How do I confirm that my virus scanner is configured correctly within MailMarshal?

This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

Question:

• How do I confirm that my virus scanner is configured correctly within MailMarshal?

Procedure:

1. In the Configurator or MailMarshal (SEG) 10 Management Console, navigate to Policy Elements | Virus Scanners.
2. Open the properties of a scanner (or select the scanner from the list), and click Test.
3. The results will be displayed in a new window.

If MailMarshal virus scanning rules are enabled, scanning can also be checked by sending a test virus in an email message:

Option 1

Use the Test Email Rules link on the MailMarshal SMTP support page. You will find the Attach a Harmless Test Virus File link and other links that will help you test your email rules.

Option 2

Create a test virus email:

1. Open a new text file and paste the following string (without a line break): 

   X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TESTFILE!$H+H*

2. Save the file as eicar.com.
   
   • Alternatively, you will find a copy of this file in the MailMarshal install directory.
3. Attach the file to an email message and send it through MailMarshal to an external test email account. If the virus scanner and scanning rule are correctly configured to stop outbound viruses, your MailMarshal installation should take action on the message.

Notes:

Additional information on this topic can be found in the User Guide.

This article was previously published as:

NETIQKB29228

Marshal KB142