Get Even More Visitors To Your Blog, Upgrade To A Business Listing >>

Boost your Email Antivirus Protection With A Second Layer of Defense

Are viruses and malware getting past your Email filters? If so, you are not alone. In an email security survey conducted by OPSWAT, 51% percent of IT Administrators experienced a malware breach within the last 18 months, and 50% percent had employees that clicked on phishing links. High profile data breaches, including those suffered by Target, Anthem, Sony and even the White House, all started with a spear phishing attack. Why are these spear phishing emails not being blocked by the email security and antivirus solutions that must undoubtedly be deployed by these organizations? Organizations require an additional layer of email security that can block more threats than existing email security defenses.

Metascan Mail Agent Blocks Threats Missed by your Email Security Solution

By deploying OPSWAT’s Metascan® Mail Agent in addition to your existing email security solution, you can add a second layer of email defense and block significantly more email threats. Metascan's anti-malware technology leverages the power of the different detection algorithms and heuristics of multiple engines, resulting in significantly higher malware detection rates. Metascan further protects against advanced threats, including zero-day and targeted attacks, by utilizing extensive heuristic analysis as well as data sanitization technology that removes possible embedded threats such as those utilized in spear phishing attacks.

How to Deploy Metascan Mail Agent

The Metascan Mail Agent works in conjunction with your email security solution and acts as an SMTP relay between your email security gateway and mail server, scanning all email attachments that pass through for known and unknown threats before they are delivered to your mail server. Read on to learn how to deploy Metascan Mail Agent in your network and find out how many more threats you can block.

Getting started guide:

  • Configuration video  
  • Configuration steps
  • Email notification setup
  • Email quarantine setup
  • System requirements

Click to Enlarge

Video: How to configure Metascan Mail Agent

Watch the configuration video and follow the steps below to integrate the Mail Agent with your Exchange Server and email security gateway. 

Share this:


Configuration Steps:

  1. Download the Metadefender Mail Agent from the Metascan Management Console
    1. http://<metascan server>:8008/management/#/sources-email
  2. Run the Mail Agent installer on the system that will be acting as the mail relay
  3. Configure the Mail Agent
    1. C:\Program Files\OPSWAT\MetadefenderEmailAgent\Metadefender.Email.Engine.Generic.Agent.dll.config
  4. Property Description Value
    EmailRelayOutServer Name (or IP adress) of server to forward all email to String
    EmailRelayOutPort SMTP Port to forward emails to. Default is 25 0~ 65535
    EmailRelayInPort Port to monitor by email relay. Default is 10025 0~ 65535
    EmailRelayInDirection Determines the direction of emails. Possible values : 0 = Incoming, 1 = Outgoing, 2 = Determine email direction using the local domain list in parameter EmailRelayInLocalDomains (If sender's email domain exists in parameter EmailRelayInLocalDomains direction is outgoing, or else incoming) 0, 1, 2
    EmailRelayInLocalDomains List of local domains. Separate multiple domains with a semi colon (;). For example; Only used when parameter EmailRelayIn is set to 2. See description
  5. Restart the Mail Agent Service
  6. Configure the incoming SMTP server to send email to the Metadefender Mail Agent 

Email Infection Notifications

Metascan can be configured to send email notifications whenever an email attachment is scanned and a threat is detected. These notifications can be enabled on the Quarantine page in the Metascan Management Console. The mail server configuration must also be correctly set for email notifications to be sent.

Email Quarantine

By default, the Metadefender Mail Agent will only log email attachments where Metascan finds a threat, but will allow the email to be delivered. To quarantine those emails, select the checkbox on the Mail Agent configuration page in the Metascan Management Console.

System Requirements 

The following systems are required to set up the Metadefender Mail Agent: 

  • Incoming Mail Server
  • Outgoing Mail Server
  • Metadefender Mail Agent
    • Requires Windows Server 2008, 2008 R2, 2012, or Windows SBS 2011
  • Metascan Server (can be the same system as the Metadefender Mail Agent)
Mail Agent
How to
IT Infrastructure

This post first appeared on OPSWAT, please read the originial post: here

Share the post

Boost your Email Antivirus Protection With A Second Layer of Defense


Subscribe to Opswat

Get updates delivered right to your inbox!

Thank you for your subscription