Installation manual

31
Enabling the Scan RTF message bodies option activates scanning of RTF message bodies. RTF message bodies
may contain macro viruses.
NOTE: Plain text email bodies are not scanned by VSAPI.
3.2.1.1.4.1 Actions
In this section you can specify the actions to be performed when a message and/or attachment is evaluated as
infected.
The Action to take if cleaning not possible field allows you to Block infected content, Delete object - infected
content of the message, Delete whole message or take No action. This action will be applied only if the automatic
cleaning (defined in ThreatSense engine parameter setup > Cleaning ) did not clean the message.
As described above, you can set Action to take if cleaning not possible to:
No action – take no action on the infected content of the message
Block – block the message before it is received in Microsoft Exchange Server storage
Delete object – delete the infected content of the message
Delete whole message – delete the entire message, including its infected content
The Deletion option allows you set Message body deletion method and Attachment deletion method.
You can set Message body deletion method to:
Delete message body – delete the body of the infected message; the recipient will receive an empty message
and any non-infected attachments
Rewrite message body with action information – rewrite the body of the infected message with information
about performed actions
Delete whole message – delete the entire message, including attachments; you can set what action should be
performed when deleting attachments
You can set Attachment deletion method to:
Truncate file to zero length – ESET Mail Security truncates the attachment to zero size and lets the recipient see
the attachment file name and type
Replace attachment with action information – ESET Mail Security replaces the infected file with a virus
protocol or rule description
Delete whole message – delete the attachment
If the Use VSAPI Quarantine option is enabled, infected messages will be stored in the email server quarantine.
Please note that this is the server's managed VASPI quarantine (not the client's quarantine or the quarantine
mailbox). Infected messages stored in mail server quarantine are inaccessible until they are cleaned with the latest
virus signature database.
By clicking the Rescan button you will run another scan on messages and files that have already been scanned
before.
3.2.1.1.4.2 Performance
In this section you can set the number of independent scan threads used at a single time. More threads on
multiprocessor machines can increase the scan rate. For the best program performance we advise using an equal
number of ThreatSense scan engines and scan threads.
TIP: To determine the Number of scan threads the Microsoft Exchange Server provider recommends, use the
following formula: [number of physical processors] x 2 + 1.
NOTE: Performance is not improved significantly if there are more ThreatSense scanning engines than scanning
threads.
64