Академический Документы
Профессиональный Документы
Культура Документы
Before you install Mail Security If you are upgrading System requirements About installing Mail Security Installing the product using the installation wizard Performing a silent installation Post-installation tasks Signing the Mail Security databases to certify integrity Granting rights to run unrestricted agents Accessing Mail Security Restricting access to Mail Security databases Installing Symantec Mail Security on DPAR with SMSDOM settings replication Uninstalling Mail Security
Installing Mail Security for Windows Before you install Mail Security
For Windows (32-bit): \Program Files\Common Files\Symantec Definition files (used for Shared\VirusDefs all Symantec products). For Windows (64-bit): \Program Files (x86)\Common Files\Symantec Shared\VirusDefs
Installing Mail Security for Windows Before you install Mail Security
\Program Files\Symantec\SMSDOM
For Windows (32-bit): \Program Files\Common Files\Symantec Platform Independent Shared\Java LiveUpdate LiveUpdate technology to download definition For Windows (64-bit): \Program Files (x86)\Common files and program Files\Symantec Shared\Java LiveUpdate updates (used for all Symantec products)
If you have multiple Lotus Domino partitions on the same server, the installation program detects each one, and lets you specify the partitions on which to install Mail Security. If you install Mail Security to a partitioned server on a Windows cluster computer, the installation program might ask which of the Mail Security databases you want to keep, even if Mail Security was never installed on the computer. Installation proceeds regardless of which option you select.
Mail Security does not support protecting multiple versions of Domino that are running on the same computer. Only the most recently installed version of Domino is protected. To ensure the most secure configuration, the Mail Security extension manager dynamic link library file (nnem.dll) should load before any third-party Domino extension manager. You should ensure that the nnem.dll is the first entry for the EXTMGR_ADDINS parameter in the notes.ini file. Some third-party software are Domino add-in tasks and run as a service on the Windows operating system. These services might prevent the Mail Security extension manager dynamic link library file from loading if they start before the Domino server starts. Therefore, these processes should only start after the Domino server starts.
1 2
Uninstall 32-bit version of SMSDOM. However, you may retain the SMSDOM databases during this process. If Symantec Endpoint Security (SEP) or Symantec Antivirus is not installed on your computer, ensure that virus definitions of the earlier 32-bit version of SMSDOM are deleted. These virus definitions are located at the Symantec Shared\VirusDefs folder.
3 4
Ensure that you upgrade your 32-bit Domino server to 64-bit. Install 64-bit version of SMSDOM on your 64-bit Domino server. Note: Premium AntiSpam is supported only on Symantec Mail Security for Domino(32-bit) on Windows platform. When you upgrade Mail Security to 64-bit your existing Premium AntiSpam license is no longer valid.
Mail Security supports upgrades from version 4.x and higher only. If you are running version 3.x or lower, you must uninstall the product and then install version 8.0.5.
Table 1-2 lists the requirements that you must meet before you can upgrade to version 8.0.5 Table 1-2 Version
4.0
4.1 or 5.x or 7.5 or 8.0x If Symantec Premium AntiSpam is enabled, ensure that it is disabled before you install version 8.0.5
When you upgrade from version 4.x or higher, you can upgrade your previous databases. The databases that you choose to keep during the installation process are upgraded the next time that you start the Lotus Domino server. You can verify that the previous databases were properly upgraded by viewing the Domino server console messages. Any new databases are created from templates and are placed in the SAV subdirectory of your default Data directory. Table 1-3 lists the query attributes or fields in which the values are modified after upgrading from version 4.x. Table 1-3 Attribute or field
Run Interval Run On
Output Type
Summary Totals
The value is set to Executive Summary. The value is set to Administrative Summary. The value is set to Detail.
Output Type
Detailed Report
Output Type
Output Format
If the Output Type was Summary Totals or Detailed Report, then the Output Format is set to HTML.
Author
Any value
Server
Any value
Action taken
Ignored document
Action taken
Cleaned document
Action taken
System requirements
You must have administrator-level privileges to Windows and the Lotus Domino server to install Mail Security. Your Domino server must be properly sized according to IBM/Lotus specified guidelines. To install Mail Security, your environment must also meet the following minimum installation requirements:
Operating system 32-bit version of SMSDOM: Windows Server 2003 (32-bit or 64-bit)/Windows Advanced Server 2003 (32-bit or 64-bit) Windows Server 2008 (32-bit or 64-bit)
64-bit version of SMSDOM: Windows Server 2003 (64-bit)/Windows Advanced Server 2003 (64-bit) Windows Server 2008 (64-bit)
Lotus Domino
Lotus Notes Client 6.0.x, 6.5.x, 7.0.x, and 8.x 1 GHz Pentium or higher 512 MB Performance depends on server load.
250 MB 300 MB minimum You can change the location of the temporary files after installation. For information on specifying the directory for processing files during scans, refer to Symantec Mail Security 8.0.5 for Domino Implementaiton Guide.
DVD-ROM drive Microsoft Internet Explorer 6.0 with the most current service pack. 32-bit version of SMSDOM:
JRE
In addition to system requirements, you must enable Java Runtime Environment with JCE Unlimited Strength Jurisdiction Policy files. These policy files are different for different versions of JRE and can be downloaded from the Web site of Sun Microsystems. You must also have an additional hard disk space of approximately 2 GB for LiveUpdate to support caching of files on downloads.
10
are detected on the Lotus Domino server over a set interval. These default settings can be changed. If you have multiple Lotus Domino partitions on the same server, the installation program detects each one and lets you specify the partitions on which to install Mail Security. Note: When you install Mail Security to a partitioned server on a Windows cluster computer, the setup program might ask which databases you want to keep, even if Mail Security was never installed on the computer. Setup proceeds normally regardless of which option you select. When the Lotus Domino server is restarted, the following occurs:
For a new installation The Mail Security databases are created from templates and placed in the SAV subdirectory of your default Data directory. The databases that you chose to keep during the installation process are upgraded. You can verify that the previous databases were properly upgraded by viewing the Domino server console messages. Any new databases are created from templates and placed in the SAV subdirectory of your default Data directory. See If you are upgrading on page 6.
For an upgrade
A ReadMe text file and a PDF version of the Symantec Mail Security 8.0.5 for Domino Implementation Guide are placed in the default directory. When you are finished installing Mail Security, you can perform the post-installation tasks. See Post-installation tasks on page 16. You can install or upgrade Mail Security using the installation wizard that is on the product DVD. If you are installing or upgrading the product on multiple computers, performing a silent installation can simplify the installation process. See Installing the product using the installation wizard on page 11. See Performing a silent installation on page 12.
Installing Mail Security for Windows Installing the product using the installation wizard
11
If you use Symantec Premium AntiSpam, ensure that it is disabled. For more information on enabling and disabling Symantec Premium AntiSpam, refer to Symantec Mail Security 8.0.5 for Domino Implementation Guide.
Shut down the Lotus Domino server. You must also shut down the Lotus Notes client, if it is on the same computer.
Insert the Mail Security installation DVD into the DVD-ROM drive. The installation program launches automatically. If it does not, run cdstart.exe from the installation DVD.
2 3 4
In the Mail Security installation screen, click Install Mail Security 8.0.5 for Domino (32-bit) to begin the installation process of 32-bit version of SMSDOM. In the Mail Security installation screen, click Install Mail Security 8.0.5 for Domino (64-bit) to begin the installation process of 64-bit version of SMSDOM. Read the on-screen instructions, and then click Next to continue. Indicate that you agree with the terms of the Symantec software license agreement, and then click Next. You must accept the terms of the license agreement for the installation to continue.
To install the product in the default location, click Next. To install the product in a different location, click Browse, select the location of the installation folder, click OK, and then click Next. The installation directory must end with \SMSDOM
The panel only appears if you are performing a new installation or upgrading from version 4.0.
If you have multiple Lotus Domino partitions on the same server, do the following:
12
In the Select Partitions panel, select the partitions that you want to protect with Mail Security. To select additional partitions, click Add Additional Partitions, and then in the Select data directory dialog box, type the partition path or browse directories to select a path, and then click OK.
If you are upgrading Mail Security, when you are prompted whether to keep settings from the previous versions of the databases, select the databases that you want to keep. The option to keep the Definitions database settings is available only when Mail Security detects that a Definitions database exists on the server on which you are installing the product. All available databases are checked by default. See If you are upgrading on page 6.
In the Install LiveUpdate panel, if you want to install LiveUpdate, select the LiveUpdate option. If you choose not to install LiveUpdate on this Domino Server, you must use database replication mechanism to update the definitions. For more information on managing multiple servers, refer to Symantec Mail Security 8.0.5 for Domino Implementation Guide. Click Next and read through the remaining panels until you reach the Complete Setup panel, and then click Finish.
10 If prompted, restart your computer, and then start the Lotus Domino server.
Specifies whether you want to 0 = Do not retain the existing retain the existing Settings database. database. 1 = Retain the existing database. The default value is 1.
13
Specifies whether you want to 0 = Do not retain the existing retain the existing Log database. database. 1 = Retain the existing database. The default value is 1.
SMS_KEEPQUAR
Specifies whether you want to 0 = Do not retain the existing retain the existing Quarantine database. database. 1 = Retain the existing database. The default value is 1.
SMS_KEEPDEFS
Specifies whether you want to 0 = Do not retain the existing retain the existing Definitions database. database. 1 = Retain the existing database. The default value is 1.
If you do not indicate a value, Mail Security uses the default value 1 retain the existing database. Note: A silent installation installs Mail Security on all of the Domino partitions on the computer. For more information about silent installation, see the following articles on the Web site for InstallShield at the following URLs:
http://support.installshield.com/kb/view.asp?articleid=Q105473 http://support.installshield.com/kb/view.asp?articleid=Q102572
On the computer on which you want to install Mail Security, do the following:
If you use Symantec Premium AntiSpam, ensure that it is disabled. For more information on enabling and disabling Symantec Premium AntiSpam, refer to Symantec Mail Security 8.0.5 for Domino Implementaion Guide.
14
Shut down the Lotus Domino server. You must also shut down the Lotus Notes client, if it is on the same computer.
2 3
Insert the Mail Security DVD into the DVD-ROM drive. At the Windows DOS prompt, change to the following directories on the DVD-ROM:
32-bit version of SMSDOM on 32-bit Windows: \SMSDOM-8.0.5\Windows32\SMSDOM 32-bit version of SMSDOM on 64-bit Windows: \SMSDOM-8.0.5\Windows32\SMSDOM-x64
15
16
Post-installation tasks
Table 1-5 describes the post-installation tasks that you can perform after you install or upgrade to Mail Security. Table 1-5 Task
Refer to the ReadMe file
Sign the Mail Security Before you open the databases for the first time, sign the Mail databases Security databases with a trusted Notes ID file. See Signing the Mail Security databases to certify integrity on page 17. Grant rights to run unrestricted agents You can give a user rights to enable, disable, or modify unrestricted agents. See Granting rights to run unrestricted agents on page 18. Access the Mail Security databases After you open a Mail Security database, you can save it to a workplace for easy access. See Accessing Mail Security on page 19. Set access control The access control settings establish who can access the Mail Security databases. See Restricting access to Mail Security databases on page 20. Activate licenses You must purchase and activate a content license and product license to receive updated definition files and to operate any of the Mail Security scanning functions. For more information on activating licenses, refer to the Symantec Mail Security 8.0.5 for Domino Implementation Guide. On a Domino partitioned server, all partitions share the same Domino and SMSDOM program directory, and thus share one set of Domino and SMSDOM executable files. See Installing Symantec Mail Security on DPAR with SMSDOM settings replication on page 21.
Installing Mail Security for Windows Signing the Mail Security databases to certify integrity
17
Sign all design documents. Do not update existing signatures only. Sign all data documents using an administrator ID. Configure the ID as follows:
The ID should sign all data documents, not just those with existing signatures. The ID should be a trusted administrators ID or server ID. The ID should have the right to run unrestricted Methods and Operations, which is necessary to run all of the database agents. The ID used to sign the databases should appear on the workstations Execution Control List (ECL).
Ensure that the trusted Notes ID in the Execution Control List is listed with the following rights in the Notes client:
Access to current database Access to environment variables Access to external code Access to external programs Ability to read other databases Ability to modify other databases Ability to export data
For more information on signing databases, see the Domino Administrator and Lotus Notes documentation.
18
Installing Mail Security for Windows Granting rights to run unrestricted agents
For users to enable, disable, or modify an agent, the administrator must grant rights to run unrestricted agents in the Server Document of the server that is running Mail Security. Note: Agents are disabled by default. You must enable the agents that you want to use.
19
1 2 3 4 5 6
Open Domino Administrator. On the Configuration tab, in the left pane, double-click Server. In the left pane, under Server, click All Server Documents. In the right (view) pane, double-click the server on which Mail Security runs. On the action bar, click Edit Server. On the Security tab, under Programmability Restrictions, in the Run unrestricted methods and operations box, add the users to whom you want to grant rights to enable, disable, or modify agents. On the action bar, click Save & Close.
20
Installing Mail Security for Windows Restricting access to Mail Security databases
Figure 1-1
Action bar
Navigation pane
1 2 3
In Lotus Notes, on the File menu, click Database > Open. In the Open Database dialog box, under Server, select the server on which you installed Mail Security. Under Database, in the SAV directory, double-click SMSDOM Settings 8.0 (the Settings database). The Settings view appears.
Drag the Settings database window tab to any Lotus Notes bookmark folder.
Installing Mail Security for Windows Installing Symantec Mail Security on DPAR with SMSDOM settings replication
21
The Quarantine database requires that you also assign roles to Quarantine database users. These roles restrict access to various Quarantine views and control who can release documents from the Quarantine. When you set access control for the Quarantine database, you must assign roles to those groups and users who use the Quarantine. For more information about the Quarantine views and assigning Quarantine roles, refer to Symantec Mail Security 8.0.5 for Domino Implementation Guide. To restrict access to Mail Security databases
1 2 3
Log on to the account that you plan to use to administer Mail Security. In Lotus Notes, right-click the Settings database, and then click Database > Access Control. In the Access Control List window, add yourself, a group, or other users as necessary to the Access Control List as Managers with Delete Documents rights. Click Default. In the Access list, click No Access. Click OK. Repeat steps 1 - 6 for the other Mail Security databases.
4 5 6 7
1 2
Install SMSDOM on all the Domino partitioned servers. Start any one Domino partitioned server. This creates SAV databases on DPAR-1.
3 4 5 6
Modify other Domino partitioned servers' notes.ini and remove NNTASK entry from server tasks. Start other Domino partitioned servers. Create Replicas of SAV databases from DPAR-1 to other Domino partitioned servers. Modify other Domino partitioned servers' notes.ini and add NNTASK entry to server tasks.
22
7 8
Start all Domino partitioned servers. SMSDOM now starts on all Domino partitioned servers and SAV databases are replicable.
1 2 3
Shut down the Lotus Domino server and also the Lotus Notes Client, if they are on the same computer. On the Domino server on which Mail Security is installed, in the Windows Control Panel, click Add/Remove Programs. Click Symantec Mail Security 8.0.5 for Domino, and then click Remove. In the confirmation dialog box, click Yes. All Mail Security databases are retained by default.
1 2
Shut down the Lotus Domino server and also the Lotus Notes Client, if they are on the same computer. On the Domino server on which Mail Security is installed, on the Windows taskbar, click Start > Programs > Symantec Mail Security for Domino > Uninstall Symantec Mail Security for Domino. In the Installation Resume panel, click Next. When you are prompted to keep existing Mail Security databases and statistics, select the database and statistic descriptions that you want to keep, and then click Next. When the uninstallation is complete, in the Installation Wizard Completed panel, click Finish.
3 4