GFI MailSecurity Deployment Strategies

GFI MailSecurity deployment strategies
Which operating mode(s) to use in your network environment
GFI MailSecurity can be deployed as an SMTP gateway or as a VS API version for Exchange 2000/2003. This white paper describes each operating mode and helps you decide which to deploy and whether you should deploy both.

WWW.GFI.COM GFI MailSecurity deployment strategies . 2
Introduction GFI MailSecurity can be deployed in 2 operating modes: Either as an SMTP gateway or as a VS API version for Exchange 2000/2003. It can be used in 3 ways, either by using one of these modes or by using both in tandem. This paper describes the GFI MailSecurity operating modes in detail and helps you choose the best way to deploy GFI MailSecurity on your network.
Introduction....................................................................................................................................2 Why use both VS API and SMTP gateway modes? .....................................................................2 About GFI MailSecurity SMTP gateway mode..............................................................................2 GFI MailSecurity VS API Exchange 2000/2003 mode..................................................................3 How to deploy GFI MailSecurity....................................................................................................4 GFI MailEssentials & GFI MailSecurity running on the same machine.........................................6 About GFI ......................................................................................................................................7
Why use both VS API and SMTP gateway modes? GFI MailSecurity is the only email content security package to support both an SMTP gateway mode and a VS API mode. For optimum security, we recommend deploying both. This is because both operating modes have unique capabilities that enable you to ensure better security for your network and mail server:
In SMTP gateway mode, GFI MailSecurity checks all inbound and outbound mail before this reaches your mail server. For GFI MailSecurity to do this, you must install it in front of your mail server (or on the Exchange Server if you have Exchange 2000/2003). In VS API mode, GFI MailSecurity is installed on your Exchange 2000/2003 Server and checks inbound, outbound AND internal mail, using the Microsoft VS API interface.
If possible, you should deploy both versions. For administration and performance reasons, it is better to perform the more complex and time-intensive checks at the gateway level. If you were to apply those rules to internal mail, you would end up having to moderate a lot of mail. However, the VS API mode should still be deployed on the Exchange Server, in order to stop a virus outbreak spreading (that could have entered the network via floppy, CD, Web or notebook) or in order to monitor and/or stop internal users using email exploits to siphon off data. You can also use it to prevent unauthorized users from sending executable attachments, which they might use to gain information from users who have more rights on the network.
About GFI MailSecurity SMTP gateway mode If you wish to install GFI MailSecurity at the perimeter of your network, or if you do not have Microsoft Exchange 2000/2003, you must install GFI MailSecurity in SMTP gateway mode.
WWW.GFI.COM GFI MailSecurity deployment strategies . 3
In SMTP gateway mode, GFI MailSecurity checks all inbound and outbound mail before this reaches your mail server. To do this, GFI MailSecurity must be the first to receive all mails destined for your mail server and it must the last "stop" for outbound mail, i.e., mails destined for the Internet. For this to happen, GFI MailSecurity must act as a gateway for all email. This set-up is also known as "Smart host" or "Mail relay" server. Effectively, GFI MailSecurity will act as a mail relay server.
GFI MailSecurity VS API Exchange 2000/2003 mode If you have Microsoft Exchange 2000/2003, GFI MailSecurity can integrate with Exchange 2000/2003 via the new Microsoft Virus Scanning API (VS API).
What is VS API (Exchange Virus Scanning API ) and why use it? Exchange 2000/2003 provides a new vir... [download for more]