Views:
Trend Micro recommends that you use the policy-based features in SMD to establish and maintain a standard antivirus, data loss prevention, and content security setting. Policies allow you to:
  • Automate redundant creation of antivirus and update settings, and other maintenance tasks
  • Easily configure all of the servers in an environment from a single server
When planning for policy-based antivirus and content security protection, consider the following activities:
  • Create group policies based on the ScanMail default policy.
    In a large network with multiple servers that perform common roles, you can save considerable configuration time and maintenance when you base a policy on the default policy (see Understanding Policies, Rules, and Filters). You can easily and quickly create a common set of mail real-time and scheduled scanning protection settings once rather than repeatedly for each individual server.
  • Create group policies to assign settings applicable to all Domino servers in a specific geographical or administrative segment.
    In a multi-server environment, defining server groups based on similar functions or characteristics ensures that ScanMail applies the appropriate policy to all servers in a group.
    Create policies that have a common purpose. For example:
    • A policy for all Domino email servers that require the same protection—real-time mail scanning
    • A policy for all servers that require real-time and scheduled database scanning
    Decide which servers belong together, and define the set of protection, update, and notification methods that apply to them. For example, you can create and then apply a policy that protects a mail server to other servers that act as mail servers.
  • Create unique policies to assign settings to specific Domino servers.
    A unique policy assigns a default configuration to individual users, user groups, or servers. For example, to set scheduled scanning that will run only on certain days of the week, create a policy with a scheduled scan rule and then assign it to individual or groups of database servers.