GFI MailDefense Suite, 100-249u, 1Y, SMA RNW MEMSECMCREN100-249-1Y User Manual
Product codes
MEMSECMCREN100-249-1Y
Typical deployment scenarios
GFI MailSecurity 2011
7
3 Typical deployment scenarios
This chapter explains the different scenarios how GFI MailSecurity can be installed and configured.
You can install GFI MailSecurity:
You can install GFI MailSecurity:
directly on your mail server, or
on a separate machine configured as a mail relay/gateway server.
3.1.1 Installing GFI MailSecurity on your mail server
Figure 1 - Installing GFI MailSecurity on your mail server
You can install GFI MailSecurity directly on your mail server, without any additional configuration.
NOTE: In Microsoft Exchange 2007/2010 environments, GFI MailSecurity can only be installed on
the servers with the following roles:
the servers with the following roles:
Edge Server Role, or
Hub Transport Role, or
Hub Transport and Mailbox Roles - with this configuration GFI MailSecurity can also scan
internal emails for viruses.
3.1.2 Installing GFI MailSecurity on a mail relay server
Figure 2 - Installing GFI MailSecurity on a mail gateway/relay server
When installing on a separate server (that is, on a server that is not the mail server), you must first
configure that machine to act as a gateway (also known as “Smart host” or “Mail relay” server) for
all your emails. This means that all inbound email must pass through this machine for scanning
before being relayed to the mail server for distribution. The same applies for outbound emails,
where the mail server must relay all outgoing emails to the gateway machine for scanning before
they are conveyed to the external recipients via Internet.
configure that machine to act as a gateway (also known as “Smart host” or “Mail relay” server) for
all your emails. This means that all inbound email must pass through this machine for scanning
before being relayed to the mail server for distribution. The same applies for outbound emails,
where the mail server must relay all outgoing emails to the gateway machine for scanning before
they are conveyed to the external recipients via Internet.