Installation instructions

GFI MailSecurity for Exchange/SMTP Installing GFI MailSecurity  7
Installing GFI MailSecurity in front of your firewall
Figure 3 - Installing GFI MailSecurity on a separate machine on a DMZ
If running a Windows 2000/2003 firewall such as Microsoft ISA Server,
a good way to deploy GFI MailSecurity is to install it on a separate
machine in front of your firewall or on the firewall itself. This allows you
to keep your corporate mail server behind the firewall. GFI
MailSecurity will act as a smart host/mail relay server when installed
on the perimeter network (also known as DMZ - demilitarized zone).
NOTE: In a Microsoft Exchange Server 2007 environment, the mail
relay server in the DMZ can be a machine running Microsoft
Exchange Server 2007 with the Edge Transport Server Role installed.
When GFI MailSecurity is not installed on your mail server:
 You can perform maintenance on your mail server whilst still
receiving email from the Internet.
 Fewer resources are used on your mail server.
 Additional fault tolerance – if anything happens to your mail server,
you can still receive email. This email is then queued on the GFI
MailSecurity machine.
NOTE: GFI MailSecurity does not require a dedicated machine when
not installed on the mail server. For example, you can install GFI
MailSecurity on your firewall (i.e. on your ISA Server) or on machines
running other applications such as GFI MailEssentials.
Installing GFI MailSecurity on an Active/Passive Cluster
NOTE: Installing GFI MailSecurity on a Microsoft Exchange Server
2007 cluster environment is currently not supported.
To install GFI MailSecurity on an Active/Passive cluster you must
install GFI MailSecurity on each node.
NOTE: Although you can install GFI MailSecurity on an Active/Passive
cluster, bear in mind that you still need to configure and manage a GFI
MailSecurity installation per node. The configuration settings and
quarantine emails are not shared between nodes.
On each node, you have to do the following: