M500. eprism Installation Guide

Transcription

1 M500 eprism Installation Guide

2 St. Bernard Software, Inc. All Rights Reserved Worldwide. eprism is a registered trademark of St. Bernard Software, Inc. Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows NT/2000 are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. The eprism software and its documentation are copyrighted materials. Law prohibits making unauthorized copies. No part of this software or documentation may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into another language without prior permission of St. Bernard Software, Inc. Rev. June 28, St. Bernard Software, Inc. Input Rating 115/230V - 60/50 Hz, 5/2.5 A C US I.T.E. LISTED E This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference and (2) This device must accept any interference received, including interference that may cause undesired operation. This Class A digital apparatus meets all the requirements of the Canadian Interference- Causing Equipment Regulations. Cet appareil numerique de la classe A respecte toutes ies exigences du Regiement sur le materiel brouilleur du Canada. Elevated Operating Ambient Temperature If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the manufacturer's maximum rated ambient temperature (TMRA). Reduced Air Flow Installation of the equipment in a rack should be such that the amount of airflow required for safe operation of the equipment is not compromised. Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. Reliable Earthing Reliable earthing of rack mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (i.e., use of power strip, etc.). Contents ii

3 Contents Welcome!...1 eprism Installation...1 What You Need to Know to Install eprism...1 Customization...1 Special Considerations...2 St. Bernard Technical Support...2 About the Setup Process...3 Phase 1: Gathering Information...4 Taking Inventory...4 Getting eprism Information...4 Getting Network Information...4 Phase 2: Hardware Setup...7 Mounting the Hardware Appliance...7 LED Lights and Connectors...7 Network Diagram...8 Connecting eprism to the LAN...9 Powering Up...9 Phase 3: Configuring eprism...10 Installing the eprism Appliance Manager...10 Opening eprism from the Appliance Manager...11 Setup Wizard...13 Phase 4: Testing eprism Connectivity...15 Opening the System Administration Tool...15 Adding an eprism User...16 Logging on to the eprism Web-based Interface...17 Phase 5: Final Configuration...18 Changing Mail Exchange Routing...18 Appendix...19 Installing Other Software from the eprism CD...19 Finding Network Settings...19 Static Routes...19 Setup Screens...21 Contents iii

4 Contents iv

5 Welcome! eprism Installation Congratulations on your purchase of eprism, an gateway solution that filters messages, unwanted spam, and objectionable . eprism is an appliance that is easy to install and manage. As an option, you can also purchase virus protection to enhance eprism s filtering functions. Please use this installation guide to walk through the process of installing Appliance Manager and completing the initial configuration of eprism. For additional documentation on eprism, visit the St. Bernard support website: What You Need to Know to Install eprism Any administrator with basic networking knowledge can install eprism. You do not have to be a network guru, but you need to know your network topology. You should be able to: Identify the major hardware devices in your network (server, hub, router, firewall, modem, etc.). A network diagram would be helpful. Access the configuration settings on your network devices. Understand and be able to adjust how your is routed to your organization. This may require changes to your DNS settings. Customization Once you have installed eprism and completed the basic setup procedures, you will want to customize eprism to take full advantage of its filtering capabilities. This installation guide does not cover customization of eprism. For details on how to customize eprism and tailor it to enforce your organization s usage policies after it has been installed, please refer to the Administrators Guide included on your CD and available from the St. Bernard Software website. You can always find administration information in the online help included with eprism s System Administration software. Welcome! 1

6 Special Considerations DNS Settings How quickly you see the effects of mail filtering will depend on the DNS server s TTL (time to live) value for your domain s server. The TTL values for the DNS MX (mail exchanger) records determine how long domain servers and applications cache routing information before they check the DNS server for an update. If the TTL for eprism s MX record is set to 3 days, for example, Internet mail servers, depending on when they last retrieved the MX, will not route through the eprism appliance until the MX information is refreshed, possibly as long as 3 days later. If you want to check filtering results on the same day that eprism is installed, the MX TTL value would have to be set to something less than 1 day (e.g., 1 hour, 3 hours, 6 hours, etc.). To change the TTL value for mail servers, contact your DNS server administrator. After you ve finished testing, you may want to restore the original TTL value. A short TTL value for infrequently changing resources, like a mail exchanger, could create unnecessary network traffic. Other Network Considerations If you are concerned about your network s ability to interact with eprism, visit the eprism support website at the address indicated below. St. Bernard Technical Support If you are unable to resolve your issue using the manual, please contact St. Bernard Software s eprism support team. eprism-support@stbernard.com Phone (858) Web When contacting tech support, please be sure to include all relevant information about how eprism is configured on your network (i.e., topology, other hardware, networking software, etc.). Make sure to have your eprism serial number and registration key information. Also, in order to help the St. Bernard support staff solve your problem, send a network diagram showing the basic hardware that is in use on your network. Welcome! 2

7 About the Setup Process This guide divides the eprism setup process into five phases. It is important that all of the steps and phases be performed in the exact order that they are presented. Phase 1 Phase 2 Phase 3 Phase 4 Phase 5 Gather information about your hardware and network. You will be required to enter this information during when you run the setup wizard. Physically connect the eprism appliance to the network and prepare a network workstation for the software installation. Install and run the eprism setup wizard. The wizard helps you configure the eprism appliance with the network information you gathered in Phase 1. Test eprism to make sure it is communicating with your network. Configure your mail exchange routing to use eprism. Welcome! 3

8 Phase 1: Gathering Information Taking Inventory The following items should be included in your eprism package (please take a moment to verify that you have one of each): eprism appliance Power cord eprism CD Ethernet cable (standard wiring) Getting eprism Information In the spaces provided in this section, write the requested hardware and networking information. You will need this to configure eprism, or if you contact St. Bernard s technical support. Serial Number Your eprism serial number can be found on the back of the eprism appliance. (A) Serial Number: Registration Key and Expiration Date Your registration key is ed to you by St. Bernard when you purchase the eprism appliance. The registration contains an attached file, which is the registration key. We recommend that you save this file to the computer you intend to use as the administrator s machine. You will need this file when you run the setup wizard. This key will expire with the termination of your license agreement. If you have not received a registration key, contact your St. Bernard sales representative. Getting Network Information To configure eprism, you will need the following network information: eprism IP Address The eprism appliance requires a unique IP address on the subnet to which it is being connected. The computer on which you install the eprism administration software must be physically attached to the same subnet as eprism (i.e., they must use the same hub or switch). Phase 1: Gathering Information 4

9 Select an IP address that corresponds to the network settings of your workstation. Note You can use the Windows command-line utility ipconfig /all to determine your workstation s network settings. See Finding Network Settings (page 19) in the Appendix for details on using this utility. Write the IP address and netmask on lines (B) and (C). (B) eprism IP Address:... (C) Subnet mask (netmask):... Default Route (Gateway) Address The default route refers to the IP address of the device (usually a router) that lies between the local network (subnet) and the Internet. This address should be on the same physical network as eprism. (D) Default Gateway IP address:... eprism Name During the setup procedure, you will be asked to assign a host name to the eprism appliance. The name you choose should reflect your DNS domain, for example: eprism.example.com. You should then create an entry for eprism in your domain DNS configuration (check with your DNS administrator). The domain name helps accommodate notification through eprism. (E) eprism Host Name: Note It is also recommended that the name-to-number DNS entry ( A record) has a matching, reverse-mapped number-to-name entry ( PTR record) in the reverse DNS zone. This maximizes the chance that other mail servers will consider eprism's DNS settings to be valid. Name Server (DNS) You can improve the efficiency of eprism by letting it communicate with the same name server used by its clients. This prevents eprism from having to resolve client requests that are already cached in the name server. Write the IP Address of this DNS server below. (F) Name Server (DNS) IP address:... Note In "split DNS" environments, it is critical that the name server used by eprism is capable of resolving both internal and external names. Phase 1: Gathering Information 5

10 Internal IP Address Range During the setup procedure, you will be asked to define a range of internal IP addresses that you wish eprism to filter. After the initial configuration, the administrator can define additional address ranges. (G) Low IP address:... (H) High IP address:... Mail Server Settings The last type of information you will need for the setup wizard is the mail server network settings. Write the domain name of the network hosts being filtered (e.g., stbernard.com ) and the IP address of the server. (I) Domain: (J) Server IP address:... Phase 1: Gathering Information 6

11 Phase 2: Hardware Setup This phase describes eprism s LED lights and connectors and shows you how to physically install and connect eprism to your network. Mounting the Hardware Appliance If you have not done so already, now is a good time to take the eprism appliance out of the box and physically mount it in its final location (for instance, a 19" rack using the provided mounting brackets). Make sure the power switch on the back of eprism is in the Off (0) position, and then connect the power cord to the back of the unit and plug it in. LED Lights and Connectors Front Panel Feature Power LED Activity LED Description This blue LED illuminates when power is applied to the system. This red LED illuminates when the system is in normal operating mode. It indicates hard disk activity when the eprism appliance is in use. Rear Panel Feature Power Connector Internal Ethernet Connector Link/Speed LEDs On/Off Switch Description This connects power to eprism's VAC auto-sensing power supply. This RJ45 connector provides auto-sensing 10/100 Mbps Ethernet connectivity to your network. There are two LED indicators above the Ethernet connection: Link This yellow LED illuminates when the Ethernet cable is properly connected. Speed This LED indicates the speed of the Ethernet connection. No light indicates a 10Mbps connection; amber light indicates a 100Mbps connection. When power is not applied to the system, press this switch to turn eprism on. When power is applied, push and release the switch to initiate the power-down process. If the Power LED remains illuminated after 1 minute, push and hold the switch down until eprism powers off (5 seconds). Phase 2: Hardware Setup 7

12 Network Diagram eprism is best deployed when it is connected to the network hub or switch that sits between the internal network and the Internet router. The following diagrams illustrate typical network configurations with and without the eprism router. Without eprism With eprism Phase 2: Hardware Setup 8

13 Firewall Settings eprism requires access to the Internet using the following protocols and ports: Service Port Protocol Direction (in/out) SMTP 25 TCP Both HTTP 80 TCP Out DNS 53 TCP/UDP Both DCC 6277 TCP/UDP Both NTP 123 TCP/UDP Both FTP (optional) 21 TCP Out More information on eprism network settings can be found at Connecting eprism to the LAN Connecting eprism to the local area network (LAN) allows you to configure eprism using any of the workstations on that network. 1. Connect one end of the standard Ethernet cable to eprism s Ethernet port. 2. Connect the other end of the cable into the hub (or switch) that serves the local subnet. Powering Up Once eprism is connected to your LAN, turn the appliance on using the On/Off switch on the back of the unit. After powering on the unit, please allow approximately one minute for eprism to become ready. This is a normal part of eprism initialization. Once the Link/Activity and Link Speed lights turn on, eprism is initialized and ready for use. Phase 2: Hardware Setup 9

14 Phase 3: Configuring eprism On the administrator machine that you will use to manage eprism, install the Appliance Manager software from the eprism CD. Appliance Manager is used to configure and manage St. Bernard devices like eprism and iprism. Appliance Manager is a Java application, so any Microsoft Windows workstation that supports Java can be used. The initial installation of eprism is easier when installing the software from the eprism CD. However, it is possible to configure eprism without installing the eprism software. If you are running a non-windows operating system or cannot use the eprism CD, please contact St. Bernard Software technical support for assistance (see page 2 for contact information). Note The eprism installation CD includes a Java Runtime Environment (JRE) bundled with Appliance Manager. The installation software will handle the Java configuration automatically. Installing the eprism Appliance Manager 1. Insert the eprism CD into the CD-ROM drive of the administrator workstation. A web browser window should open with a menu of options. If a browser window does not appear automatically, browse to the location of the CD-ROM on your computer and open the index.html file using your web browser. Note The eprism Appliance Manager installer is also available for download from your installed eprism, at IP address]/installers. 2. From the browser, select the Install Appliance Manager Software option. 3. In the Introduction dialog box, click Next. 4. Select a folder into which the eprism Manager software is to be installed, and click Next. 5. Choose how you want shortcut menu items and icons configured for opening Appliance Manager after it is installed. The default setting for Windows installations is to add a shortcut to the Start Menu in the Programs group. You may also want to add a shortcut icon to the desktop. 6. Read the pre-installation summary to ensure you have selected the correct path. Then click Install. 7. After the installation is complete, click Done. If an error occurs during the installation process, try using a different installation path or obtaining administrator privileges before installing the software. If this does not work, contact technical support for further assistance (see page 2 for contact information). Phase 3: Configuring eprism 10

15 Opening eprism from the Appliance Manager 1. Before proceeding, make sure that eprism is properly connected to your network and powered on. Also, if there is firewall software running on this workstation, such as Norton Internet Security or Windows XP Internet Connection Firewall, disable it before continuing. 2. Open Appliance Manager from the Start Menu (or double-click the eprism Appliance Manager icon on your desktop). This will launch the Appliance Manager window. When Appliance Manager starts, it will automatically look for appliances on the network and display an icon for each discovered appliance. You should see a screen similar to the following: 3. Click the eprism logo to select the appliance (that corresponds to the serial number that you entered on line (A)), and then click Manage Selected Appliance. The IP Assignment Wizard will prompt you to configure an IP address for the eprism appliance. 4. Follow the instructions in the wizard to assign the IP address and subnet: Enter the IP Address that you wrote on line (B). Enter the Subnet Mask that you wrote on line (C). The network mask is a binary pattern that is stored in the client machine, server, or router and matched with the IP address. Use the slider to adjust the mask address. Phase 3: Configuring eprism 11

16 5. When the IP Assignment Wizard has finished running, the Welcome screen of the eprism System Administration tool will open. In the Username field, enter eprism (this is the required username for accessing the eprism appliance). In the Password field enter setup and click Sign In. Note This is a temporary password. The Administrator will create a new password during the setup wizard. Phase 3: Configuring eprism 12

17 Setup Wizard A setup wizard will guide you through the initial configuration process. If you need to make changes afterwards, or want to customize eprism s configuration, you can do so at any time through the System Administration tool. At the first screen: Make sure that the Configuration Mode list displays the Start a new configuration session option. Click Confirm to start the wizard. Follow the wizard s onscreen instructions to complete eprism s initial configuration. This includes setting up: License management (page 21) Registration (page 22) Date and time (page 23) Administrator settings (page 24) Network settings (page 25) Name service settings (page 27) Trusted internal network (page 28) domain map (page 29) Phase 3: Configuring eprism 13

18 After you complete the initial configuration information, eprism will conduct a self-test and display the system status. If unexpected errors are reported, you can click the Back button to make changes. Note For more information on the setup wizard and the initial configuration options, see Setup Screens (page 21) in the Appendix. Phase 3: Configuring eprism 14

19 Phase 4: Testing eprism Connectivity In this phase you will open the System Administration tool to verify that you can access eprism. This is important because eprism s system administration functions are available only from workstations on which Appliance Manager is installed. The System Administration tool allows you to: Configure network settings Add and manage user accounts Run diagnostic tests Install eprism software updates Once user accounts are defined, authenticated users can manage their personal Whitelists and Blacklists through a web browser. The last test in this section will confirm that the web browser login is available. Opening the System Administration Tool Before performing this test, make sure eprism is properly connected and has had time to completely start up (approximately 1 minute). To open the System Administration tool: 1. Open Appliance Manager on the administrator s machine. 2. Click the St. Bernard eprism logo. 3. Click Manage Selected Appliance and select the Administrative Interface menu option. 4. Enter the administrator username and password (these values were set during the setup wizard). 5. Click Sign In. The eprism System Administration window opens with four options: System Settings Mail Administration and Reports Diagnostics HotFix Manager Phase 4: Testing eprism Connectivity 15

20 Adding an eprism User eprism users can access and modify the Whitelists and Blacklists. Users are added through the System Administration tool on the administrator s workstation. To add a user: 1. Log in to the System Administration tool from Appliance Manager. 2. Click Mail Administration and Reports. This will open a browser window and display the Global Settings page. 3. Click the Administration link. 4. Click the User Accounts link. Note If eprism is configured to use NTLM authentication, then clicking the User Accounts link will display a list of user accounts provided by the NT domain controller. This configuration is not part of the setup wizard; see the Administration Guide for more information. 5. Click the Add New User link. 6. Enter a User ID for the new account. 7. In the field, enter the user s address. 8. In the Password field, enter a password for the user. 9. Re-enter the user password in the Confirm Password field. The password must match the one you typed in the Password field. 10. Click Add User. The new user appears in the User Accounts window. Phase 4: Testing eprism Connectivity 16

21 Logging on to the eprism Web-based Interface After ensuring that you can access the System Administration functions through Appliance Manager, you may want to check that the web-based login is available for users to modify Whitelists and Blacklists. Prior to running this test, you must have already set up a user using the System Administration tool (see the previous section). Note For security reasons, the administrator account cannot log in to the eprism web-based interface. All administrative tasks must be performed through the System Administration tool. To log in to the web interface: 1. Open a web browser. 2. Browse to the IP address of the eprism appliance (e.g., enter in the address bar of your web browser). Note eprism also supports the https protocol for secure login (e.g., 3. Enter a valid username and password. If the login is successful, you will see the following screen: Phase 4: Testing eprism Connectivity 17

22 Phase 5: Final Configuration Changing Mail Exchange Routing Once you have installed the eprism hardware, configured the software, and successfully completed the eprism self tests, you need to modify your mail system s routing so that eprism is the gateway for your organization. To set your inbound mail traffic to route through eprism, do one of the following: Adjust the DNS of your primary mail exchanger (MX) record for your domain, or Ask your ISP to adjust where it sends your domain s . eprism will be configured to relay tagged and non-spam messages to the internal mail server. To set your outbound mail traffic to route through eprism, adjust your internal mail server to send all Internet bound to eprism. eprism should be configured with the address of the internal mail server as the sole relayer. Note A relayer is an internal system that is allowed to use eprism to send to other domains. The context for relaying is the outbound direction, and is usually set to the address of the internal mail server. Relayers are configured in the System Administration tool: System Settings > Mail > Relayers. Phase 5: Final Configuration 18

23 Appendix Installing Other Software from the eprism CD The eprism CD also contains Adobe Acrobat Reader. You will need Acrobat Reader to view the eprism User Guide. The guide can be accessed from the eprism Manager folder in the Windows Programs menu. Finding Network Settings If you don t know the network settings of the administrator workstation, you can use the Windows command-line utility ipconfig with the /all switch to display this information. 1. Open a command prompt: From the Start Menu, select Run, and then type cmd (Windows NT4, 2000, and XP) or command (Windows 9x, ME) and click OK. 2. At the command prompt, type ipconfig /all and press Enter. 3. Look for the IP address information in the Ethernet adapter Local Area Connection section. For example: Ethernet adapter Local Area Connection Connection-specific DNS Suffix.. :.example.com IP Address : Subnet Mask : Default Gateway : DNS Servers : Static Routes By default, eprism monitors workstations and servers that are attached to the same IP network. To communicate with workstations on other IP networks, static routes must be employed. Likewise, if your network uses local DNS servers that are not accessible through the default gateway, you will need to provide static routes to these servers. Do I Need to Enter Static Routes? This section will help you determine if you need to enter static routes. Answer the following questions about your network, and then follow the instructions after the appropriate Yes or No response: Question 1: Is eprism installed on a different subnet than the workstations it will be serving (i.e., does a router separate eprism from the workstations)? If No, you do not need to enter a static route. Go to Question 3. Appendix 19

24 If Yes, eprism may require a static route in order to connect to those workstations. Go to Question 2. Question 2: Does the gateway that connects eprism to the other subnets have the same IP address as the default gateway you entered on line (D)? If Yes, you do not need to enter a static route. Go to Question 3. If No, you will have to provide eprism with a static route to each network through its associated gateway. Enter that information below, and then go to Question 3. Enter the IP Address for each gateway (usually a router or a switch) that connects to a subnet you want eprism to monitor. Then enter the subnet and netmask that identify the workstations you want eprism to monitor. If there are multiple gateways, enter their values to the right of line (K). (K) Gateway IP Address:... (L) Subnet IP Address:... (M) Netmask:... Question 3: Does the network on which eprism is installed use DNS servers that are on the same local subnet as eprism, or reachable via the default gateway? If Yes, eprism will not require a route to reach them. If No, you must add a static route to the subnet that the DNS server is located on. Refer to question 2 above. Enter the IP address for each DNS server that resides on a different local subnet. Then enter the subnet and netmask IP addresses. If there are multiple DNS servers, use the margin space to enter those addresses. (N) Name Server (DNS) Address:... (O) Subnet IP Address:... (P) Netmask:... Entering Static Routes in eprism If you have determined that you need to add static routes for subnet gateways and DNS servers, you can do so at any time through the System Administration tool (Settings > Network > Routes). Refer to your eprism Administrator s Guide or the online help for instructions on entering static routes. Appendix 20

25 Setup Screens This section provides a closer look at the configuration information entered in the setup wizard. License Management 1. Verify that the serial number displayed on the registration screen matches the serial number written down on line (A). 2. Click Upload Key to open a dialog box for locating the registration file sent to you by St. Bernard. If you have not downloaded the attachment to your local drive, do so now. 3. Browse to the downloaded registration file and click Open to upload the file. Serial No. is the serial number of the eprism appliance. Master Expiration is the expiration date of your current subscription. If you purchased the antivirus and/or the spam filter list options, you will see descriptions and expiration dates listed for those options. 4. Click Next to continue to the next screen. Appendix 21

26 Registration 1. Enter the administrator s and contact information in the Registration screen. The administrator is the person designated to configure eprism and update mail filtering rules. Don t forget to enter your correct ; this ensures that eprism can contact you if a problem is encountered. 2. Click Next to continue to the next screen. Appendix 22

27 Date and Time 1. In the Timezone list, select the correct time zone. 2. Set the time. You can do this manually, or you can synchronize eprism with a Network Time Protocol (NTP) server. To set the time manually: Click Time and set the current time; then click Set Now. To synchronize eprism with a NTP server: Click Use NTP and enter a valid IP address in the Server field. 3. Click Next to continue to the next screen. Appendix 23

28 Administrator Settings The default Admin Username value is set to eprism and cannot be changed. 1. Enter an Admin Password for the administrator. 2. Enter the password again in the Verify Password field to confirm the password. You will need this password the next time you log on to eprism. 3. Click Next to continue to the next screen. Appendix 24

29 Network Settings 1. In the Mode list, select the Ethernet option that defines your network. The options are: Auto Automated detection process that determines the type of network you have. This is the recommended setting (see note below for more information). 10BaseT/UTP/full duplex 10Mbps network where data is transmitted and received over the same channel simultaneously. 10BaseT/UTP 10Mbps network where data is transmitted in both directions, but only one direction at a time. 100BaseT/UTP/full duplex 100Mbps network where data is transmitted and received over the same channel simultaneously. 100BaseT/UTP 100Mbps network where data is transmitted in both directions, but only one direction at a time. Note Auto mode allows eprism to automatically negotiate the best Ethernet connection. However, this will work only if the hub or switch to which eprism is connected is also set to auto-detect mode. If eprism and the hub/switch are not set to the same mode, communication errors will occur. Appendix 25

30 2. In the IP Address field, the IP address defaults to the address you entered in the IP Address wizard. This is the address of the eprism unit. 3. In the Netmask field, the network mask defaults to the value you selected in the IP Address wizard. 4. In the Default Gateway field, enter the default gateway IP address from line (D). This is the IP address of the device (usually a router) that lies between the logical network (subnet) and the Internet. This address should be on the same logical network as eprism. The route specifies the location on the network through which all externally routed traffic passes. 5. Click Next to continue to the next screen. Appendix 26

31 Name Service Settings 1. In the Hostname field, enter a host name/domain (e.g., eprism.example.com) for the eprism appliance. This is the value you entered on line (E). The host name is the logical name assigned to a computer. Note For maximum acceptance by Internet mail servers, it is recommended that the eprism hostname have a forward AND reverse mapping, and that they match. For example, the IP address that a forward lookup returns (eprism.example.com => ) should return the same domain name from a reverse lookup ( => eprism.example.com). 2. In the Nameserver field, enter the IP address of the DNS server. This is the value you entered on line (F). The nameserver is a network server that translates domain names into IP addresses. 3. Click Next to continue to the next screen. Appendix 27

32 Trusted Internal Network Specify the range of host IP addresses on the internal network. These are the hosts for which eprism will filter . Additional host configuration is available once the setup process has been run. 1. Enter a Name to describe the range of trusted hosts. The administrator can set up additional ranges after running the initial setup process. 2. Enter Low IP and High IP addresses to define the range of addresses. These are the values you entered on lines (G) and (H). 3. Click Next to continue to the next screen. Appendix 28

33 Domain Map Tell eprism where to send inbound that is destined for your primary domain. 1. In the Domain field, enter the domain of the server. This is the value you entered on line (I). 2. In the Server IP field, enter the internal server s IP address. This is the value you entered on line (J). 3. Click Next to continue to the next screen. Appendix 29

34 eprism Spam Policy eprism s eguard anti-spam engine always identifies and rejects obvious spam, with extremely low false-positive rates. Additionally, you can define how eprism should handle remaining messages, including your organization s desired messages, and the unwanted messages that eguard s conservative processing could not positively identify as spam. Select one of the following policies: Tag and Pass this option delivers messages, adding a subject tag (defined in the Subject Tag field) to messages that are likely spam. Light Filtering this option rejects messages when eprism s heuristics-based processing determines the message is likely spam. Other messages (non-spam and possible spam) are delivered with no subject tagging performed. Heavy Filtering this option rejects messages when eprism s heuristics-based processing determines the message is likely to be spam, even if it cannot positively identify it as spam All other messages are delivered with no subject tagging performed. Appendix 30

35 Finishing the Setup Wizard After you complete the wizard, a summary screen appears, giving you the option of saving the settings or going back to make changes. If you save the wizard settings, you can make changes at any time through eprism s System Administration window. Appendix 31

36 Testing Wizard Configuration After you complete the domain settings, eprism runs through a self-test process that verifies eprism s configuration. If any of the test parameters fail, you can go back and change settings in the wizard screens, or you can close out of the test window and make changes at another time through eprism s System Administration tool. Note eprism will also send a test welcome to the address defined in the Administrator Settings screen of the setup wizard. Outbound s can be tested from clients on the trusted network. Appendix 32

37 Installation Guide M CORPORATE ADDRESS Avenue of Science San Diego, CA USA Toll Free: Telephone: Fax: Web: EUROPEAN ADDRESS Unit 4, Riverside Way Watchmoor Park, Camberley, Surrey GU15 3YQ, United Kingdom Telephone: +44 (0) Support Telephone: +44 (0) Fax: +44 (0) Protecting Your Network Investment St. Bernard Software Inc. All rights reserved. The St. Bernard Software logo is a trademark of St. Bernard Software Inc. eprism is a registered trademark of St. Bernard Software Inc. All other trademarks and registered trademarks are hereby acknowledged. EPInstallGuide0605