2016年3月17日星期四

VirusScan Enterprise 8.x Access Protection rule blocks outbound SMTP mail on Port 25


VirusScan Enterprise 8.x Access Protection rule blocks outbound SMTP mail on Port 25
技術文章 ID:  KB50707
上次修改:  1/26/2015
已評分:

環境
McAfee VirusScan Enterprise 8.x

For details of VSE 8.x supported environments, see KB51111.
問題
Outbound SMTP email is blocked by VirusScan Enterprise (VSE) 8.x Access Protection rule for Port 25.

Blocked items include:

    Alert and event notifications from McAfee products such as Vulnerability Manager and Network Security Platform.
    Mail from third-party email applications.

    NOTE: This does not include known email clients such as Microsoft Outlook and Lotus Notes.

原因
The VSE 8.x Access Protection feature allows you to block specific ports. Although standard exclusions are set, you must manually revise these rules according to your environment.
解決方案
Manually exclude the process that is being blocked.

NOTE: Ensure you use the exact process name as found in the Access Protection log.

    Click Start, Programs, McAfee, VirusScan Console.
    Right-click Access Protection and select Properties.
    Click the Access Protection tab.
    Under Categories on the left, select Anti-virus Standard Protection.
    In the right pane, select Prevent mass mailing worms from sending mail, then click Edit.
    In the Processes to exclude section, type the process name, then click OK to close the Rule details window.
    Click Apply then close the Access Protection Properties window.

IMPORTANT: Disabling any protection or excluding processes carries inherent risks. Disabling Prevent mass mailing worms from sending email altogether would pose substantial risks to the security of your system(s). Intel Security strongly recommends that you exclude only the minimum number of known and necessary processes.
相關資訊
See also:

    For a list of default exclusions for Port Blocking in VirusScan 8.x, see KB65718. This article also contains a list of processes that can be safely added to the port 25 blocking rule exclusions.
    For an explanation of registry acronyms for VirusScan Enterprise Access Protection rules, see KB72432.
    To review a Whitepaper explaining Access Protection, see PD20870.

ref: https://kc.mcafee.com/corporate/index?page=content&id=KB50707