed MailMarshal SMTP in the default location, \Program Files\NetIQ\MailMarshal, back up the files specified in the table from the following folders: \Program Files\NetIQ\MailMarshal \Program Files\NetIQ\MailMarshal\config Back Up the MailMarshal SMTP Database Use standard SQL Server backup techniques to store a safe copy of your MailMarshal version 5.x SMTP database. The Migration Wizard later migrate the information so you can access your data using MailMarshal version 6.0 SMTP. For more information about backing up a MailMarshal version 5.x SMTP database, see NetIQ Knowledge Base article NetIQKB29284 at Standalone Step 2: Upgrading to a MailMarshal Version 6.0 SMTP Array Manager The following steps upgrade your MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP server and Array Manager. During this step, you will run the MailMarshal version 6.0 SMTP setup program on your existing MailMarshal version 5.x SMTP server using the default settings. The upgrade process leaves your MailMarshal version 5.x SMTP database in place, creates a new MailMarshal version 6.0 database, and installs the MailMarshal version 6.0 SMTP Array Manager component. When the setup program is complete, run the MailMarshal version 6.0 SMTP Configurator to reload your MailMarshal version 5.x SMTP rules. Finish Step 2 by making a backup copy of your new MailMarshal SMTP configuration file. To upgrade your MailMarshal version 5.x SMTP server to MailMarshal version 6.0 SMTP: 1. If you are upgrading MailMarshal within a DMZ, you may need to temporarily open port 1433 (SQL Server port) to allow communication with a SQL Server in your trusted network. For more information, refer to the documentation for your firewall or other perimeter defense tools. 2. If you are using MSDE and hosting it on a Microsoft Small Business Server (SBS), install MSDE 2000 on the server before you continue. For more information, see NetIQKB45716 at 3. On the MailMarshal version 5.x SMTP server, run the MailMarshal version 6.0 SMTP setup program from the CD or Web download. 6 Technical Reference

7 4. On the autorun window, click Begin Server Setup. 5. Read the Welcome window, and then click Next. 6. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement, and then click Next. 7. On the Upgrade Type window, shown in the following figure, click I want to install a full version of MailMarshal on this server, and then click Next. This option upgrades the MailMarshal version 5.x server to a MailMarshal version 6.0 SMTP Array Manager. 8. If you are using an existing MailMarshal installation that includes a database, on the SQL Server Options window, shown in the following figure, click I want to use an existing installation of SQL Server 2000 or MSDE Click Next. If your existing MailMarshal SMTP configuration does not include a database, you can click I want to install and use the Microsoft SQL Desktop Engine (MSDE). If your company needs multiple MailMarshal SMTP servers to handle your volume, use Microsoft SQL Server rather than MSDE. Upgrading to MailMarshal Version 6.0 SMTP 7

8 9. On the Folder Locations window, shown in the following figure, specify the current location of your MailMarshal version 5.x SMTP folders. By default, the setup program creates the new folders in \Program Files\NetIQ\MailMarshal. If you want to install MailMarshal on a different drive, click Customize. When you have completed specifying a new location, and return to this window, click Next. 8 Technical Reference

9 10. On the Database window, specify the connection details for the new MailMarshal version 6.0 SMTP database, and then click Next. Note: Do not specify your current MailMarshal version 5.x SMTP database. Specify the MS SQL Server computer name or IP address, a name for the new MailMarshal version 6.0 SMTP database, and the MS SQL Server or Windows credentials to access the database. 11. On the Ready to Install the Program window, click Install. 12. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service so the setup program can continue. 13. On the License window, make a note of the new license number the setup program generates for you. You may need the new License Key to reinstall MailMarshal on this computer at a later time. Click OK. 14. When the setup program is complete, ensure Launch Configurator is selected, and then click Finish. 15. Select the Server and Array Configuration node in the left pane and then, click Tools > Commit Configuration Changes. 16. In the right pane, right-click the current computer and click Properties. 17. On the General tab of the Properties window, click Restart All to restart all MailMarshal SMTP services, and then click OK. The MailMarshal version 5.x SMTP server is now upgraded to the MailMarshal version 6.0 SMTP Array Manager with the new MailMarshal version 6.0 SMTP database. 18. On the Tools menu, click MailMarshal Properties. Upgrading to MailMarshal Version 6.0 SMTP 9

10 19. On the MailMarshal Manager Properties window, click Backup. 20. Specify a backup location and file name. MailMarshal SMTP stores your upgraded configuration in MailMarshal version 6.0 SMTP XML format. Click Save. 21. Click OK to close the Properties window. Standalone Step 3: Migrating Your Data to MailMarshal Version 6.0 SMTP MailMarshal version 6.0 SMTP introduces changes that affect the MailMarshal SMTP SQL database schema, the MailMarshal SMTP folder structure, and some MailMarshal SMTP ile naming conventions. In this step of the upgrade process, you will download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard, from the NetIQ product upgrade download page at Note: It is important to download the updated Migration Wizard tool. The MM60Update01.exe version of the Migration Wizard supersedes the version of the tool delivered with the MailMarshal version 6.0 SMTP product. The last part of Step 3 is to run the MailMarshal SMTP Migration Tool from the Windows Start menu to migrate the MailMarshal version 5.x SMTP history database records and the quarantined and archived and associated log files to the new MailMarshal version 6.0 SMTP database and folder structure. Until you migrate your quarantined and archived and associated log files, you cannot view or manage the quarantined using the MailMarshal SMTP Console. The following sections provide details instructions for completing these steps. 10 Technical Reference

11 Folder and Filename Changes MailMarshal version 6.0 SMTP revises the folder structure and file naming conventions to support the new features and functions of the product. Folder Structure Remapping The following table shows how the MailMarshal version 5.x SMTP folders correspond to folders in MailMarshal version 6.0 SMTP. The table uses the default installation location, \Program Files\NetIQ\MailMarshal. MailMarshal version 5.x SMTP Folders \MailMarshal\MMExp \MailMarshal \Logging (no SQL logging) \MailMarshal \Decryption \Encryption \Incoming \Processed OK \Sending \MailMarshal \Deadletter N/A \Rulesets \Rulesets subfolders \ValidFingerprints MailMarshal version 6.x SMTP Folders \MailMarshal \Unpacking \MailMarshal \Logging \DBLog \ManagerDBLog (new folders now include database activity logs) \MailMarshal \Queues \Decryption \Encryption \Incoming \Processed OK \Sending \MailMarshal \Quarantine \Deadletter \GUID (one per each Rulesets subfolder) \Symbolic \Rulesets subfolders \ValidFingerprints The MailMarshal SMTP setup program duplicates your MailMarshal version 5.x SMTP and earlier \Rulesets folder structure in the new \Quarantine\Symbolic folder, copies the \Rulesets folder structure, and copies all folder data to the new structure. When the setup program is complete, however, MailMarshal version 6.0 SMTP annot yet recognize the MailMarshal version 5.x SMTP filenames. File Naming Changes Because MailMarshal version 6.0 SMTP introduces multi-node arrays, MailMarshal version 6.0 SMTP changed the quarantine and archive and associated log file naming conventions. The Migration Wizard renames the files as it migrates your MailMarshal version 5.x SMTP data to the new folder structure. Upgrading to MailMarshal Version 6.0 SMTP 11

12 The following table shows the file naming convention changes in MailMarshal version 6.0 SMTP. The new naming convention uses four digits before the extensions *.mml and *.log to indicate which MailMarshal version 6.0 SMTP server quarantines the message. MailMarshal version 5.x SMTP Filenames B mml B log MailMarshal version 6.0 SMTP Filenames B41e5befe mml B41e5befe log Downloading and Installing the Update After you have upgraded your MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP Array Manager, download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard. This update supersedes the Quarantine Upgrade Tool originally supplied with MailMarshal version 6.0 SMTP. In addition to the wizard, the update provides additional files, such as the MM60Update01_ReadMe.txt file and an updated MailMarshal SMTP Help file. To download and install MM60Update01.exe: 1. Download MM60Update01.exe from the Product Download page. You must use your MyNetIQ account as a customer with current maintenance to download this updated file. The update is available at the following location: 2. Follow the instructions on the download page to download the MM60Update01.exe file. 3. On the upgraded MailMarshal version 6.0 SMTP server, run MM60Update01.exe to install the Migration Wizard. Running the MailMarshal SMTP Migration Wizard Run the MailMarshal SMTP Migration Wizard only after you have upgraded your standalone MailMarshal version 5.x SMTP processing server to MailMarshal version 6.0 SMTP. Use the MailMarshal Migration Wizard to complete the following tasks: Migrate MailMarshal version 5.x SMTP history database records to the new MailMarshal version 6.0 database Migrate your MailMarshal version 5.x SMTP quarantined and archived and associated log files in the \Rulesets folder to the MailMarshal SMTP Array Manager \Quarantine folder Note: To ensure upgraded messages are logged with the correct timestamp, ensure the MS SQL Server hosting the new MailMarshal version 6.0 SMTP database and the upgraded MailMarshal version 6.0 SMTP Array Manager are in the same time zone. The wizard converts the internal representation of times from local time to UTC. The migration process can take a long time (hours or days), depending on the volume of database records and file data. MailMarshal continues to process new messages while the wizard is running. 12 Technical Reference

13 To run the MailMarshal SMTP Migration Wizard: 1. To start the Upgrade and Migration Wizard, click Start > Programs > NetIQ MailMarshal > MailMarshal Tools >MailMarshal Migration Tool. 2. Read the Welcome window, and then click Next. 3. Click Migrate both the history database records and the quarantined and archived and associated log files and then click OK. If you need to stage the upgrade and migration process due to time or other constraints, you can click Migrate only the history database records and run the wizard again later to migrate the quarantined and archived and associated log files. 4. If the MailMarshal version 5.x SMTP database connection information is not stored in the MailMarshal version 6.0 SMTP Configuration file, the wizard displays the Select Database window. Specify the MailMarshal version 5.x SMTP database location and credentials, and then click OK. 5. Select Automatic mapping and click Next. This option is available only after upgrading to MailMarshal version 6.0 SMTP. 6. Click Start to begin the data migration process. 7. The Status window displays the wizard progress. The wizard starts by migrating the history database records and then continues by migrating the quarantined and archived and associated log files. 8. The import process can take a long time (hours or days) depending on the volume of data. If you need to interrupt the process, click Stop. You can rerun the wizard later without losing data to complete the migration. Note: If the wizard encounters a message it cannot convert, you can choose to abort, retry, ignore the message, or ignore all problem messages. By choosing to ignore all problem messages, you can allow the wizard to run unattended. The wizard logs activity in Installation path\logging\migration.log file. Review the migration log text file to identify any messages the Migration Wizard cannot convert. 9. When the Status window indicates the data migration is complete, click Next. 10. The Finished window displays a summary of the migration. Click Finish to close the wizard. If you have interrupted the Migration Wizard before the data migration is complete, you can run the Wizard again at a later time to complete the process without losing data. Be sure to check the status in the migration.log file to identify and handle any unmigrated data. For more information about configuring and using your upgraded MailMarshal version 6.0 SMTP product, see the User Guide for MailMarshal Version 6.0 SMTP. Upgrading to MailMarshal Version 6.0 SMTP 13

14 Case 2: Array of MailMarshal SMTP Servers If your current MailMarshal version 5.x SMTP installation uses a standalone MailMarshal processing server, return to Case 1: Standalone MailMarshal SMTP Server, starting on page 3. If your current MailMarshal version 5.x SMTP installation uses an array of MailMarshal processing servers in the DMZ, continue with following the steps. Array: Existing MailMarshal Version 5.x SMTP Configuration The following figure illustrates a typical MailMarshal version 5.x SMTP configuration using multiple processing servers inside the DMZ, labeled MM1, MM2, and MM3. To complete an upgrade to MailMarshal version 6.0 SMTP, you must upgrade one server to the MailMarshal version 6.0 SMTP Array Manager, and then upgrade the additional MailMarshal version 5.x SMTP processing servers to MailMarshal version 6.0 SMTP. You must also migrate data on each upgraded server. In this MailMarshal version 5.x SMTP configuration, you normally run the MailMarshal Configurator by logging on to the Master processing server (MM1) inside the DMZ. However, other administrators are able to run the MailMarshal SMTP Management Console from a computer in the trusted network. In the scenario shown in the previous figure, the following ports are typically open between the DMZ and trusted network. Port Owner Description 25 SMTP traffic 389 LDAP LDAP connectivity to your directory server 1433 MS SQL MS SQL logging MailMarshal MailMarshal SMTP Management Console 14 Technical Reference

15 Array: Configuration After Upgrading to MailMarshal Version 6.0 SMTP When the upgrade to MailMarshal version 6.0 SMTP is complete, your environment should be similar to the following figure. The new configuration still has processing servers, called nodes, inside the DMZ (MM1, MM2, and MM3). However, a new component, the MailMarshal SMTP Array Manager (labeled MM4), is moved to the trusted network. The detailed steps refer you to the proper computers using the MM1, MM2, MM3, and MM4 notation. If you want to provide MailMarshal SMTP end users with the MailMarshal SMTP Spam Quarantine Management tool, you can deploy Microsoft Internet Information Server (IIS). The Spam Quarantine Management tool allows end users to review their quarantined and to specify a personal address blacklist and whitelist. You can install the MailMarshal SMTP Array Manager, Microsoft SQL Server, and Microsoft IIS on just one computer, but for clarity, the figure shows these applications installed on separate computers. For more information about deploying Microsoft IIS and using the Spam Quarantine Management tool, see the User Guide for MailMarshal version 6.0 SMTP. Upgrading to MailMarshal Version 6.0 SMTP 15

16 Because the Array Manager communicates with the processing nodes in the DMZ as well as the other services MailMarshal SMTP requires, only two ports must be open between the DMZ and trusted network, resulting in a more secure configuration. Using MailMarshal version 6.0 SMTP with the Array Manager, you must open only the following ports to your trusted network. Port Owner Description 25 SMTP MailMarshal SMTP servers to your existing environment MailMarshal MailMarshal SMTP Array Manager to MailMarshal SMTP processing nodes Using MailMarshal version 6.0 SMTP also simplifies maintaining your MailMarshal SMTP configuration since the Array Manager replicates policy to each of the nodes in the MailMarshal SMTP array. You can run the MailMarshal SMTP Configurator inside the trusted network. All the other components MailMarshal SMTP communicates with reside within the trusted network. Array: Upgrade and Migration Process Checklist The following checklist includes the steps required to upgrade a MailMarshal version 5.x SMTP array of servers to MailMarshal version 6.0 SMTP, and provides cross-references to the detailed instructions. Complete the steps in the following order. Array Upgrade Procedure Checklist 1. Back up important MailMarshal configuration and database files. For more information, see Array Step 1: Back Up Important MailMarshal SMTP Data on page Upgrade your MailMarshal version 5.x SMTP Master server to MailMarshal version 6.0 SMTP. For more information, see Array Step 2: Upgrading the MailMarshal Version 5.x SMTP Master Server to MailMarshal Version 6.0 SMTP on page Move the upgraded MailMarshal version 6.0 SMTP Array Manager components from the DMZ to a computer in your trusted network. For more information, see Array Step 3: Moving the MailMarshal Version 6.0 SMTP Array Manager on page Run the MailMarshal Migration Wizard to migrate your history database records and quarantined and archived and associated log files. For more information, see Array Step 4: Install and Run the Migration Wizard on page Repeat the upgrade installation process on each MailMarshal version 5.x SMTP server. Connect the upgraded nodes to the MailMarshal version 6.0 SMTP Array Manager, and run the Migration Wizard on each upgraded node. For more information, see Array Step 5: Upgrade Additional MailMarshal Version 5.x SMTP Servers on page Technical Reference

17 Array Step 1: Back Up Important MailMarshal SMTP Data The first step in the upgrade process is to back up important MailMarshal version 5.x SMTP database and configuration files. Back these files up to a network share or removable media to simplify moving the Array Manager later in the upgrade process. The following table lists the files to back up and refers you to additional information. File Name or Extension Typical Location Description *.mmr N/A MailMarshal SMTP configuration information. For more information, see Backing Up the MailMarshal Configuration on page 17. filetype.cfg *.xml usergroups.txt MailMarshal database install path install path\config install path\config MS SQL Server computer Additional MailMarshal configuration data, SpamCensor extended rules, and your MailMarshal user group definitions. For more information, see Back Up Custom Information on page 18. Microsoft SQL Server (SQL) database. For more information, see NetIQKB29284 at Quarantined and archived which is migrated from MailMarshal version 5.x SMTP to MailMarshal version 6.x SMTP will be unavailable in a MailMarshal version 5.x SMTP Console. If you wish to retain access to this with a MailMarshal version 5.5 SMTP Console you can back up the contents of your \Rulesets folder. Be aware the contents of the \Rulesets folders can be very large depending on your volume of and your retention period. Backing Up the MailMarshal Configuration Back up your MailMarshal version 5.x SMTP configuration before you begin installing the MailMarshal version 6.0 SMTP upgrade. To back up the MailMarshal SMTP configuration files: 1. Start the MailMarshal version 5.x SMTP Configuration console on the Master server. 2. On the Tools menu, click Server Properties. 3. On the Server Properties window, select the General tab. 4. Click Export. 5. Specify a storage location and file name and then click Save. Store the configuration data on a network share or removable media to simplify moving the Array Manager from this computer to another computer later in the upgrade process. 6. Click OK. Upgrading to MailMarshal Version 6.0 SMTP 17

18 Back Up Custom Information When you configure MailMarshal to enforce your policies, MailMarshal stores your customizations in a number of files. To simplify the upgrade process, back up these files using standard Windows techniques by copying them from the following locations to a network share or removable media. Filename and extension Typical file location Description filetype.cfg install path Additional MailMarshal SMTP configuration data *.xml install path\config SpamCensor extended rules usergroups.txt install path\config Your MailMarshal user group definitions For example, if you installed MailMarshal SMTP in the default location, \Program Files\NetIQ\MailMarshal, back up the files specified in the table from the following folders: \Program Files\NetIQ\MailMarshal \Program Files\NetIQ\MailMarshal\config Back Up the MailMarshal SMTP Database Use standard SQL Server backup techniques to store a safe copy of your MailMarshal version 5.x SMTP database. The Migration Wizard later migrate the information so you can access your data using MailMarshal version 6.0 SMTP. For more information about backing up a MailMarshal version 5.x SMTP database, see NetIQ KB article NetIQKB at Array Step 2: Upgrading the MailMarshal Version 5.x SMTP Master Server to MailMarshal Version 6.0 SMTP The following steps upgrade your MailMarshal version 5.x SMTP Master server to the MailMarshal version 6.0 SMTP Array Manager. During this step, run the MailMarshal version 6.0 SMTP setup program on your existing MailMarshal version 5.x SMTP Master server using the default settings to create a new database on your SQL Server. The upgrade process leaves your MailMarshal version 5.x SMTP database in place, creates a new MailMarshal version 6.0 SMTP database, and installs the MailMarshal version 6.0 SMTP rray Manager on the Master server. Next, run the MailMarshal SMTP Configurator to reload existing MailMarshal version 5.x SMTP rules. Finish by making a backup copy of the new configuration file. To upgrade the MailMarshal version 5.x SMTP Master server to MailMarshal version 6.0 SMTP: 1. If you are upgrading MailMarshal SMTP within a DMZ, you may need to temporarily open port 1433 (SQL Server port) to allow communication with a SQL Server in your trusted network. For more information, refer to the documentation for your firewall or other perimeter defense tools. 2. If you are using MSDE and hosting it on a Microsoft Small Business Server (SBS), install MSDE on the server before you continue. For more information, see NetIQKB45716 at 3. On the MailMarshal version 5.x SMTP server, run the MailMarshal version 6.0 SMTP setup program from the CD or Web download. 18 Technical Reference

19 4. On the autorun window, click Begin Server Setup. 5. On the Welcome window, click Next. 6. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement. Click Next. 7. On the Upgrade Type window, shown in the following figure, click I want to install a full version of MailMarshal on this server, and then click Next. This option upgrades all installed components and installs the MailMarshal Array Manager component. Upgrading to MailMarshal Version 6.0 SMTP 19

20 8. If you are using an existing MailMarshal SMTP installation that includes a database, on the SQL Server Options window, shown in the following figure, click I want to use an existing installation of SQL Server 2000 or MSDE Click Next. If your existing MailMarshal SMTP configuration does not include a database, you can click I want to install and use the Microsoft SQL Desktop Engine (MSDE). If your company needs a MailMarshal SMTP array to handle your volume, use Microsoft SQL Server rather than MSDE. 20 Technical Reference

21 9. On the Folder Locations window, shown in the following figure, specify the current location of your MailMarshal version 5.x SMTP folders. By default, the setup program creates the new folders in \Program Files\NetIQ\MailMarshal. If you want to install MailMarshal on a different drive, click Customize to specify the new location, and then click Next. Upgrading to MailMarshal Version 6.0 SMTP 21

22 10. On the Database window specify the connection details for the new MailMarshal version 6.0 SMTP database, and then click Next. Note: Do not specify your current MailMarshal version 5.x SMTP database. Specify the MS SQL Server computer name or IP address, a name for the new MailMarshal version 6.0 SMTP database, and the credentials to access the database. 11. On the Ready to Install the Program window, click Install. 12. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service to allow setup to continue. 13. On the License window, make a note of the new license number the setup program generates for you. You may need the new License Key to reinstall MailMarshal on this computer. Click OK. 14. When the setup program is complete, ensure Launch Configurator is selected, and then click Finish. 15. On the Tools menu, click Commit Configuration Changes. 16. Right-click the current computer and click Properties. 17. On the General tab of the Properties window, click Restart All to restart all MailMarshal services, and then click OK. 18. On the Tools menu, click MailMarshal Properties. 19. On the MailMarshal Manager Properties window, click Backup. 20. Specify a backup location and file name. To simplify the process of moving your MailMarshal SMTP Array Manager later, choose a network share or removable media for your backup location. MailMarshal SMTP stores your upgraded configuration in MailMarshal version 6.0 SMTP XML format. Click Save. 21. Click OK to close the Properties window. 22 Technical Reference

23 The upgraded MailMarshal version 5.x SMTP Master server is now upgraded to the Array Manager for MailMarshal version 6.0 SMTP. Later references in this document to MM1 refer to this upgraded computer. At this point, your product is upgraded to MailMarshal version 6.0 SMTP, however, MailMarshal version 5.x SMTP data has not yet been migrated to the new configuration and you cannot yet manage from the MailMarshal SMTP Console. You will migrate your MailMarshal version 5.x SMTP data in a later step. Array Step 3: Moving the MailMarshal Version 6.0 SMTP Array Manager This section describes the steps for moving the upgraded MailMarshal version 6.0 SMTP Array Manager from MM1 in the DMZ to a new computer, such as MM4, in the trusted network. Moving the Array Manager into the trusted network makes the MailMarshal SMTP configuration easier to manage and more secure, requiring fewer open ports between the DMZ and the trusted network. The following procedure requires you to perform steps on at least two computers: The upgraded MailMarshal version 6.0 SMTP Array Manager in the DMZ (MM1) The computer in the trusted network to which you are moving the MailMarshal version 6.0 SMTP Array Manager (MM4) You also must also be able to run MS SQL Enterprise Manager to remove a temporary database you create during the installation process. The following table provides an overview of the steps required to move a newly upgraded MailMarshal version 6.0 SMTP Array Manager in the DMZ (on MM1) to a new computer in the trusted network (MM4). The table also identifies the computers on which you perform the steps. On this computer New computer in trusted network where you want to move the Array Manager (MM4) SQL Server hosting MailMarshal database (SQL Server host) MailMarshal SMTP Array Manager in the DMZ (MM1) Perform these steps Install MailMarshal version 6.0 SMTP with Array Manager only option Create a temporary database during the installation process (TempMMDB) Point the new Array Manager to the previously upgraded database (MailMarshal6) Delete the temporary database created during the installation (TempMMDB) Remove the Array Manager component Rejoin the server to the array by pointing to the IP address of the new Array Manager in the trusted network (MM4) Note: The computer to which you move the Array Manager software (MM4) must not have any MailMarshal SMTP components installed. Ensure any MailMarshal SMTP services and tools are removed prior to installing the Array Manager component. Upgrading to MailMarshal Version 6.0 SMTP 23

24 To install the MailMarshal SMTP Array Manager component on the new computer in the trusted network: 1. On the computer in the trusted network where you want to move the Array Manager (MM4), run the MailMarshal SMTP setup program. On the autorun window, click Begin Server Setup. 2. On the Welcome window, click Next. 3. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement. Click Next. 4. On the Setup Type window, click Array of MailMarshal Servers, and then click Next. 24 Technical Reference

25 5. On the Array Deployment window, click I want to create a new array, and then click Next. 6. On the Array Manager Options window, click This server is only for managing the array, and then click Next. 7. Choose the installation location, and then click Next. Upgrading to MailMarshal Version 6.0 SMTP 25

26 8. On the Database window, specify details for a new temporary database that you will later delete, such as TempMMDB. Specify the correct MS SQL Server name or IP address, the temporary database name, and access credentials. Note: Do not specify the new MailMarshal version 6.0 SMTP database (MailMarshal6). Specify a temporary dummy database that you will later delete. 9. Click Install. 10. After the installation is complete, the setup program prompts you to start the MailMarshal SMTP Configuration Tool. The Configuration tool prompts you for basic information that will later be overwritten with the Backup configuration you previously saved. Complete the fields and then click OK. 11. On the Tools menu, click MailMarshal Properties. 26 Technical Reference

27 12. On the MailMarshal Manager Properties window, click Restore. 13. Navigate to the backup file you created on the upgraded MailMarshal version 6.0 SMTP Array Manager in the DMZ (MM1). Choose the backup file you created and click Open. 14. When MailMarshal SMTP has restored the configuration, the Configurator prompts you to commit the changes. Click OK. 15. On the Tools menu, click Commit Configuration Changes. 16. When prompted to restart services and commit the changes, click Yes. 17. Click OK. 18. On the Windows Start menu, click Start >Programs > NetIQ MailMarshal > MailMarshal Tools > MailMarshal Server Tool. Upgrading to MailMarshal Version 6.0 SMTP 27

28 19. On the Database tab, click Change. 20. Specify the SQL Server name or IP address, the MailMarshal version 6.0 SMTP database (MailMarshal6), and the credentials for accessing the database. 21. The MailMarshal Server Tool prompts you that a valid MailMarshal version 6.0 SMTP database already exists. Click Use to continue using the upgraded MailMarshal version 6.0 SMTP database. The database contains the upgraded MailMarshal version 5.x SMTP configuration but does not yet contain any data. You will migrate your data in later steps. 28 Technical Reference

29 22. When prompted to restart the MailMarshal SMTP MMArrayManager service, click Yes. 23. Perform the following steps on the MailMarshal SMTP Array Manager in the DMZ (MM1). Run the MailMarshal setup program. 24. Click Modify, and then click Next. 25. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement, and then click Next. 26. On the Setup Type window, click Array of MailMarshal Servers, and then click Next. Upgrading to MailMarshal Version 6.0 SMTP 29

30 27. On the Array Deployment window, click I want to join an existing array and then click Next. 28. On the MailMarshal Array window, specify the name or IP address of the newly installed Array Manager computer (MM4) and the port number. If the MM1 server is in a DMZ and not part of the Windows domain in which the Array Manager MM4 is a member, provide a valid Username, Password, and Domain. It is not necessary to provide an Administrator account. You can provide credentials for any user account to which you have delegated appropriate rights under the Manager Security tab of the MailMarshal Properties window in the MailMarshal Configuration tool. When complete, click Next. 29. If you are prompted to restart the Windows Management Instrumentation (WMI) services, click Yes. 30 Technical Reference

31 30. When prompted to rejoin the array, click Rejoin. 31. Perform the following step on the new Array Manager computer in the trusted network (MM4). On the Start menu, click Start >Programs > NetIQ MailMarshal > MailMarshal Configurator. Ensure the computer name for MM1 appears in the list and that all services on the upgraded MailMarshal version 6.0 SMTP server are running. 32. Perform the following step on the MS SQL Server computer. Delete the temporary database you created in Step 8 to conserve space on the SQL Server disk. Array Step 4: Install and Run the Migration Wizard MailMarshal version 6.0 introduces changes that affect the MailMarshal database schema, the MailMarshal folder structure, and some file names. To help you upgrade from MailMarshal version 5.x SMTP, NetIQ Corporation provides the Migration Wizard tool. In this step, download and install MM60Update01.exe, the updated Migration Wizard, from the Product Upgrade Download page at Then, run the wizard to migrate the history database records and the quarantined and archived and associated log files from the \Rulesets folder of your MailMarshal version 5.x SMTP server into the new MailMarshal version 6.0 SMTP folder structure. Until you migrate your quarantined and archived and associated log files, you cannot view or manage the quarantined using the MailMarshal Console. The file structure and naming conventions changed for MailMarshal version 6.0 SMTP. For more information and details about the changes, see Folder and Filename Changes on page 11. Downloading and Installing the Update After you have upgraded the MailMarshal SMTP Array Manager computer, download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard update. This update supersedes the Quarantine Upgrade Tool originally provided with MailMarshal version 6.0 SMTP. In addition to the wizard, the update provides additional files, such as the MM60Update01_ReadMe.txt file and an updated MailMarshal SMTP Help file. To download and install MM60Update01.exe: 1. Download MM60Update01.exe from the Product Download page. You must use your MyNetIQ account as a customer with current maintenance to download this updated file. The update is available at the following location: 2. Follow the instructions on the download page to download the MM60Update01.exe file. 3. On the Array Manager computer you upgraded to MailMarshal version 6.0 SMTP (MM1), run MM60Update01.exe to install the wizard and files. Upgrading to MailMarshal Version 6.0 SMTP 31

32 Running the MailMarshal SMTP Migration Wizard Run the MailMarshal SMTP Migration Wizard only after you have upgraded your MailMarshal version 5.x SMTP Master server (MM1) to MailMarshal version 6.0 SMTP. Use the MailMarshal SMTP Migration Wizard to complete the following tasks: Migrate MailMarshal version 5.x SMTP history database records to the new MailMarshal version 6.0 SMTP database Migrate your MailMarshal version 5.x SMTP quarantined and archived and associated log files in the \Rulesets folder to the MailMarshal Array Manager \Quarantine folder Note: To ensure upgraded messages are logged with the correct timestamp, ensure the MS SQL Server hosting the new MailMarshal version 6.0 SMTP database and the upgraded MailMarshal version 6.0 SMTP Array Manager are in the same time zone. The wizard converts the internal representation of times from local time to UTC. The migration process can take a long time (hours or days), depending on the volume of database records and file data. MailMarshal SMTP continues to process new messages while the wizard is running. To run the MailMarshal SMTP Migration Wizard: 1. On the upgraded MailMarshal version 5.x SMTP server (MM1), start the Migration Wizard. Click Start > Programs > NetIQ > MailMarshal > MailMarshal Tools >MailMarshal Migration Tool. 2. Read the Welcome window, and then click Next. 3. Click Migrate both the history database records and the quarantined and archived and associated log files and then click If you need to stage the upgrade and migration process due to time or other constraints, you can click Migrate only the history database records and run the wizard again later to migrate the quarantined and archived and associated log files. 4. If the MailMarshal version 5.x SMTP database connection information is not stored in the MailMarshal version 6.0 SMTP Configuration file, the wizard displays the Select Database window. Specify the MailMarshal version 5.x SMTP database location and credentials, and then click OK. 5. Select Automatic mapping and click Next. This option is available only after upgrading to MailMarshal version 6.0 SMTP. 6. Click Start to begin the data migration process. The Status window displays the wizard progress. The wizard starts by migrating the history database records and then continues by migrating the quarantined and archived and associated log files. 7. The import process can take a long time (hours or days) depending on the volume of data. If you need to interrupt the process, click Stop. You can rerun the wizard later without losing data to complete the migration. 32 Technical Reference

33 Note: If the wizard encounters a message it cannot convert, you can choose to abort, retry, ignore the message, or ignore all problem messages. By choosing to ignore all problem messages, you can allow the wizard to run unattended. The wizard logs activity in Installation path\logging\migration.log file. Review the migration log text file to identify any messages the Migration Wizard cannot convert. 8. When the Status window indicates the data migration is complete, click Next. 9. The Finished window displays a summary of the migration. Click Finish to close the wizard. If you have interrupted the Migration Wizard before the data migration is complete, you can run the Wizard again at a later time to complete the process. Be sure to check the status in the migration.log file to identify and handle any unmigrated data. Array Step 5: Upgrade Additional MailMarshal Version 5.x SMTP Servers After you have installed and moved the upgraded MailMarshal SMTP Array Manager to the computer in the trusted network (MM4), upgrade any additional MailMarshal version 5.x SMTP servers, such as MM2 and MM3, and connect them to the MailMarshal version 6.0 SMTP array by completing the following additional steps: Run the setup program on each MailMarshal version 5.x SMTP server, such as MM2 and MM3, you want to upgrade to MailMarshal version 6.0 n SMTP odes. Connect the upgraded nodes to the MailMarshal version 6.0 SMTP Array Manager (MM4) Run the Migration Wizard on each upgraded node (MM2 and MM3) to transfer your MailMarshal version 5.x SMTP data to MailMarshal version 6.0 SMTP Upgrading Additional MailMarshal Version 5.x SMTP Servers Complete the following steps on each additional MailMarshal version 5.x SMTP processing server in your DMZ, such as MM2 and MM3. To upgrade additional MailMarshal version 5.x SMTP servers: 1. On another MailMarshal version 5.x SMTP server in the DMZ, such as MM2 or MM3, run the MailMarshal version 6.0 SMTP setup program. 2. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement, and then click Next. Upgrading to MailMarshal Version 6.0 SMTP 33

34 3. On the Upgrade Type window, click I wish to install the node components onto this server. This option allows you to upgrade all installed components and connect to the MailMarshal version 6.0 SMTP Array Manager (MM4). 4. On the Folder Locations window, specify the current location of your MailMarshal folders. The setup program creates the new folders in the installation folder, which by default is \Program Files\NetIQ\MailMarshal. If you want to install MailMarshal SMTP on a different location, click Customize and specify the new location, and then click Next. 34 Technical Reference

35 5. On the MailMarshal Array window, specify the name or IP address and credentials for the Array Manager computer (MM4). If the computer is in a DMZ and not part of the Array Manager computer Windows domain, you must provide credentials. You are not required to provide an Administrator account. You can supply credentials for any account to which you have given proper rights on the Manager Security tab of the MailMarshal Properties window. 6. Click Install. 7. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service. Upgrading to MailMarshal Version 6.0 SMTP 35

36 8. On the Windows Start menu, click Start > Programs > NetIQ > MailMarshal > MailMarshal Server Tool. 9. On the Array / Node Communications tab, click Change. 36 Technical Reference

37 10. Specify details for the Array Manager (MM4) port and server name, and the current port to use. Click Join Array. Note: If the node is in a DMZ and not part of the Array Manager computer Windows Domain, you must provide credentials. Supply credentials for any account to which you have granted proper rights on the Manager Security tab of the MailMarshal Properties window. 11. When you click OK, the MailMarshal SMTP Server Tool prompts you to restart the services on the node. Click OK. 12. On the Windows Start menu, click Start > Programs > NetIQ MailMarshal > MailMarshal Configurator. 13. On the Tools menu, click Commit Configuration Changes. 14. Install and run the Migration Wizard. For more information, see Array Step 4: Install and Run the Migration Wizard on page Repeat Steps 1 to 13 from this task on each additional MailMarshal version 5.x SMTP server, such as MM3 or others. 16. On the MailMarshal SMTP Array Manager computer (MM4), run the MailMarshal Configurator. Ensure the MailMarshal SMTP service on each node is started and running. Upgrading to MailMarshal Version 6.0 SMTP 37