McAee SaaS Email Protection-Quickstart.pdf

7/29/2019 McAee SaaS Email Protection-Quickstart.pdf

1/72

Partner Quick Start for

Email Protection

Last Update: June 2010

Updated: November 2010

Proprietary and Confidential


2/72

RESTRICTION ON USE, PUBLICATION,OR DISCLOSURE OF PROPRIETARY

INFORMATION.

Copyright 2010 McAfee

This document contains information that isproprietary and confidential to McAfee. Nopart of this document may be reproduced,stored in a retrieval system, or transmitted, in

any form or by any means (electronic,mechanical, photocopying, recording, or oth-erwise) without prior written permissionfrom McAfee. All copies of this documentare the sole property of McAfee and must bereturned promptly upon request.

McAfee, Inc.

9781 South Meridian Blvd., Suite 400Englewood, CO 80112 USA

Direct +1 720-895-5700Toll Free +1 877-695-6442Fax +1 720-895-5757

Web site: www.mxlogic.com

Documentation Feedback:[email protected]

Partner Quick Start for Email Protection

November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission ii
http://www.mxlogic.com/http://www.mxlogic.com/


3/72


November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission iii

Contents

1 Administering Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Quick Start Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

Who Should Use This Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Administrative Levels of Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Recommended Browsers for Control Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5

Administrative Windows Accessible by Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5

Partner Permissions for Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Partner Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Parent Partner Administration of Downstream Partners . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Parent Partner Administration of Customers of Downstream Partners . . . . . . . . . . . . . . . . .14

Ensure the Customer Can Receive Email from the Service Provider . . . . . . . . . . . . . . . . . .15

Sign into the Control Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15Reset Your Password from the Sign in Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16

Review the List of Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

Download a List of Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Create a customer and activate package solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Bundles and Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Rules for Selecting Bundles and Packages .....................................................................21

Steps to Create a Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22

Create a Primary Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Create a Domain Alias, If Necessary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

Set up the Customers Inbound Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Delete an Inbound Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Add IP Address of Outbound Server, If Necessary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Delete an Outbound Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Have the Customer Set up a Smart Host (If Outbound Mail Protection is Turned on) . . . . .32

Have the Customer Redirect the MX Records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Confirm the Policies for Customer Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

Have the Customer Lock Down the Customer Environment . . . . . . . . . . . . . . . . . . . . . . . . .33

Rebrand your interface and that of your customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

Types of branding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Available Branding Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Levels of Branding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

Configure Branding at the Partner Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38

Configure Branding for a Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40

Set up a protected user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40


4/72


November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission iv

Administer Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

Administer Other Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

Customize Inbound Mail Filters (Optional) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Create Groups, If Necessary (Enterprise Customer Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Administer Disaster Recovery Services for the Customer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Administer MSP Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46

Create a Partner Distribution List (for MSP Connector only) . . . . . . . . . . . . . . . . . . . . . . . . .47

Configure the Partner MSP Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47

Add Customers for MSP Report Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Turn on Exception Notifications for the Partners MSP Connection . . . . . . . . . . . . . . . . . . .49

View an MSP Connector Audit Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

Download an Audit Report ...............................................................................................54

Sample ConnectWise Configuration page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Configuring MSP Connector for Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

Configure Message Audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56

2 Administering Downstream Partners. . . . . . . . . . . . . . . . . . . . . . . . . 57

Review the List of Partners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57

Create a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57

Edit or Change a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Delete a Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Branding, Distribution Lists, and MSP Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

3 Service Bundles and Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61Managed Service Bundles Detail: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

Email & Web Security Bundle inclusions..........................................................................61

Email Security & Archiving, both 1-yr. and multi-yr., inclusions .......................................62

Complete Security bundles, both 1-yr. and multi-yr., inclusions.......................................63

Inbound Email Protection Packages ................................................................................65

Outbound Email Protection Packages..............................................................................67

Email Archiving packages ................................................................................................67

Web Protection Package..................................................................................................68


5/72

Partner Quick Start for Email Protection Quick Start Checklist

November 2010 Proprietary: Not for use or disclosure outside McAfee without written permission 1

1. Administering Customers

Quick Start Checklist

The following checklist lists the tasks you would typically perform to support customers

who use Email Protection. Each task is described in more detail later in the Quick Start

Guide.

Task Description

Sign into the Control Console You need the URL, sign-in, and password, which you might need

to create yourself. To set your password, see Reset Your Password

from the Sign in Page.

Review the List of Customers Review your list of customers to see who is alreadyadministered or to access a customer for additional

administration.

Create a customer and activate package

solutions

On the Control Console, clickAccount Management >

Customers > Create.

See Partner Permissions for Administration on what you

might or might be allowed to administer.

Create a Primary Domain On the Control Console, clickAccount Management >

Domains.

Create a Domain Alias, If Necessary On the Control Console, clickAccount Management >

Domains. Select a domain, then clickEdit Aliases.Set up the Customers Inbound Servers Click Email Protection > Setup > Inbound Servers.

You must enter an IP address (for example 100.2.45.107) or a

CIDR address (for example 100.2.45.107/27)

Add IP Address of Outbound Server, If

Necessary

Click Email Protection > Setup > Outbound Servers.

You must enter an IP address (for example 100.2.45.107) or a

fully-qualified DNS address. You cannot use CIDR notation.

Have the Customer Set up a Smart Host

(If Outbound Mail Protection is Turned

on)

To ensure that your outbound email is filtered, you must

designate, for each of your outbound mail servers, an Email

Protection server as your Smart Host.

Have the Customer Redirect the MXRecords

The Mail Exchange (MX) record for each of your mail servers is aspecification within a Domain Name Server (DNS Server)

operated by your Internet Service Provider (ISP). These records

must be changed by your ISP to fully-qualified domain names (for

example, denver.acme.com) within the Email Protection

network.

The exact changes necessary are provided by your Email

Protection provider in the Service Activation Guide.


6/72

Partner Quick Start for Email Protection Quick Start Checklist


Confirm the Policies for Customer

Domains

Click Email Protection > Policies.

Select the default inbound policy, then browse each tab for

the policy.

Have the Customer Lock Down the

Customer Environment

Five to seven days after you have redirected your MX record, and

after you have verified that email is being filtered and delivered

appropriately, restrict all IP access to your mail server with the

exception of the Email Protection subnets provided in your

Service Activation Guide.

Rebrand your interface and that of your

customers

To provide the look and feel of your company for your customers

service, or to allow customers to change the look and feel for their

own company, configure branding.

Click Account Management > Partners > Branding or

Account Management > Customers > Branding.

See also Types of branding, Available Branding Attributes,

and Levels of Branding.

Set up a protected user A protected user cannot be deleted via bulk or batch update

processes. Thus, Customer Administrators are recommended

candidates to be protected users.

Create a user.

Select the user, then clickEdit.

Administer Users Define how users log in

Disable user access to the Control Console

Turn on explicit user creation

Create remaining users

Create user aliases

For information on administering users, see Email ProtectionQuick Start.

Customize Inbound Mail Filters

(Optional)

You or the customer can customize the default inbound policy for

groups of users to fit the customers business needs.

For more information on customizing policies, see theEmail

Protection Quick Startor, for details on all customizing options,

see theEmail Protection Administrator Guide.

Create Groups, If Necessary (Enterprise

Customer Only)

Groups are used when there are users in the organization whose

email should be filtered according to a policy other than the

default policy.

Creating and applying groups is a three step process:1 Create a new group.

2 Assign individual User Accounts to the group.

3 Create a new policy with special email filtering rules and

associate the group to the policy.

For more information on creating groups, see theAccount

Management Administrator Guide.

Task Description


7/72

Partner Quick Start for Email Protection Who Should Use This Document


Who Should Use This DocumentThis document provides instructions for Partners and service provider administrators. This

document assumes that the administrators are performing tasks on behalf of their

customers.

Administrative Levels of Users

The levels of administrative users you can add are as follows:

Administer Disaster Recovery Services

for the Customer

Disaster Recovery Services consists of one of two services:

Fail Safe

Email Continuity

Either of these services are optional and available at additional

cost.

If your customer has purchases Disaster Recovery, you ore the

customer can administer Disaster Recovery. See Administer

Disaster Recovery Services in theEmail Protection Quick Start.

Administer MSP Connector Managed Service Platform (MSP) Connector enables the delivery

of email traffic and threat data directly to your ConnectWise

network performance dashboards.

To utilize the MSP Connector capabilities, you should:

Create a Partner Distribution list for MSP Connector

notifications

Configure your ConnectWise information on the

Configuration screen.

Select the domains needed to push your data to ConnectWise.

Enable Exception Notification if you wish to receive csv. files

reporting data.

In addition, if a customer also uses ConnectWise, you can

configure that customer for MSP Connector.

Configure Message Audit For more information, seeMessage Audit Quick Start Guide,

which is posted on the Partner Portal under Support.

Administrative level Description

Group Administrator The Group Administrator can add and remove members from one

or more groups if assigned to those groups. A Group Administrator

can also create,edit, and modify Email Protection policies for the

assigned groups. A Group Administrator does not need to be a

member of a group in order to have these capabilities.

Note: A GroupAdministrator cannot add or remove a group.

Task Description


8/72



The following figure summarizes the levels of administrators, plus users, in anEmail Protection configuration.

Reports Manager The Reports Manager can view, for an assigned domain, reports

available with Email Protection. The Reports Manager can also

manage his or her own user preferences and all other tasks a user

can perform.

Quarantine Manager The Quarantine Manager, for an assigned domain, can manage the

same areas as a Report Manager, plus manage, for the assigned

domain, all users Quarantine for spam and other problematic

messages, only if Email Protection is enabled.

Domain Administrator The Domain Administrator, for an assigned domain, can manage

the same areas as a Quarantine Manager, plus manage server setup

and authentication rules for the domain.

Customer Administrator The Customer Administrator, for all domains and groups, can

manage the same areas as a Domain Administrator or Group

Administrator, plus manage all user accounts for that customer,

Email Protection policies, create and delete domains and domain

aliases, create and delete groups, and manage additional options, if

enabled, such as Message Audit and Performance Reports. The

Cusotmer Administrator is also the only administrator who can

manage passwords.

A Customer Administratorcannotedit domains.

Partner Administrator The Partner Administrator can manage all aspects of the partners

account. In addition, if given customer management permission and

permission to configure the core products of Email Protection, Web

Protection, and Email Archiving, can manage all aspects of the

customers accounts. Finally, the Partner Administrator can create

and modify downstream Partners who have their own customers.

Administrative level Description


9/72



Recommended Browsers for Control

Console

The Control Console is a Web-based administration tool that provides multiple levels of

security, accessibility, and configurations depending on several standard entities and roles.

See theAccount Management Admin istrator Guide for a list of recommended browsers

for the Control Console.

Administrative Windows Accessible by

Administrators

The following tables list the windows that administrators of each level can access.

Account Management Window Access Privileges

Email Protection Window Access Privileges

Table 1: Account Management Window Access Privileges

WindowAccess Partner/Customer

FeatureEnablement

Required

PartnerAdministrator

C

ustomerAdministrator

DomainAdministrator

QuarantineManager

GroupAdministrator

PartnerTabCreate Partner

Edit Partner

No Yes.

Cannot

enable

Branding

or

applicatio

ns (Email

Protectio

n, Web

Protection, Email

Archivin

g

No No No No

Distribution List No Yes No No No No


10/72



Branding Yes. Branding

type must be

White Label,

Co-branding,

Rebrand, or

Private

Yes Yes No No No

MSP Connector:

Configuration

No Yes No No No No

MSP Connector:

Customers

No Yes No No No No

MSP Connector:

Notification

No Yes No No No No

MSP Connector: Audit

Report

No Yes No No No No

CustomerTabCreate Customer

Edit Customer

Yes. Customer

Administratio

n must beenabled.

Yes No No No No


type must be

White Label,

Co-branding,

Rebrand, or

Private

Yes Yes No No No

Distribution Lists No Yes Yes No No No

MSP Connector:

Configuration

Yes. MSP

Connector

must be

enabled

Yes Yes No No No

MSP Connector: Domains Yes Yes No No No

MSP Connector:

Notification

Yes Yes No No No

MSP Connector: Audit

Report

Yes Yes No No No


FeatureEnablement

Required


CustomerAdministrator

Domain

Administrator

QuarantineManager

Group

Administrator


11/72



Performance Reports Yes.

Performance

Reports must

be enabled

Yes Yes No No No

DomainstabDomain Accounts List None Yes Yes No No No

Create Domain

Delete Domain

Edit Domain Aliases

Yes. DomainAdministratio

n must be

enabled

Yes Yes No No No

Edit Domain No Yes No No No No


and Domain

Administratio

n must be

enabled

Yes Yes Yes No No

Aliases No. Yes Yes Yes.

Users

must

be

given

ability

to set

up

aliases

by

admin

istrato

r.

No No

Preferences No Yes Yes Yes No No

UsersTabUser Accounts No Yes Yes Yes Yes Yes

My Account No Yes Yes Yes Yes Yes


FeatureEnablement

Required



Domain

Administrator

QuarantineManager

Group

Administrator


12/72



My Account: Aliases No Yes Yes Yes Yes Yes

My Account: Change

Group

No Yes Yes No No No

My Account: Preferences No Yes Yes Yes Yes Yes

My Account: Quarantine No Yes Yes Yes Yes Yes

My Account: EmailContinuity

Yes. EmailContinuity

must be

enabled

Yes Yes Yes Yes Yes

My Account: Allow/Deny

Lists

No Yes Yes Yes Yes Yes

My Account: Email

Activity

No Yes Yes Yes Yes Yes

User Details No Yes Yes Yes Yes No

User Details: Group

Administration

User must be a

GroupAdministrator

Yes Yes No No Yes

User Details: Aliases No Yes Yes No No No

User Details: Change

Group

No Yes Yes No No No

User Details: Preferences No Yes Yes No No No

User Details: Quarantine No Yes Yes Yes No No

User Details: Email

Continuity

Yes. Email

Continuitymust be

enabled

Yes Yes Yes Yes No

User Details: Allow/Deny

Lists

No Yes Yes Yes Yes No

User Details: Email

Activity

No Yes Yes No No No


FeatureEnablement

Required



Domain

Administrator

QuarantineManager

Group

Administrator


13/72



Table 2: Email Protection Window Access Privileges

User Details: Web Activity No Yes Yes No No No

Create Users

Edit Users

Delete Users

No Yes Yes No No No

User Synchronization No Yes Yes No No No

User SynchronizationSetup

No Yes Yes No No No

User Authentication No Yes Yes Yes No No

GroupstabGroups : Groups list No Yes Yes No No Yes

Groups: New Group No Yes Yes No No No

Groups: Group Details No Yes Yes No No Yes

Groups: Members No Yes Yes No No Yes

Groups: Administrators No Yes Yes No No Yes

Groups: Email Protection

Policies

No Yes Yes No No Yes

WindowAccess CustomerFeature

EnablementRequired


CustomerAdm

inistrator

DomainAdministrator

QuarantineM

anager

GroupAdmin

istrator

Overview No Yes Yes Yes No No


FeatureEnablement

Required



Domain

Administrator

QuarantineManager

Group

Administrator


14/72



Policies tab

Policy Sets No Yes Yes No No Yes

Anti-virus: Action No Yes Yes No No Yes

Anti-virus: Notifications No Yes Yes No No Yes

Anti-SPAM: Classification No Yes Yes No No Yes

Anti-SPAM: Content Groups No Yes Yes No No Yes

Anti-SPAM: Reporting No Yes Yes No No Yes

Content: Content Groups No Yes Yes No No Yes

Content: Notifications No Yes Yes No No Yes

Content: HTML Shield No Yes Yes No No Yes

Content: Click Protect Yes Yes No No Yes

Attachments: File Types No Yes Yes No No Yes

Attachments: File Name

Policies


Attachments: Additional

Policies


Attachments: Additional

Notifications


Enforced TLS: Actions No Yes Yes No No Yes

Enforced TLS: Notifications No Yes Yes No No Yes

Allow/Deny: Sender Allow No Yes Yes No No Yes

Allow/Deny: Sender Deny No Yes Yes No No Yes

Allow/Deny: Recipient Shield No Yes Yes No No Yes

Notifications: Content No Yes Yes No No Yes

Notifications: Attachment No Yes Yes No No Yes

Group Subscriptions No Yes Yes No No Yes

Disaster Recovery Yes Yes No No No


EnablementRequired



Domain

Administrator

QuarantineManager

Group

Administrator


15/72



Quarantine Tab No Yes Yes Yes Yes Yes

Setup Tab

Inbound Servers Setup No Yes Yes Yes No No

Outbound Servers Setup Yes.

Depending

on your

purchasedpackage, this

service might

need to be

enabled.

Yes Yes Yes No No

Outbound Disclaimer Yes.

Depending

on your

purchased

package, this

service might

need to be

enabled.

Yes Yes Yes No No

Disaster Recovery Setup Yes. Either

FailSafe or

Email

Continuity

must be

enabled or

included in

your

package.

Yes Yes Yes No No

MX Records Setup No Yes Yes Yes No No

User Creation Settings No Yes Yes No No No

Message Audit tab

Message Search Message

Audit must

be enabled or

included in

your package

Yes Yes No No No

Perimeter Block Search Yes Yes No No No

Search History Yes Yes No No No


EnablementRequired



Domain

Administrator

QuarantineManager

Group

Administrator


16/72



Reports tab

Traffic Overview No Yes Yes Yes Yes No

Threats Overview No Yes Yes Yes Yes No

Threats: Viruses No Yes Yes Yes Yes No

Threats: Spam No Yes Yes Yes Yes No

Threats: Content No Yes Yes Yes Yes No

Threats: Attachments No Yes Yes Yes Yes No

ClickProtect: Overview No Yes Yes Yes Yes No

ClickProtect: Click Log No Yes Yes Yes Yes No

Quarantine: Release

Overview

No Yes Yes Yes Yes No

Quarantine: Release Log No Yes Yes Yes Yes No

User Activity No Yes Yes Yes Yes No

Event Log No Yes Yes Yes Yes No

Audit Trail No Yes Yes Yes Yes No

Inbound Server Connections No Yes Yes Yes Yes No

Disaster Recovery: Overview Yes. Either

FailSafe or

Email

Continuity

must be

enabled.

Yes Yes Yes Yes No

Disaster Recovery: Event Log Yes. Either

FailSafe orEmail

Continuity

must be

enabled.

Yes Yes Yes Yes No


EnablementRequired



Domain

Administrator

QuarantineManager

Group

Administrator


17/72



Partner Permissions for Administration

Before you can administer new customers, your partner contract must include the ability

to provision customers within the Control Console and you might be required complete

Partner Certification Training.

Your service provider or your Parent Partner provisions your account and creates a PartnerAdministrator user account, which allows you to provision new customers within the

Control Console.

To perform most tasks described in this document, your partner account must have

permissions for Customer Management. In addition, you must have permission to

administer customers within each of the following product areas:

Email Protection

Email Archiving

Web Protection

A partner without product administration permissions, but with customer management

permissions, can still administer customers, domains, and users. However, such a partner

cannot administer product capabilities for those entities. Instead, fields and links to

windows that are restricted from a partner's administration will be grayed out.

Note: You will have product administration permission for your own company, if your

company uses Email Protection, Web Protection, or Email Archiving.

Note: A customer can have permission for their own administration within product areas,

even if the Partner managing that customer does not have permission.

Partner Hierarchy

A hierarchical relationship between two Partners can exist, with one Partner as a higherlevel Parent Partner and the other Partner considered a downstream partner to that

parent. Normally, this hierarchy represents a business relationship between the two

partners.

A downstream Partner of one Partner can simultaneously be a Parent Partner of another

Partner, if administered as such. In this case, the hierarchy becomes multi-tiered. For

example, if Partner A is identified as Parent of Partner D, and Partner D is identified as

Parent of Partner E, then Partner A is at the top of the hierarchy, Partner D is in the middle,

and Partner E is at the bottom.


18/72



Parent Partner Administration of

Downstream Partners

The Partner Administrator of a Parent Partner can administer a downstream Partner. As a

result, a Parent Partner Administrator can create, view, edit, and delete their downstream

Partner accounts.

A Parent Partner Administrator can access the following windows to administer their

downstream Partners:

Partner Accounts List

Create Partner

Edit Partner

Partner Details

Branding

Distribution Lists

MSP Connector - Configuration, Customers, Notification, and Audit Reports

windows

Note: Though a Parent Partner Administrator can configure branding for a direct Partner,

a Parent Partner Administratorcannotturn on the following options on the Create Partner

or Edit Partner window:

White label

Private Branding

In addition, a Parent Partner cannot enable Customer Management nor enable the

following capabilities:

Email Protection

Email Archiving

Web Protection

Instead, your provider of these services must enable them.

Note: In most cases, a downstream Partner can have permissions to manage its customers,

even if the Parent of that Partner does not. However, if a Parent Partner is not allowed the

following capabilities, downstream partners of that Parent Partner cannot be enabled for

the capabilities either:

Manage Intelligent Routing

Use Message Audit

Delegate Domain Management

Parent Partner Administration of

Customers of Downstream Partners

If you have Customer Management permission and the appropriate permissions for

product administration, and you have downstream Partners who, in turn, have their own

customers, you have the ability to perform almost all of the tasks in this document for the

customers of those downstream partners.


19/72



To administer the customer of a downstream Partner, you can simply select the

downstream Partner first from the Partner accounts list, then select the customer of that

Partner. In addition, on most administration windows, the Customer drop-down menu at

the top of the window lists all customers for whom you have administrative permissions,

which can include your direct customers and those of your downstream partners.

Note: As with any self-provisioning Partner, a Parent Partner cannot administer the

passwords of a customer's users. A Parent Partner also cannot set the branding type of

customers or customer domains. Your service provider must set the branding type for

these entities.

Note: If you are a Partner Administrator of a Parent Partner, but you are not enabled for

Intelligent Routing, Message Audit, or delegating domain management to customers, you

cannot enable downstream partners for these capabilities either.

Ensure the Customer Can Receive Email

from the Service ProviderIf the customer had or still has a different email security or filtering service and their

network is administered so that the customer can receive email only from IP addresses

associated with that security service, the customer must administer their network to allow

incoming email from the Control Console servers. For example, a port in the customers

company firewall may need to be enabled to receive email from the IP addresses of the

Control Console servers.

This enablement is necessary in order for you and the customers users to set the initial

password for access to the Control Console.

Sign into the Control Console

To administer a customer, you must sign into the Control Console with the following

steps:

Note: The first time you sign in, you might need to create your password. If so, see Reset

Your Password from the Sign in Page.

1 Open a browser on your computer and enter the URL for the Control Console.

The URL should be identified in the Service Activation Guide you received from your

provisioner. If you dont have the URL, contact your sales representative or Customer

Support.


20/72



2 At the Control Console Sign in page, enter your email address and password.

3 Click Sign in.

If you have notpreviously entered an answer to a security question, the Security

Question window pops up.

The answer to the security question is used to validate you, the user, if you forget yourpassword.

You can later change your security question and/or security answer on the Preferences

page of your user account. See Set User Display Preferences, Including Your Own

inAccount Management Administrator Guide.

4 Select a security question and type the answer. Your answer is notcase-sensitive.

Note: If you also use the Email Protection, you can also sign into the Control Console

from a Spam Quarantine Report.

Reset Your Password from the Sign inPage

Note: This capability may not be available if the user authentication method is set to

LDAP, POP3, or IMAP or if the ability to change passwords has been disabled at the

system level.

If you forget your password or want to reset it, perform the following steps:


21/72



1 On the Sign in page, click the Forgot your password or need to create a password?

link.

The following window is displayed.

2 In the Username field, type your email address.

3 Select Email password information to me.

4 Click Next.

You will receive an email momentarily with further instructions. Continue with Step

5.

5 Open the email message. The email subject line says Control Console Login

Information.

The email is similar to the following:


22/72



6 Click the link in the email. The link is active for only a limited time after the email is

sent (typically, 60 minutes).

7 If you previously had selected a security question, the security question is displayed.

If you had not previously selected a security question, you will receive an error and

must contact your administrator.

8 Type the answer to the question in the Security Answer field.

9 For the Security Question field, clickChange if you need to change the security

question or answer. You must answer this question when you forget your password or

need to reset it.

The Security Question and Security Answer fields are displayed. Select a question

from the Security Question drop-down menu, then type an answer.


23/72

Partner Quick Start for Email Protection Review the List of Customers


10 In the Password field, type a password.

The password must comply with the following rules:

Length must be a minimum of 8 characters.

Alpha, numeric, and special character types are allowed.

There must be at least one character that differs in character type (alpha, numeric,

or special) from the majority of characters. Thus, if the password contains mostlyalpha characters, then at least one character must be either a special character or

numeric. For example, majordude is invalid, but majordude9 is valid.

Allowed special characters are:

Spaces are not allowed.

Passwords are case-sensitive (for example, Password, password, andPASSword would be different passwords).

Make sure you can remember your password, but do not use obvious passwords (for

example, password, your name, or a family members name). Keep your password

safe and private.

11 Retype your password in the Confirm Password field.

12 ClickSave.

Review the List of Customers

To review the current list of customers, perform the following steps:

1 Click Account Management > Customers.

The Customer Accounts list is displayed.

left parenthesis ( ( ) ampersand ( & ) right bracket ( ] )

right parenthesis ( ) ) asterisk ( * ) colon ( : )

apostrophe ( ) hyphen ( - ) semicolon ( ; )

tilde ( ~ ) plus sign ( + ) double quotes ( " )

exclamation ( ! ) equals sign ( = ) single quotes ( ' )

@ bar ( | ) less than sign ( < )

hash ( # ) backslash ( \ ) greater than sign ( > )

dollar sign ( $ ) left curly bracket ( { ) period ( . )

percentage sign ( % ) right curly bracket ( }) question mark ( ? )

caret ( ) left bracket ( [ )


24/72

Partner Quick Start for Email Protection Create a customer and activate package


The list displays the following information:

Customer Name The customers name.

Partner Name The name of the customers partner is displayed. Date Created The date that this customer was added to the Control Console.

Domains The number of primary domains administered for this customer.

Download a List of Customers

To download the list of customers from the Customer Accounts list, clickDownload.

The Control Console automatically generates a .csv file which you can save or open,

normally using Microsoft Excel.

Create a customer and activatepackage solutions

Note: To perform this task, you must have permissions to manage customers and the

specific applications.

Bundles and Packages

The customer provisioning steps are different, based on the selection of one of thefollowing for Email Protection and similar selections for the Web Protection and Email

Archiving:

Standard Package A collection of features within one of the three product areas:

Email Protection, Web Protection, or Email Archiving

Service Bundle Package A combination of two or three products: Email Protection,

Web Protection, and/or Email Archiving


25/72



Perimeter Defense Package A basic email protections service that the customer

cannot administer

For each product, you select a bundle or package from the drop-down menu.

These bundles and packages are described in Chapter 3. Service Bundles and Packages

Rules for Selecting Bundles and Packages

If you select a bundle for one product, you must select the same bundle for the other

products that are included in that bundle. For example, if you select Bundle 01 -

Complete Security - Multi-Yr for the Email Protection product, you must select

Bundle 01 - Complete Security - Multi-Yr for the Email Archiving and Web

Protection products too, since all products are included in the bundle. If you selectBundle 03 - Email and Web Security for the Email Protection product, you must select

Bundle 03 - Email and Web Security for the Web Protection product too.

If you select a service bundle for Email Protection, you should change the quarantine

period for the customer to 14 days. This is the quarantine period paid for within the

bundle, but if the quarantine period administered is 7 days, the customer will not get

the 14-day period they paid for.

If you select an inbound Email Protection package with Email Continuity, but the

customer does not want an outbound package, you must select Package 62 - Outbound

Email Continuity to allow messages stored in Email Continuity to be filtered.

If you select a service bundle for Email Protection, you must select a corresponding

outbound package, either Outbound Email Continuity if the customer does not wantoutbound filtering, or Full Outbound Upgrade if they do want outbound filtering.


26/72



The following table outlines which Outbound Packages are applicable based on the

Inbound Package Selected.

Steps to Create a Customer

To create a customer, perform the following steps:

1 Click Account Management > Customers > Create.

Applicable Outbound Package

Outbound

EmailContinuity

Full Outbound

Upgrade

Specific

OutboundPackage

Selected

Inbound

Packa

ge

Any ServiceBundle

Yes Yes N/A

UltimateAccess / EmailProtection andContinuity

N/A N/A Yes

Ultimate

Defense /Email Protec-tion

N/A N/A Yes

CriticalDefense /Email InboundFiltering

N/A N/A N/A

EnterpriseDefense withEmail Continu-

ity

Yes N/A Yes

Any Enter-prise Packagewithout EmailContinuity

N/A N/A Yes


27/72



Note: Your company must be certified and have permission to enable your customers for

the specific services listed on this window. If your company is not certified in, and

therefore not able to, turn on certain services, the related fields on this window will not be

available to you.

Field Description

Partner Name Your company's name is displayed.

If you have downstream Partners, this field is a drop-down menu

of those Partners. Select the Partner whose customer you are

creating.


28/72



Customer Type Select the type of customer, normally Enterprise. The other

option, Service Provider, currently requires approval from

McAfee.

Enterprise - Designates that the Customer is able to use

Groups to associate users with user groups, which then canbe associated with policy sets.

Service Provider - Contact McAfee to verify this assignment.

Customer Name Enter the company name of the customer.

Contact Email Enter the email address of the customers technical contact.

Address and Telephone

information

Address and telephone contact information for the customer is

required.

Branding Type Select the type of branding. The branding that a customer

establishes for itself also determines the display of standard

branding for that customer's domains.

Co-brand - Displays the customer's branding attributes alongwith the service providers tagline.

Private - (Available to select only by your service provider.)

Displays the customer's branding attributes, including the

customer's tagline, if defined. Private is the only branding

type that can rename the Control Console. Private is also the

only branding type that does not have the service provider

brand in its URL. This type also allows a tagline to be

defined for display for the domains that use Co-brand

branding.

Rebrand - Displays the customer's branding attributes.

Rebrand does not use a tagline for the customer's account, but

allows a tagline to be defined for display for the customer's

domains who use Co-brand branding.

Standard - Displays the customer's service provider branding

attributes. This is the default branding type.

White Label - (Available to select only by your service

provider.) No branding attributes are displayed. However,

this type allows a tagline to be defined for display for the

domains that use Co-brand branding.

Add and Delete Domains Select this checkbox to allow the customer to add and delete

domains.

MSP Connector Select this checkbox to allow the customer to configure and

manage their Managed Service Platform (MSP) Connector.

Performance Reports Select this checkbox to allow the customer to manage

Performance Reports.

Message Audit Select this checkbox to allow the customer administrator or

domain administrator to search message details and histories

collected by the Message Audit feature.

Optional Fields Select an optional field and clickAdd to have the field appear on

the Edit Customer and Customer Details pages.

Field Description


29/72



Email Protection Settings

Inbound Package Select the package for inbound email security. If you select a

service bundle, you must designate the same bundle for the other

services that are included in that bundle. For example, if you

select Bundle 02, which contains Email Protection and Email

Archiving, then you must select Bundle 02 for Email Archiving.

Outbound Package Select the package for outbound email security. An Inbound

package must be selected before you can select an Outbound

package.

Number of Billed Users Enter the number of billed users of Email Protection. This number

must match the number for Email Archiving and/or Web

Protection, if those services are enabled as part of a bundle.

Quarantine Period From the drop-down menu, select the number of days that

quarantined email stays in quarantine before it gets deleted.

Email Encryption Select the Email Encryption checkbox to allow customers to use

the Encrypt Message action when working with Outbound Policy

Content Groups. Email Encryption may be used when the

customer does not support encryption messages via other systems.

Note: Email Encryption is only available for a selected Outbound

package.

Number of Encryption

Users

Type the number of billed users selected to use the email

encryption action. This number must be equal to or less than the

number of messaging billed users.

Email Archiving Settings

Email Archiving Package From the drop-down list, select the Email Archiving package thecustomer ordered. If you select a service bundle, you must

designate the same bundle for the other services that are included

in that bundle. For example, if you select Bundle 02, which

contains Email Protection and Email Archiving, then you must

select Bundle 02 for Email Protection.

Number of Billed Users Type the number of billed users of Email Archiving. This number

must match the number for Email Protection and/or Web

Protection, if those services are enabled as part of a bundle.

Archive Retention Period In the drop-down lists, define the length of time in years, that

Email Archiving will store messages retrieved directly from the

Exchange Server journal mailbox. The length of time can beeither 1, 3, 5 or 7 years. The months drop-down field is not

available at this time.

Historical Data Storage

Limit

Type the maximum Gigabytes (GB) of storage the customer has

available for messages that have been uploaded in bulk. The

maximum is 250 GB. Storage amounts must be set in 25 GB

increments.

Web Protection Settings

Field Description


30/72

Partner Quick Start for Email Protection Create a Primary Domain


2 Click Save.

Create a Primary Domain

A customer must always be configured for at least one primary domain. A primary domainis the domain used by users primary email address. A primary domain is normally the

domain associated with an SMTP mail server.

Note: If you have any downstream partners, you can also perform this task for the

partners customers.

Note: For Email Protection, a primary domain must be an actual domain within the

customers network.

To create a new domain, perform the following steps:

1 Click Account Management > Domains.

2 If necessary, from the Customer drop-down menu, select the customer whose domain

you are creating. If you have downstream Partners, their customers are also listed.

The Domain Creation window is displayed.

Web Protection Package Select the package for web security. If you select a service bundle,

you must designate the same bundle for the other services that are

included in that bundle. For example, if you select Bundle 03,

which contains Email Protection and Web Protection, then you

must select Bundle 03 for Email Protection.

Number of Billed Users Enter the number of billed users. This number must match the

number for Email Protection and/or Email Archiving, if those

services are enabled as part of a bundle.

Field Description


31/72



3 In the Domain field, type the fully-qualified domain name. This name should be

registered within a DNS server and unique from outside of the company network. In

this example, you type denver.acme.com.

4 In the Contact Email field, type the email address of the customer administrator or

the email address of the domain administrator, if there is one.

5 In the Branding Type field, select the type of branding:

Co-brand - Displays domain's branding attributes along with the service

providers tagline.

Private - (Available to select only by your service provider.) Displays the domain's

branding attributes, including the domain's tagline, if defined. Private is the only

branding type that can rename the Control Console. Private is also the only

branding type that does not have the service provider brand in its URL.

Rebrand - Displays the domain's branding attributes. Rebrand does not use a

tagline for the domain's account.

Standard - Displays the service providers or customer's branding attributes. This

is the default branding type.

White Label - (Available to select only by your service provider.) No branding

attributes are displayed.

6 Select the Message Audit checkbox to allow the customer administrator to search

message details and histories using Message Audit.

7 For the User Alias Management section, click the Allow customer to manage user

aliases checkbox.to allow Customer Administrators to create alias email addresses.

8 In the Set limit to x aliases per user field, type the maximum number of allowed alias

email addresses per user account in this domain.


32/72



9 Select the Allow customer to manage domain aliases checkbox to allow customer

administrators and domain administrators to create alias email addresses for users.

10 ClickSave.

Create a Domain Alias, If NecessaryYour customer also may use domain aliases. For example, acme.org and acme.net might

be domain aliases for your companys acme.com domain so that email mistakenly sent to

addresses using acme.org oracme.net actually are sent to acme.com. You must add these

domain aliases in the Control Console to ensure email to these domains are filtered and

delivered.

1 Click Account Management > Domains.

2 From the Customer drop-down menu, select the customer whose domains you are

creating. If you have downstream Partners, their customers are also listed.

3 On the Domain Management page, click the domain for which you want to add

aliases. In our example, you would clickacme.com.

The Domain Details page is displayed.

4 Click Edit Aliases.

The Domain Aliases page is displayed.


33/72

Partner Quick Start for Email Protection Set up the Customers Inbound Servers


5 Complete the Add field, and clickAdd.

For more information, clickHelp.

Set up the Customers InboundServers

You must configure the customers inbound servers to receive inbound email from Email

Protection for the designated domain. All servers for a domain that receive inbound email

from Email Protection must be configured on the Inbound Servers Setup window.

Any server addresses designated here must be valid and available to connection from

Email Protection. After the Save Changes button is clicked, the Email Protection

immediately routes email to the active servers.

1 Click Email Protection > Setup.

2 If necessary, clickInbound Servers.

The Inbound Servers Setup window is displayed.

3 If necessary, from the Customer drop-down menu, select the customer whose server

you are setting up. If you have downstream Partners, their customers are also listed.


34/72

Partner Quick Start for Email Protection Add IP Address of Outbound Server, If


4 From the Domain drop-down menu, select the domain whose SMTP server you want

to add.

5 Click Add New Host.

A new set of fields appears for the server.

6 In the SMTP Host Address field, type the fully qualified DNS or IP address of the

server host being configured. CIDR notation is not allowed.

If you do not have a registered and valid DNS name for the email servers, you must

enter the IP addresses of each server.

7 In the Port field, type the port on the server to which Email Protection will connect.

The default value is 25.

8 In the Preference field, type the number indicating order of connection preference

between multiple servers. Email Protection attempts to connect first to the server with

the lowest preference number. If that server is not available (either down or too busy),

Email Protection tries the server with the next lowest preference number, and so on. If

multiple servers have the same preference number, Email Protection will randomly

route the email delivery between them.

9 Click the Active checkbox to allow the server is immediately start accepting email

traffic.

Caution: If all servers are set to inactive, all emails received for this Domain will

be tempfailed.

10 ClickSave.

Delete an Inbound ServerTo delete an inbound server, perform the following steps:

1 Access the appropriate domain on the Inbound Server Setup window.

2 Click the Delete checkbox next to the server you want to delete.

3 Click Save.

Add IP Address of Outbound Server, IfNecessary

If the customers service includes Outbound Message filtering, you must identify one or

more outbound mail servers through which the customers users send outgoing mail.

While the outbound server might use a Domain Name Server (DNS) name within the

customers network (for example, lewisoutbound.acme.com), you identify the outbound

sever within Email Protection with an IP address (for example, 111.222.111.0).


35/72



Alternatively, you can specify a Classless Inter-domain Routing (CIDR) address for a

range of outbound servers (for example, 111.222.111.0/27) only. The address mustbe a

public address.

Any server addresses designated here must be valid and available for a connection. After

the Save Changes button is clicked, Email Protection immediately accepts email traffic

from the active servers.

Note: If email is received from an outbound server that is not configured in the Email

Protection system, it will be refused. If no outbound package has been designated for the

selected domain, this window is unavailable.

1 Click Email Protection > Setup> Outbound Servers.

The Outbound Server Setup page is displayed.

2 If necessary, from the Customer drop-down menu, select the customer whose server

you are setting up. If you have client Partners, their customers are also listed.

3 From the Domain drop-down menu, select the domain whose SMTP server you want

to add.

4 Click Add New Address, and add the address of the outbound server.

5 Click Save.

6 Record the address listed underRecommended Smart Host Server Settings. You

should use this address to perform the next task, Have the Customer Set up a Smart Host(If Outbound Mail Protection is Turned on).

Important: The customer should also do the following before or immediately after

adding the outbound server(s):

Update Sender Policy Framework (SPF) records on the customers mail server(s)

to ensure only authorized sources are sending outbound email.

Scan the network for open relays, viruses and malware.


36/72



Refer to the Accepted Use Policy (AUP) at http://www.mxlogic.com/terms/aup/

index.cfm for information on bulk mail.

Delete an Outbound Server

To delete an outbound server, perform the following steps:

1 Access the appropriate domain on the Outbound Server Setup window.

2 Click the Delete checkbox next to the server you want to delete.

3 Click Save.

Have the Customer Set up a Smart Host

(If Outbound Mail Protection is Turned

on)To ensure that the customers outbound email is filtered, the customer must designate, for

each outbound mail server, an Email Protection server as the Smart Host. The customers

outbound email is then relayed through Email Protection before continuing to its final

destinations. See the customers Service Activation Guide for more details.

Note: This task is performed on the customers outbound email server or servers, on the

customers network router, or on some other server, depending on your customers

network configuration.

Have the Customer Redirect the MXRecords

The Mail Exchange (MX) record for each of the customers mail servers is a specification

within a Domain Name Server (DNS Server) operated by the customers Internet Service

Provider (ISP). Each MX record specifies a host name and preference that determines

where and how the customers ISP routes company email.

The customers MX record or records at the ISP must be changed to fully-qualified

domain names (for example, denver.acme.com) within the Email Protection network.

These changes allow Email Protection to filter customer email before it arrives at the

customers mail servers.

The customers Network Administrator or Domain Registrar is typically the individual

responsible for making these changes.

The information necessary for the customer to make these changes is provided in the

customersEmail Protection Activation Guide, which the customer receives when the

customer is first signed up for service.
http://www.mxlogic.com/terms/aup/index.cfmhttp://www.mxlogic.com/terms/aup/index.cfm


37/72

Partner Quick Start for Email Protection Rebrand your interface and that of your


Confirm the Policies for Customer

Domains

Email Protection has default inbound and outbound policies which are automatically

assigned to each of the customers domains after each domain is defined. For many

companies, the default policy filters email effectively and doesnt require changes.However, it is strongly recommended that your customer review the default policy to

make sure the policy meets the customers needs. Information regarding review of the

default policy is included in the following sections of theEmail Protection Quick Start

Guide.

Confirm the Policies for Your Domains

Check Message Quarantine

Review Reports to Check Policies

If the policy does not meet customer needs, you or the customer, if enabled, can customize

the policy. The way in which you customize policies varies, depending on whether the

customer is aservice providercustomer or an enterprise customer.

For information on customizing policies, see Customize Inbound Mail Filters inEmail

Protection Administrator Guide.

Have the Customer Lock Down the

Customer Environment

Five to seven days after the customer has redirected the customers MX record, and after

the customer has verified that email is being filtered and delivered appropriately, the

customer should restrict all IP access to their mail server with the exception of the Email

Protection subnets provided in theirService Activation Guide. This action ensures that nomail is presented to the customers mail server without filtering.

Note: This task is performed on the customers inbound email server or servers or on the

customers network firewall server.

Rebrand your interface and that ofyour customers

You can configure branding settings in the Control Console to provide a look and feel

customized to your company or the customers organization. For example, you can

designate that the default McAfee logo image in the Control Console be replaced with

your organizations logo image. In addition, you can provide a URL with preferred

naming for your company that the customers users can use to access the Control Console.

As a partner, by virtue of rebranding the interface for your company, you automatically

rebrand the interface of your customers and domains ifthey are designated to use standard

branding. See the descriptions that follow.


38/72



Types of branding

You can rebrand your interface on the Control Console if you are enabled for one of the

four types of branding (see item 1 in the accompanying illustrations):

White branding No logos or branding appear in the user interface. However, you

can display and change the following items: Your company host name, which appears when users log in or receive spam

notifications.

The From Email address for SQR Reports

A custom support email address

You can also specify a co-brand tagline for your company. This tagline is displayed

below the customer logo for users of any of your customers or their domains if the

customer or domain is designated for co-branding.

Private branding Your company logo and tagline appears in the user interface. In

addition, you can change the following items:

Your company host name, which appears when users log in or receive spam

notifications.

The site name, which changes Control Console to a name of your choice

The From Email address for SQR Reports A URL from which users can download the Spam Control for Outlook tool.





Co-branding Your company logo appears, along with the parent accounts tagline.

In addition, you can change the following items:


notifications.


39/72





Rebranding Your company logo appears in the user interface without a tagline. In

addition, you can change the following items:


notifications.






Available Branding Attributes

In addition to the logo and tagline, rebranding affects other aspects of the user interface,

depending on the branding type. See the following table. For a definition of attributes, see

Configure Branding at the Partner Level.

Table 3: Attributes of Branding

Customizable

Attribute

Customizable (by Type of Branding)

Standard White Label Private Co-brand Rebrand

Company logo No. Displays

service

provider logo

Removed from

display

Yes Yes Yes


40/72



Company

tagline

No. Displays

service

provider

tagline

Removed from

display

Yes No. Displays

service

provider

tagline

Removed from

display

Co-brand

tagline image

No. Displays

service

provider name

Yes. Applies

only to

customers and

dependent

domains

whose

branding type

is Co-brand.a

Yes. Applies

only to

customers and

dependent

domains

whose

branding type

is Co-brand.a

Yes. Applies

only to

customers and

dependent

domains

whose

branding type

is Co-brand.a

Yes. Applies

only to

customers and

dependent

domains

whose

branding type

is Co-brand.a

Control

Console name

No. Displays

Control

Console orservice

provider name

Removed from

display

Yes No. Displays

Control

Console orservice

provider name

No. Displays

Control

Console orservice

provider name

Privacy Policy No. Displays

McAfee

Privacy Policy

Removed from

display

Removed from

display

No. Displays

McAfee

Privacy Policy

Displays

McAfee

Privacy Policy

Spam Control

for Outlook

URL

No. Displays

service

provider URL

Removed from

display

Yes No. Displays

service

provider URL

No. Displays

service

provider URL

Display News No. Displays

news based on

service

provider

setting

Yes Yes Yes Yes

Support Email No. Displays

service

provider email

Yes Yes Yes Yes

Custom

Hostname

No. Displays

service

provider host

name

Yes Yes Yes Yes

a. If not set, Co-brand domains see logo of service provider.

Customizable

Attribute

Customizable (by Type of Branding)

Standard White Label Private Co-brand Rebrand


41/72



Levels of Branding

Customer branding settings override McAfee or partner branding settings. Domain

branding settings override customer branding settings. If the domain branding settings are

not set, the customer branding settings are used as the defaults. See Rebrand the User

Interface of a Domain.

The following table lists the effect of branding configuration on your account and your

customers and your customers domains.

Branding

Type

Partner Customer Domain

Standard Use settings from McAfee Use settings from McAfee or,

if partner has configured

branding, use partners

branding settings.

Use settings from McAfee or,

if partner or customer has

configured branding, use

branding settings from

partner or customer.

White Label Eliminates logo, tagline, andother branding attributes

from display in partners

account. Eliminates the same

for the partners customers

who have standard branding

and the domains that use

standard branding.

Eliminates logo, tagline, andother branding attributes

from display in customers

account. Eliminates the same

for the customers domains

that use standard branding.

Eliminates logo, tagline, andother branding attributes

from display in domain

interface.

Private Replaces the standard logo,

tagline, and other branding

attributes with the partners

preferred attributes. Becomes

the branding for the partnerscustomers who have standard

branding and the domains


Replaces the standard or

partner-defined logo, tagline,

and other branding attributes

with the customers preferred

attributes. Becomes thebranding for the customers

domains that use standard

branding.

Replaces the standard,

partner-defined, or customer-

defined logo, tagline, and

other branding attributes with

the preferred attributes for thespecific domain.

Co-brand Replaces the standard logo,


with the partners preferred

attributes. Becomes the

branding for the partners

customers who have standard



Continues to use the standardMcAfee tagline.

Replaces the standard or

partner-defined logo and

other branding attributes with

the customers preferred

attributes. Uses the Partner

Co-brand tagline image or

uses the standard McAfee

tagline if the Partner does not

have a Co-brand taglineimage configured



defined logo and other

branding attributes with the

preferred attributes for the

specific domain. Uses the

Customer's or Partner's Co-

brand tagline image or uses

the standard McAfee taglineif both the Customer and the

Partner do not have a Co-

brand tagline image

configured


42/72



Configure Branding at the Partner Level

1 Click Account Management > Partners > Branding.

The Branding Configuration window is displayed. The Branding Type field displays

the type of branding you are enabled for. The Partner field displays your company

name.

2 Skip the Enable Branding checkbox until you have completed the rest of the window.

3 In the Custom Hostname field, type a custom hostname. The custom hostname

changes the name contained within the URL listed in the Spam Quarantine Report and

the URL for access to the Control Console. The custom hostname can be one of the

following:

Your standard service URL that was identified in your service agreement

prepended with your brand name (e.g. acme.console.mcafeesaas.com)

Rebrand Replaces the standard logo,


with the partners preferred

attributes. Does not use atagline, but allows the

assignment of a tagline for

display for customers and

their domains. Becomes the

branding for the partners

customers who have standard



Replaces the standard logo,


with the customers preferred

attributes. Does not use atagline, but allows the

assignment of a tagline for

display for the customers

domains. Becomes the

branding for the customers

domains that use standard

branding.



defined logo and other

branding attributes with thepreferred attributes for the

specific domain. No tagline is

used.

Branding

Type

Partner Customer Domain


43/72



Your brand name that precedes portal orconsole and saascontrol.com (e.g.

acme.console.saascontrol.com). Use ofportal orconsole depends on your

original URL designated in your service agreement.

4 In the From Email field, type the full email address that will be used as the From:

email address when sending Spam Quarantine Reports (if Email Protection is enabled)

and Performance Reports (if enabled). This email address must be valid to support the

user clicking the Reply button in his/her email application. For example, a Customer

Administrator at Acme company might have a support mailbox set up with the email

address [email protected].

5 In the Support Email field, type the full email address that will be used for customer

and/or technical support and as the From: email address for lost password or alias

email address requests. This email address must be valid to support the user clicking

the Reply button in his/her email application. For example, a Customer Administrator

at Acme company might have a support mailbox set up with the email address of

[email protected].

6 (For private branding only) In the Site Name field, type the full name that will appear

as the title in your browser when viewing any of the Control Console windows. Oncethe change is applied, users will see the changed information the next time they sign

into the Control Console. For example, the browser name for Acme Company might

simply be a name like Acme Control Console.

7 (For private branding only) In the Spam Control for Outlook URL field, type the

full URL to the location where the Spam Control For Outlook utility will be

available for download. (Applies to Email Protection only.) This field is used if the

Allow users to download Spam Control For Outlookfield is checked in the Control

Console.

8 Click the Display News checkbox to make the News area appear in the Sign in

window and the Email Protection Overview window in the Control Console.

9 (For private branding, rebranding, and co-branding only) In the Logo Image field, use

the Browse button to select the graphic logo file. Navigate to the location of the

graphic logo file, click to select the file, and click the Open button. The path and

filename appear in the Logo Image field (for example, Acme company might have the

logo ) that will appear in the Control Console windows.

The graphic logo image must be a gif image that is no greater than 190x42 pixels in

size for private or co-brand branding, and no greater than 190x63 pixels for rebrand

branding.

10 (For private branding only) In the Tagline Image field, use the Browse button to

select the graphic logo file. Navigate to the location of the graphic logo file, click to

select the file, and click the Open button.

This graphic is a secondary (tagline) logo that will appear in the Control Console

windows below the graphic designated in the Logo Image field. For example, for a

logo like , the tagline might say Your Brand for Generics. This

tagline would appear for users at your company and for any customers and their

domains who have Standard branding.


44/72

Partner Quick Start for Email Protection Set up a protected user


Note: The graphic tagline image mustbe a gif image that is 190x21 pixels or less in

size.

11 (For Private, White Label, and Rebrand branding only) In the Co-brand Tagline

Image field, use the Browse button to select the graphic logo file. Navigate to the

location of the graphic logo file, click to select the file, and click the Open button.

This graphic is a secondary (tagline) logo that will appear in the Control Consolewindows below the graphic designated in the Logo Image field. For example, the

tagline might say Powered by Acme Corp. This tagline would appear only for any

customers and their domains who have Co-brand branding.

Note: The graphic tagline image mustbe a gif image that is 190x21 pixels or less in

size.

12 Click the Enable Branding checkbox to turn on branding. The Control Console will

use your settings after you clickSave.

13 ClickSave.

Customers and domains who are set to use standard branding see the same interface

changes as you do.

Configure Branding for a Customer

Customers who do not have branding permissions or who use Standard branding see either

branding from McAfee or branding you have established at the partner level. However, if

a customer has been assigned a type of branding other than Standard, you can configure

that customers branding on an individual basis.

To customize branding for a customer, perform the following steps:

1 Click Account Management > Customers.

2 Select a customer.

3 Click Branding.

4 Complete the Branding Configuration window as described in Configure Branding at

the Partner Level.

Note: You can also brand the domains of a customer. For more information, see the

Account Management Administrator Guide.

Set up a protected userA protected user is one that cannot be deleted via bulk or batch processes within the

Control Console. A protected user is normally a Customer Administrator account. In the

event that a batch user upload or automatic synchronization with Active Directory d

McAee SaaS Email Protection-Quickstart.pdf

Documents

Transcript of McAee SaaS Email Protection-Quickstart.pdf