Upgrading from VIPRE Security for Exchange to GFI MailEssentials

Upgrading from VIPRE Email Security for Exchange to GFI MailEssentials

The information and content in this document is provided for informational purposes only and is provided "as is" with no warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. GFI Software is not liable for any damages, including any consequential damages, of any kind that may result from the use of this document. The information is obtained from publicly available sources. Though reasonable effort has been made to ensure the accuracy of the data provided, GFI makes no claim, promise or guarantee about the completeness, accuracy, recency or adequacy of information and is not responsible for misprints, out-of-date information, or errors. GFI makes no warranty, express or implied, and assumes no legal liability or responsibility for the accuracy or completeness of any information contained in this document. If you believe there are any factual errors in this document, please contact us and we will review your concerns as soon as practical. Windows, Exchange, IIS,.NET, Internet Explorer, Outlook, SQL Server and Microsoft are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All product and company names herein may be trademarks of their respective owners. GFI MailEssentials is copyright of GFI SOFTWARE Ltd. - 1999-2012 GFI Software Ltd. All rights reserved. Document Version: 1.4.0 Last updated (month/day/year): 20/12/2012

1 Introduction 1.1 About this manual The scope of this guide is to provide you with all the required information related to upgrading VIPRE Email Security for Exchange to GFI MailEssentials. NOTE For more information about the commercial terms of upgrading VIPRE Email Security for Exchange to GFI Software Ltd refer to: http://go.gfi.com/?pageid=me_commercialterms 1.2 Terms and conventions used in this manual Term Description Additional information and references essential for the operation of GFI MailEssentials. Important notifications and cautions regarding potential issues that are commonly encountered. > Step by step navigational instructions to access a specific function. Bold text Italics text Code Items to select such as nodes, menu options or command buttons. Parameters and values that you must replace with the applicable value, such as custom paths and file names. Indicates text values to key in, such as commands and addresses. 1.3 Pricing and Licensing Information on pricing and licensing for GFI MailEssentials is available on: http://go.gfi.com/?pageid=me_licensing For information on how GFI MailEssentials counts license use, refer to: http://go.gfi.com/?pageid=me_retrieveandcountusers GFI MailEssentials 1 Introduction 4

2 Upgrade information This topic describes: What you need to upgrade to GFI MailEssentials How your VIPRE Email Security for Exchange configuration is migrated to GFI MailEssentials Any limitations of this migration process. IMPORTANT It is highly recommended that this chapter is read and understood fully before upgrading VIPRE Email Security for Exchange to GFI MailEssentials since it contains information about settings and configurations that may not be migrated to GFI MailEssentials. IMPORTANT Quarantined emails within VIPRE Email Security for Exchange are not moved to GFI MailEssentials. Take action on and manage all existing quarantined emails before upgrading to GFI MailEssentials. IMPORTANT Rules in VIPRE Email Security for Exchange that have email addresses with wildcards will not work when imported to GFI MailEssentials Personal Whitelist\Blocklist. Support for wildcards is planned for GFI MailEssentials Service Release 4. Topics in this chapter: 2.1 System requirements 6 2.1.1 Required VIPRE Email Security for Exchange versions 6 2.1.2 GFI MailEssentials version that VIPRE Email Security for Exchange is upgraded to 6 2.1.3 GFI MailEssentials System requirements 6 2.1.4 Hardware requirements 6 2.1.5 Processor 6 2.1.6 Available Memory (RAM) 6 2.1.7 Free Disk Space 6 2.1.8 Software requirements 7 2.1.9 Antivirus and backup software 8 2.1.10 Firewall port settings 9 2.2 Upgrade Changes 9 2.2.1 General information 10 2.2.2 Attachment filtering 12 2.2.3 Email Actions 15 2.2.4 Email Direction 16 2.2.5 Disclaimers 17 2.2.6 Antispam 21 GFI MailEssentials 2 Upgrade information 5

2.1 System requirements This topic contains important information on: Which versions of VIPRE Email Security for Exchange can be upgraded to GFI MailEssentials Which version of GFI MailEssentials you can upgrade to What hardware and software requirements are required to upgrade your existing VIPRE Email Security for Exchange installation to GFI MailEssentials 2.1.1 Required VIPRE Email Security for Exchange versions For VIPRE Email Security for Exchange, the build that must be installed to perform the upgrade is: VIPRE Email Security for Exchange 32bit version 3.1.14905 VIPRE Email Security for Exchange 64bit version 3.1.25862 If the VIPRE Email Security for Exchange installed build is earlier than the one above, the GFI MailEssentials installer will not allow the upgrade to continue. The builds mentioned above can be downloaded by clicking on the above links. 2.1.2 GFI MailEssentials version that VIPRE Email Security for Exchange is upgraded to The earliest GFI MailEssentials build that supports upgrading from VIPRE Email Security for Exchange to GFI MailEssentials is: GFI MailEssentials 2012 Service Release 3 (build 20121101). 2.1.3 GFI MailEssentials System requirements 2.1.4 Hardware requirements The minimum hardware requirements for GFI MailEssentials are: 2.1.5 Processor Minimum: 1Ghz Recommended: 2GHz with multiple cores 2.1.6 Available Memory (RAM) Minimum: 1.2GB Recommended: 1.5GB 2.1.7 Free Disk Space Minimum: 6GB Recommended: 10GB NOTE Hardware requirements depend on a range of factors including email volume, and number of Anti Virus engines enabled in GFI MailEssentials. The requirements specified above are required for GFI MailEssentials only. GFI MailEssentials 2 Upgrade information 6

2.1.8 Software requirements Supported Operating Systems Windows Server 2003 Standard or Enterprise (x86 or x64)(including R2) or later (including Microsoft Windows Server 2012 - Standard and DataCenter editions). Supported Mail Servers GFI MailEssentials can be installed on the following mail servers without any further configuration. Microsoft Exchange Server 2013 NOTE Information Store Protection (VSAPI) is not supported on Microsoft Exchange Server 2013 because VSAPI was removed from Microsoft Exchange Server 2013 by Microsoft. Microsoft Exchange Server 2010 Microsoft Exchange Server 2007 SP1 or higher Microsoft Exchange Server 2003 GFI MailEssentials can also be installed in an environment with any SMTP compliant mail server. In this case, GFI MailEssentials should be installed on the gateway/perimeter server so that spam is filtered before reaching the mail server. Supported Internet browsers GFI MailEssentials can be used with the following Internet browsers: Microsoft Internet Explorer 8 or later Google Chrome version 22.0.1229.94 (October 10, 2012) or later. Mozilla Firefox version 16.0.2 (October 26, 2012) or later. Other required components Internet Information Services (IIS ) World Wide Web service Internet Information Services (IIS ) SMTP service - Except when installing on Microsoft Exchange 2007 /2010 server Microsoft.NET Framework 4 ASP.NET 4.0 Windows Authentication role and Static Content services - Required when installing on Microsoft Windows Server 2008/2008R2 MSMQ - Microsoft Messaging Queuing Service - for more information how to install MSMQ, refer to: http://go.gfi.com/?pageid=me_msmq GFI MailEssentials 2 Upgrade information 7

NOTE For more information on how to install pre-requisites on Microsoft Windows Server 2008 refer to: http://go.gfi.com/?pageid=me_win2008 For more information on how to install pre-requisites on Microsoft Windows Server 2012 refer to: http://go.gfi.com/?pageid=me_win2012 NOTE GFI MailEssentials Information Store Protection cannot be used if any other software is registered to make use of Microsoft Exchange VSAPI. NOTE GFI MailEssentials can also be installed in virtual environments such as Microsoft Hyper-V and VMWare virtualization software. Microsoft Virtual Server cluster group resource with a physical disc cluster. This is required ONLY for environments running Microsoft Exchange 2003 clusters. NOTE For more information on how to create a Resource Group for an Exchange Virtual Server in a Windows Server Cluster, refer to: http://go.gfi.com/?pageid=me_ Clusterresourcegrouphowto. 2.1.9 Antivirus and backup software Antivirus and backup software scanning may cause GFI MailEssentials to malfunction. This occurs when such software denies access to certain files required by GFI MailEssentials. Disable third party antivirus and backup software from scanning the following folders: 32-bit installations (x86) <..\Program Files\Common Files\GFI> <GFI MailEssentials installation path>\gfi\mailessentials\ <..\Inetpub\mailroot> - if installed on a gateway machine. 64-bit installations (x64) <..\Program Files (x86)\common Files\GFI> <..\Program Files\Exchsrvr\Mailroot> - if installed on the same machine as Microsoft Exchange 2003 <..\Program Files\Microsoft\Exchange Server\TransportRoles> - if installed on the same machine as Microsoft Exchange 2007 <..\Program Files\Microsoft\Exchange Server\V14\TransportRoles> - if installed on the same machine as Microsoft Exchange 2010 <..\Program Files\Microsoft\Exchange Server\V15\TransportRoles> - if installed on the same machine as Microsoft Exchange 2013 GFI MailEssentials 2 Upgrade information 8

2.1.10 Firewall port settings Configure your firewall to allow the ports used by GFI MailEssentials. Port Description 53 - DNS Used by the following anti-spam filters: 20 & 21 - FTP IP DNS Blocklist SpamRazer URI DNS Blocklist Used by GFI MailEssentials to connect to ftp.gfi.com and retrieve latest product version information. 80 - HTTP Used by GFI MailEssentials to download product patches updates for: SpamRazer Anti-Phishing Bayesian Analysis Antivirus definition files Trojan and executable scanner Email Exploit engine GFI MailEssentials downloads from the following locations: http://update.gfi.com http://update.gfisoftware.com http://support.gfi.com *.mailshell.com *.spamrazer.gfi.com NOTE GFI MailEssentials can also be configured to download updates through a proxy server. 8013, 8015, 8021 - Remoting These ports are used for inter-process communication. No firewall configuration is required to allow connections to or from the remoting ports since all the GFI MailEssentials processes run on the same server. NOTE Ensure that no other applications (except GFI MailEssentials) are listening on these ports. If other applications are using this ports, these ports can be changed. 389/636 - LDAP/LDAPS This port is used in these scenarios: Microsoft Exchange environment - Required if the server running GFI MailEssentials does not have access/cannot get list of users from Active Directory, for example, in a DMZ environment or other environments which do not use Active Directory. Lotus Domino mail server environment - Required to get email addresses from Lotus Domino server. Other SMTP mail server environments - Required to get email addresses from SMTP server. 2.2 Upgrade Changes This topic provides you with all the information about how your existing VIPRE Email Security for Exchange settings are transferred over to GFI MailEssentials upon upgrade. Topics in this chapter: GFI MailEssentials 2 Upgrade information 9

2.2.1 General information 10 2.2.2 Attachment filtering 12 2.2.3 Email Actions 15 2.2.4 Email Direction 16 2.2.5 Disclaimers 17 2.2.6 Antispam 21 2.2.1 General information VIPRE Email Security for Exchange provides the following settings: Global Settings Policy Settings There can be only one global setting, together with unlimited policy settings. Each setting, in turn, has one or more rules attached to it. On upgrading to GFI MailEssentials, Global setting rules are set for all users, while Policy Setting rules are set for specific users. Screenshot 1: VIPRE Email Security for Exchange - applying rules to users Within VIPRE Email Security for Exchange, rules are applied to users through the screen shown in screenshot 1, above. GFI MailEssentials 2 Upgrade information 10

Screenshot 2: GFI MailEssentials - applying the previous VIPRE Email Security for Exchange installation's rules to all users Within GFI MailEssentials, the previous VIPRE Email Security for Exchange global settings are applied to all users though the screen shown in screenshot 2 above. Effectively, rule will be applied to all users; if list is empty, none are excluded. GFI MailEssentials 2 Upgrade information 11

Screenshot 3: GFI MailEssentials - applying the previous VIPRE Email Security for Exchange installation's rules to specific users The Policy settings in VIPRE Email Security for Exchange are applied in GFI MailEssentials through the screen shown in screenshot 3 above. Effectively, rule will only apply to the listed users; whoever is not on the list is excluded. 2.2.2 Attachment filtering All rules in global settings, including Attachment filtering, are applied to all users. Screenshot 4: Attachment filtering - global settings GFI MailEssentials 2 Upgrade information 12

Within VIPRE Email Security for Exchange, all rules within the global settings are enabled if Enable attachment filtering checkbox is enabled. GFI MailEssentials will interpret this to enable or disable a rule. In VIPRE Email Security for Exchange, an X-Header is added if the Add X-Header option is enabled. This is not supported in GFI MailEssentials. Screenshot 5: Attachment filtering - global settings - limits group box. The limits group box checks if an attached file is processed or not. In GFI MailEssentials, settings are transposed to Content Filtering > Decompression Engine where the following options are enabled: 1. Check size of uncompressed files in archive 2. Check for amount of files in archives GFI MailEssentials 2 Upgrade information 13

Smart Rules Screenshot 6: Attachment filtering - smart rules Within VIPRE Email Security for Exchange, smart rules are a set of predefined rules built in within VIPRE Email Security for Exchange that could be enabled/disabled and which filter attachments according to extension type. Within GFI MailEssentials each Smart rule is converted to an Attachment filtering rule (available from Content Filtering > Attachment filtering node). GFI MailEssentials 2 Upgrade information 14

Regular Expression Rule Screenshot 7: Regular expression rule VIPRE Email Security for Exchange regular expressions are converted to Advanced Content Filtering Rules within GFI MailEssentials. These check the attachment name according to the given regex. 2.2.3 Email Actions Screenshot 8: VIPRE Email Security for Exchange Actions GFI MailEssentials 2 Upgrade information 15

Screenshot 9: GFI MailEssentials Actions All attachment filtering actions within VIPRE Email Security for Exchange have an equivalent within GFI MailEssentials. VIPRE Email Security for Exchange Action Delete attachment Delete entire message Quarantine attachment Quarantine entire message Allow GFI MailEssentials Action Delete Attachment Only and Send Sanitized Copy Delete Quarantine Attachment Only and Send Sanitized Copy Quarantine Do not block 2.2.4 Email Direction Screenshot 10: VIPRE Email Security for Exchange Email direction GFI MailEssentials 2 Upgrade information 16

Screenshot 11: GFI MailEssentials Email direction All email directions within VIPRE Email Security for Exchange have an equivalent within GFI MailEssentials. VIPRE Email Security for Exchange Direction Inbound External Inbound Internal Outbound External Outbound Internal GFI MailEssentials Direction Inbound Internal Outbound Internal Additional notes If rules contain regular expressions, these are moved to Advanced Content Filtering. Global Settings always have notifications both for administrator and local user. Global Settings are always set to Block all except list below, where the list would be empty. Policies always have notification for the administrator. User notifications depend on choice selected in VIPRE Email Security for Exchange. VIPRE Email Security for Exchange has an upper limit to the size of files that could be processed - GFI MailEssentials has a lower limit as to files that are not be blocked. Within VIPRE Email Security for Exchange, attachment filters are set as one rule per item. (For example, one rule for *.jpg, another rule for *.bmp). On upgrade to GFI MailEssentials this setup is retained. For each policy, there is an option to Scan within allowed archives. In GFI MailEssentials, there is a similar rule in Decompression Engine, Scan within archives which is applied to all attachments. SMART Rules are hard coded in VIPRE Email Security for Exchange. For example, when checking for OLE2 files, this is hard coded to check for the GUIDs of word, excel and power point. These are converted on a one-to-one basis to Attachment filtering rules in GFI MailEssentials. 2.2.5 Disclaimers Global Settings reflect a disclaimer applied to the whole domain for GFI MailEssentials. The Do not add duplicate global disclaimer checkbox does not apply for GFI MailEssentials. Also, Tokens are not supported. Within GFI MailEssentials, a similar set of disclaimers is provided. To enable a disclaimer, load the GFI MailEssentials Email Management console, navigate to the Disclaimers node and enable a disclaimer. GFI MailEssentials 2 Upgrade information 17

Screenshot 12: VIPRE Email Security for Exchange Sample general disclaimer Screenshot 13: Disclaimer settings The table below lists the Active Directory variables used in VIPRE Email Security for Exchange and their equivalent in GFI MailEssentials. GFI MailEssentials 2 Upgrade information 18

VIPRE Email Security for Exchange disclaimer values City (&ad_l%) Company (&ad_company%) Country/region (&ad_co%) Department (&ad_department%) Description (&ad_description%) Display Name (&ad_disaplyname%) E-mail (&ad_mail%) Fax (&ad_facsimiletelephonenumber%) First Name (&ad_givenname%) Home (&ad_homephone%) Initials (&ad_initials%) IP Phone (&ad_ipphone%) Last Name (&ad_sn%) Mobile (&ad_mobile%) Notes (&ad_info%) Office (&ad_physicaldeliveryofficename%) P.O. Box (&ad_postofficebox%) Pager (&ad_pager%) State/province (&ad_st%) Street (&ad_streetaddress%) Telephone number (&ad_telephonenumber%) Title (&ad_title%) Web page (&ad_wwwhomepage%) Zip/Postal Code (&ad_postalcode%) GFI MailEssentials disclaimer values [ad_city] [ad_company] [ad_country] [ad_department] [ad_description] [ad_displayname] [ad_email] [ad_telfax] [ad_firstname] [ad_telhome] [ad_initials] [ad_telipphone] [ad_lastname] [ad_telmobile] [ad_information] [ad_office] [ad_pobox] [ad_telpager] [ad_state] [ad_street] [ad_telnumber] [ad_jobtitle] [ad_webpage] [ad_zipcode] Policy Disclaimers A policy disclaimer applies to a number of users only. In GFI MailEssentials, a policy is translated as a disclaimer for every user who has that policy. GFI MailEssentials 2 Upgrade information 19

Screenshot 14: VIPRE Email Security for Exchange Policy disclaimer. VIPRE Email Security for Exchange policy disclaimer Disclaimers Order Global Disclaimer only; no policy disclaimer Disclaimers Order Policy Disclaimer only; no global disclaimer Disclaimers Order Global Disclaimer applied before policy disclaimer Disclaimers Order Policy Disclaimer applied before global disclaimer GFI MailEssentials disclaimer Domain disclaimer only and no other disclaimers Disable domain disclaimer and enable user disclaimers Not supported in GFI MailEssentials Not supported in GFI MailEssentials GFI MailEssentials 2 Upgrade information 20

NOTE These ordering policies are not supported in GFI MailEssentials. Within GFI MailEssentials ordering is applied in the following order: 1. User Disclaimer 2. Group Disclaimer 3. Domain Disclaimer Additional Notes: In GFI MailEssentials, the top-most disclaimer is used. As such, the same happens with disclaimers that are enabled. By default, the option to Convert to Unicode (UTF-8) for both HTML and Plain Text is enabled. You can have multiple global disclaimers for different local domains. Unused template disclaimers are converted to domain disclaimers and have the domain set to sampledomain.com. Also, these are disabled. 2.2.6 Antispam IMPORTANT Both VIPRE Email Security for Exchange and GFI MailEssentials implement score-based anti-spam filters. The difference is however how these are implemented: In VIPRE Email Security for Exchange this was managed on an engine by engine basis, and administrators could modify how this score was created In GFI MailEssentials this is implemented in SpamRazer and automatically maintained by the system through updates. This is easier to manage and less prone to human error. For global settings, the Enable spam filtering check box enables/disables all rules assigned to global settings. X-Headers are not supported in GFI MailEssentials while the check to filter bounce messages does not apply to GFI MailEssentials since, by default, GFI MailEssentials scans all emails. The Antispam Engines settings is not available in GFI MailEssentials since GFI MailEssentials does not have these engines. GFI MailEssentials 2 Upgrade information 21

Screenshot 15: VIPRE Email Security for Exchange Global AntiSpam Settings The table below shows how Antispam global rules in VIPRE Email Security for Exchange are translated to GFI MailEssentials. VIPRE Email Security for Exchange rule Allow Sender Blocked Sender Blocked Character Set GFI MailEssentials rule Email Whitelist Email Blocklist Header Checking The table below shows how Antispam global custom rules in VIPRE Email Security for Exchange are translated to GFI MailEssentials. VIPRE Email Security for Exchange rule From / To / CC / BCC (email address) Allow From / To / CC / BCC (email address) Block From / To / CC / BCC (regex) Allow / Block From / To (display name) Allow From / To (display name) Block From / To (display name) Allow / Block Character Set Allow / Block Character Set (regex) Allow / Block Attachment Name Body / Subject Block Words Body / Subject Allow Words Body / Subject (regex) Block Headers Header Content Type Header Reply To Header Return Path Sender IP Address Allow GFI MailEssentials rule Email Whitelist Email Blocklist Header Checking Advanced Content Filtering Rule Spam Keyword Checking Keyword Whitelist Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule IP Whitelist GFI MailEssentials 2 Upgrade information 22

VIPRE Email Security for Exchange rule Sender IP Address Block Sender IP Address (regex) Allow / Block GFI MailEssentials rule Antispam policy rules are only applied to selected users. In GFI MailEssentials, not all antispam policies could be applied to a particular user/users. Screenshot 16: VIPRE Email Security for Exchange Antispam policy settings GFI MailEssentials 2 Upgrade information 23

Enabling / Disabling a policy enables/disables all rules related to the policy. Policy Thresholds, Quarantine Actions, Quarantine Location and Spoofing cannot be applied to GFI MailEssentials since these rules are user based. The Personal Allowed/Blocked Sender Lists are mapped to GFI MailEssentials though the Personalised Whitelist and Blocklist. Users can login GFI MailEssentials and list all the email addresses to whitelist and blocklist, as opposed to dragging and dropping emails in VIPRE Email Security for Exchange. VIPRE Email Security for Exchange custom rule From - Allow From - Block To / CC / BCC (email address) Allow To / CC / BCC (email address) Block From / To / CC / BCC (regex) Allow / Block From / To (display name) Allow From / To (display name) Block From / To (display name) Allow / Block Character Set Allow / Block Character Set (regex) Allow / Block Attachment Name Body / Subject Block Words Body / Subject Allow Words Body / Subject (regex) Allow Body / Subject (regex) Block Headers Header Content Type Header Reply To Header Return Path Sender IP Address Allow Sender IP Address Block Sender IP Address (regex) Allow / Block GFI MailEssentials custom rule Personalized Email Whitelist Personalized Email Whitelist Block available in Header Checking > Languages. Advanced Content Filtering Rule Keyword Filtering Available as part of Whitelist > Keyword Whitelist. Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule Advanced Content Filtering Rule Available as part of Whitelist > IP Whitelist GFI MailEssentials 2 Upgrade information 24

3 Upgrade Procedure WARNING Backup your existing VIPRE Email Security for Exchange settings and stores before upgrading to GFI MailEssentials. This enables you to revert back to VIPRE Email Security for Exchange in case of need. For more information, refer to Backing up and restoring VIPRE Email Security for Exchange settings (page 30). 1. Run the GFI MailEssentials setup program. 2. Select the language to use with this installation of GFI MailEssentials and click Install. NOTE Language selection is not reversible. You will need to reinstall GFI MailEssentials to change the language selected at this stage. 3. Click Next in the Welcome page. 4. Select whether to check for newer versions/builds of GFI MailEssentials and click Next. 5. Read the license agreement and click I accept the terms in the license agreement if you accept the terms and conditions. Click Next. Screenshot 17: Upgrading from VIPRE Email Security for Exchange to GFI MailEssentials. GFI MailEssentials 3 Upgrade Procedure 25

WARNING Selecting DO NOT UPGRADE, install GFI MailEssentials with default settings option, uninstalls your current VIPRE Email Security for Exchange installation. 6. If GFI MailEssentials detects a previous installation of VIPRE Email Security for Exchange, select one of the following options from the Product Migration screen. Option Upgrade to GFI MailEssentials and import configuration settings from VIPRE Email Security for Exchange DO NOT UPGRADE, install GFI MailEssentials with default settings Description Installs a new instance of GFI MailEssentials and uses the previous settings of VIPRE Email Security for Exchange as described in this guide. Installs a new instance of GFI MailEssentials with all the default settings without using your current VIPRE Email Security for Exchange installation settings. WARNING Selecting DO NOT UPGRADE, install GFI MailEssentials with default settings option, uninstalls your current VIPRE Email Security for Exchange installation. Click Next to continue setup. 7. Key in the administrator s email address in the Administrator Email and enter License Key. Click Next. NOTE 'Evaluation' is no longer accepted as a license key. Access the GFI website customer area to upgrade your license key before starting the upgrade process. 8. Select the mode that GFI MailEssentials will use to retrieve the list of email users. Option Yes, all email users are available on Active Directory. Rules will be based on Active Directory users. No, I do not have Active Directory or my network does not have access to Active Directory (DMZ) Description Active Directory mode GFI MailEssentials will retrieve the list of users from Active Directory. Selecting this option means that GFI MailEssentials is being installed behind your firewall and that it has access to the Active Directory containing ALL your email users. SMTP mode Select this mode if you are installing GFI MailEssentials on a machine that does not have access to the Active Directory containing the complete list of all your email users. This includes machines on a DMZ or machines that are not part of the Active Directory domain. In this mode, GFI MailEssentials automatically populates the list of local users using the sender s email address in outbound emails. The list of users can also be managed from the GFI MailEssentials General Settings node. Click Next. 9. In the IIS Setup dialog, configure the following options: GFI MailEssentials 3 Upgrade Procedure 26

NOTE Default settings are typically correct for most installations. Option The website to create the GFI MailEssentials virtual directory The GFI MailEssentials Configuration virtual directory The GFI MailEssentials Quarantine RSS feeds virtual directory SMTP Server Setup Description Select the website where you want to host the GFI MailEssentials virtual directories. Specify a name for the GFI MailEssentials virtual directory. Specify a name for the GFI MailEssentials Quarantine RSS feeds virtual directory. Select the SMTP Server that GFI MailEssentials binds to. By default, GFI MailEssentials binds to your Default SMTP Virtual Server. If you have multiple SMTP virtual servers on your domain, you can bind GFI MailEssentials to any available SMTP virtual server. NOTES 1. If you are installing on a Microsoft Exchange Server 2007/2010/2013 machine this option is not shown since Microsoft Exchange has its own built-in SMTP server. 2. After installation, you can still bind GFI MailEssentials to another SMTP virtual server from the GFI MailEssentials Configuration. Click Next. 10. Select folder where to install GFI MailEssentials and click Next. NOTE When the installation is an upgrade, GFI MailEssentials installs in the same location as the previous installation. 11. Click Install to start the installation process. NOTE If you are prompted to restart the SMTP services, click Yes. 12. On completion, click Finish. 3.1 Personal Filter List Migration Tool The Personal Filter List Migration Tool enables GFI MailEssentials to import any whitelisted/blocklisted email addresses that users might have configured through the VIPRE Email Security for Exchange folders in their individual mailboxes. GFI MailEssentials 3 Upgrade Procedure 27

IMPORTANT Use this tool as soon as you complete the upgrade from VIPRE Email Security for Exchange to GFI MailEssentials to ensure that this configuration is carried over. 1. Launch the VIPRE Email Security for Exchange Personal Filter List Migration tool by double-clicking PersonalSpamFilterImport.exe from: GFI MailEssentials installation path\antispam\ Figure 1: GFI MailEssentials Personal Filter List migration tool 2. Key in the username, password and domain names to use for this process. Also select a Microsoft Exchange Store type from Exchange Store Type. GFI MailEssentials 3 Upgrade Procedure 28

IMPORTANT The user credentials specified must have Full Mailbox Access Rights to access the mailboxes in your environment. For detailed information on the rights required to access all the mailboxes from Microsoft Exchange 2003 onwards, refer to: http://go.gfi.com/?pageid=me_impersonationrights 3. Click Start and wait for all the mailbox processing to complete. NOTE Migration time is dependent on the number of mailboxes and network configuration/performance. GFI MailEssentials 3 Upgrade Procedure 29

4 Backing up and restoring VIPRE Email Security for Exchange settings 4.1 Backing up VIPRE Email Security for Exchange settings Backup your VIPRE Email Security for Exchange settings to enable reverting back to VIPRE Email Security for Exchange in case this is required. 1. Navigate to <drive>:\program Files\Sunbelt Software\VIPRE Email Security. 2. Make a copy of the following folders to a secure location: Data QuarantineStore Settings 4.2 Restoring a previous installation of VIPRE Email Security for Exchange If you backed up your VIPRE Email Security for Exchange settings (as described above) before uninstalling, you can restore your VIPRE Email Security for Exchange installation if required. Contact support for more information: Online: Fill out the support request form and follow the instructions on this page closely to submit your support request on: http://support.gfi.com/supportrequestform.asp Phone: To obtain the correct technical support phone number for your region visit: http://www.gfi.com/company/contact.htm NOTE Before contacting Technical Support, have your Customer ID available. Your Customer ID is the online account number that is assigned to you when first registering your license keys in the GFI Customer Area at: http://customers.gfi.com. GFI MailEssentials 4 Backing up and restoring VIPRE Email Security for Exchange settings 30

5 Index A Active Directory 9, 18, 26 Antispam 21 Antivirus 8-9 B Bayesian Analysis 9 C Cluster 8 D Disclaimers 17 DMZ 26 Domain 17, 26, 28 E Email Blocklist 22 Email Direction 16 F firewall 9, 26 G gateway 7-8 H Header checking 22 P Performance 29 Personal Filter List 27 Phishing 9 Q Quarantine 16, 24, 27 R RSS Feeds 27 S SMTP Server 9, 27 SMTP Virtual Server 27 SpamRazer 9, 21 U Updates 9 Upgrade 5, 9, 25 V VIPRE Email Security for Exchange 1, 4-6, 9, 13, 18, 21, 25, 27, 30 Virtual directory 27 W Whitelist 5, 22 I IIS 7, 26 Internet 7 IP 19, 22 IP DNS Blocklist 9 K Keyword checking 22 L Licensing 4 Lotus Domino 9 M Microsoft Exchange 29 Migration 26-27 MSMQ 7 GFI MailEssentials Index 31

USA, CANADA AND CENTRAL AND SOUTH AMERICA 15300 Weston Parkway, Suite 104 Cary, NC 27513, USA Telephone: +1 (888) 243-4329 Fax: +1 (919) 379-3402 ussales@gfi.com ENGLAND AND IRELAND Magna House, 18-32 London Road, Staines, Middlesex, TW18 4BP, UK Telephone: +44 (0) 870 770 5370 Fax: +44 (0) 870 770 5377 sales@gfi.com EUROPE, MIDDLE EAST AND AFRICA GFI House, San Andrea Street, San Gwann, SGN 1612, Malta Telephone: +356 2205 2000 Fax: +356 2138 2419 sales@gfi.com AUSTRALIA AND NEW ZEALAND 83 King William Road, Unley 5061, South Australia Telephone: +61 8 8273 3000 Fax: +61 8 8273 3099 sales@gfiap.com