Installation manual

3.2.1.1.5 Transport Agent

In this section you can enable or disable antivirus and antispyware protection by the transport agent. For Microsoft

Exchange Server 2007 and higher it is only possible to install a transport agent if the server is in one of the two

roles: Edge Transport or Hub Transport.

If there is a message that cannot be cleaned, it will be processed according to the settings in Transport agent

section. The message can be deleted, sent to the quarantine mailbox or retained.

If you uncheck the Enable antivirus and antispyware protection by transport agent option, the ESET Mail

Security plug-in for Exchange server will not get unloaded from the Microsoft Exchange server process. It will only

pass through the messages without scanning for viruses. The messages however, will still be scanned for spam

and the rules will be applied.

When you Enable antivirus and antispyware protection by transport agent you can set Actions to take if

cleaning not possible:

Retain message – retain an infected message that could not be cleaned

Quarantine message – send an infected message to the quarantine mailbox

Delete message – delete an infected message

When a threat is found, write spam score to the header of scanned messages (%) – set spam score (the

likelihood of the message being spam) to a specified value, expressed as a percentage

This means that if a threat is found, a spam score (specified value in %) will be written to the scanned message.

Since botnets are responsible for sending the majority of infected messages, the messages distributed this way are

to be categorized as spam. In order for this feature to work effectively Write spam confidence level (SCL) to

scanned messages based on spam score option in Server protection > Microsoft Exchange Server > Transport

agent must be enabled.

If option Scan also messages received from authenticated or internal connections is enabled, ESET Mail

Security also performs scanning of the messages received from authenticated sources or local servers. Scanning of

such messages is recommended as it further increases protection, but it is optional.