Health Check shows you the best practices and recommended settings for Postini. You can maximize the performance of the service by making a few quick changes to your configuration if necessary. Click the Health Check tab in the Administration Console to review your settings and to identify any settings that you may need to adjust:
From the Health Check page, follow this checklist:
Review your Virus Filtering settings
Using the recommendations on the Health Check page, do the following:
- Set both "Message Fragment Bouncing" and "Non Account Virus Blocking" to ON.
- Set the "Virus Outbreak Level" in Connection Manager to VERY HIGH.
- To protect against zero hour viruses (emerging threats in the environment), do either of the following:
Set "Early Detection Filtering" to ON
or
Set "System Threats" to Bounce or Quarantine, and set both "Binary Scanning" and "Scan Inside Compressed Files" to ON.
Review your user settings
You are required to register all valid email addresses with the message security service. Any unregistered address will be unfiltered and your mail server will need to process large quantities of spam messages sent to invalid recipients. Health Check will display the number of messages that were delivered unfiltered to your mail server during the past 30 days.
Using the recommendations on the Health Check page, do the following:
- Add users, if necessary.
- Manage user aliases and distribution lists.
Review your Approved Senders list
The Approved Senders List enables users or administrators to allow messages from a specific address or domain to bypass spam filters. However, spammers routinely "spoof" many sending addresses. Periodically review your Approved Senders list for any addresses that may be at risk of being spoofed.
Be sure that your own domain is not on the list since this generates high amounts of spam for your users. If you must include your domain, use the IP Lock feature at the email config level to ensure that only messages coming from your own IP addresses are accepted.
Review your settings for executable attachments
Attachment Manager allows administrators to set rules around blocking or forwarding messages with executable attachments. When approving messages of a certain type, all spam filtering on the message is skipped. Health Check will display a list of any approved executable attachments. You can change your Attachment Manager settings to remove these executables from the list if necessary.
Review your firewall settings
Once your MX records are pointed to the service, all of your legitimate mail should only come from the service. If you do not lock your firewall down to only accept port 25 traffic from the service, spammers will be able to connect directly to your mail server and send spam unfiltered.
You can run a firewall test from the Administration Console. First, click the logo at the top of any Administration Console page to go to the Home page. Then click the Firewall Test link in the lower left-hand corner of the page.
Back to Postini Security Central
