Content

Anti Virus Administration for McAfee Groupshield

McAfee Product Education

Is your network constantly under siege from email-borne threats such as viruses, spam, phishing scams, and potentially unwanted programs? McAfee has an array of products that protect your network at the perimeter. If you are implementing our gateway scanning solutions, such as McAfee® GroupShield® for Microsoft Exchange and McAfee® SpamKiller® for Mail Servers, this course is for you.. Learn how these products work in the real world—in a live network setting.

Tab Navigation

Course Details

Course Code

TRN-AVD-201-TCL

Duration

2 days

Objectives

  • Identify how viruses can affect a network when they’re found at the mail server and gateway
  • Describe the importance of multi-layer defense systems
  • Install and compare features in GroupShield for Microsoft® Exchange
  • Describe how GroupShield works with Microsoft Exchange 2000 and 2003
  • Describe the features of GroupShield for Microsoft Exchange
  • Configure GroupShield policies for anti-virus scanning
  • Configure GroupShield policies for content scanning
  • Install and configure SpamKiller for Mail Servers
  • Configure McAfee® ePolicy Orchestrator® to manage GroupShield for Microsoft Exchange and SpamKiller for Mail Servers
  • How to troubleshoot GroupShield

 

Prerequisites

n/a

Course Agenda

Day 1

Overview

Work in a live network setting and learn how to use gateway scanning to protect your network from email viruses, potential threats, and unwanted spam in this two-day program.

McAfee GroupShield for Microsoft Exchange

  • Configure global policies for anti-virus, content scanning, file filtering, encryption, scanner control, and signed messages
  • Microsoft Exchange concepts
  • Understanding anti-virus scanning within Microsoft Exchange
  • Scanning methods in GroupShield
  • Common features
  • Protect information as a mail resource and information share
  • System requirements for installing GroupShield Methods for installing GroupShield
  • System changes
  • GroupShield services
  • Maintenance including upgrade, repair, and removal
  • Lab: Creating and configuring distribution lists for administrators
  • GroupShield features
  • GroupShield components
  • GroupShield add-on packages
  • GroupShield interface—local, remote, web
  • How to access the different GroupShield interfaces
  • Setting access rights
  • Lab: Installing GroupShield
  • Lab: Configuring and testing GroupShield for Microsoft Exchange access
  • Lab: Accessing the GroupShield interface remotely
  • Lab: Accessing the GroupShield web interface
  • Understanding threats to your organization
  • Understanding GroupShield policies
  • How to configure disclaimer text in a gateway policy
  • How to configure mail size filtering policy
  • Understanding rule group and content rules
  • How to configure a rule group
  • How to configure a content rule
  • Assigning rule groups to a policy group
  • Understand and configure a policy group
  • How to setup notifications in GroupShield
  • Lab: Configure global on-access policy for anti-virus, content scanning, file filtering, create a rule group, create a content rule
  • Lab: Testing the global on-access policy
  • Lab: Creating a policy group
  • Lab: Creating a policy for a policy group and testing the policy
  • Understanding and configuring the on-access settings for VSAPI or transport scanning
  • VSAPI 2.0 and VSAPI 2.5 differences
  • Detected items database
  • New updating features in GroupShield
  • Creating an on-demand scan with GroupShield policies
  • Labs: Setting an DAT update

Outbreak manager and alert

  • Concepts
  • Rules—trigger, threshold, reaction, and response
  • Viewing rule status
  • Viewing outbreak activity
  • Lab: Configuring an outbreak manager rule set
  • Lab: Configuring GroupShield outbreak policy settings
  • Lab: Simulating an outbreak and test outbreak rules

Day 2

Overview

Work in a live network setting and learn how to use gateway scanning to protect your network from e-mail viruses, potential threats, and unwanted spam in this two-day program.

McAfee SpamKiller for Mail Servers

  • McAfee SpamKiller for Mail Servers concepts
  • Common system requirements
  • Product features
  • Methods of detection
  • SpamKiller console and settings
  • SpamKiller actions and rules
  • Blacklist and whitelist Management tasks
  • The web interface
  • Create custom rules with Perl regular expressions
  • Management tasks
  • Lab: Installing SpamKiller
  • Lab: Configuring SpamKiller
  • Lab: Testing the SpamKiller installation
  • Lab: The global blacklist tab
  •  Lab: The global whitelist tab
  • Lab: Weighted spam
  • Lab: Global blacklist to and global whitelist to
  • Lab: Configuring users’ personal blacklists and whitelists
  • Lab: Adding/creating a rule using PERL
  • Lab: Removing SpamKiller

GroupShield for Microsoft Exchange and McAfee® ePolicy Orchestrator®

  • Installation review
  • GroupShield configuration
  • Adding GroupShield to ePO™
  • Policy enforcement
  • GroupShield and ePO policies—similarities
  • GroupShield and ePO policies—differences
  • Lab: Adding the GroupShield NAP files into ePO
  • Lab: Deploying the ePO agent to the GroupShield server
  • Lab: Installing GroupShield and from ePO
  • Lab: Use ePO to set and enforce a GroupShield policy
  • Lab: Using ePO to set and enforce a SpamKiller policy
  • Lab: Generating and view alerts within ePO
  • Lab: Confirming ePO GroupShield reports

Monitoring and troubleshooting GroupShield for Microsoft Exchange

  • Log viewer
  • Quarantine viewer
  • Performance monitor
  • Troubleshooting tools
  • Minimum escalation requirement