Download - McAee SaaS Email Protection-Quickstart.pdf
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
1/72
Partner Quick Start for
Email Protection
Last Update: June 2010
Updated: November 2010
Proprietary and Confidential
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
2/72
RESTRICTION ON USE, PUBLICATION,OR DISCLOSURE OF PROPRIETARY
INFORMATION.
Copyright 2010 McAfee
This document contains information that isproprietary and confidential to McAfee. Nopart of this document may be reproduced,stored in a retrieval system, or transmitted, in
any form or by any means (electronic,mechanical, photocopying, recording, or oth-erwise) without prior written permissionfrom McAfee. All copies of this documentare the sole property of McAfee and must bereturned promptly upon request.
McAfee, Inc.
9781 South Meridian Blvd., Suite 400Englewood, CO 80112 USA
Direct +1 720-895-5700Toll Free +1 877-695-6442Fax +1 720-895-5757
Web site: www.mxlogic.com
Documentation Feedback:[email protected]
Partner Quick Start for Email Protection
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission ii
http://www.mxlogic.com/http://www.mxlogic.com/ -
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
3/72
Partner Quick Start for Email Protection
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission iii
Contents
1 Administering Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Quick Start Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Who Should Use This Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Administrative Levels of Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Recommended Browsers for Control Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Administrative Windows Accessible by Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Partner Permissions for Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Partner Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Parent Partner Administration of Downstream Partners . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Parent Partner Administration of Customers of Downstream Partners . . . . . . . . . . . . . . . . .14
Ensure the Customer Can Receive Email from the Service Provider . . . . . . . . . . . . . . . . . .15
Sign into the Control Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15Reset Your Password from the Sign in Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Review the List of Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Download a List of Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Create a customer and activate package solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Bundles and Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Rules for Selecting Bundles and Packages .....................................................................21
Steps to Create a Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Create a Primary Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Create a Domain Alias, If Necessary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Set up the Customers Inbound Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Delete an Inbound Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Add IP Address of Outbound Server, If Necessary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Delete an Outbound Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Have the Customer Set up a Smart Host (If Outbound Mail Protection is Turned on) . . . . .32
Have the Customer Redirect the MX Records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Confirm the Policies for Customer Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Have the Customer Lock Down the Customer Environment . . . . . . . . . . . . . . . . . . . . . . . . .33
Rebrand your interface and that of your customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Types of branding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Available Branding Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Levels of Branding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Configure Branding at the Partner Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Configure Branding for a Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Set up a protected user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
4/72
Partner Quick Start for Email Protection
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission iv
Administer Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Administer Other Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Customize Inbound Mail Filters (Optional) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Create Groups, If Necessary (Enterprise Customer Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Administer Disaster Recovery Services for the Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Administer MSP Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Create a Partner Distribution List (for MSP Connector only) . . . . . . . . . . . . . . . . . . . . . . . . .47
Configure the Partner MSP Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
Add Customers for MSP Report Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
Turn on Exception Notifications for the Partners MSP Connection . . . . . . . . . . . . . . . . . . .49
View an MSP Connector Audit Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Download an Audit Report ...............................................................................................54
Sample ConnectWise Configuration page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Configuring MSP Connector for Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Configure Message Audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
2 Administering Downstream Partners. . . . . . . . . . . . . . . . . . . . . . . . . 57
Review the List of Partners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Create a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Edit or Change a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Delete a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Branding, Distribution Lists, and MSP Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
3 Service Bundles and Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61Managed Service Bundles Detail: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Email & Web Security Bundle inclusions..........................................................................61
Email Security & Archiving, both 1-yr. and multi-yr., inclusions .......................................62
Complete Security bundles, both 1-yr. and multi-yr., inclusions.......................................63
Inbound Email Protection Packages ................................................................................65
Outbound Email Protection Packages..............................................................................67
Email Archiving packages ................................................................................................67
Web Protection Package..................................................................................................68
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
5/72
Partner Quick Start for Email Protection Quick Start Checklist
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 1
1. Administering Customers
Quick Start Checklist
The following checklist lists the tasks you would typically perform to support customers
who use Email Protection. Each task is described in more detail later in the Quick Start
Guide.
Task Description
Sign into the Control Console You need the URL, sign-in, and password, which you might need
to create yourself. To set your password, see Reset Your Password
from the Sign in Page.
Review the List of Customers Review your list of customers to see who is alreadyadministered or to access a customer for additional
administration.
Create a customer and activate package
solutions
On the Control Console, clickAccount Management >
Customers > Create.
See Partner Permissions for Administration on what you
might or might be allowed to administer.
Create a Primary Domain On the Control Console, clickAccount Management >
Domains.
Create a Domain Alias, If Necessary On the Control Console, clickAccount Management >
Domains. Select a domain, then clickEdit Aliases.Set up the Customers Inbound Servers Click Email Protection > Setup > Inbound Servers.
You must enter an IP address (for example 100.2.45.107) or a
CIDR address (for example 100.2.45.107/27)
Add IP Address of Outbound Server, If
Necessary
Click Email Protection > Setup > Outbound Servers.
You must enter an IP address (for example 100.2.45.107) or a
fully-qualified DNS address. You cannot use CIDR notation.
Have the Customer Set up a Smart Host
(If Outbound Mail Protection is Turned
on)
To ensure that your outbound email is filtered, you must
designate, for each of your outbound mail servers, an Email
Protection server as your Smart Host.
Have the Customer Redirect the MXRecords
The Mail Exchange (MX) record for each of your mail servers is aspecification within a Domain Name Server (DNS Server)
operated by your Internet Service Provider (ISP). These records
must be changed by your ISP to fully-qualified domain names (for
example, denver.acme.com) within the Email Protection
network.
The exact changes necessary are provided by your Email
Protection provider in the Service Activation Guide.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
6/72
Partner Quick Start for Email Protection Quick Start Checklist
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 2
Confirm the Policies for Customer
Domains
Click Email Protection > Policies.
Select the default inbound policy, then browse each tab for
the policy.
Have the Customer Lock Down the
Customer Environment
Five to seven days after you have redirected your MX record, and
after you have verified that email is being filtered and delivered
appropriately, restrict all IP access to your mail server with the
exception of the Email Protection subnets provided in your
Service Activation Guide.
Rebrand your interface and that of your
customers
To provide the look and feel of your company for your customers
service, or to allow customers to change the look and feel for their
own company, configure branding.
Click Account Management > Partners > Branding or
Account Management > Customers > Branding.
See also Types of branding, Available Branding Attributes,
and Levels of Branding.
Set up a protected user A protected user cannot be deleted via bulk or batch update
processes. Thus, Customer Administrators are recommended
candidates to be protected users.
Create a user.
Select the user, then clickEdit.
Administer Users Define how users log in
Disable user access to the Control Console
Turn on explicit user creation
Create remaining users
Create user aliases
For information on administering users, see Email ProtectionQuick Start.
Customize Inbound Mail Filters
(Optional)
You or the customer can customize the default inbound policy for
groups of users to fit the customers business needs.
For more information on customizing policies, see theEmail
Protection Quick Startor, for details on all customizing options,
see theEmail Protection Administrator Guide.
Create Groups, If Necessary (Enterprise
Customer Only)
Groups are used when there are users in the organization whose
email should be filtered according to a policy other than the
default policy.
Creating and applying groups is a three step process:1 Create a new group.
2 Assign individual User Accounts to the group.
3 Create a new policy with special email filtering rules and
associate the group to the policy.
For more information on creating groups, see theAccount
Management Administrator Guide.
Task Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
7/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 3
Who Should Use This DocumentThis document provides instructions for Partners and service provider administrators. This
document assumes that the administrators are performing tasks on behalf of their
customers.
Administrative Levels of Users
The levels of administrative users you can add are as follows:
Administer Disaster Recovery Services
for the Customer
Disaster Recovery Services consists of one of two services:
Fail Safe
Email Continuity
Either of these services are optional and available at additional
cost.
If your customer has purchases Disaster Recovery, you ore the
customer can administer Disaster Recovery. See Administer
Disaster Recovery Services in theEmail Protection Quick Start.
Administer MSP Connector Managed Service Platform (MSP) Connector enables the delivery
of email traffic and threat data directly to your ConnectWise
network performance dashboards.
To utilize the MSP Connector capabilities, you should:
Create a Partner Distribution list for MSP Connector
notifications
Configure your ConnectWise information on the
Configuration screen.
Select the domains needed to push your data to ConnectWise.
Enable Exception Notification if you wish to receive csv. files
reporting data.
In addition, if a customer also uses ConnectWise, you can
configure that customer for MSP Connector.
Configure Message Audit For more information, seeMessage Audit Quick Start Guide,
which is posted on the Partner Portal under Support.
Administrative level Description
Group Administrator The Group Administrator can add and remove members from one
or more groups if assigned to those groups. A Group Administrator
can also create,edit, and modify Email Protection policies for the
assigned groups. A Group Administrator does not need to be a
member of a group in order to have these capabilities.
Note: A GroupAdministrator cannot add or remove a group.
Task Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
8/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 4
The following figure summarizes the levels of administrators, plus users, in anEmail Protection configuration.
Reports Manager The Reports Manager can view, for an assigned domain, reports
available with Email Protection. The Reports Manager can also
manage his or her own user preferences and all other tasks a user
can perform.
Quarantine Manager The Quarantine Manager, for an assigned domain, can manage the
same areas as a Report Manager, plus manage, for the assigned
domain, all users Quarantine for spam and other problematic
messages, only if Email Protection is enabled.
Domain Administrator The Domain Administrator, for an assigned domain, can manage
the same areas as a Quarantine Manager, plus manage server setup
and authentication rules for the domain.
Customer Administrator The Customer Administrator, for all domains and groups, can
manage the same areas as a Domain Administrator or Group
Administrator, plus manage all user accounts for that customer,
Email Protection policies, create and delete domains and domain
aliases, create and delete groups, and manage additional options, if
enabled, such as Message Audit and Performance Reports. The
Cusotmer Administrator is also the only administrator who can
manage passwords.
A Customer Administratorcannotedit domains.
Partner Administrator The Partner Administrator can manage all aspects of the partners
account. In addition, if given customer management permission and
permission to configure the core products of Email Protection, Web
Protection, and Email Archiving, can manage all aspects of the
customers accounts. Finally, the Partner Administrator can create
and modify downstream Partners who have their own customers.
Administrative level Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
9/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 5
Recommended Browsers for Control
Console
The Control Console is a Web-based administration tool that provides multiple levels of
security, accessibility, and configurations depending on several standard entities and roles.
See theAccount Management Admin istrator Guide for a list of recommended browsers
for the Control Console.
Administrative Windows Accessible by
Administrators
The following tables list the windows that administrators of each level can access.
Account Management Window Access Privileges
Email Protection Window Access Privileges
Table 1: Account Management Window Access Privileges
WindowAccess Partner/Customer
FeatureEnablement
Required
PartnerAdministrator
C
ustomerAdministrator
DomainAdministrator
QuarantineManager
GroupAdministrator
PartnerTabCreate Partner
Edit Partner
No Yes.
Cannot
enable
Branding
or
applicatio
ns (Email
Protectio
n, Web
Protection, Email
Archivin
g
No No No No
Distribution List No Yes No No No No
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
10/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 6
Branding Yes. Branding
type must be
White Label,
Co-branding,
Rebrand, or
Private
Yes Yes No No No
MSP Connector:
Configuration
No Yes No No No No
MSP Connector:
Customers
No Yes No No No No
MSP Connector:
Notification
No Yes No No No No
MSP Connector: Audit
Report
No Yes No No No No
CustomerTabCreate Customer
Edit Customer
Yes. Customer
Administratio
n must beenabled.
Yes No No No No
Branding Yes. Branding
type must be
White Label,
Co-branding,
Rebrand, or
Private
Yes Yes No No No
Distribution Lists No Yes Yes No No No
MSP Connector:
Configuration
Yes. MSP
Connector
must be
enabled
Yes Yes No No No
MSP Connector: Domains Yes Yes No No No
MSP Connector:
Notification
Yes Yes No No No
MSP Connector: Audit
Report
Yes Yes No No No
WindowAccess Partner/Customer
FeatureEnablement
Required
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
11/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 7
Performance Reports Yes.
Performance
Reports must
be enabled
Yes Yes No No No
DomainstabDomain Accounts List None Yes Yes No No No
Create Domain
Delete Domain
Edit Domain Aliases
Yes. DomainAdministratio
n must be
enabled
Yes Yes No No No
Edit Domain No Yes No No No No
Branding Yes. Branding
and Domain
Administratio
n must be
enabled
Yes Yes Yes No No
Aliases No. Yes Yes Yes.
Users
must
be
given
ability
to set
up
aliases
by
admin
istrato
r.
No No
Preferences No Yes Yes Yes No No
UsersTabUser Accounts No Yes Yes Yes Yes Yes
My Account No Yes Yes Yes Yes Yes
WindowAccess Partner/Customer
FeatureEnablement
Required
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
12/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 8
My Account: Aliases No Yes Yes Yes Yes Yes
My Account: Change
Group
No Yes Yes No No No
My Account: Preferences No Yes Yes Yes Yes Yes
My Account: Quarantine No Yes Yes Yes Yes Yes
My Account: EmailContinuity
Yes. EmailContinuity
must be
enabled
Yes Yes Yes Yes Yes
My Account: Allow/Deny
Lists
No Yes Yes Yes Yes Yes
My Account: Email
Activity
No Yes Yes Yes Yes Yes
User Details No Yes Yes Yes Yes No
User Details: Group
Administration
User must be a
GroupAdministrator
Yes Yes No No Yes
User Details: Aliases No Yes Yes No No No
User Details: Change
Group
No Yes Yes No No No
User Details: Preferences No Yes Yes No No No
User Details: Quarantine No Yes Yes Yes No No
User Details: Email
Continuity
Yes. Email
Continuitymust be
enabled
Yes Yes Yes Yes No
User Details: Allow/Deny
Lists
No Yes Yes Yes Yes No
User Details: Email
Activity
No Yes Yes No No No
WindowAccess Partner/Customer
FeatureEnablement
Required
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
13/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 9
Table 2: Email Protection Window Access Privileges
User Details: Web Activity No Yes Yes No No No
Create Users
Edit Users
Delete Users
No Yes Yes No No No
User Synchronization No Yes Yes No No No
User SynchronizationSetup
No Yes Yes No No No
User Authentication No Yes Yes Yes No No
GroupstabGroups : Groups list No Yes Yes No No Yes
Groups: New Group No Yes Yes No No No
Groups: Group Details No Yes Yes No No Yes
Groups: Members No Yes Yes No No Yes
Groups: Administrators No Yes Yes No No Yes
Groups: Email Protection
Policies
No Yes Yes No No Yes
WindowAccess CustomerFeature
EnablementRequired
PartnerAdministrator
CustomerAdm
inistrator
DomainAdministrator
QuarantineM
anager
GroupAdmin
istrator
Overview No Yes Yes Yes No No
WindowAccess Partner/Customer
FeatureEnablement
Required
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
14/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 10
Policies tab
Policy Sets No Yes Yes No No Yes
Anti-virus: Action No Yes Yes No No Yes
Anti-virus: Notifications No Yes Yes No No Yes
Anti-SPAM: Classification No Yes Yes No No Yes
Anti-SPAM: Content Groups No Yes Yes No No Yes
Anti-SPAM: Reporting No Yes Yes No No Yes
Content: Content Groups No Yes Yes No No Yes
Content: Notifications No Yes Yes No No Yes
Content: HTML Shield No Yes Yes No No Yes
Content: Click Protect Yes Yes No No Yes
Attachments: File Types No Yes Yes No No Yes
Attachments: File Name
Policies
No Yes Yes No No Yes
Attachments: Additional
Policies
No Yes Yes No No Yes
Attachments: Additional
Notifications
No Yes Yes No No Yes
Enforced TLS: Actions No Yes Yes No No Yes
Enforced TLS: Notifications No Yes Yes No No Yes
Allow/Deny: Sender Allow No Yes Yes No No Yes
Allow/Deny: Sender Deny No Yes Yes No No Yes
Allow/Deny: Recipient Shield No Yes Yes No No Yes
Notifications: Content No Yes Yes No No Yes
Notifications: Attachment No Yes Yes No No Yes
Group Subscriptions No Yes Yes No No Yes
Disaster Recovery Yes Yes No No No
WindowAccess CustomerFeature
EnablementRequired
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
15/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 11
Quarantine Tab No Yes Yes Yes Yes Yes
Setup Tab
Inbound Servers Setup No Yes Yes Yes No No
Outbound Servers Setup Yes.
Depending
on your
purchasedpackage, this
service might
need to be
enabled.
Yes Yes Yes No No
Outbound Disclaimer Yes.
Depending
on your
purchased
package, this
service might
need to be
enabled.
Yes Yes Yes No No
Disaster Recovery Setup Yes. Either
FailSafe or
Email
Continuity
must be
enabled or
included in
your
package.
Yes Yes Yes No No
MX Records Setup No Yes Yes Yes No No
User Creation Settings No Yes Yes No No No
Message Audit tab
Message Search Message
Audit must
be enabled or
included in
your package
Yes Yes No No No
Perimeter Block Search Yes Yes No No No
Search History Yes Yes No No No
WindowAccess CustomerFeature
EnablementRequired
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
16/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 12
Reports tab
Traffic Overview No Yes Yes Yes Yes No
Threats Overview No Yes Yes Yes Yes No
Threats: Viruses No Yes Yes Yes Yes No
Threats: Spam No Yes Yes Yes Yes No
Threats: Content No Yes Yes Yes Yes No
Threats: Attachments No Yes Yes Yes Yes No
ClickProtect: Overview No Yes Yes Yes Yes No
ClickProtect: Click Log No Yes Yes Yes Yes No
Quarantine: Release
Overview
No Yes Yes Yes Yes No
Quarantine: Release Log No Yes Yes Yes Yes No
User Activity No Yes Yes Yes Yes No
Event Log No Yes Yes Yes Yes No
Audit Trail No Yes Yes Yes Yes No
Inbound Server Connections No Yes Yes Yes Yes No
Disaster Recovery: Overview Yes. Either
FailSafe or
Email
Continuity
must be
enabled.
Yes Yes Yes Yes No
Disaster Recovery: Event Log Yes. Either
FailSafe orEmail
Continuity
must be
enabled.
Yes Yes Yes Yes No
WindowAccess CustomerFeature
EnablementRequired
PartnerAdministrator
CustomerAdministrator
Domain
Administrator
QuarantineManager
Group
Administrator
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
17/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 13
Partner Permissions for Administration
Before you can administer new customers, your partner contract must include the ability
to provision customers within the Control Console and you might be required complete
Partner Certification Training.
Your service provider or your Parent Partner provisions your account and creates a PartnerAdministrator user account, which allows you to provision new customers within the
Control Console.
To perform most tasks described in this document, your partner account must have
permissions for Customer Management. In addition, you must have permission to
administer customers within each of the following product areas:
Email Protection
Email Archiving
Web Protection
A partner without product administration permissions, but with customer management
permissions, can still administer customers, domains, and users. However, such a partner
cannot administer product capabilities for those entities. Instead, fields and links to
windows that are restricted from a partner's administration will be grayed out.
Note: You will have product administration permission for your own company, if your
company uses Email Protection, Web Protection, or Email Archiving.
Note: A customer can have permission for their own administration within product areas,
even if the Partner managing that customer does not have permission.
Partner Hierarchy
A hierarchical relationship between two Partners can exist, with one Partner as a higherlevel Parent Partner and the other Partner considered a downstream partner to that
parent. Normally, this hierarchy represents a business relationship between the two
partners.
A downstream Partner of one Partner can simultaneously be a Parent Partner of another
Partner, if administered as such. In this case, the hierarchy becomes multi-tiered. For
example, if Partner A is identified as Parent of Partner D, and Partner D is identified as
Parent of Partner E, then Partner A is at the top of the hierarchy, Partner D is in the middle,
and Partner E is at the bottom.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
18/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 14
Parent Partner Administration of
Downstream Partners
The Partner Administrator of a Parent Partner can administer a downstream Partner. As a
result, a Parent Partner Administrator can create, view, edit, and delete their downstream
Partner accounts.
A Parent Partner Administrator can access the following windows to administer their
downstream Partners:
Partner Accounts List
Create Partner
Edit Partner
Partner Details
Branding
Distribution Lists
MSP Connector - Configuration, Customers, Notification, and Audit Reports
windows
Note: Though a Parent Partner Administrator can configure branding for a direct Partner,
a Parent Partner Administratorcannotturn on the following options on the Create Partner
or Edit Partner window:
White label
Private Branding
In addition, a Parent Partner cannot enable Customer Management nor enable the
following capabilities:
Email Protection
Email Archiving
Web Protection
Instead, your provider of these services must enable them.
Note: In most cases, a downstream Partner can have permissions to manage its customers,
even if the Parent of that Partner does not. However, if a Parent Partner is not allowed the
following capabilities, downstream partners of that Parent Partner cannot be enabled for
the capabilities either:
Manage Intelligent Routing
Use Message Audit
Delegate Domain Management
Parent Partner Administration of
Customers of Downstream Partners
If you have Customer Management permission and the appropriate permissions for
product administration, and you have downstream Partners who, in turn, have their own
customers, you have the ability to perform almost all of the tasks in this document for the
customers of those downstream partners.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
19/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 15
To administer the customer of a downstream Partner, you can simply select the
downstream Partner first from the Partner accounts list, then select the customer of that
Partner. In addition, on most administration windows, the Customer drop-down menu at
the top of the window lists all customers for whom you have administrative permissions,
which can include your direct customers and those of your downstream partners.
Note: As with any self-provisioning Partner, a Parent Partner cannot administer the
passwords of a customer's users. A Parent Partner also cannot set the branding type of
customers or customer domains. Your service provider must set the branding type for
these entities.
Note: If you are a Partner Administrator of a Parent Partner, but you are not enabled for
Intelligent Routing, Message Audit, or delegating domain management to customers, you
cannot enable downstream partners for these capabilities either.
Ensure the Customer Can Receive Email
from the Service ProviderIf the customer had or still has a different email security or filtering service and their
network is administered so that the customer can receive email only from IP addresses
associated with that security service, the customer must administer their network to allow
incoming email from the Control Console servers. For example, a port in the customers
company firewall may need to be enabled to receive email from the IP addresses of the
Control Console servers.
This enablement is necessary in order for you and the customers users to set the initial
password for access to the Control Console.
Sign into the Control Console
To administer a customer, you must sign into the Control Console with the following
steps:
Note: The first time you sign in, you might need to create your password. If so, see Reset
Your Password from the Sign in Page.
1 Open a browser on your computer and enter the URL for the Control Console.
The URL should be identified in the Service Activation Guide you received from your
provisioner. If you dont have the URL, contact your sales representative or Customer
Support.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
20/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 16
2 At the Control Console Sign in page, enter your email address and password.
3 Click Sign in.
If you have notpreviously entered an answer to a security question, the Security
Question window pops up.
The answer to the security question is used to validate you, the user, if you forget yourpassword.
You can later change your security question and/or security answer on the Preferences
page of your user account. See Set User Display Preferences, Including Your Own
inAccount Management Administrator Guide.
4 Select a security question and type the answer. Your answer is notcase-sensitive.
Note: If you also use the Email Protection, you can also sign into the Control Console
from a Spam Quarantine Report.
Reset Your Password from the Sign inPage
Note: This capability may not be available if the user authentication method is set to
LDAP, POP3, or IMAP or if the ability to change passwords has been disabled at the
system level.
If you forget your password or want to reset it, perform the following steps:
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
21/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 17
1 On the Sign in page, click the Forgot your password or need to create a password?
link.
The following window is displayed.
2 In the Username field, type your email address.
3 Select Email password information to me.
4 Click Next.
You will receive an email momentarily with further instructions. Continue with Step
5.
5 Open the email message. The email subject line says Control Console Login
Information.
The email is similar to the following:
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
22/72
Partner Quick Start for Email Protection Who Should Use This Document
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 18
6 Click the link in the email. The link is active for only a limited time after the email is
sent (typically, 60 minutes).
7 If you previously had selected a security question, the security question is displayed.
If you had not previously selected a security question, you will receive an error and
must contact your administrator.
8 Type the answer to the question in the Security Answer field.
9 For the Security Question field, clickChange if you need to change the security
question or answer. You must answer this question when you forget your password or
need to reset it.
The Security Question and Security Answer fields are displayed. Select a question
from the Security Question drop-down menu, then type an answer.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
23/72
Partner Quick Start for Email Protection Review the List of Customers
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 19
10 In the Password field, type a password.
The password must comply with the following rules:
Length must be a minimum of 8 characters.
Alpha, numeric, and special character types are allowed.
There must be at least one character that differs in character type (alpha, numeric,
or special) from the majority of characters. Thus, if the password contains mostlyalpha characters, then at least one character must be either a special character or
numeric. For example, majordude is invalid, but majordude9 is valid.
Allowed special characters are:
Spaces are not allowed.
Passwords are case-sensitive (for example, Password, password, andPASSword would be different passwords).
Make sure you can remember your password, but do not use obvious passwords (for
example, password, your name, or a family members name). Keep your password
safe and private.
11 Retype your password in the Confirm Password field.
12 ClickSave.
Review the List of Customers
To review the current list of customers, perform the following steps:
1 Click Account Management > Customers.
The Customer Accounts list is displayed.
left parenthesis ( ( ) ampersand ( & ) right bracket ( ] )
right parenthesis ( ) ) asterisk ( * ) colon ( : )
apostrophe ( ) hyphen ( - ) semicolon ( ; )
tilde ( ~ ) plus sign ( + ) double quotes ( " )
exclamation ( ! ) equals sign ( = ) single quotes ( ' )
@ bar ( | ) less than sign ( < )
hash ( # ) backslash ( \ ) greater than sign ( > )
dollar sign ( $ ) left curly bracket ( { ) period ( . )
percentage sign ( % ) right curly bracket ( }) question mark ( ? )
caret ( ) left bracket ( [ )
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
24/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 20
The list displays the following information:
Customer Name The customers name.
Partner Name The name of the customers partner is displayed. Date Created The date that this customer was added to the Control Console.
Domains The number of primary domains administered for this customer.
Download a List of Customers
To download the list of customers from the Customer Accounts list, clickDownload.
The Control Console automatically generates a .csv file which you can save or open,
normally using Microsoft Excel.
Create a customer and activatepackage solutions
Note: To perform this task, you must have permissions to manage customers and the
specific applications.
Bundles and Packages
The customer provisioning steps are different, based on the selection of one of thefollowing for Email Protection and similar selections for the Web Protection and Email
Archiving:
Standard Package A collection of features within one of the three product areas:
Email Protection, Web Protection, or Email Archiving
Service Bundle Package A combination of two or three products: Email Protection,
Web Protection, and/or Email Archiving
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
25/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 21
Perimeter Defense Package A basic email protections service that the customer
cannot administer
For each product, you select a bundle or package from the drop-down menu.
These bundles and packages are described in Chapter 3. Service Bundles and Packages
Rules for Selecting Bundles and Packages
If you select a bundle for one product, you must select the same bundle for the other
products that are included in that bundle. For example, if you select Bundle 01 -
Complete Security - Multi-Yr for the Email Protection product, you must select
Bundle 01 - Complete Security - Multi-Yr for the Email Archiving and Web
Protection products too, since all products are included in the bundle. If you selectBundle 03 - Email and Web Security for the Email Protection product, you must select
Bundle 03 - Email and Web Security for the Web Protection product too.
If you select a service bundle for Email Protection, you should change the quarantine
period for the customer to 14 days. This is the quarantine period paid for within the
bundle, but if the quarantine period administered is 7 days, the customer will not get
the 14-day period they paid for.
If you select an inbound Email Protection package with Email Continuity, but the
customer does not want an outbound package, you must select Package 62 - Outbound
Email Continuity to allow messages stored in Email Continuity to be filtered.
If you select a service bundle for Email Protection, you must select a corresponding
outbound package, either Outbound Email Continuity if the customer does not wantoutbound filtering, or Full Outbound Upgrade if they do want outbound filtering.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
26/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 22
The following table outlines which Outbound Packages are applicable based on the
Inbound Package Selected.
Steps to Create a Customer
To create a customer, perform the following steps:
1 Click Account Management > Customers > Create.
Applicable Outbound Package
Outbound
EmailContinuity
Full Outbound
Upgrade
Specific
OutboundPackage
Selected
Inbound
Packa
ge
Any ServiceBundle
Yes Yes N/A
UltimateAccess / EmailProtection andContinuity
N/A N/A Yes
Ultimate
Defense /Email Protec-tion
N/A N/A Yes
CriticalDefense /Email InboundFiltering
N/A N/A N/A
EnterpriseDefense withEmail Continu-
ity
Yes N/A Yes
Any Enter-prise Packagewithout EmailContinuity
N/A N/A Yes
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
27/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 23
Note: Your company must be certified and have permission to enable your customers for
the specific services listed on this window. If your company is not certified in, and
therefore not able to, turn on certain services, the related fields on this window will not be
available to you.
Field Description
Partner Name Your company's name is displayed.
If you have downstream Partners, this field is a drop-down menu
of those Partners. Select the Partner whose customer you are
creating.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
28/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 24
Customer Type Select the type of customer, normally Enterprise. The other
option, Service Provider, currently requires approval from
McAfee.
Enterprise - Designates that the Customer is able to use
Groups to associate users with user groups, which then canbe associated with policy sets.
Service Provider - Contact McAfee to verify this assignment.
Customer Name Enter the company name of the customer.
Contact Email Enter the email address of the customers technical contact.
Address and Telephone
information
Address and telephone contact information for the customer is
required.
Branding Type Select the type of branding. The branding that a customer
establishes for itself also determines the display of standard
branding for that customer's domains.
Co-brand - Displays the customer's branding attributes alongwith the service providers tagline.
Private - (Available to select only by your service provider.)
Displays the customer's branding attributes, including the
customer's tagline, if defined. Private is the only branding
type that can rename the Control Console. Private is also the
only branding type that does not have the service provider
brand in its URL. This type also allows a tagline to be
defined for display for the domains that use Co-brand
branding.
Rebrand - Displays the customer's branding attributes.
Rebrand does not use a tagline for the customer's account, but
allows a tagline to be defined for display for the customer's
domains who use Co-brand branding.
Standard - Displays the customer's service provider branding
attributes. This is the default branding type.
White Label - (Available to select only by your service
provider.) No branding attributes are displayed. However,
this type allows a tagline to be defined for display for the
domains that use Co-brand branding.
Add and Delete Domains Select this checkbox to allow the customer to add and delete
domains.
MSP Connector Select this checkbox to allow the customer to configure and
manage their Managed Service Platform (MSP) Connector.
Performance Reports Select this checkbox to allow the customer to manage
Performance Reports.
Message Audit Select this checkbox to allow the customer administrator or
domain administrator to search message details and histories
collected by the Message Audit feature.
Optional Fields Select an optional field and clickAdd to have the field appear on
the Edit Customer and Customer Details pages.
Field Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
29/72
Partner Quick Start for Email Protection Create a customer and activate package
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 25
Email Protection Settings
Inbound Package Select the package for inbound email security. If you select a
service bundle, you must designate the same bundle for the other
services that are included in that bundle. For example, if you
select Bundle 02, which contains Email Protection and Email
Archiving, then you must select Bundle 02 for Email Archiving.
Outbound Package Select the package for outbound email security. An Inbound
package must be selected before you can select an Outbound
package.
Number of Billed Users Enter the number of billed users of Email Protection. This number
must match the number for Email Archiving and/or Web
Protection, if those services are enabled as part of a bundle.
Quarantine Period From the drop-down menu, select the number of days that
quarantined email stays in quarantine before it gets deleted.
Email Encryption Select the Email Encryption checkbox to allow customers to use
the Encrypt Message action when working with Outbound Policy
Content Groups. Email Encryption may be used when the
customer does not support encryption messages via other systems.
Note: Email Encryption is only available for a selected Outbound
package.
Number of Encryption
Users
Type the number of billed users selected to use the email
encryption action. This number must be equal to or less than the
number of messaging billed users.
Email Archiving Settings
Email Archiving Package From the drop-down list, select the Email Archiving package thecustomer ordered. If you select a service bundle, you must
designate the same bundle for the other services that are included
in that bundle. For example, if you select Bundle 02, which
contains Email Protection and Email Archiving, then you must
select Bundle 02 for Email Protection.
Number of Billed Users Type the number of billed users of Email Archiving. This number
must match the number for Email Protection and/or Web
Protection, if those services are enabled as part of a bundle.
Archive Retention Period In the drop-down lists, define the length of time in years, that
Email Archiving will store messages retrieved directly from the
Exchange Server journal mailbox. The length of time can beeither 1, 3, 5 or 7 years. The months drop-down field is not
available at this time.
Historical Data Storage
Limit
Type the maximum Gigabytes (GB) of storage the customer has
available for messages that have been uploaded in bulk. The
maximum is 250 GB. Storage amounts must be set in 25 GB
increments.
Web Protection Settings
Field Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
30/72
Partner Quick Start for Email Protection Create a Primary Domain
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 26
2 Click Save.
Create a Primary Domain
A customer must always be configured for at least one primary domain. A primary domainis the domain used by users primary email address. A primary domain is normally the
domain associated with an SMTP mail server.
Note: If you have any downstream partners, you can also perform this task for the
partners customers.
Note: For Email Protection, a primary domain must be an actual domain within the
customers network.
To create a new domain, perform the following steps:
1 Click Account Management > Domains.
2 If necessary, from the Customer drop-down menu, select the customer whose domain
you are creating. If you have downstream Partners, their customers are also listed.
The Domain Creation window is displayed.
Web Protection Package Select the package for web security. If you select a service bundle,
you must designate the same bundle for the other services that are
included in that bundle. For example, if you select Bundle 03,
which contains Email Protection and Web Protection, then you
must select Bundle 03 for Email Protection.
Number of Billed Users Enter the number of billed users. This number must match the
number for Email Protection and/or Email Archiving, if those
services are enabled as part of a bundle.
Field Description
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
31/72
Partner Quick Start for Email Protection Create a Primary Domain
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 27
3 In the Domain field, type the fully-qualified domain name. This name should be
registered within a DNS server and unique from outside of the company network. In
this example, you type denver.acme.com.
4 In the Contact Email field, type the email address of the customer administrator or
the email address of the domain administrator, if there is one.
5 In the Branding Type field, select the type of branding:
Co-brand - Displays domain's branding attributes along with the service
providers tagline.
Private - (Available to select only by your service provider.) Displays the domain's
branding attributes, including the domain's tagline, if defined. Private is the only
branding type that can rename the Control Console. Private is also the only
branding type that does not have the service provider brand in its URL.
Rebrand - Displays the domain's branding attributes. Rebrand does not use a
tagline for the domain's account.
Standard - Displays the service providers or customer's branding attributes. This
is the default branding type.
White Label - (Available to select only by your service provider.) No branding
attributes are displayed.
6 Select the Message Audit checkbox to allow the customer administrator to search
message details and histories using Message Audit.
7 For the User Alias Management section, click the Allow customer to manage user
aliases checkbox.to allow Customer Administrators to create alias email addresses.
8 In the Set limit to x aliases per user field, type the maximum number of allowed alias
email addresses per user account in this domain.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
32/72
Partner Quick Start for Email Protection Create a Primary Domain
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 28
9 Select the Allow customer to manage domain aliases checkbox to allow customer
administrators and domain administrators to create alias email addresses for users.
10 ClickSave.
Create a Domain Alias, If NecessaryYour customer also may use domain aliases. For example, acme.org and acme.net might
be domain aliases for your companys acme.com domain so that email mistakenly sent to
addresses using acme.org oracme.net actually are sent to acme.com. You must add these
domain aliases in the Control Console to ensure email to these domains are filtered and
delivered.
1 Click Account Management > Domains.
2 From the Customer drop-down menu, select the customer whose domains you are
creating. If you have downstream Partners, their customers are also listed.
3 On the Domain Management page, click the domain for which you want to add
aliases. In our example, you would clickacme.com.
The Domain Details page is displayed.
4 Click Edit Aliases.
The Domain Aliases page is displayed.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
33/72
Partner Quick Start for Email Protection Set up the Customers Inbound Servers
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 29
5 Complete the Add field, and clickAdd.
For more information, clickHelp.
Set up the Customers InboundServers
You must configure the customers inbound servers to receive inbound email from Email
Protection for the designated domain. All servers for a domain that receive inbound email
from Email Protection must be configured on the Inbound Servers Setup window.
Any server addresses designated here must be valid and available to connection from
Email Protection. After the Save Changes button is clicked, the Email Protection
immediately routes email to the active servers.
1 Click Email Protection > Setup.
2 If necessary, clickInbound Servers.
The Inbound Servers Setup window is displayed.
3 If necessary, from the Customer drop-down menu, select the customer whose server
you are setting up. If you have downstream Partners, their customers are also listed.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
34/72
Partner Quick Start for Email Protection Add IP Address of Outbound Server, If
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 30
4 From the Domain drop-down menu, select the domain whose SMTP server you want
to add.
5 Click Add New Host.
A new set of fields appears for the server.
6 In the SMTP Host Address field, type the fully qualified DNS or IP address of the
server host being configured. CIDR notation is not allowed.
If you do not have a registered and valid DNS name for the email servers, you must
enter the IP addresses of each server.
7 In the Port field, type the port on the server to which Email Protection will connect.
The default value is 25.
8 In the Preference field, type the number indicating order of connection preference
between multiple servers. Email Protection attempts to connect first to the server with
the lowest preference number. If that server is not available (either down or too busy),
Email Protection tries the server with the next lowest preference number, and so on. If
multiple servers have the same preference number, Email Protection will randomly
route the email delivery between them.
9 Click the Active checkbox to allow the server is immediately start accepting email
traffic.
Caution: If all servers are set to inactive, all emails received for this Domain will
be tempfailed.
10 ClickSave.
Delete an Inbound ServerTo delete an inbound server, perform the following steps:
1 Access the appropriate domain on the Inbound Server Setup window.
2 Click the Delete checkbox next to the server you want to delete.
3 Click Save.
Add IP Address of Outbound Server, IfNecessary
If the customers service includes Outbound Message filtering, you must identify one or
more outbound mail servers through which the customers users send outgoing mail.
While the outbound server might use a Domain Name Server (DNS) name within the
customers network (for example, lewisoutbound.acme.com), you identify the outbound
sever within Email Protection with an IP address (for example, 111.222.111.0).
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
35/72
Partner Quick Start for Email Protection Add IP Address of Outbound Server, If
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 31
Alternatively, you can specify a Classless Inter-domain Routing (CIDR) address for a
range of outbound servers (for example, 111.222.111.0/27) only. The address mustbe a
public address.
Any server addresses designated here must be valid and available for a connection. After
the Save Changes button is clicked, Email Protection immediately accepts email traffic
from the active servers.
Note: If email is received from an outbound server that is not configured in the Email
Protection system, it will be refused. If no outbound package has been designated for the
selected domain, this window is unavailable.
1 Click Email Protection > Setup> Outbound Servers.
The Outbound Server Setup page is displayed.
2 If necessary, from the Customer drop-down menu, select the customer whose server
you are setting up. If you have client Partners, their customers are also listed.
3 From the Domain drop-down menu, select the domain whose SMTP server you want
to add.
4 Click Add New Address, and add the address of the outbound server.
5 Click Save.
6 Record the address listed underRecommended Smart Host Server Settings. You
should use this address to perform the next task, Have the Customer Set up a Smart Host(If Outbound Mail Protection is Turned on).
Important: The customer should also do the following before or immediately after
adding the outbound server(s):
Update Sender Policy Framework (SPF) records on the customers mail server(s)
to ensure only authorized sources are sending outbound email.
Scan the network for open relays, viruses and malware.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
36/72
Partner Quick Start for Email Protection Add IP Address of Outbound Server, If
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 32
Refer to the Accepted Use Policy (AUP) at http://www.mxlogic.com/terms/aup/
index.cfm for information on bulk mail.
Delete an Outbound Server
To delete an outbound server, perform the following steps:
1 Access the appropriate domain on the Outbound Server Setup window.
2 Click the Delete checkbox next to the server you want to delete.
3 Click Save.
Have the Customer Set up a Smart Host
(If Outbound Mail Protection is Turned
on)To ensure that the customers outbound email is filtered, the customer must designate, for
each outbound mail server, an Email Protection server as the Smart Host. The customers
outbound email is then relayed through Email Protection before continuing to its final
destinations. See the customers Service Activation Guide for more details.
Note: This task is performed on the customers outbound email server or servers, on the
customers network router, or on some other server, depending on your customers
network configuration.
Have the Customer Redirect the MXRecords
The Mail Exchange (MX) record for each of the customers mail servers is a specification
within a Domain Name Server (DNS Server) operated by the customers Internet Service
Provider (ISP). Each MX record specifies a host name and preference that determines
where and how the customers ISP routes company email.
The customers MX record or records at the ISP must be changed to fully-qualified
domain names (for example, denver.acme.com) within the Email Protection network.
These changes allow Email Protection to filter customer email before it arrives at the
customers mail servers.
The customers Network Administrator or Domain Registrar is typically the individual
responsible for making these changes.
The information necessary for the customer to make these changes is provided in the
customersEmail Protection Activation Guide, which the customer receives when the
customer is first signed up for service.
http://www.mxlogic.com/terms/aup/index.cfmhttp://www.mxlogic.com/terms/aup/index.cfm -
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
37/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 33
Confirm the Policies for Customer
Domains
Email Protection has default inbound and outbound policies which are automatically
assigned to each of the customers domains after each domain is defined. For many
companies, the default policy filters email effectively and doesnt require changes.However, it is strongly recommended that your customer review the default policy to
make sure the policy meets the customers needs. Information regarding review of the
default policy is included in the following sections of theEmail Protection Quick Start
Guide.
Confirm the Policies for Your Domains
Check Message Quarantine
Review Reports to Check Policies
If the policy does not meet customer needs, you or the customer, if enabled, can customize
the policy. The way in which you customize policies varies, depending on whether the
customer is aservice providercustomer or an enterprise customer.
For information on customizing policies, see Customize Inbound Mail Filters inEmail
Protection Administrator Guide.
Have the Customer Lock Down the
Customer Environment
Five to seven days after the customer has redirected the customers MX record, and after
the customer has verified that email is being filtered and delivered appropriately, the
customer should restrict all IP access to their mail server with the exception of the Email
Protection subnets provided in theirService Activation Guide. This action ensures that nomail is presented to the customers mail server without filtering.
Note: This task is performed on the customers inbound email server or servers or on the
customers network firewall server.
Rebrand your interface and that ofyour customers
You can configure branding settings in the Control Console to provide a look and feel
customized to your company or the customers organization. For example, you can
designate that the default McAfee logo image in the Control Console be replaced with
your organizations logo image. In addition, you can provide a URL with preferred
naming for your company that the customers users can use to access the Control Console.
As a partner, by virtue of rebranding the interface for your company, you automatically
rebrand the interface of your customers and domains ifthey are designated to use standard
branding. See the descriptions that follow.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
38/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 34
Types of branding
You can rebrand your interface on the Control Console if you are enabled for one of the
four types of branding (see item 1 in the accompanying illustrations):
White branding No logos or branding appear in the user interface. However, you
can display and change the following items: Your company host name, which appears when users log in or receive spam
notifications.
The From Email address for SQR Reports
A custom support email address
You can also specify a co-brand tagline for your company. This tagline is displayed
below the customer logo for users of any of your customers or their domains if the
customer or domain is designated for co-branding.
Private branding Your company logo and tagline appears in the user interface. In
addition, you can change the following items:
Your company host name, which appears when users log in or receive spam
notifications.
The site name, which changes Control Console to a name of your choice
The From Email address for SQR Reports A URL from which users can download the Spam Control for Outlook tool.
A custom support email address
You can also specify a co-brand tagline for your company. This tagline is displayed
below the customer logo for users of any of your customers or their domains if the
customer or domain is designated for co-branding.
Co-branding Your company logo appears, along with the parent accounts tagline.
In addition, you can change the following items:
Your company host name, which appears when users log in or receive spam
notifications.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
39/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 35
The From Email address for SQR Reports
A custom support email address
Rebranding Your company logo appears in the user interface without a tagline. In
addition, you can change the following items:
Your company host name, which appears when users log in or receive spam
notifications.
The From Email address for SQR Reports
A custom support email address
You can also specify a co-brand tagline for your company. This tagline is displayed
below the customer logo for users of any of your customers or their domains if the
customer or domain is designated for co-branding.
Available Branding Attributes
In addition to the logo and tagline, rebranding affects other aspects of the user interface,
depending on the branding type. See the following table. For a definition of attributes, see
Configure Branding at the Partner Level.
Table 3: Attributes of Branding
Customizable
Attribute
Customizable (by Type of Branding)
Standard White Label Private Co-brand Rebrand
Company logo No. Displays
service
provider logo
Removed from
display
Yes Yes Yes
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
40/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 36
Company
tagline
No. Displays
service
provider
tagline
Removed from
display
Yes No. Displays
service
provider
tagline
Removed from
display
Co-brand
tagline image
No. Displays
service
provider name
Yes. Applies
only to
customers and
dependent
domains
whose
branding type
is Co-brand.a
Yes. Applies
only to
customers and
dependent
domains
whose
branding type
is Co-brand.a
Yes. Applies
only to
customers and
dependent
domains
whose
branding type
is Co-brand.a
Yes. Applies
only to
customers and
dependent
domains
whose
branding type
is Co-brand.a
Control
Console name
No. Displays
Control
Console orservice
provider name
Removed from
display
Yes No. Displays
Control
Console orservice
provider name
No. Displays
Control
Console orservice
provider name
Privacy Policy No. Displays
McAfee
Privacy Policy
Removed from
display
Removed from
display
No. Displays
McAfee
Privacy Policy
Displays
McAfee
Privacy Policy
Spam Control
for Outlook
URL
No. Displays
service
provider URL
Removed from
display
Yes No. Displays
service
provider URL
No. Displays
service
provider URL
Display News No. Displays
news based on
service
provider
setting
Yes Yes Yes Yes
Support Email No. Displays
service
provider email
Yes Yes Yes Yes
Custom
Hostname
No. Displays
service
provider host
name
Yes Yes Yes Yes
a. If not set, Co-brand domains see logo of service provider.
Customizable
Attribute
Customizable (by Type of Branding)
Standard White Label Private Co-brand Rebrand
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
41/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 37
Levels of Branding
Customer branding settings override McAfee or partner branding settings. Domain
branding settings override customer branding settings. If the domain branding settings are
not set, the customer branding settings are used as the defaults. See Rebrand the User
Interface of a Domain.
The following table lists the effect of branding configuration on your account and your
customers and your customers domains.
Branding
Type
Partner Customer Domain
Standard Use settings from McAfee Use settings from McAfee or,
if partner has configured
branding, use partners
branding settings.
Use settings from McAfee or,
if partner or customer has
configured branding, use
branding settings from
partner or customer.
White Label Eliminates logo, tagline, andother branding attributes
from display in partners
account. Eliminates the same
for the partners customers
who have standard branding
and the domains that use
standard branding.
Eliminates logo, tagline, andother branding attributes
from display in customers
account. Eliminates the same
for the customers domains
that use standard branding.
Eliminates logo, tagline, andother branding attributes
from display in domain
interface.
Private Replaces the standard logo,
tagline, and other branding
attributes with the partners
preferred attributes. Becomes
the branding for the partnerscustomers who have standard
branding and the domains
that use standard branding.
Replaces the standard or
partner-defined logo, tagline,
and other branding attributes
with the customers preferred
attributes. Becomes thebranding for the customers
domains that use standard
branding.
Replaces the standard,
partner-defined, or customer-
defined logo, tagline, and
other branding attributes with
the preferred attributes for thespecific domain.
Co-brand Replaces the standard logo,
and other branding attributes
with the partners preferred
attributes. Becomes the
branding for the partners
customers who have standard
branding and the domains
that use standard branding.
Continues to use the standardMcAfee tagline.
Replaces the standard or
partner-defined logo and
other branding attributes with
the customers preferred
attributes. Uses the Partner
Co-brand tagline image or
uses the standard McAfee
tagline if the Partner does not
have a Co-brand taglineimage configured
Replaces the standard,
partner-defined, or customer-
defined logo and other
branding attributes with the
preferred attributes for the
specific domain. Uses the
Customer's or Partner's Co-
brand tagline image or uses
the standard McAfee taglineif both the Customer and the
Partner do not have a Co-
brand tagline image
configured
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
42/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 38
Configure Branding at the Partner Level
1 Click Account Management > Partners > Branding.
The Branding Configuration window is displayed. The Branding Type field displays
the type of branding you are enabled for. The Partner field displays your company
name.
2 Skip the Enable Branding checkbox until you have completed the rest of the window.
3 In the Custom Hostname field, type a custom hostname. The custom hostname
changes the name contained within the URL listed in the Spam Quarantine Report and
the URL for access to the Control Console. The custom hostname can be one of the
following:
Your standard service URL that was identified in your service agreement
prepended with your brand name (e.g. acme.console.mcafeesaas.com)
Rebrand Replaces the standard logo,
and other branding attributes
with the partners preferred
attributes. Does not use atagline, but allows the
assignment of a tagline for
display for customers and
their domains. Becomes the
branding for the partners
customers who have standard
branding and the domains
that use standard branding.
Replaces the standard logo,
and other branding attributes
with the customers preferred
attributes. Does not use atagline, but allows the
assignment of a tagline for
display for the customers
domains. Becomes the
branding for the customers
domains that use standard
branding.
Replaces the standard,
partner-defined, or customer-
defined logo and other
branding attributes with thepreferred attributes for the
specific domain. No tagline is
used.
Branding
Type
Partner Customer Domain
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
43/72
Partner Quick Start for Email Protection Rebrand your interface and that of your
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 39
Your brand name that precedes portal orconsole and saascontrol.com (e.g.
acme.console.saascontrol.com). Use ofportal orconsole depends on your
original URL designated in your service agreement.
4 In the From Email field, type the full email address that will be used as the From:
email address when sending Spam Quarantine Reports (if Email Protection is enabled)
and Performance Reports (if enabled). This email address must be valid to support the
user clicking the Reply button in his/her email application. For example, a Customer
Administrator at Acme company might have a support mailbox set up with the email
address [email protected].
5 In the Support Email field, type the full email address that will be used for customer
and/or technical support and as the From: email address for lost password or alias
email address requests. This email address must be valid to support the user clicking
the Reply button in his/her email application. For example, a Customer Administrator
at Acme company might have a support mailbox set up with the email address of
6 (For private branding only) In the Site Name field, type the full name that will appear
as the title in your browser when viewing any of the Control Console windows. Oncethe change is applied, users will see the changed information the next time they sign
into the Control Console. For example, the browser name for Acme Company might
simply be a name like Acme Control Console.
7 (For private branding only) In the Spam Control for Outlook URL field, type the
full URL to the location where the Spam Control For Outlook utility will be
available for download. (Applies to Email Protection only.) This field is used if the
Allow users to download Spam Control For Outlookfield is checked in the Control
Console.
8 Click the Display News checkbox to make the News area appear in the Sign in
window and the Email Protection Overview window in the Control Console.
9 (For private branding, rebranding, and co-branding only) In the Logo Image field, use
the Browse button to select the graphic logo file. Navigate to the location of the
graphic logo file, click to select the file, and click the Open button. The path and
filename appear in the Logo Image field (for example, Acme company might have the
logo ) that will appear in the Control Console windows.
The graphic logo image must be a gif image that is no greater than 190x42 pixels in
size for private or co-brand branding, and no greater than 190x63 pixels for rebrand
branding.
10 (For private branding only) In the Tagline Image field, use the Browse button to
select the graphic logo file. Navigate to the location of the graphic logo file, click to
select the file, and click the Open button.
This graphic is a secondary (tagline) logo that will appear in the Control Console
windows below the graphic designated in the Logo Image field. For example, for a
logo like , the tagline might say Your Brand for Generics. This
tagline would appear for users at your company and for any customers and their
domains who have Standard branding.
-
7/29/2019 McAee SaaS Email Protection-Quickstart.pdf
44/72
Partner Quick Start for Email Protection Set up a protected user
November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 40
Note: The graphic tagline image mustbe a gif image that is 190x21 pixels or less in
size.
11 (For Private, White Label, and Rebrand branding only) In the Co-brand Tagline
Image field, use the Browse button to select the graphic logo file. Navigate to the
location of the graphic logo file, click to select the file, and click the Open button.
This graphic is a secondary (tagline) logo that will appear in the Control Consolewindows below the graphic designated in the Logo Image field. For example, the
tagline might say Powered by Acme Corp. This tagline would appear only for any
customers and their domains who have Co-brand branding.
Note: The graphic tagline image mustbe a gif image that is 190x21 pixels or less in
size.
12 Click the Enable Branding checkbox to turn on branding. The Control Console will
use your settings after you clickSave.
13 ClickSave.
Customers and domains who are set to use standard branding see the same interface
changes as you do.
Configure Branding for a Customer
Customers who do not have branding permissions or who use Standard branding see either
branding from McAfee or branding you have established at the partner level. However, if
a customer has been assigned a type of branding other than Standard, you can configure
that customers branding on an individual basis.
To customize branding for a customer, perform the following steps:
1 Click Account Management > Customers.
2 Select a customer.
3 Click Branding.
4 Complete the Branding Configuration window as described in Configure Branding at
the Partner Level.
Note: You can also brand the domains of a customer. For more information, see the
Account Management Administrator Guide.
Set up a protected userA protected user is one that cannot be deleted via bulk or batch processes within the
Control Console. A protected user is normally a Customer Administrator account. In the
event that a batch user upload or automatic synchronization with Active Directory d