Installation instructions

GFI MailSecurity for Exchange/SMTP Installing GFI MailSecurity  9
server fails over to a cluster node. More information about this issue
can be found in Microsoft Knowledge Base Article 885440.
Due to the above, the GFI MailSecurity configuration could become
unavailable following a failover or moving of an Exchange Virtual
Server from one node of the cluster to the other.
Installing Service Pack 2 for Exchange Server 2003 is thus
recommended. Guidelines on how to install Exchange Server 2003
service packs in a clustered Exchange Server environment can be
found in Microsoft Knowledge Base Article 867624.
To uninstall GFI MailSecurity from the MAILCLUSTER cluster
environment outlined above, follow these steps:
1. Using the Cluster Administrator console make Node1 active.
2. Uninstall GFI MailSecurity from Node2.
3. Using the Cluster Administrator console make Node2 active.
4. Uninstall GFI MailSecurity from Node1.
5. The uninstallation of GFI MailSecurity on an Active/Passive cluster
is now complete.
Installing GFI MailSecurity on an Active/Active Cluster
Installing GFI MailSecurity on an Active/Active cluster is currently not
supported.
Which installation mode should I use?
Active Directory mode
When installed in Active Directory mode, GFI MailSecurity creates
user-based rules, such as Attachment Checking and Content
Checking rules, based on the list of users available in Active Directory.
This means that the machine running GFI MailSecurity must be
behind your firewall and must have access to the Active Directory
containing all your email users (i.e., the machine must be part of the
Active Directory domain). You can install GFI MailSecurity in Active
Directory mode directly on your mail server as well as on any other
domain machine that is configured as a mail relay server in your
domain.
SMTP mode
In SMTP mode, GFI MailSecurity will create user-based rules, such as
Attachment Checking and Content Checking rules, based on the list of
email users/addresses available on your mail server. This means that
you must install GFI MailSecurity in SMTP mode if your machine does
not have access to the Active Directory containing all your email
users. This includes machines that are not part of your Active
Directory domain (i.e., non-domain machines) as well as machines in
a DMZ. However, you can still install GFI MailSecurity in SMTP mode
on your mail server as well as on any other machine that has access
to Active Directory containing all (email) users.
NOTE: Both installation modes have the same scanning features and
performance. The only difference between Active Directory and SMTP