Overview

GFI MailEssentials uses Kaspersky antivirus to scan inbound, outbound and internal email for viruses.

The Kaspersky license needs to be acquired separately from the GFI MailEssentials license.

Emails found containing a virus during a scan are handled according to the action set for the engine that detected the virus.

Process

To configure the Kaspersky settings, follow the steps below:

Select the Enable Gateway Scanning (SMTP) check box to scan emails using this Virus Scanning Engine.
Select whether to scan inbound and/or outbound emails using this Virus Scanning Engine.

Option	Description
Scan Inbound SMTP email	Check this option to scan incoming emails.
Scan Outbound SMTP email	Check this option to scan outgoing emails.

If Information Store Protection is enabled, you have the option to scan internal emails and the Information Store Items. Check Scan Internal and Information Store Items.

Select Check scanned emails for malicious content with the cloud server for a higher detection rate to enable zero-hour virus detection. When an executable attachment is found, this feature creates a hash key based on the attachment and sends the key to a Kaspersky cloud service to be compared with well-known malicious hashes. This feature offers a more secure environment where viruses can be detected quicker since it does not rely on updates of the antivirus engine. When this feature is enabled, you may experience a slight delay in email delivery of inbound emails. Note that by enabling to use this feature, you will be accepting the Kaspersky disclaimer shown when you click the link Disclaimer.

NOTE

On this page, you can also review the antivirus engine licensing and version information.

Virus scanning engine actions

From the Actions tab, choose the action to be taken when an email is blocked:

Action	Description
Quarantine item	Stores all infected emails detected by the selected Virus Scanning Engine in the Quarantine Store. You can subsequently review (approve or delete) all the quarantined emails.
Delete item	Deletes infected emails.
Send a sanitized copy of the original email to recipient(s)	When this option is enabled, GFI MailEssentials removes malicious content from emails and attaches a text file indicating that the email contained malicious content. The email is then forwarded to its intended recipients.

To send email notifications whenever an email gets blocked, check any of the following options:

Option	Description
Notify administrator	To notify the administrator whenever this engine blocks an email.
Notify local user	To notify the email local recipients about the blocked email.

To log the activity of this engine to a log file, check Log rule occurrence to this file and specify the path and file name to a custom location on the disk to store the log file. By default, log files are stored in:

<GFI MailEssentials installation path>\GFI\MailEssentials\EmailSecurity\Logs\<EngineName>.log

In the Updates tab, check Automatically check for updates to enable automatic updating for the selected engine.
From the Downloading option list, select one of the following options:

Option	Description
Only check for updates	Select this option if you want GFI MailEssentials to just check for and notify the administrator when updates are available for this engine. This option does NOT download the available updates automatically.
Check for updates and download	Select this option if you want GFI MailEssentials to check for and automatically download any updates available for this engine.

Specify how often you want GFI MailEssentials to check and download updates for this engine, by specifying an interval value in hours.
From the Update options area, check Enable email notifications upon successful updates to send an email notification to the administrator whenever the engine updates successfully.

NOTE

An email notification is always sent when an update fails.

Option	Description
Download updates	Trigger the update process manually. It is an incremental update where only the most recent definitions are updated.
Force full updates	This option forces a new version of the engine to be downloaded and replaced. This option is slower and consumes more bandwidth.