Views:
Trend Micro recommends establishing and maintaining a standard antivirus and content security setting using the policy-based features. Policies allow you to:
  • Automate redundant creation of antivirus and update settings, and other maintenance tasks
  • Easily configure all of the servers in an environment from a single server
When planning for policy-based antivirus and content security protection, consider the following activities:
  • Create group policies based on the ScanMail default policy.
    In a large network with multiple servers that perform common roles, creating a common set of protection settings once rather than repeatedly to each individual server saves configuration time and maintenance considerably.
    By basing a policy on the default policy (see Understanding Policies, Rules, and Filters), you can easily and quickly create a common set of mail and database real-time and scheduled scanning protection settings once, rather than repeatedly to each individual server.
  • Create group policies to assign settings applicable to all Domino servers in a specific geographical or administrative segment. In a multi-server environment, define server groups based on similar functions or characteristics to ensure that ScanMail applies the appropriate policy to all servers in a group.
  • Create policies that have a common purpose. For example:
    • A policy for all Domino email servers that requires the same protection—real-time mail scanning
    • A policy for all servers that requires real-time and scheduled database scanning
    Decide which servers belong together, and define the set of protection, update, and notification methods that apply to them. For example, you can create and then apply a policy protecting a mail server to other servers that also act as mail servers.
  • Create unique policies to assign settings to specific Domino servers.
    A unique policy assigns a default configuration to individual users, user groups, or servers. For example, to set scheduled scanning that will run only on certain days of the week, create a policy with a scheduled scan rule and then assign it to individual or groups of database servers.