2.5 Migrating from MetaDefender Email v3

No backward compatibility

MetaDefender Email Gateway Security v4 is not backwards compatible with MetaDefender Email v3.

As a consequence configuration and databases of Email v3 must be migrated manually to Email Gateway Securtiy v4.

Precautions

MetaDefender Core compatibility

MetaDefender Email v3 is bundled into MetaDefender Core v3. MetaDefender Email v3 is not compatible with MetaDefender Core v4.

MetaDefender Email Gateway Security v4 is a standalone product. MetaDefender Email Gateway Security v4 is not compatible with MetaDefender Core v3.

For MetaDefender Email Gateway Security v4 requirements on MetaDefender Core see 2.1.2 System requirements.

System requirements

For MetaDefender Email Gateway Security v4 requirements on hardware, OS and other software, see 2.1.2 System requirements.

Standalone deployment

When MetaDefender Email Gateway Security v4 is deployed in standalone mode (to a separate machine from MetaDefender Core) then it is expected to require a less powerful hardware than a MetaDefender Email v3 (and a combined MetaDefender Core v3) deployment.

Combined Core & Email Gateway Security deployment

When MetaDefender Email Gateway Security v4 is deployed in combined mode (to the same machine as MetaDefender Core) then it is expected to require approximately the same hardware performance than a MetaDefender Email v3 (and a combined MetaDefender Core v3) deployment.

Migrating configuration

Configuration map

MetaDefender Email v3 configuration topic

v3 documentation

MetaDefender Email Gateway Security v4 configuration topic

v4 documentation

Configuring Incoming Threat Protection

Configuring Outgoing Threat Protection

Configuring Incoming Threat Protection

Configuring Outgoing Threat Protection

Security rules

4.2 Security rules

  1. Sources > Metadefender Email > Setup / Instances / Setup

  2. Email Relay Server

  1. images/download/attachments/331223/image2017-8-2_15-58-36.png
  2. images/download/attachments/331223/image2017-8-2_16-6-34.png

Policy > Security rules / add/modify / RELAY / FORWARD PROCESSED EMAILS TO

images/download/attachments/331223/image2017-8-2_16-8-14.png

  1. Sources > Metadefender Email > Setup / Instances / Setup

  2. Email Direction

 

Policy > Security rules / add/modify / DIRECTION

 

 

 

 

 

Configuring Recipient Verification

Configuring Recipient Verification

Security rules

4.2 Security rules

C:\Program Files (x86)\OPSWAT\Metadefender Core <engine count>\Metadefender Mail Agent\ Metadefender.Email.Engine.Generic
.Agent.dll.config / EmailRelayInLocalDomains

 

Policy > Security rules / add/modify / FILTER / RECIPIENT DOMAIN OR ADDRESS

images/download/attachments/331223/image2017-8-2_16-21-58.png

The recipient is verified according to the settings in the filter of the first matching rule.

To reproduce the same results:

  1. Having the example settings in v3:

    <setting
    name="EmailRelayInLocalDomains"
    serializeAs="String">
    <value>
    opswat.com,metadefender.com
    </value>
    </setting>
  2. Create an INBOUND rule with the filter in v4: images/download/attachments/331223/image2017-8-3_15-37-49.png

 

 

 

 

TLS support (Incoming/Outgoing emails)

TLS support (Incoming/Outgoing emails)

 

  1. Incoming: 3.2.1 Inbound TLS support

  2. Outgoing: 3.7 Server profiles

      1. Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: SMTP) / SERVER SPECIFICATIONS

    1. Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: SMTP) / TRANSPORT LEVEL ENCRYPTION

 

 

 

 

Cloud Deployment

3. Cloud Deployment

Cloud deployment configuration

3.9 Cloud deployment configuration

 

 

 

 

Onsite Microsoft Exchange Deployment

4. Onsite Microsoft Exchange Deployment

Onsite Microsoft Exchange deployment

3.10 Onsite Microsoft Exchange deployment

 

 

 

 

Notification and Report

5. Notification and Report

 

 

Sources > Metadefender Email > Settings / E-Mail Settings For Notifications

images/download/attachments/331223/image2017-8-7_15-19-42.png

  1. Settings > Global settings / Notification and report settings

  2. Inventory > Server profiles (SERVER PROFILE TYPE: SMTP) / add/modify

  1. images/download/attachments/331223/image2017-9-8_12-13-30.png
  2. images/download/attachments/331223/image2017-8-7_15-21-41.png

Error Email Notification

Error Email Notification

N/A

 

Infection Email Notification

Infection Email Notification

Policy > Security rules / add/modify / ACTIONS / NOTIFY RECIPIENTS IF EMAIL IS BLOCKED

4.2 Security rules

Quarantine Reports

Quarantine Reports

 

3.6 Quarantine configuration

Quarantine > Configure Quarantine Reports / SMTP Configuration Settings

images/download/attachments/331223/image2017-8-7_15-54-44.png

  1. Settings > Global settings / Notification and report settings

  2. Inventory > Server profiles (SERVER PROFILE TYPE: SMTP) / add/modify

  1. images/download/attachments/331223/image2017-9-8_12-13-41.png
  2. images/download/attachments/331223/image2017-8-7_15-21-41.png

Quarantine > Configure Quarantine Reports / Schedule Quarantine Reports

images/download/attachments/331223/image2017-8-7_15-54-58.png

Settings > Quarantine reports

images/download/attachments/331223/image2017-8-7_15-57-42.png

 

 

 

 

Configuration From Config File

 

3.1.2 Windows Registry configuration

 

Metadefender

.Common.dll.config

 

 

 

InstallationFolder

 

not configurable

Removed as can cause unexpected results

LogsFolder

 

logfile

Can be configured as part of the logfile path

LogMaxSize

 

not configurable

  • Windows Event Logs: Handled by Windows

  • Syslog: Handled by logrotate / newsyslog / etc

  • File logs: As big as allowed by the OS

LogFormat

 

not configurable

Depends on the logging method

LogLevel

 

loglevel / wineventlog_level

 

RestClientTimeoutMs

 

not configurable

No internal REST communication

Metadefender.Email.Engine.Exchange
[2007/2010/2013].Agent.dll.config

 

N/A

 

Metadefender.Email.Engine.Generic

.Agent.dll.config

 

 

 

WorkExtension

 

not configurable

 

BadExtension

 

not configurable

 

AgentGuid

Agent Guid. Should be unique.

N/A

 

AgentStatusCheckInterval

Durations between agent status checks

N/A

 

Protocol

Protocol to use when sending process requests. Possible values are REST

not configurable

Always REST

StartRestServer

Start the REST server

not configurable

Always started

RestoreWorkItemsOnStartup

Rename any items with a work extension (.work) to .eml on service startup

N/A

 

EmailProcessedHeaderName

MIME Header name for emails processed by Mail Agent in order to avoid duplicates

not configurable

 

EmailRelayInProcessName

Process name for emailrelay.exe application

not configurable

It is emailrelay

EmailRelayOutProcessName

Process name for emailrelayout.exe application

N/A

This is not existing in v4

EmailRelayInStart

Start Email relay process on service startup. (To monitor for incoming SMTP traffic)

not configurable

Always true

EmailRelayInPort

10025

Settings > Global settings / Inbound SMTP settings / SMTP PORT

images/download/attachments/331223/image2017-9-8_12-16-13.png Default is 10025

EmailRelayInParameters

Parameters that are passed to email relay application

--no-daemon --remote-clients --hidden --as-server --port 10025 --spool-dir \"<dir>\"

N/A

Automatically generated in v4. We don't provide support for any custom parameters.

EmailRelayOutStart

Start Email relay process on service startup. (To monitor outgoing email and forward via SMTP)

N/A

 

EmailRelayOutHosts

List of Name (or IP adress) and port of server(s) to forward all email to. Multiple servers are separated with a comma (,)
For exampe: server1:25,server2:25

Note: Ensure that when the setting is updated the config file doesn't contain settings called 'EmailRelayOutServer' or 'EmailRelayOutPort' (delete them if they exist).

N/A

 

EmailRelayOutParameters

Parameters that are passed to email relay application

N/A

 

EmailRelayInDirection

Determine the direction of emails. Possible values :

0 = Incoming
1 = Outgoing
2 = Determine email direction using the local domain list in parameter EmailRelayInLocalDomains

(If sender's email domain exists in parameter EmailRelayInLocalDomains direction is outgoing, or else incoming)

Policy > Security rules / add/modify / DIRECTION

images/download/attachments/331223/image2017-8-7_12-26-58.png

EmailRelayInLocalDomains

List of local domains. Separate multiple domains with a semi colon (;). For example opswat.com;mycompany.com.

Used to perform recipient verification (any recipient with a domain different than the specified domain(s) will be rejected at the SMTP protocol level).

Also used when EmailRelayInDirection is set to 2 in order to determine direction.

Policy > Security rules / add/modify / FILTER / RECIPIENT DOMAIN OR ADDRESS

images/download/attachments/331223/image2017-8-7_12-27-17.png

EmailRelayInQueueThreshold

Maximum inbound email queue size (exceeding this value will generate an email alert)

N/A

 

EmailRelayOutQueueThreshold

Maximum outbound email queue size (exceeding this value will generate an email alert)

N/A

 

EmailRelayOutRetryStart

Start the retry monitor thread (for emails that failed submission)

Auto

 

EmailRelayOutRetryInterval

Duration between submit retries (increasing with retry count)

Settings > Global settings / Resend settings / RETRY INTERVAL

images/download/attachments/331223/image2017-9-8_12-17-3.png

EmailRelayOutRetryMaxInterval

Maximum duration between retries.

Settings > Global settings / Resend settings / RETRY INTERVAL

images/download/attachments/331223/image2017-9-8_12-17-3.png

EmailRelayOutRetryCount

Maximum number of submit retries before email is moved to permanent failure

Settings > Global settings / Resend settings / RETRY COUNT

images/download/attachments/331223/image2017-9-8_12-17-29.png

EmailRelayOutQueue
BadThreshold

Maximum number of .bad files in email queue (exceeding this value cause email alert to be generated)

N/A

 

EmailRelayOutPermanent
FailureThreshold

Maximum number of items in permanent failure (exceeding this value cause email alert to be generated)

N/A

 

EmailRelayOutMaxConnections

Maximum number of simultaneous SMTP connections when forwarding emails to remote server.

not configurable

As much as allowed by the server

EmailRelayInRetryStart

Start the retry monitor thread (for emails that failed processing)

Auto

 

EmailRelayInRetryInterval

Minimum duration between process retries

Settings > Global settings / Resend settings / RETRY INTERVAL

images/download/attachments/331223/image2017-9-8_12-17-3.png

EmailRelayInRetryCount

Maximum number of process retries before email is moved to process failure

Settings > Global settings / Resend settings / RETRY COUNT

images/download/attachments/331223/image2017-9-8_12-17-29.png

MaxMonitorProcessThreads

Maximum number of emails processed simultaneously

not configurable

As much as can be taken by the system

FastNoAttachment
ProcessingEnabled

Avoid sending emails without attachments for processing (improved performance)

not configurable

 

LowPriorityMinSize

Minimum size (in MB) for emails that will be processed on the low priority threads

N/A

 

HighPriorityMaxSize

Maximum size (in MB) for emails that will be processed on the high priority threads

N/A

 

UseAdjustingThreads

Specifies if monitoring threads for incoming emails should adjust thread count dynamically or have fixed count

N/A

 

AddressValidation

Specifies if Mail Agent should perform address validation on the incoming emails to detect invalid address (e.g. root@smth, ..@stop, inv'/alid)

N/A

Always true

EmailRelayInUseTls

Enable TLS for incoming SMTP connections

Settings > Global settings / Inbound SMTP settings / ENCRYPTION / STARTTLS optional

images/download/attachments/331223/image2017-9-8_12-18-38.png

EmailRelayInForceTls

Force all incoming SMTP connections to use TLS (only used when EmailRelayInUseTls is true)

Settings > Global settings / Inbound SMTP settings / ENCRYPTION / STARTTLS required

images/download/attachments/331223/image2017-9-8_12-18-38.png

EmailRelayOutUseTls

Enable TLS for outgoing SMTP connections

Inventory > Server profiles (SERVER PROFILE TYPE: SMTP) / add/modify / SERVER SPECIFICATIONS (smtps schemes)

Inventory > Server profiles (SERVER PROFILE TYPE: SMTP) / add/modify / TRANSPORT LEVEL ENCRYPTION (smtp schemes)

images/download/attachments/331223/image2017-8-7_12-25-14.png

EmailRelayInTlsCertificate

TLS certificate for incoming SMTP connections (only used when EmailRelayInUseTls is true) Example:-----BEGIN CERTIFICATE-----MIIFYDCCA0igAwIBAgIJALmTg...-----END CERTIFICATE-----

not configurable

<install base>\data\cert.pem

Example:

C:\Program Files\OPSWAT\Metadefender Email Security\data\cert.pem

EmailRelayInTlsKey

TLS certificate private key for incoming SMTP connections (only used when EmailRelayInUseTls is true) Example:

-----BEGIN PRIVATE KEY-----MIIJQgIBADANBgkqhkiG9w0BA....-----END PRIVATE KEY-----

not configurable

<install base>\data\key.pem

Example:

C:\Program Files\OPSWAT\Metadefender Email Security\data\key.pem

EmailRelayOutClientCertificate

Client certificate for outoing SMTP connections (used when a server requests a client certificate) Example:
-----BEGIN CERTIFICATE-----MIIJQgIBADANBgkqhkiG9w0BA....
-----END CERTIFICATE-----

not configurable

<install base>\data\cert.pem

Example:

C:\Program Files\OPSWAT\Metadefender Email Security\data\cert.pem

Metadefender.Quarantine

.Mail.dll.config

 

 

 

StartRestServer

Start the REST server (SmtpConfiguration)

N/A

 

SubmitCommandTimeout

Timeout for SMTP commands

N/A

 

EmailSubmission
RequestExpireSpan

TTL (Time To Live) for an SMTP submit request. If email has not been submitted within this timespan the request is lost

N/A

 

Metadefender.Engine

.History.dll.config

 

 

 

HistoryEntryExpireSpan

Duration to keep history entries in the database

Settings > Data retention / Email history clean up

images/download/attachments/331223/image2017-8-7_12-23-43.png

StartRestServer

Start the REST server (History)

N/A

 

Metadefender.Email.Engine

.Processor.dll.config

 

 

 

StartRestServer

Start the REST server (Processor)

N/A

 

ConvertTnefMessagesToSmtp

Convert TNEF encoded emails to MIME format

not configurable

Always false

MonitorMode

Enables a monitoring mode of the Mail Agent. When set, no emails will be sanitized or quarantined (even when infected etc.)

not configurable

Always false

AddXHeadersToOutgoingEmail

Force Mail Agent to add x-headers (Custom Email Headers) to outgoing emails

not configurable

Always false

4.2.0

EmailProcessedHeaderName

MIME Header name for emails processed by Mail Agent in order to avoid duplicates

not configurable

 

EmailAddCustomXHeaders

Add custom x-headers to each email processed by Mail Agent. See Custom Email Headers for more information.

not configurable

No headers added

EmailBlockedQuarantineMode

Option to move blocked emails to MD Core quarantine or submit them via SMTP for quarantine by other service.

Possible values are REST (MD Core Quarantine) or SMTP

  1. Quarantine blocked emails or not: Policy > Security rules / add/modify / ACTIONS / IF CONTENT IS BLOCKED / QUARANTINE ORIGINAL EMAIL

  2. Use Email Gateway Security's built-in quarantine or external quarantine: "HKEY_LOCAL_MACHINE\SOFTWARE\OPSWAT\Metadefender Email Security"!external_quarantine_block

  1. images/download/attachments/331223/image2017-8-7_12-34-10.png

  2. 3.6.1 Quarantine emails on another mail server

EmailSanitizedQuarantineMode

Option to move original copy of sanitized emails to MD Core quarantine or submit them via SMTP for quarantine by other service.

Possible values are REST (MD Core Quarantine) or SMTP

  1. Quarantine sanitized emails or not: Policy > Security rules / add/modify / ACTIONS / IF CONTENT IS SANITIZED / QUARANTINE ORIGINAL EMAIL

  2. Use Email Gateway Security's built-in quarantine or external quarantine: "HKEY_LOCAL_MACHINE\SOFTWARE\OPSWAT\Metadefender Email Security"!external_quarantine_sanitize

  1. images/download/attachments/331223/image2017-8-7_12-35-5.png
  2. 3.6.1 Quarantine emails on another mail server

EmailQuarantineHeaderName

The name of the X-Header that will be added to emails when EmailBlockedQuarantineMode or EmailSanitizedQuarantineMode is set to SMTP.

Header value will always be 'True'

not configurable

3.6.1 Quarantine emails on another mail server

X-Metadefender-To-Quarantine

DoSpfCheck

Enables SPF (Sender Policy Framework) lookups in Mail Agent. Result is placed in a header.

Settings > Global Settings / Sender Policy Framework lookup / PERFORM SPF LOOKUP ON EXTERNAL IP ADDRESSES

images/download/attachments/331223/image2017-10-25_8-36-11.png

3.4 General settings

SpfCheckHeaderName

The name of the X-Header where to store the SPF lookup result

not configurable

X-Metadefender-Spf-Result

SpfCheckReasonName

The name of the X-Header where to store a reason for a failed/skipped SPF lookup

not configurable

X-Metadefender-Spf-Reason

Metadefender

.Scanner.dll.config

 

 

 

MetascanMode

Possible values areCOM, RESTv1 and RESTv2

N/A

 

MetascanScanTimeout

Scanning timeout

not configurable

Always 00:05:00

MetascanScanQueueTimeout

Metadefender Core In Queue timeout

N/A

 

MetascanScanProgressPauseMS

Used in RESTv2 mode. Pause (in ms) between progress request calls

not configurable

Hard-coded in v4 (100ms) until UI options (?) are introduced.

MaxMetadefenderCore
InQueueThreshold

If this limit is exceeded an alert will be sent saying that Metadefender Core is unresponsive and email delivery might be slower

N/A

 

MetadefenderUnavailableRetrySpan

Minimum pause for retry after a Metadefender Core goes down (only applicable if multiple scanners are configured)

Settings > Global settings / Resend settings / RETRY INTERVAL

images/download/attachments/331223/image2017-9-8_12-17-3.png

MetadefenderAvergeScanTimeSpan

Span for for scan times when calculating average scan time (when using multiple MD Cores)

N/A

 

UrlPrioritzationMethod

Metadefender Core Url prioritization method. Possible vaules: RoundRobin, Circular, ScanTime

Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: Metadefender Core) / SERVER PREFERENCE

images/download/attachments/331223/image2017-9-8_12-32-34.png

LogAllRequests

Increased logging. When set to true it will log all GET requests for getting scan settings and email disclaimers

N/A

 

Metadefender

.Quarantine.dll.config

 

 

 

MaintenanceInterval

Interval between checking folder actions & auto-deliver

N/A

 

RunAutoActionThread

Start the thread checking folder actions & auto-deliver

N/A

 

CompressionMode

Quarantine item compression mode. Possible values are None, Zip

not configurable

No compression

MonitoringFolderId

Predefined Quarantined folder id

N/A

 

QuarantineReportId

Predefined Quarantine Report id

N/A

 

StartRestServer

Start the REST server (Quarantine)

N/A

 

ReportUidExpireSpan

Expiry time for entries used to record which quarantine items were inlucded in Quarantine Reports

not configurable

 

MaxQuarantineItemSize

Maximum buffer size when accepting quarantine items via REST

not configurable

 

EmailAlertExpireSpan

The minimum interval between unique email alerts (errors). This is used to prevent too many alerts being sent during continuous errors

N/A

 

Metadefender.Email.Engine

.Service.exe.config

 

 

 

LogName

Log name

N/A

 

LogFilename

Log file name

N/A

 

ComponentList

List of component loaded by service at startup

N/A

 

RestBaseUrl

REST server base URL

N/A

 

QuarantineBaseUrl

Metadefender Core Quarantine server base URL

N/A

 

MetascanUrl

Metadefender Core REST URL

Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: Metadefender Core) / CORE URI ADDRESS

images/download/attachments/331223/image2017-8-7_12-46-6.png

MetascanApiKey

Metascan API key (encrypted)

N/A

 

StatusCheckInterval

Interval between component status checks (for error alerts)

N/A

 

UsePerformanceCounters

Creates a performance counter category (Metadefender Generic Mail Agent) for monitoring and recording processing data

N/A

 

ScanEmailBody

Specifies if Mail Agent should scan the body of the email

not configurable

Always scanned

MaxRetries

Maximum number of retries before quit trying to connect to Metadefender Core

not configurable

Not applicable in v4, All retries are handled by the regular workflow retry scheme.

TimeBetweenRetries

Number of milliseconds before attempting to connect to Metadefender Core

not configurable

Not applicable in v4, All retries are handled by the regular workflow retry scheme.

UpdateUrlsOnStartup

Specifies if the service should attempt to update config URLs at startup.

Note: If MD Core load balancing is configured (multiple MetascanUrl's) no URL update will be performed for that setting, regardless of this value.

not configurable

Never updated

MetadefenderCoreIsLocal

Specifies if Metadefender Core is installed locally

N/A

 

ConnectionCheckOnStartup

Specifies if Mail Agent should do a connection + valid license test on service startup. If enabled Mail Agent will not intercept emails before MD Core is responding.

not configurable

Never checked

Metadefender.Quarantine

.Service.exe.config

 

 

 

MongoDbUrl

Mongo DB URL

N/A

 

MongoDbUrlEncryptionMode

MongoDb Url value encryption mode. Possible values are None, Encrypted

N/A

 

MongoDbName

MongoDB database name

N/A

 

MongoDBStartupTimeout

Timeout to wait for MongoDB to respond

N/A

 

LogName

Log name

N/A

 

LogFilename

Log file name

N/A

 

ComponentList

List of component loaded by service at startup

N/A

 

RestBaseUrl

REST server base URL

N/A

 

QuarantineBaseUrl

Metadefender Core Quarantine server base URL

N/A

 

MetascanUrl

Metadefender Core REST URL

Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: Metadefender Core) / CORE URI ADDRESS

images/download/attachments/331223/image2017-8-7_12-46-6.png

MetascanApiKey

Metadefender API key (encrypted)

N/A

 

WebBaseUrl

Metadefender Web Site base URL

N/A

 

UpdateUrlsOnStartup

Specifies if the service should attempt to update config URLs at startup

N/A

 

MetadefenderCoreIsLocal

Specifies if Metadefender Core is installed locally

N/A

 

Metadefender.Engine

.Statistics.dll.config

 

N/A

 

Metadefender.Engine

.Events.dll.config

 

N/A

 

 

 

 

 

Custom Email Headers

Custom Email Headers

N/A

4.2.0

 

 

 

 

Enable Sender Policy Framework (SPF) Lookup

Enable Sender Policy Framework (SPF) Lookup

Settings > Global Settings / Sender Policy Framework lookup / PERFORM SPF LOOKUP ON EXTERNAL IP ADDRESSES

images/download/attachments/331223/image2017-10-25_8-36-11.png

3.4 General settings

 

 

 

 

Log collection (collectLogs.exe)

Log collection (collectLogs.exe)

How to create support package

5.1 How to create support package

 

 

 

 

Log options

Log options

Framework log settings (registry)

3.5 Logging & alerts

 

 

 

 

Multiple Metadefender Core Instances Configuration

Multiple Metadefender Core Instances Configuration

Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: Metadefender Core)

images/download/attachments/331223/image2018-1-29_15-24-28.png

4.2 Security rules

Email Processing Workflow (Metadefender Core)

Email Processing Workflow (Metadefender Core)

Security rules

4.2 Security rules

Sources > Metadefender Email > Workflows

images/download/attachments/331223/image2017-8-7_14-52-22.png

Inventory > Server profiles / add/modify (SERVER PROFILE TYPE: Metadefender Core) / RULE

images/download/attachments/331223/image2017-8-7_12-46-6.png

Configuration > Workflows

images/download/attachments/331223/image2017-8-7_15-4-46.png

(Core) Policy > Security rules

images/download/attachments/331223/image2018-1-29_15-26-49.png

 

 

 

 

Quarantine Email

Quarantine Email

 

 

Sources > Metadefender Email > Settings / Quarantine any e-mails that are blocked

images/download/attachments/331223/image2017-8-7_15-11-6.png

Quarantine Email

Policy > Security rules / add/modify / ACTIONS / IF CONTENT IS BLOCKED / QUARANTINE ORIGINAL EMAIL

images/download/attachments/331223/image2017-8-7_12-34-10.png

4.2 Security rules

Quarantine Email On Another Mail Server

Quarantine Email On Another Mail Server

" HKEY_LOCAL_MACHINE\SOFTWARE\OPSWAT\Metadefender Email Security"!external_quarantine

3.6.1 Quarantine emails on another mail server

Migrating data

Currently there is no automation supporting migration from v3 to v4.

In case MetaDefender Email v3 data wanted to be migrated to MetaDefender Email Gateway Security v4, OPSWAT customer support must be contacted.

The description in this section is given for information only .

Migration window

Migrating data from MetaDefender Email v3 to MetaDefender Email Gateway Security v4 takes time.

During the time of the migration processing will be most probably down (otherwise the migration would potentially be a never ending procedure). For this reason the time window for migration must be planned with care in advance.

The length of the migration procedure depends on the amount of data to be migrated.

Waiting for workflows-in-progress to settle

It is advised to wait all emails in progress to finish processing (either to be completed, quarantined or fail permanently) so that the migration procedure can happen on a stable state of the system.

Potential data loss

Emails (and related information) in processing may be lost during the migration.

Migrated data

During the migration the following data will be migrated:

  1. Email history

  2. Emails in quarantine

  3. Emails in permanent failure status