Anti-Virus Help

What this Feature Does
This is the latest enhancement to our product line! We are very proud to introduce this powerful anti-virus protection into our already great anti-spam solution. This is NOT a file-system anti-virus scanner. It can scan both inbound and outbound SMTP mail, as well as Notes-to-Notes mail. Anti-virus implementation can be enabled or disabled upon installation. By default, virus checking is SMTP inbound-only.

Functionally, a handful of files are extracted onto your Domino server or checking machine from our installer and when enabled, messages are checked via the anti-virus engine and corresponding definition files. If a virus is detected in the message, you can either remove the infected attachments, or quarantine the entire message. Additionally, the anti-virus auto-updates itself each time new definition files are available to simplify the administration process.

How it Works
SpamSentinel receives mail and processes for both Spam and Viruses (when enabled). If the message is spam, virus, or both, the message can be quarantined. By default, Spam is routed to quarantine and viruses are cleaned/stripped and sent to the valid user. To modify this behavior, see the SpamSentinel Admin database and edit your server document's settings for "Anti-Virus & Attachments". See the appropriate setting for messages with viruses.

When messages are forwarded to users after a virus has been detected, a simple text file called "SpamSentinel Report.txt" will accompany the infected file attachment. This will contain information about the infected file(s), what virus was infecting the file, and if sentinel, deleted, or cleaned the file.

Detailed Information
SpamSentinel requires a temporary folder excluded from existing file system anti-virus applications as it writes and deletes to this folder and is intended to be a temporary workspace where the anti-virus can perform scanning. See your anti-virus application documentation on how to exclude folders from scanning - you will need to exclude C:\Norman\AVScan in most cases.

The server configuration document's "Anti-Virus & Attachments" tab contains all the adjustable settings for anti-virus. This page also displays the anti-virus version ID (Date of Release), and Definitions Updated date (when the definition files were last updated.)

There are three definition files: 1) Nvcbin.def, 2) Nvcincr.def, and 3) Nvmacro.def. Also, there will also be the following files for the implementation of anti-virus: 1) Ndiskio.sys 3) Nse.exe, 4) Nse_w32.dll, and 6) Ncl.dll (NOTE: These files are installed into the C:\NORMAN\NSE\BIN folder.

You cannot move the Norman folder due to download settings for AV Updates.

The minimum hardware requirements for the anti-virus implementation are no different than the installed version of Domino. SpamSentinel is compatible with all production versions of Domino starting with Domino R5. We are also compatible with Linux and AS400/iSeries installations of Domino. For Linux and AS400/iSeries, it is necessary to have a windows-based checking machine run in parallel with your Domino server to perform spam and/or virus checking. Additionally, SpamSentinel is supported on Windows NT 4.0 Server, Windows 2000 All Versions, Windows XP All Versions and Windows 2003 All Versions.

Attachment Handling

You can also restrict non-virus attachments based on the file extension (such as .pif or .bat). Messages containing these attachments can be stripped of the attachment and delivered, stripped of the attachment and quarantined, quarantined for the administrators only (by means of a Readers field) or quarantined for the administrators with a notification going to the user.