Security settings checklist for Kaspersky Security for Microsoft Exchange Servers [Kaspersky Security for Microsoft Exchange Server]

1

Anti-Virus protection for the Transport Hub role

1.1. Anti-Virus protection is enabled

In the node Server protection → Protection for the Transport Hub role → Anti-Virus scan settings

• the Enable anti-virus protection for the Hub Transport role option is selected

1.2. The Delete object action has been set for infected objects

In the node Server protection → Protection for the Transport Hub role → Anti-Virus scan settings

• the Delete object option is selected for infected objects

2

Virus scan of mailboxes

2.1. Scan is enabled

In the node Server protection → Protection for the Mailbox role → Anti-Virus scan settings

• the Enable anti-virus protection for the Mailbox role option is selected

2.2. The Delete object action has been set for infected objects

In the node Server protection → Protection for the Mailbox role → Anti-Virus scan settings

• the Delete object is selected for infected objects

2.3. Periodic scan task run has been configured

In the node Server protection → Protection for the Mailbox role → Protection for mailboxes

• all required mailbox storages are selected (Protected mailbox storages)
• the task schedule has been defined (Background scan → Schedule)

3

General Anti-Virus protection settings

3.1. Interaction with KSN (KPSN) is enabled for the Anti-Virus module

In the node Settings → KSN Settings

• the I accept the KSN Statement option. Use Kaspersky Security Network or Use Kaspersky Private Security Network (KPSN) option is selected

In the node Server protection → Advanced Anti-Virus settings

• the Use Kaspersky Security Network option is selected

3.2. Scanning of archives and containers is enabled

In the node Server protection → Advanced Anti-Virus settings

• the Scan attached containers/archives option is selected
• the default value (32) is set for the Scan attached containers/archives with nesting level not higher than setting

4

Anti-Spam and Anti-Phishing scan

Anti-Spam parameters are configured

4.1. Anti-Spam is enabled

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Enable anti-spam scanning of messages option is selected

4.2. SCL rating is in use
(only if the "Skip" action is selected)

Anti-Phishing parameters are configured

4.3. Anti-Phishing scan is enabled

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Enable anti-phishing scanning of messages option is selected

4.4. SCL rating and PCL rating are in use
(only if the "Skip" action is selected)

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Add SCL and PCL rating option is selected for Phishing

Parameters for interaction with KSN (KPSN) are configured

4.5. Interaction with KSN (KPSN) for Anti-Spam and Anti-Phishing scans is enabled

In the node Settings → KSN Settings

• the I accept the KSN Statement option. Use Kaspersky Security Network or Use Kaspersky Private Security Network (KPSN) option is selected

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Use Kaspersky Security Network option is selected

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Use Reputation Filtering option is selected

4.7. Enforced Anti-Spam Updates Service is enabled

In the node Server protection → Protection for the Transport Hub role → Anti-Spam scan settings

• the Use Enforced Anti-Spam Updates Service option is selected

5

Database update and network settings

In the node Updates → Update databases of Anti-Virus → Run mode

• the Periodically value is set to every hour

In the node Updates → Anti-Spam databases update → Run mode

• the Periodically value is set to every 5 minutes

5.3. Proxy server has been configured for database update
(if update sources are accessed through a proxy)

In the node Settings → Proxy server settings

• proxy server settings have been defined

In the node Settings → Connection settings

• the Use proxy server option is selected

5.4. Proxy server has been configured for KSN and the Enforced Anti-Spam Updates Service
(if KSN is accessed through a proxy)

In the node Settings → Proxy server settings

• proxy server settings have been defined
• the Use a proxy server to access KSN, Enforced Anti-Spam Updates Service, and Kaspersky Lab activation servers option is selected

6

Licensing

License key is active

In the node Settings → Licensing

• the license key has an active status