Setting up a GWIA Scanner

From GWAVA4

A GWIA (GroupWise Internet Agent) scanner is used to intercept and process mail going through a target GWIA (GroupWise Internet Agent) in realtime. All mail going through the GWIA, whether it is outbound or inbound mail will be scanned.

A GWIA scanner is particularly important as the GWIA is where GroupWise most commonly directly interfaces with foreign systems -- the Internet in this case.

You should consider installing a GWIA scanner on every server that runs a GroupWise GWIA. You must have GWAVA installed on this machine before proceeding, but the installation steps may be performed while logged into the Web UI of any server in the GWAVA system.

Although running the GWAVA scanner engine and the GWIA interface components on the same server is not strictly necessary, it is by far the most common scenario.

If this is the first time you are entering the GWAVA Management Console, you should select the Run Scanner Setup Wizard on the Startup Assistance page to get started.

Otherwise, to install a scanner for GWAVA, select the server object you wish to install a scanner on, select Wizards, then click on Install/create a new scanner.

1 Scanner Setup Wizard
2 Advanced Information
3 Verifying correct installation
4 Important Note

[edit]

Scanner Setup Wizard

Select GroupWise GWIA Mail Interface. If you wish to deploy a POA or MTA scanner, refer to the appropriate section of this manual.

Review the necessary prerequisites so you have the information handy during the installation, then click continue.

You will need to enter several pieces of information:

Scanner Name - this is the name of the scanner that will appear underneath the Manage Scanners section of the selected server object. Use a descriptive, unique name.
Select what <u>server it will be installed under.
Path to the GWIA startup file - The GWIA startup file named gwia.cfg. The full path on Linux is generally /opt/novell/groupwise/agents/share/gwia.cfg. Typing /etc/init.d/grpwise print at the command shell will show the MTA installed on the server and its startup file. On Windows or Netware, the path can widely vary, though on NetWare it is usually sys:system\gwia.cfg.
The GWIA directory, including a trailing /. Typically this is a path such as /mydomain/wpgate/gwia/

Review the settings your entered. If they are incorrect, click the back button in your browser to edit the settings. If the settings are correct, click Install.

For ease of use, GWAVA can automatically set up most common settings to automatically prevent and block Virus and Spam. You may override any of these settings later when refining your scanner configuration

Note: 'Stop Virus' not only turns on Antivirus protection but also turns on Fingerprinting and Attachment Filename filtering (inserting the most common malware patterns). By default, for example, this means all EXE files will be blocked. Stop Spam not only activates the Antispam system, but also enables the SURBL and RBL site checking (inserting some of the most common reliable SURBL/RBL sites by default).

Click Install to begin.

The following dialog box is displayed upon completion.

Once the installation is completed, you will need to

Restart both GWAVA (/etc/init.d/gwavaman restart) and the GWIA (/etc/init.d/grpwise restart) to activate the scanner. Without this step GWAVA will not be actively scanning the GWIA.
Refresh the tree view by clicking on the Manage Scanners selection until the new scanner appears
Examine the new scanner configuration to make sure all choices are appropriate for your system. For example, the 'Stop Virus' Wizard automatically sets up a block for all EXE files, which may or may not be necessarily appropriate for your needs.

To see if the scanner is active, click on the scanner, expand the folders down to the Scanner Information section and click on the Status button.

[edit]

Advanced Information

The GWIA installation performs the following tasks

creates associate Engine, Interface, and Scanner objects Servers,Interfaces, Engines, & Scanners - Basic_Objects
sets the Engine object to have a default configuration and runs the auto-setup wizard if Stop Virus or Stop Spam are selected
modifies the GWIA startup file to add the SMTPHOME switch. This should point to <GWIAPath>\3rd.
modifies <gwava>/assets/conf/services.conf. This is a small text file listing all of the agents that /etc/init.d/gwavaman will load on server startup and the arguments to be passed to each agent. In this case, the arguments include the the object ID of the GWAVA GWIA Interface, used when the GWAVA GWIA Interface is first loaded by /etc/init.d/gwavaman so the interface can bootstrap into GWAVAMAN.

[edit]