Security settings checklist for Kaspersky Security for Microsoft Exchange Servers [Kaspersky Security for Microsoft Exchange Server]
The table below contains the criteria for Kaspersky Security for Microsoft Exchange Servers 9.0 MR6 settings health check. Using the settings as specified in the table ensures meeting the recommended security level of the system.
№
|
Parameters (settings) to check
|
Check criterion
|
Expected result |
|
---|---|---|---|---|
|
||||
1 |
Anti-Virus protection for the Transport Hub role |
1.1. Anti-Virus protection is enabled |
In the node Server protection → Protection for the Transport Hub role → Anti-Virus scan settings
|
|
1.2. The Delete object action has been set for infected objects |
In the node Server protection → Protection for the Transport Hub role → Anti-Virus scan settings
|
|||
2 |
Virus scan of mailboxes |
2.1. Scan is enabled |
In the node Server protection → Protection for the Mailbox role → Anti-Virus scan settings
|
|
2.2. The Delete object action has been set for infected objects |
In the node Server protection → Protection for the Mailbox role → Anti-Virus scan settings
|
|||
2.3. Periodic scan task run has been configured |
In the node Server protection → Protection for the Mailbox role → Protection for mailboxes
|
|||
3 |
General Anti-Virus protection settings |
3.1. Interaction with KSN (KPSN) is enabled for the Anti-Virus module |
In the node Settings → KSN Settings
In the node Server protection → Advanced Anti-Virus settings
|
|
3.2. Scanning of archives and containers is enabled |
In the node Server protection → Advanced Anti-Virus settings
|
|||
4 |
Anti-Spam and Anti-Phishing scan |
Anti-Spam parameters are configured |
4.1. Anti-Spam is enabled |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
4.2. SCL rating is in use |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
If mass mailings need to be put into the spam folder:
|
|||
Anti-Phishing parameters are configured |
4.3. Anti-Phishing scan is enabled |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
||
4.4. SCL rating and PCL rating are in use |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
|||
Parameters for interaction with KSN (KPSN) are configured |
4.5. Interaction with KSN (KPSN) for Anti-Spam and Anti-Phishing scans is enabled |
In the node Settings → KSN Settings
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
||
4.6. Reputation Filtering service is enabled (only if there is interaction with KSN) |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
|||
4.7. Enforced Anti-Spam Updates Service is enabled |
In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings
|
|||
5 |
Database update and network settings |
5.1. Automatic update of anti-virus databases is enabled Recommended interval – 1 hour |
In the node Updates → Update databases of Anti-Virus → Run mode
|
|
5.2. Automatic update of Anti-Spam databases is enabled Recommended interval – 5 minutes |
In the node Updates → Anti-Spam databases update → Run mode
|
|||
5.3. Proxy server has been configured for database update |
In the node Settings → Proxy server settings
In the node Settings → Connection settings
|
|||
5.4. Proxy server has been configured for KSN and the Enforced Anti-Spam Updates Service |
In the node Settings → Proxy server settings
|
|||
6 |
Licensing
|
License key is active |
In the node Settings → Licensing
|
0 Comments
Recommended Comments
There are no comments to display.
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now