McAfee Security for Microsoft

Exchange 8.5.0 Installation Guide

(Unmanaged)
Contents
Installation and configuration 3
Pre-installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
System requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Supported Microsoft Exchange Server roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Package contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Install the software using setup wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Install the McAfee Anti-spam add-on manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Perform a silent installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Upgrade a standalone deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Post-installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Quick setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Cluster deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Test your installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Repair the installation 14

Uninstall the software 15

Installation 16
Installation and configuration
Select the option to install and use your MSME software, which best suits your requirements.

Installation
Description
type

When
Wizard-
Standalone
using the wizard-based setup file, select one of these options per your requirements:
based
• Typical — Configured for all standard features except the McAfee Anti-Spam add-on. You can install the McAfee Anti-spam
add-on separately at a later stage.
• Complete — Configured for all standard features with the McAfee Anti-Spam add-on that provides protection against Spam
or Phish attacks.
• Custom — Configure using the advanced options to customize your setup.

Install
Silentthe software without any user interaction or prompts. Modify and run the Silent.bat file that allows you to record
selections for the installation process.

Deploy
ePolicy
MSME in ePolicy Orchestrator environment to allow centralized policy management and enforcement on your
Microsoft
Orchestrator-
Exchange Servers.
managed

Note: You can also deploy MSME to a Microsoft Exchange Server cluster. This deployment requires certain post-installation
configuration tasks.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 3

Pre-installation
Use this information to prepare for the MSME installation.

System requirements
Make sure that your server meets these requirements.

Component Requirement

Operating system • Microsoft Windows 2008 Standard/Enterprise Server SP2

(64-bit)
• Microsoft Windows 2008 Standard/Enterprise Server R2 (64-
bit)
• Microsoft Windows 2012 Standard/Enterprise Server (64-bit)
• Microsoft Windows 2012 Standard/Enterprise Server R2 (64-
bit)

Microsoft Exchange Server • Microsoft Exchange Server 2007 SP3

• Microsoft Exchange Server 2010 SP2
• Microsoft Exchange Server 2013 SP1

Browser • Microsoft Internet Explorer version 8.0, 9.0, 10.0, and 11.0.
• Mozilla Firefox 29.x and 30.x
• Google Chrome 35
Note: Make sure that you disable the pop-up blocker in the
browser settings.

Processor • Intel x64 architecture-based processor that supports Intel

Extended Memory 64 technology (Intel EM64T)
• AMD x64 architecture-based processor with AMD 64-bit
technology

Memory Note: The memory requirement to install MSME is the same

as Microsoft Exchange Server requirement. For more
information, see the Microsoft Exchange website.
Microsoft Exchange Server 2007
• Minimum — 2 GB RAM
• Recommended — 4 GB RAM
Microsoft Exchange Server 2010
• Minimum — 4 GB RAM
• Recommended — 4 GB RAM for a single role and 8 GB for
multiple roles
Microsoft Exchange Server 2013
• Minimum — 8 GB RAM
• Recommended — 8 GB RAM

Disk space Minimum: 740 MB

Network 10/100/1000-Mbps Ethernet card

Screen resolution 1024 x 768

4 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

 Component Requirement

McAfee management software • McAfee ePolicy Orchestrator 4.6

• McAfee ePolicy Orchestrator 5.0
• McAfee ePolicy Orchestrator 5.1

McAfee Agent • McAfee Agent 4.6 or later.

Upgrade path • McAfee Security for Microsoft Exchange 7.6 Patch 1 Rollup 2
• McAfee Security for Microsoft Exchange 8.0

Note: To view updated system requirements, see KB76903.

Supported Microsoft Exchange Server roles

The MSME installation depends upon the role selected for the Microsoft Exchange Server installation.
These roles are supported for the various versions of Microsoft Exchange Servers:
• Microsoft Exchange Server 2007 and 2010:
◦ Edge Transport Server — Runs in the perimeter outside a domain and provides message hygiene and security. It is
installed on a standalone server that is not a member of an Active Directory domain.
◦ Hub Server — Handles all mail flow inside the organization, applies transport rules, and delivers messages to a
recipient's mailbox in an Active Directory domain.
◦ Mailbox Server — Holds the Exchange databases containing the user mailboxes.
◦ An installation with a dual role of Mailbox with Hub.
• Microsoft Exchange Server 2013 and 2013 SP1
◦ MBX Server — Holds the dual role of Mailbox with Hub.
◦ Edge Transport Server. (only for Microsoft Exchange Server 2013 SP1)

Package contents
The software package contains the files necessary to install and set up the software as required.
Unzip the MSMEv85_x64.ZIP archive, to find these directories.

Folder Content

Standalone Contains the files required to perform a standalone

installation of the product:
• Setup_x64.exe — Setup file to install the software using a
wizard.
• Silent.bat — Record file to install the software without any
prompts or wizard.

ePO Contains installation and configuration files required for

managing the product using ePolicy Orchestrator.
• ePO_Extension_XX: Contains the product extensions for all
locales in their respective locale folders. For example,
ePO_Extension_EN.
• MSME_Deployment_x64_xxxx.zip: Deployment package to
deploy the software on the managed clients.
• MSME_AS_Deployment_xxxx.zip: Deployment package to
deploy the McAfee Anti-spam component on to the
managed clients.
• MSMEePOUpgrade.zip: Contains the executable file
required to migrates policies from MSME 7.6.x, or 8.0 to
MSME 8.5 in an upgrade.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 5

 Folder Content
• MSME85REPORTS.zip: Extension to add MSME reporting
interface such as dashboards, queries.

Manual Contains the product guide in PDF format for all locales.

Readme Contains the product release notes in HTML format for all
locales.

AntiSpam Contains ASAddon_x64.exe to install the McAfee Anti-Spam

add-on component.

Note: MSME installer includes McAfee Agent 4.8 Patch 2. The agent collects and sends information between the ePolicy
Orchestrator server and repositories, and manages installations across the network.

Installation
MSME is installed in a compatible environment with features depending on your requirement.
MSME can be installed on a standalone server or integrated with ePolicy Orchestrator.
Note: Make sure that you have the Windows administrator credentials to install the product. This account must be a Domain
administrator and these credentials are required to launch the product installer.

Install the software using setup wizard

Install the software on a system where Microsoft Exchange Server 2007, 2010, or 2013, is installed.
In Microsoft Exchange Server 2007 and 2010, MSME executes Transport Scanning for the Edge transport and Hub transport roles,
and VirusScan API for the Mailbox role (based on the roles configured).

Task
1. As an administrator, log on to the system where Microsoft Exchange Server is installed.
2. Create a temporary directory on your local drive.
3. Download the archived software package and extract it to the temporary directory you created.
4. From the setup folder, double-click setup_x64.exe (this is the setup application for a 64-bit operating system).
5. Select a language from the drop-down list, then click OK.
6. In the Preparing to Install screen, the installation wizard is prepared and all required installation files are extracted. When the
process is complete, the Welcome screen appears. Click Next.
7. The Exchange Server Role Detection screen lists the roles selected during the Microsoft Exchange Server installation. Click Next.
8. Select an installation type, then click Next.
◦ Typical — Commonly used features are installed with Web-based Product Configuration. The McAfee Anti-Spam add-on is
not installed.
◦ Complete — (Recommended) Web based product configuration and McAfee Anti-Spam add-on are installed. If the node is
cluster aware, the required cluster setup components and services are also installed.
◦ Custom — (Recommended only for advanced users) Select which application features you want to install and where to install.
If you select this type of installation, a dialog box displays the features you can install. To change the destination folder for
the installation files, click Change.
9. Accept the terms in the license agreement, then click Next.
10. In the Additional Configuration Settings screen, complete these options, then click Next.
a. Select Import existing configuration to import the MSME configuration from an existing installation in the same or a different
system. This configuration setting is saved as a .cfg file. To import this configuration, click Import, browse to the .cfg file, then
click Open.
Note: You must have already exported a configuration file from the product interface.
b. Under Select Quarantine mechanism, select a location to store all quarantined items, then complete the options for the location
you selected.

6 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

 c. If you select Local Database, click Browse to change the default location (optional). If you select McAfee Quarantine Manager, type the
IP address of the McAfee Quarantine Manager server, the port number, and the callback port number. Make sure that the
McAfee Quarantine Manager server is up and is available for quarantining.
◦ RPC — Remote Procedure Call (RPC) is a communication mechanism that requires uninterrupted connection to
communicate with McAfee Quarantine Manager server. If the network connection is not available, processes such as
quarantine and release are interrupted.
◦ HTTP — A stateless communication mechanism to communicate with McAfee Quarantine Manager server. If there is a
communication issue with McAfee Quarantine Manager server, the items are stored in the local database until the
connection is restored. MSME tries to send the quarantined items to McAfee Quarantine Manager three times. If all three
attempts fail, a product log entry is created and the item is stored in the local database.
◦ HTTPs — A secured HTTP communication mechanism where the data is transferred in encrypted format.
Tip: McAfee recommends that you use HTTP/HTTPs communication channel because stateless connections make sure that
the software can communicate with McAfee Quarantine Manager seamlessly.
d. Under Administrator Email address, type the email address to which all notifications, configuration reports, and status reports
must be sent.
11. Select a protection profile, then click Next.
◦ Default —This profile provides maximum performance with optimum protection.
◦ Enhanced — This profile enables default file filter rules and provides maximum protection. It also provides real-time
protection using McAfee Global Threat Intelligence file and messaging reputation.
◦ Use existing — (Upgrade only) This option uses the existing protection profile.
12. Select Create Desktop shortcuts if you want the installation wizard to create shortcuts for the application on the desktop, then click
Next.
13. In the Ready to Install the Program screen, verify the selected configuration, then click Install. The Installing McAfee Security for Microsoft
Exchange screen appears that displays the features being copied, initialized, and installed.
Note: MSME creates a user named MSMEODuser in the active directory. This user is required to perform on-demand scans.
14. When the installation is complete, the Installation Wizard Completed screen appears. Select the options as required, then click Finish.
Note: You might be prompted to provide the domain administrator credentials.
◦ Launch Product User Interface — To launch the MSME standalone user interface after you exit the installation wizard.
◦ Show the readme file — To view the Release Notes of the product (Readme.html) for information on any last-minute additions or
changes to the product, known issues, or resolved issues.
◦ Update Now — (Recommended) To update MSME with the latest DAT files, engine, and anti-spam updates.
◦ Register at McAfee Business Community to stay up to date — To receive information regarding the product, new releases, updates, and
other relevant information.
◦ Show Windows Installer logs — To view the log file of the installation process.
Note: We recommend that you restart your computer after the installation process is complete.

Results
The MSME software is successfully installed on your system.

Install the McAfee Anti-spam add-on manually

If you've not installed McAfee Anti-spam as part of the complete or custom installation of MSME, install the add-on manually.
The MSME package includes an evaluation version of the McAfee Anti-Spam add-on. To upgrade it to licensed, contact McAfee
Support.

Task
1. As an administrator, log on to the system where Microsoft Exchange Server is installed.
2. Browse to the \AntiSpam folder in the software package, double-click ASAddOn_x64_Eval.exe.
3. Select a language from the drop-down list, then click OK.
4. In the Welcome screen, click Next to display the End User License Agreement screen.
5. Accept the terms in the license agreement, then click Next.
6. In the Ready to Install the Program screen, verify the selected configuration, then click Install. The Installing McAfee Anti-Spam add-on for
Microsoft Exchange screen appears that displays the features being copied, initialized, and installed.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 7

7. When the installation is complete, the installation wizard Completed screen appears. Select Show Windows Installer logs to view the
log file of the installation process, if necessary, then click Finish.

Results
The McAfee Anti-spam add-on is successfully installed on your system.

Perform a silent installation

You can automate the installation using the Silent.bat file that allows you to record the selections for the installation process.
To install the product with default settings, double-click the Silent.bat available in the download package.
Note: Silent.bat internally is called from the MSME setup file. Make sure that the setup_x64.exe is available in the same directory
because the installation can't succeed with Silent.bat alone.
To customize the installation, modify these parameters in the batch file before running it:

Description
Value
Parameter

Specify
ADMIN_EMAIL_ID
the administrator's email address for notifications. For example, SET [email protected]
<admin>@<msme>.com
MSME sends notifications to this email address, when you enable Send notification option for policies.

Enable
1AUTO_UPDATE
or disable automatic updates:
•or1 = enabled
•0 0 = disabled
When enabled, the DAT and engine update happens immediately after the software installation.
Tip: McAfee recommends that you enable the automatic update to make sure that the engine and DAT files are up to date.

Specify
INSTALL_DIR
the installation path.
%SystemDrive
For example, if you specify C:\MSME, a folder MSME is created in the C drive.
%
\MSME

Specify
1NEED_DESKTOP_SHORTCUT
whether to create a desktop shortcut after successful installation:
•or1 = yes
•0 0 = no
The default value is 1.

Specify
1DB_PATH_CHANGED
whether to change the Postgres database path:
•or1 = yes
•0 0 = no
Note: You can modify the database path anytime after the installation. When you change the path, a new database is created
to store the detected items. However, the detected items stored in the earlier database are not available in the new
database.

Specify
<New
DATABASEDIR
the new Postgres database location. For example, C:\TestDB.
Postgres
DB
Location>

Specify
1QUARANTINE
the location for quarantined items:
or
MECHANISM
• 1 = Local database
•2 2 = McAfee Quarantine Manager
Local database — To quarantine detected items in the local system.
McAfee Quarantine Manager server — To quarantine detected items in MQM server, a centralized storage server.
If you select McAfee Quarantine Manager, make sure that you also define the MQM IPADDRESS, MQS PORT NUMBER, and
MQM COMMUNICATION MECHANISM settings.

8 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

Description
Value
Parameter
Note: You can modify the settings from the software interface any time after the installation.

Specify
MQM the IP address of the MQM server. MSME supports both IPv4 and IPv6 format.
IPv4
IPADDRESS
or
IPv6
address

Specify
0MQM the communication channel to communicate with MQM server:
•or
COMMUNICATION
0 = RPC
• MECHANISM
1 1 = HTTP
•or2 = HTTPs
2
Tip: McAfee recommends that you use HTTP/HTTPs communication channel because stateless connections make sure that
the software can communicate with MQM server seamlessly.

Specify
MQM port numbers for communication channels:
80

•or
PORT
80 = HTTP protocol
NUMBER
•443
443 = HTTPs protocol
•or49500 = RPC protocol
49500

Agree
AGREE_TO_LICENSE
Yes to the license terms to install the software. For example, SET AGREE_TO_LICENSE = Yes.
or
No

Remember: The silent installation includes all standard features except the McAfee Anti-Spam add-on. You must install the
McAfee Anti-Spam add-on separately. For details, see Install the McAfee Anti-spam add-on manually.

Upgrade a standalone deployment

MSME version 8.5 supports upgrading your configuration settings from the previous version 7.6.x, or 8.0.

Before you begin

Place your Microsoft Exchange server in maintenance mode because the Exchange Database and Exchange Transport services
restart during the installation process.
If you had installed the previously supported version of McAfee Anti-spam module separately earlier, make sure that you
uninstall the McAfee Anti-spam module before upgrading the software. You can install the latest version of the McAfee Anti-spam
after the upgrade.
MSME provides enhanced security by not supporting the HTML tags that have XSS vulnerability. McAfee recommends that you
remove the HTML tags that have XSS vulnerability from the existing notification template before the upgrade. Otherwise, after
the upgrade, if you try to modify the notification templates that contain unsupported tags, you will be prompted to remove the
unsupported tags from the template or use the template without modification. For the list of unsupported HTML tags, see
McAfee KnowledgeBase article KB82214.
When upgrading to a new version, you need not uninstall the existing version. The installation program updates your installation
to the new version.

Task
1. As an administrator, log on to the system where Microsoft Exchange Server is installed.
2. From the setup folder, double-click setup_x64.exe (this is the setup application for a 64-bit operating system).
3. In the Preparing to Install screen, the installation wizard is prepared and all required installation files are extracted. When the
process is complete, the Welcome screen appears. Click Next.
4. The Exchange Server Role Detection screen lists the roles selected during the Microsoft Exchange Server installation. Click Next.
5. In the Setup Type screen, the Custom option is selected by default. Click Next.
6. The Custom Setup screen lists the features installed in the existing installation. Select the features you want to be updated with
McAfee Security for Microsoft Exchange, then click Next

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 9

 7. Accept the terms in the license agreement, then click Next.
8. The Additional Configuration Settings screen displays the settings for quarantine mechanism and quarantine database applied in the
existing installation. Change the settings, if necessary, then click Next. To migrate policies from an earlier version, select the
option Import existing configuration, then browse and select the configuration file.
9. In the Setup Protection Profile screen, select Default, Enhanced, or Use Existing, as necessary, then click Next.
Note: If you selected the Import existing configuration, all options on this screen are grayed-out. The Use Existing option is selected by
default.
10. Select Create Desktop shortcuts if you want the installation wizard to create shortcuts for the application on the desktop, then click
Next.
11. In the Ready to Install the Program screen, verify the selected configuration, then click Install. The Installing McAfee Security for Microsoft
Exchange screen appears that displays the features being copied, initialized, and installed.
Note: While upgrading, the software checks the existing DAT version in the system and upgrades only if the DAT version
packaged with the software is greater than the DAT version available in the system.
12. When the installation is complete, the Installation Wizard Completed screen appears with the Migrate Quarantine Data option selected by
default. Click Finish.
Note: If you had configured proxy settings in the previous version, you must configure the proxy settings again after the
upgrade. We recommend that you restart your computer after the installation.

Results
The McAfee Security for Microsoft Exchange software is successfully upgraded.

Post-installation
Once you've installed MSME, perform certain additional configuration to set it up for your environment.

Quick setup
Steps to quickly set up MSME and protect your Exchange server environment.
As an administrator, perform these tasks once you install MSME on your Exchange server.

Task
1. Update the software by performing a Engine/DAT update. For details, see the Schedule a software update section.
2. If you have installed MSME on an Edge Transport or Hub Transport server, make sure that MSME agents are loaded in the
Exchange Power Shell (Exchange Management Shell), using this command:
Get-TransportAgent
The status for "Enabled" must be true to agents starting with "McAfee".
3. Make sure that you install the McAfee anti-spam add-on component to quarantine spam or phish email messages.
4. Update the administrator email address from Settings & Diagnostics → Notifications → Settings tab.
5. Schedule a status report task. For details, see the Schedule a new status report section.
6. Schedule a configuration report task. For details, see the Schedule a new configuration report section.
7. Schedule on-demand scans based on your requirement. For details, see the On-Demand scan and its views section.
8. Configure the on-access scan settings as per your requirement from Settings & Diagnostics → On-Access Settings page. For details,
see the On-Access settings section.
9. Configure DLP and Compliance scanner settings and rules based on your company policy. For details, see the Policy Manager
section for instructions on configuring policies, scanners, and filters.
10. For exceptions in a policy, create subpolicies based on your organization's requirement.
11. Send test email messages to verify the configuration.

Cluster deployment
You need additional configurations to install MSME in cluster deployments of Microsoft Exchange Server 2007, 2010 and 2013.

Cluster replication methods for Microsoft Exchange Server 2007

Cluster replication can be carried out using two methods: Cluster Continuous Replication (CCR) or Single Copy Cluster (SCC).

10 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

 Cluster Continuous Replication (CCR)
Install MSME on all nodes of the cluster as standalone instances.
Note: MSME is not a cluster aware application on Microsoft Exchange Server 2007 CCR cluster. However, both the nodes can be
managed independently and work as standalone instances.

Single Copy Cluster (SCC)

Install MSME on all nodes of the cluster. In a Microsoft Exchange Server 2007 SCC cluster, MSME can be added only as a Cluster
Resource.
Make sure that you:
• Install MSME on the Active node first, then on the Passive node.
• Create MSME Cluster in the same cluster group, where you have Microsoft Exchange resources configured.

Add the software to a cluster group on Windows 2008

Add MSME as a resource to a cluster group in a Windows 2008 (64-bit) environment.

Task
1. Click Start → Run, type cmd, then click OK.
Note: Make sure that you have logged in as the administrator.
2. Type these commands to navigate to the cluster folder and run the cluster command. Press enter after each command.
cd <windows folder>\cluster
cluster /UNREGADMINEXT:McPPClusResEx.dll

3. Close the command prompt.

Note: Make sure that the MSME cluster resource is created in the same cluster group where you have Microsoft Exchange
resources configured.
4. Click Start → Administrative Tools → Failover Cluster Management.
5. In the Failover Cluster Management console, select the cluster group in which you would like to create the cluster resource. In the
right pane (Actions window), click Add resource.
6. Select More resources from the drop-down, then select Add McAfee Cluster Framework.
7. In the main console, right-click in the New McAfee Cluster Framework window, then select Properties.
8. In the New McAfee Cluster Framework Properties window, click the Properties tab.
9. Under Grid, click the Value field and enter the drive that was selected to store the MSME configuration and the database, for
example F:\, then click OK.
10. In Cluster Administrator, right-click on the newly created resource and select Bring Online.
This step starts the MSME service on the active node and the quarantine database is created in the designated drive. Multiple
instances of the Postgress.exe*32 process appears under the Processes tab of the Task Manager with RPCServ.exe*32, and
SAFeService.exe*32.

Cluster replication utility for Microsoft Exchange 2010 and 2013

The Cluster Replication Setup Utility helps in the replication of the quarantine database, Policy configurations, engine, and DATs.
This utility is available only for an MSME installation that is recognized by a Data Availability Group (DAG), in which case the
MSME Replication Service is also available. Depending on the configuration settings, this utility replicates quarantined items from
one server to the other, and makes them highly accessible.
The primary component in a Data Availability Group is called Active Manager. Microsoft Exchange Server 2010 relies on the Active
Manager to manage switchovers and failovers between mailbox servers that are a part of a Data Availability Group. Active
Manager runs on all Mailbox servers in a given Data Availability Group and can be installed in two roles:
• Primary Active Manager (PAM)
• Standby Active Manager (SAM)
For details regarding these roles, refer to the relevant Exchange 2010 documentation.

Configure the replication settings

Configure the replication settings for Quarantine database, Policy configurations, Engine, and DATs.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 11

Task
1. From the Start menu, click All Programs → McAfee → Security for Microsoft Exchange → Cluster Replication Setup. A dialog box appears with
various options to define for this service.
Note: If the Mailbox role is installed in Microsoft Exchange Server 2010 and 2013, the service Cluster Replication Setup is
automatically installed in all three types of setup: Typical, Complete, and Custom.
2. From Server name, retrieve the available servers for replication which are part of Data Availability Group and have MSME
installed with Exchange Server in the mailbox role.
◦ Available server(s) displays a list of servers that can be added for replicating the quarantine database, Policy configurations,
Engine, and DATs.
◦ Replication server(s) displays a list of servers that have been configured as replication servers for the quarantine database,
Policy configurations, Engine, and DATs.
3. Select the server from Available server(s) and click >> to add it to the Replication servers list.
4. Select Stop Replication service to stop the MSME Cluster Replication service.
5. Select Start Replication service for to manage the MSME Cluster Replication service. Select appropriate options:
◦ Policy Configuration
◦ Engine/DATs
◦ Quarantine Database
6. Click Apply to save and apply the cluster replication settings.
7. When prompted, select the option to restart the MSME service, which is required for the replication to work.

Test your installation

When you have completed the installation of MSME, we recommend that you test it.
It makes sure that the software is installed properly and can detect viruses and spam within email messages.

Installed components and services

MSME installs various components on your Microsoft Exchange server.
To access an MSME component, click Start → Programs → McAfee → Security for Microsoft Exchange, then click the component:
• McAfee Anti-Spam for McAfee Security for Microsoft Exchange — Detects spam and phishing content.
• Access Control — Allows or denies access to the MSME user interface for specific users or groups.
• Product Configuration — Launches MSME standalone version or through a web interface.
• Sitelist Editor — Specifies the location where automatic updates (including DATs and scanning engines) are downloaded from.
• Cluster Replication Setup — Replicates the quarantine database, policy configurations, and product updates (Microsoft Exchange
Server 2010 or 2013 only). This is dependent upon the replication setting across a Data Availability Group (DAG), recognized by an
MSME installation.

Services available
• McAfee Framework Service — Prerequisite for installing and using ePolicy Orchestrator. For more details on this service, refer the
ePolicy Orchestrator product documentation.
• McAfee Security for Microsoft Exchange — Protects your Microsoft Exchange Server (versions 2007, 2010, 2013) from viruses, unwanted
content, potentially unwanted programs, and banned file types/messages.
• McAfee Anti-Spam rules updater — Required to update the anti-spam rules.

Test the anti-virus component

Attach an EICAR anti-virus test file to an email message, then send the message through the Microsoft Exchange server where
you’ve installed MSME.
Several anti-virus vendors throughout the world jointly created the EICAR standard anti-virus test file. It is a standard to verify
anti-virus installations.
Note: This file is not a virus. Make sure that you delete the file when you have finished testing your installation to avoid alarming
users.

Task
1. Open a text editor, copy this code to notepad, then save the file with the name EICAR.COM:
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

12 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

 The file size is 68 bytes or 70 bytes.
2. Send an email message through the Microsoft Exchange server with the EICAR test file as an attachment.
Note: When MSME examines the email message, it reports finding the EICAR test file. However, it cannot clean or repair the
EICAR file because it is a test file.
3. MSME replaces the EICAR test file with an alert message.

Test the anti-spam component

Run GTUBE (General Test mail for Unsolicited Bulk Email) to test the McAfee anti-spam software.
The test email message must be sent from an external email account (a different domain).

Task
1. Create an email message.
2. Copy this code in the body text:
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

Make sure that you copy this text with no extra spaces or line breaks.
3. From an external email address, send this email message to a mailbox address on the server where you have installed MSME
with McAfee Anti-Spam add-on component. McAfee Anti-Spam scans the message, recognizes it as a junk email message, and
takes necessary actions.
Note: The GTUBE test overrides blacklists and whitelists. For more information on the GTUBE test file, visit http://
spamassassin.apache.org/.

Test the installation using McAfee Virtual Technician

McAfee Virtual Technician automatically checks for common deviations that might have occurred since you installed the product.
Run McAfee Virtual Technician to test whether MSME is installed correctly.
To download McAfee Virtual Technician, visit: http://mvt.mcafee.com/mvt/index.asp.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 13

Repair the installation
Resolve installation errors in the program by fixing corrupt or missing files, shortcuts and registry entries.
Note: You can also repair the MSME installation from Control Panel → Programs and Features → Uninstall a program console by clicking
Uninstall/Change. Repairing an installation will revert to the default configuration settings.

Task
1. In the folder containing the installation files, double-click setup_x64.exe.
2. Click Next. The Program Maintenance screen appears.
3. From the Program Maintenance screen, select Repair, then click Next. The Ready to Repair the program screen appears.
4. Click Install to complete the repair. The InstallShield Wizard Completed dialog box appears.
5. Click Finish to exit.

14 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

Uninstall the software
Remove or uninstall MSME from the Exchange server.
Note: You can also remove MSME from the Control Panel → Programs and Features → Uninstall a program console. In this method, the
quarantine database is retained by default.

Task
1. In the folder containing the installation files, double-click setup_x64.exe.
The Welcome screen appears.
2. Click Next.
The Program Maintenance screen appears.
3. Select Remove, then click Next.
The Preserve Settings screen appears.
4. Select Preserve quarantine database to retain the quarantine database, then click Next.
The Remove the program screen appears.
5. Click Remove to uninstall MSME from your Exchange server.
The InstallShield Wizard Completed screen appears.
6. Click Finish to exit.

McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged) 15

Installation
Here are answers to frequently asked questions on MSME installation.

How do I perform a silent installation?

Execute the Silent.bat file in the download package. For information on customization, see the Perform a silent installation.

Can I Install McAfee Security for Microsoft Exchange 8.5 using the account that is not a domain administrator?

You can install. For more information, see McAfee KnowledgeBase article KB82190.

What is the supported ePolicy Orchestrator version?

McAfee ePolicy Orchestrator 4.6, 5.0, and 5.1.

What is the supported McAfee Agent version?

McAfee Agent 4.6 or later.

On which port does the MSME configuration replication works?

This service doesn't work on ports, but it keeps monitoring the folders that are set by administrator using replication user
interface.

Do I have to consider anything special while upgrading to MSME 8.5 from MSME 7.6 or 8.0 in a CCR or DAG environment?

No considerations. Follow the standalone installation steps.

16 McAfee Security for Microsoft Exchange 8.5.0 Installation Guide (Unmanaged)

COPYRIGHT
Copyright © 2020 McAfee, LLC

McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other
marks and brands may be claimed as the property of others.