CS MAILsweeper for SMTP 4.3 Service Pack 2

(CS MAILsweeper for SMTP 4.3.12 including Technology Update Version 1.4.10)

This document describes the Supported Environments and Tools for this release of CS MAILsweeper for SMTP.

This document is current at the time of publication; subsequent updates will be available on our website, http://www.mimesweeper.com/.

In this Release Document

Antivirus tools
Audit databases
- Microsoft Data Engine Utility (MSDE)
Quarantine Repair Utility (Qrepair)
CS MIMEsweeper plug-in products
Language variants
PDF IFilter (optional)

Antivirus tools

You can integrate a third-party antivirus tool with CS MAILsweeper for SMTP using one of the following scenario types:

Content Scanner (with COM-based scanning software)
Virus Manager (with command-line or executable antivirus tools)
a MIMEsweeper scenario (with a specific third-party DLL-based antivirus tool)

The scenario type you use depends on the particular third-party COM-based, DLL-based, or command-line antivirus or content scanning tools you are using with CS MAILsweeper for SMTP. In a distributed deployment of CS MAILsweeper for SMTP, you are recommended to use a Content Scanner scenario or a MIMEsweeper scenario for a third-party antivirus tool rather than a Virus Manager scenario.

Table 1 lists the versions of third-party antivirus and content scanning tools that have been tested for use with the specified scenario type in this release of CS MAILsweeper for SMTP. For subsequent updates, see the MIMEsweeper website.

**Table 1: Supported third-party antivirus tools**
Scenario type	Antivirus Tool	Version	Supplier
Content Scanner scenario	F-Secure Anti-Virus for MIMEsweeper	5.41	F-Secure
	Norman Virus Control for MIMEsweeper	5.6	Norman
	Sophos Anti-Virus	3.75	Sophos
	Symantec AntiVirus^TM for Clearswift^TM MIMEsweeper^TM	4.0	Symantec ‡
MIMEsweeper scenarios for third-party AV Tools	COMMAND Interceptor^TM for MIMEsweeper	4.90.0	Authentium, Inc.
	F-secure Anti-Virus^TM for MIMEsweeper	5.41	F-Secure
	AntiVir MAILsweeper	6.21.00.01	H+BEDV
	Sophos Anti-Virus	3.75	Sophos
Virus Manager scenario	McAfee command line	uses McAfee Version 4.24	McAfee
	VetNT	10.5	Computer Associates
	FPROT	3.14b	Frisk Software International

You must obtain from the appropriate vendor any third-party antivirus tool you want to integrate with CS MAILsweeper for SMTP, and install and configure it on your PC.

‡ If you want to enable the CS MAILsweeper Content Scanner scenario to run the Symantec AntiVirus^TM for Clearswift^TM MIMEsweeper^TM tool, you must also obtain the MAILsweeper AV Connector for Symantec. You can obtain this Connector from the Anti-Virus Integration page from our website (http://www.mimesweeper.com/download/extras/scenarios_smtp.asp#guides).

Note:

A number of scenarios for third-party antivirus tools are listed on the MIMEsweeper Anti-Virus Scenarios page of the CS MAILsweeper for SMTP installation wizard. The ReadMe documents for these scenarios also appear in the table of contents for each CS MAILsweeper for SMTP 4.3 release document.

Not all of the listed third-party antivirus tools may be available in your region. For details of product availability in your region, contact your local antivirus tool vendor.

Back to Contents

Audit databases

The Auditor for Reporting records audit points in a database with an ODBC driver and enables a report generation tool to generate a configurable set of management reports.

Table 2 shows the ODBC databases that are supported for use with the Auditor for Reporting:

**Table 2: Supported ODBC databases**
Database	Version	Notes
Microsoft SQL Server	2000	This is the recommended database type.
Microsoft Data Engine (MSDE)	2000	CS MAILsweeper for SMTP 4.3 can only support MSDE 2000 onwards; it cannot support earlier versions. The minimum hardware for running MSDE is a Pentium 166 with 32 MB of RAM. MSDE has a database size limit of 2GB. Databases created with MSDE are 100 percent compatible with, and support many of the features of, SQL Server 2000.

Back to Contents

Microsoft Data Engine Utility (MSDE)

The Microsoft Data Engine (MSDE) 2000 is a database that is compatible with and supports many of the features of SQL Server 2000. MSDE logs and records transactions, and can revert to its last consistent state if any unexpected event should occur, for example, recovery from disk errors.

MSDE manages its memory dynamically. If required, MSDE can react to operating system pressure on memory resources by distributing memory between applications.

Before installing Microsoft Data Engine (MSDE) 2000, you are advised to check the minimum requirements in the supported ODBC databases in Table 2. You can then follow the instructions in the following sections for Using MSDE.

Back to Contents

Using MSDE

You can obtain and install the Microsoft Data Engine (MSDE) 2000 utility from the CS MAILsweeper for SMTP product media. Once installed, you can create an MSDE database.

To install MSDE:

Log on to the account of the CS MAILsweeper for SMTP host. This is the account specified for the CS MAILsweeper for SMTP services.
You configure the options of the CS MAILsweeper Receiver, Security, and Delivery services in the Log On tab on the Properties page for each CS MAILsweeper for SMTP service in the Windows Services dialog box. For more information, see your Microsoft Windows Help.
Run the set up program (MSDE/setup.exe) from the product media.

To create an MSDE database:

From the Windows Command Prompt run the SQL configuration tool (by default, this is under C:\Program Files\Microsoft SQL Server\80\Tools\binn\):
osql -E
Enter the following command:
Create database MAILsweeper
Enter the following command:
GO

A confirmation message that the database has been created is displayed.
Enter the command:
EXIT

The Windows Command Prompt closes.

Note

For more information, see the Microsoft Data Engine Utility (MSDE) ReadMe. You can also install this database using the SQL Server Manager.

After creating an MSDE database, you must:

Specify the ODBC data source (in this instance MSDE 2000) in MAILsweeper
You specify the ODBC data source, by configuring the Auditor for Reporting in the Policies folder under the MAILsweeper for SMTP folder in the MAILsweeper for SMTP Policy snap-in.

On the Microsoft SQL Server DSN Configuration page on the Change the default database to you must select the database name (MAILsweeper) you entered when you created the MSDE database using the Windows Command Prompt.
Configure the reports
Connect the reports function to the configured ODBC auditor, by configuring the Reports (MAILsweeper for SMTP) Properties page in the MAILsweeper for SMTP Management snap-in. For more information see the Help.

Back to Microsoft Data Engine Utility (MSDE)

Quarantine Repair Utility (Qrepair)

The Quarantine Repair Utility (Qrepair) is a command-line utility that reconstructs Jet database index (index.mdb) files used in CS MAILsweeper for SMTP message areas.

A database index file may need to be reconstructed if it is damaged or accidentally deleted from the message area.

Qrepair is a CS MAILsweeper administration tool that was previously available from our website on an unsupported basis. In Service Pack 2, this tool is now installed as a standard feature of CS MAILsweeper for SMTP 4.3. It is installed in the CS MAILsweeper program directory (by default, C:\Program Files\MAILsweeper for SMTP\Program).

The following sections provide details on the Quarantine Repair Utility:

How the Quarantine Repair Utility works
Using the Quarantine Repair Utility

Back to Contents

How the Quarantine Repair Utility works

CS MAILsweeper for SMTP places processed messages that are not to be delivered immediately in message areas. These are either parking areas (for messages whose delivery is to be delayed) or quarantine areas (for messages requiring operator intervention, for example, messages containing viruses or prohibited data).

CS MAILsweeper for SMTP assigns a unique ID to each email message it processes. Each message that it places in a message area is held as a pair of files. Each file pair has the same base name and one file has a .a file extension and the other a .b file extension, for example, Tc2a85a15a84ad30452d3.a and Tc2a85a15a84ad30452d3.b.

Each CS MAILsweeper for SMTP message area contains a database index.mdb, which contains an index of the messages stored in the message area. The record for each message contains the summary information that is displayed for the message in the Message Areas folder in the CS MAILsweeper for SMTP Manager:

Processed
Classification(s)
Sender
Recipient(s)
Subject
Size (Kb)
Message ID
Original ID

If the message area database does not contain a record for a message stored in the message area, the message is not available for viewing or processing in the Message Areas folder in the CS MAILsweeper for SMTP Manager. This means that you cannot view the message summary information, nor can you open, release, forward, reprocess, save, or delete those messages from the Manager.

You can use the Quarantine Repair Utility to reconstruct an index file that has been damaged or accidentally deleted from a quarantine area. When you run the Quarantine Repair Utility, it compares the records in the index file with the file pairs in the quarantine area and creates a record for any message that is not currently indexed. Each new record contains only the following details:

Processed: the time the message was quarantined
Message ID: the .a and .b file names of the message file pair

With the index file repaired, you can view these details and process the messages from the Message Areas folder in the CS MAILsweeper for SMTP Manager. If you require the rest of the summary information for the message, you can reprocess it.

Note: To reconstruct the index file for a message area, the Quarantine Repair Utility requires the information from both .a and .b file parts of a message pair. It cannot reconstruct an index record for a message if either of the file pair is missing.

Back to Quarantine Repair Utility (Qrepair)

Using the Quarantine Repair Utility

You run the Quarantine Repair Utility (Qrepair.exe) from the Windows command prompt and view the results in the Message Areas folder of the CS MAILsweeper for SMTP Manager.

This utility is installed in the CS MAILsweeper program directory (by default, C:\Program Files\MAILsweeper for SMTP\Program), which is in the Path system variable. Therefore you can run the utility from any folder in the Command Prompt.

To use the Quarantine Repair Utility:

Stop the CS MAILsweeper for SMTP Security service.
Close the MAILsweeper for SMTP Console.
Open a Windows Command Prompt.
Reconstruct the desired message area database index file by entering the following command:
Qrepair "<Message Area Path>"

where <Message Area Path> is the full or relative path to the CS MAILsweeper message area containing the database index file to be reconstructed. If the directory path contains spaces, you must enclose it in quotation marks.

You can specify either a user-defined message area or one of the default message areas (by default, under C:\Program Files\MAILsweeper for SMTP\Message Areas):
- Dirty Messages
- Encrypted Messages
- Parked Messages
- Undetermined Messages
For example, to repair the database index file in the Dirty Messages message area, enter the following command:

Qrepair "C:\Program Files\MAILsweeper for SMTP\Message Areas\Dirty Messages"

Qrepair displays a status message as it adds message records to the index file.
Open the MAILsweeper for SMTP Console.
In the CS MAILsweeper for SMTP Manager, open the message area and confirm that missing messages have been restored.
As only the .a and .b file names and the time stamp details are added to new index records, the size is displayed as zero, and other summary information details are blank.
Restart the Security service.

If you want to recover the other summary information for a restored message, you can reprocess it. CS MAILsweeper for SMTP reprocesses a message to the same message area in the following circumstances:

The policy that placed the original message in the message area has not been changed.
The original message was not modified by CS MAILsweeper for SMTP before it was placed in the message area.

To reprocess a message to the same message area:

In the CS MAILsweeper for SMTP Manager, open the message area containing the recovered messages.
Select the message or messages you want to reprocess, and on the Action menu click Reprocess.
In the Reprocess message dialog box, select Reprocess the message with the original policy, clear the Delete the original message, and click OK.
CS MAILsweeper for SMTP reprocesses the message and places a second copy of the message (with full summary information) in the same message area.
Delete the original message displaying the blank summary information details.

Back to Quarantine Repair Utility (Qrepair)

CS MIMEsweeper plug-in products

A number of CS MIMEsweeper plug-in products are compatible with CS MAILsweeper for SMTP. The CS MAILsweeper installation program displays a warning if you attempt to install Version 4.3 on a PC that contains an incompatible CS MIMEsweeper plug-in product.

For details of versions of plug-in products that are compatible with this version of CS MAILsweeper for SMTP, see our website, http://www.mimesweeper.com.

Back to Contents

Language variants

This release of CS MAILsweeper for SMTP 4.3 runs on Windows 2000 and 2003 in the following language versions:

English
French
German

In addition to text from one of these supported Windows 2000 and 2003 language versions, MAILsweeper also can process messages that contain text in the following languages/character sets:

Chinese (Simplified Chinese GB2312, Traditional Chinese BIG5)
Japanese (see note)
Korean (EUC-KR, ISO-2002-KR)

Notes:

The CS MAILsweeper for SMTP user interface is in International English in all three of the supported Windows language versions (English, French, and German).
To correctly display characters in a language other than that of the installed Windows language version, you may need to install and configure the appropriate language support on your PC (for details see your Microsoft Windows documentation).
A version of CS MAILsweeper for SMTP 4.3 fully localized for use on Japanese versions of Windows 2000 is available separately. For details, contact your MIMEsweeper product supplier.
CS MAILsweeper for SMTP 4.3 has not been tested on language variants or character sets other than those listed above.

Back to Contents

PDF IFilter (optional)

The Text Analyzer scenario requires a third-party plug-in to extract text from PDF files.

CS MAILsweeper for SMTP recognizes PDF files; however, in order to extract text from PDF files, Adobe PDF IFilter v5.0 must be installed on the same computer as CS MAILsweeper for SMTP. If the PDF IFilter is not installed, MAILsweeper displays a message prompting you to install it if you need to extract text from PDF files.

You can download the PDF IFilter from the Adobe website, http://www.adobe.com.

Back to Contents

Revision 1.3
Published by Clearswift Ltd. November 2003
© 2003 Clearswift Ltd
All rights reserved

The materials contained herein are the sole property of Clearswift Ltd. No part of this publication may be reproduced or disseminated or transmitted in any form or by any means electronic, mechanical, photocopying, recording, or otherwise stored in any retrievable system or otherwise used in any manner whatsoever without the express permission of Clearswift Ltd.

Information in this document contains references to fictional persons, companies, products and events for illustrative purposes. Any similarities to real persons, companies, products and events is coincidental and Clearswift shall not be liable for any loss suffered as a result of such similarity.

The Clearswift Logo and Clearswift product names including ES^TM, ENTERPRISEsuite^TM, ES ClearPoint^TM, ES ClearSecure^TM, ES ClearEdge^TM, ES ClearBase^TM, ES ClearSurf^TM, CS DeepSecure^TM, CS Bastion II^TM, CS X.400 Filter^TM, CS FlashPoint^TM, CS ClearDetect^TM, CS ClearSupport^TM, CS ClearLearning^TM, CS MIMEsweeper^TM, CS REMOTEmanager^TM, CS MAILsweeper^TM, CS MIMEsweeper for Web^TM, CS e-Sweeper^TM, CS IMAGEmanager^TM, CS SECRETsweeper^TM are trademarks of Clearswift Ltd.

All other trademarks are the property of their respective owners. Clearswift Ltd. (registered number 3367495) is registered in Britain with registered offices at 1310 Waterside, Arlington Business Park, Theale, Reading, Berkshire RG7 4SA, England. Users should ensure that they comply with all national legislation regarding the export, import, and use of cryptography.

In this Release Document

Other Release Documents