Setting up a PO scanner

From GWAVA4

Unlike an MTA or GWIA scanner, a Post Office scanner (PO scanner) is not realtime. It is done on a scheduled basis.

Consider installing a PO scanner to:

• scan for viruses that might have been introduced internally
• enforce compliance with policies
• gathering statistics on e-mail usage
• remove or quarantine inappropriate material

Note: A great complement to GWAVA 4's PO scanner feature is GWAVA Reveal, which allows live access to any user mailbox in a friendly interface similar to the GroupWise client.

A PO scanner can be installed on any GWAVA server and scan any accessible post office in the system. For performance, it is recommended that the post office scanned is local to the PO scanner, but this is not required.

A PO scan is performed using the IMAP protocol connecting directly to the POA servicing the PO.

The POA must be GroupWise 6.5 or higher and have IMAP enabled under Agent Settings of the POA in ConsoleOne.

If you have both the POA and GWIA running on the same machine, make sure that either GWIA has IMAP disabled or that the POA and GWIA are not both configured to provide IMAP on the default port (143).

Installation

If this is the first time you are entering the GWAVA Management Console, you should select the Run Scanner Setup Wizard on the Startup Assistance page to get started.

Otherwise, to install a scanner for GWAVA, select the server object you wish to install a scanner on, and select Wizard, and then Install/create a new scanner

Next, select GroupWise POA Scheduled Scan Job. You'll see an introductory screen outlining the basic system requirements.

Trusted Application Keys

In GroupWise, access to each of the user accounts in the Post Office is permitted through what Novell calls a "Trusted Application Key". You will need to generate a key. This should only be necessary once per GWAVA system installation, regardless of the number of servers.

'Note: Your GWAVA 3 Trusted Application Key is completely separate and cannot be used with GWAVA 4 servers, but may safely coexist in a mixed environment.

To create the Trusted Application Key, click on the text outlined "Click here to install" while logged into the Web interface from a Windows machine. Currently, Trusted Application Key generation can only be done from a Windows workstation or server.

You will be taken through the installation and running of an application in order to create the Trusted Application Key.

Note: The Windows machine must have mapped drive access to your primary domain. With a Windows or NetWare server, this should be straightforward. For a Linux server, you may have to configure Samba or Novell's NCP Server (if you have OES). You must also have Novell client installed and be logged in as Administrator on that tree in order to have proper access to the database.

Browse to the domain and then click "Create Trusted Key". Then, wait a couple of minutes for the key to be propagated through your system. If you want to double-check, each POA log (if set to verbose mode) should clearly state that a new application key is being generated. Write down this key! You do not want to lose this information.'

The key is also automatically copied into your Windows clipboard, so you may paste the key into the next screen of the POA scanner install.

The second screen of the POA scanner install requires the following information:

• Trusted Application Key - If you just ran the Trusted Application Key generator, paste the key into this field. GWAVA will save this information for the future, and place it in this field by default when you install future POA scanners.
• Job Name - This should be a unique and descriptive name.
• IP Address of Post Office Agent - The IP address or DNS hostname of the POA to be scanned. By default port 143 is used, but you can override this.
• Configure Job Schedule after installing POA agent - You normally want to leave this checked. It makes little sense to install a POA scanner without setting a specific Job schedule, and in fact if you do not, the job will remain disabled and never run.

For ease of use, GWAVA can automatically set up most common settings for Viruses/malware for you automatically.

Note: 'Stop Virus' not only turns on Antivirus protection but also turns on Fingerprinting and Attachment Filename filtering (inserting the most common malware patterns). By default for example, this means all EXE files will be blocked.

Click Continue to proceed. GWAVA will now show you a summary of what you have entered and selected. If there is an error, then you are not given the option to install until the error has been corrected. Once you are certain of your settings, click Install to continue.

The install may take a few minutes. Do not change pages while the installation is being performed. Otherwise, the install will fail.

Once the installation has completed, you'll be shown a page stating that the install has finished.

Post Installation

If Configure Job Schedule after installing POA agent was selected, a button will appear allowing you to conntinue on to configure the job schedule. Click on Configure Job to continue and see Configuring POA Job Schedules for more information.