EVault - Plug-in for Sophos PureMessage for Exchange - Online Help

Follow

Summary

Sophos PureMessage for Exchange is a Microsoft Exchange anti-virus tool comprised of three components: Microsoft Exchange anti-virus protection, application-level anti-spam protection for Microsoft Exchange, and the Sophos On-Access File Level anti-virus scanning. This plug-in does not protect the Sophos On-Access File Level component.


More Information

Sophos PureMessage stores all quarantined files in a database. If the Quarantine database is stored locally on the server, but the SQL instance used is not named "SOPHOS", then it can be protected using the EVault Remote Disaster Recovery for SQL Server Plug-in. The SOPHOS instance is protected by the Sohpos plug-in.

Supported Versions

The following versions of Sophos PureMessage for Exchange are supported in respect to the hardware platform:

x86 Platform (32-bit hardware)

  • V2.5 on Microsoft Exchange 2003
  • V2.6 on Microsoft Exchange 2003
  • V3.0 on Microsoft Exchange 2003

x64 Platform (64-bit hardware)

  • V3.0 on Microsoft Exchange 2007

Install/Uninstall the Plug-in for Sophos PureMessage for Exchange via the EVault Remote Disaster Recovery Management Client

The Plug-in for Sophos PureMessage for Exchange should be initially installed via the EVault Remote Disaster Recovery Setup process. Subsequent installations/reinstallations can be installed using Application: Plug-ins in the EVault Remote Disaster Recovery Management Client using the procedure below.

To reinstall the Plug-in for Sophos PureMessage for Exchange, follow the steps below:

  1. Unzip the Plug-in for Sophos PureMessage for Exchange to the desired location.
  2. Launch the EVault Remote Disaster Recovery Management Client.
  3. Navigate to Applications: Plug-ins .
  4. Click on the Install button.
  5. Click the Browse button and navigate to the location of the SophosNFPlugin.dll file.
  6. Click OK to complete the installation.

To remove/uninstall the Plug-in for Sophos PureMessage for Exchange, follow the steps below:

  1. Launch the EVault Remote Disaster Recovery Management Client.
  2. Navigate to Application: Plug-ins .
  3. Select the desired plug-in to be removed/uninstalled.
  4. Click on the Uninstall button in the Plug-ins pane.
  5. When the plug-in is uninstalled, the files are not removed.  This is by design for future functionality and therefore the following workaround is provided:
    1. Copy the contents of the <installdir>\r2\plugins\<sponsor>\<version> folder to a different location (for example, C:\temp ).
    2. Delete the contents of the <installdir>\r2\plugins\<sponsor>\<version> folder.
    3. To reinstall the plug-in, when prompted for the location of the plug-in files, navigate to the new folder location (for example, C:\temp ).

Note: As an alternative, reinstallation can be accomplished by using the download files from the original download location after removing the plug-in.

Protected Services

This is a list of all services protected by this plug-in. Please note that where a plug-in supports multiple vendor versions, some services may not be present in a particular version.

The Sophos PureMessage for Exchange services are monitored and controlled by the plug-in. When the plug-in is installed, all protected services will be set to 'Manual' unless otherwise stated.

The following services compose the Sophos PureMessage for Exchange anti-virus:

  • Sophos PureMessage Running Object Table (ROT) (MMRot) - Manual
  • Sophos PureMessage (Savexsrvc) - Manual
  • Sophos PureMessage (SavexWebAgent) - Manual
  • Sophos PureMessage Scanner (PMScanner) - Manual

The other services, used by the File Level Scanning Components, also are present on the server:

  • Sophos Autoupdate Service - Manual
  • Sophos Administrative Service (SAVAdminService) - Manual
  • Sophos Anti-virus Service (SAVService) - Manual

The Autoupdate Service is also monitored and started via the plug-in. It is left on the default start-up, which is 'Manual'.

As the plug-in protects the default Sophos instance, the following services are also protected ONLY if the SQL instance "SOPHOS" exists:

  • SQL Server (SOPHOS) (MSSQL$SOPHOS)
  • Distributed Transactions Coordinator (MSDTC)
  • SQL Server Browser (SQLBrowser)
  • SQLAgent$SOPHOS (SQLAgent$SOPHOS)
  • Task Scheduler (Schedule)

Protected Data

This is a description of the protected data set that was determined when the plug-in was installed. Please note that exact filters will be based on the configuration of the application plug-in during installation.

File filters data:

  • Protects the Sophos PureMessage for Exchange configuration data and logs.

Registry filter:

  • This plug-in protects all the registry information stored for Sophos anti-virus product suite.
Automatic Filter Discovery

The plug-in does not provide a filter discovery component. The plug-in will need to be uninstalled and reinstalled using the procedures listed above if the application is reconfigured so that new locations are specified for files that are currently protected.

Other Features

  • None

Unsupported Components and Features

The plug-in does not protect the following application features or components:

  • Does not control the Sophos File Level anti-virus services.
  • Does not protect the Sophos File Level anti-virus configuration files because these are in use on the passive server.
  • Does not protect the Auto Update directory because this will be in use on the passive server (File Level Components will be running).

Applies To

EVault Remote Disaster Recovery

Related Information

RDR-REFID-1512

KBID-2386

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.