This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

Question:

Procedure:

This article outlines instructions for downloading and installing McAfee for Marshal for MailMarshal.

As the McAfee for Marshal scanner module has a DLL interface, it has excellent performance and integrates seamlessly with MailMarshal. It also features integrated automatic updating of the latest virus signature files, making it easier for administrators to have up-to-the-minute protection.

Trial Customers

All MailMarshal trial keys are McAfee enabled and therefore no additional product key is required to trial McAfee for Marshal. Installation of McAfee for Marshal is the same for trial as existing customers.

Customers using a full (customer) Product Key

To trial the McAfee for Marshal module, contact Trustwave or your Trustwave Partner to obtain a special time-limited McAfee enabled key. Keep a record of your current full key for later use. After the trial period, you will need to enter a new McAfee enabled full key, or re-enter your previous full key.

Installation Steps

1. Obtain the separate McAfee for Marshal setup program from the Trustwave website download page and install.
   • Note: In SEG or ECM array installations, you must install McAfee for Marshal on all email processing nodes in the array.
2. After the software is installed, launch McAfee for Marshal configuration (this starts by default when you finish the installation wizard).
3. On the Signature Updates and Engine Updates tabs, choose the update method and if necessary enter proxy information or network credentials. See Help for more information.
   • Note: If you have multiple servers using McAfee for Marshal, or another McAfee application that performs downloads, you can save bandwidth by performing the Internet download at a single location and pointing other servers to that location.
4. You can also change the update frequency for signature updates. The default is to check hourly.
5. You must download an initial set of definition files before the software can be used. If no proxy was required, the software will have started this update immediately. If you have made changes, to update, click the Start Update button from the Status tab.

MailMarshal Configuration

1. Once the software is installed, in the MailMarshal Configurator under Virus Scanners, add the McAfee for Marshal scanner. As part of this process, MailMarshal checks that the scanner is functioning.
2. Make sure you have a virus rule enabled (using the Rule condition "Where message contains a virus") The default rules provided with new installations of MailMarshal include virus rules you can simply enable.
3. Commit configuration.
4. Test by sending a harmless eicar test virus through MailMarshal. A sample Eicar.com test file (not a real virus) can be found in the install location, in the subfolder \Unpacking\avcheck.
   • Note: Depending on other rules and installed software, the test email may be blocked before it is scanned for viruses. To ensure you test the scanner, you might need to change the order of rules.

Notes:

This article was previously published as:

NETIQKB29285

Marshal KB237