Backup

This section contains information about Backup and how to use it.

About Backup

Backup is designed to store copies of messages which Kaspersky Secure Mail Gateway saves during processing. Copies of messages are stored in Backup in unreadable format and therefore do not compromise your computer's security.

Kaspersky Secure Mail Gateway places copies of the following messages in Backup:

• Messages to which the Anti-Virus engine assigned one of the following status labels: Infected, Probably infected, Corrupted, or Encrypted and before one of the following actions is taken on it: Disinfect, Delete attachment, or Delete message;
• Messages to which the Anti-Spam engine assigned one of the following status labels: Spam, Probable spam, Blacklisted, or Massmail and before the Delete message action was taken on it;
• Messages to which the Anti-Phishing engine assigned one of the following status labels: Phishing or Malicious link and before the Delete message action was taken on it;
• Messages to which one of the following status labels was assigned after content filtering: Banned File Name or Banned File Format and before the Delete attachment or Delete message action was performed on it, and also messages assigned Size Exceeded status and before the Delete message action was taken on them;
• Messages whose senders' addresses have been detected in a custom black list of addresses and before the Delete message action was taken on them.

Copies of messages are placed in Backup together with attachments.

The default maximum Backup space is 7.32 GB. As soon as this threshold value is exceeded, the application starts to remove the oldest copies of messages from Backup. When the amount of occupied space is again below the threshold value, the application stops removing copies of messages from Backup.

Finding message copies in Backup

To find message copies in Backup:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the workspace, click any link under the Deliver, View, Delete, and Save buttons to open the Search filter window.
3. In the From field, enter the text for searching email addresses of message senders.

   You can enter an email address (for example: example-email@example.com), domain name (for example: example.com) or several symbols from the email address (for example: exa).

4. In the To field, enter the text for searching email addresses of message recipients.
5. In the Subject field, enter the text for searching for message headers.
6. In the Message-ID field, enter the text for searching for the message ID on the mail server.
7. In the Rule ID list, select the ID of the rule according to which messages were processed.
8. In the Period list, select the period that has elapsed since the time when messages were processed and had their copies moved to Backup.

   You can choose one of the following periods:

   • Hour.
   • Day.
   • Week.
   • 2 weeks.
   • Month.
   • 3 months.
   • Year.
   • Custom.
9. If you choose the Custom period, do the following:
   1. In the starting from field, specify the search period start date and time.
   2. In the ending with field, specify the search period end date and time.
10. In the Scan type group of settings, select check boxes next to the names of Kaspersky Secure Mail Gateway engines based on whose verdicts messages were moved to Backup.

    You can select one or several scan engines:

    • Anti-Spam.
    • Anti-Virus.
    • Content filtering.
    • Anti-Phishing.
    • Custom black list of addresses.
11. In the Message size (KB) group of settings, set a limit on message size in kilobytes.

    You can set one of the following limits:

    • Less than or equal to a certain message size in kilobytes
    • Greater than or equal to a certain message size in kilobytes
12. Click OK.

Copies of messages that match the search parameters are displayed in the list of message copies in the Backup section.

Viewing message copies in Backup

To view a message copy in Backup:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace do one of the following:
   • In the line with the details of the message that you want to view, click any of the following links: From, To, or Subject.
   • In the line with the details of the message that you want to view, select the check box and click the View button.

   A message copy containing the following message information opens:

   • Subject.
   • Processing rule.
   • From.
   • To.
   • Cc.
   • Bcc.
   • Scan Results with the list of the scan engines: Anti-Spam, Anti-Virus, Content filtering, and Anti-Phishing.
   • Backup Reason.
   • Blacklisted by user.
   • Whitelisted by user.
   • Time placed in Backup.
   • MTA-Message-ID.
   • Message size.
   • Time sent.
   • Time received.
   • Attachments.
   • Anti-Virus databases release date.
3. To return to the list of message copies in Backup, click the To messages list button in the upper part of the workspace.

Delivering messages from Backup to recipients

If you consider a message in Backup to be safe, you can deliver the message from Backup to the recipients.

You can deliver a message from Backup after previewing it or by selecting messages that you want to deliver in the list of message copies in Backup (one or several messages).

Delivering infected and probably infected messages can pose a security threat to computers of users.

Before delivering an infected message to a recipient, make sure that delivery of infected messages is allowed in Backup settings.

To deliver a message from Backup after previewing it:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace do one of the following:
   • In the line with the details of the message that you want to view, click any of the following links: From, To, or Subject.
   • In the line with the details of the message that you want to view, select the check box and click the View button.

   The message copy opens.

3. Click the Deliver button in the upper part of the workspace.

   The Deliver message window opens.

4. Select the check box next to the name of the To recipients' email addresses specified in the message header setting if you want to deliver the message to email addresses of recipients to whom this message was intended.
5. Select the check box next to the name of the To additional email addresses setting if you want to deliver the message to additional email addresses.
6. If you have chosen to deliver messages to additional email addresses, in the field under the name of the To additional email addresses setting, enter the email addresses to which you want to deliver the message.
7. Click OK.

   The Deliver message window closes.

   The message is placed in the delivery queue.

8. To return to the list of message copies in Backup, click the To messages list button in the upper part of the workspace.

   The Message has been placed in queue for delivery message appears in the list of message copies in Backup.

9. To hide the Message has been placed in queue for delivery message, click the Hide link in the right part of the line with the message.

To deliver one or several messages from Backup without previewing them:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace select check boxes in the lines with the details of messages that you want to deliver.
3. Click the Deliver button in the upper part of the workspace.

   The Deliver message window opens.

4. Select the check box next to the name of the To recipients' email addresses specified in the message header setting if you want to deliver the messages to email addresses of recipients to whom these messages were intended.
5. Select the check box next to the name of the To additional email addresses setting if you want to deliver the messages to additional email addresses.
6. If you have chosen to deliver messages to additional email addresses, in the field under the name of the To additional email addresses setting, enter the email addresses to which you want to deliver the messages.
7. Click OK.

   The Deliver message window closes.

   The messages are placed in the delivery queue.

   The Messages have been placed in queue for delivery message appears in the list of message copies in Backup.

8. To hide the Messages have been placed in queue for delivery message, click the Hide link in the right part of the line with the message.

Saving messages from Backup to file

If you consider a message in Backup to be safe, you can save it to file on the hard drive.

You can save a message from Backup after previewing it or by selecting the message that you want to save in the list of message copies in Backup.

Saving infected and probably infected messages on the hard drive poses a security threat to your computer.

To save a message from Backup after previewing it:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace do one of the following:
   • In the line with the details of the message that you want to view, click any of the following links: From, To, or Subject.
   • In the line with the details of the message that you want to view, select the check box and click the View button.

   The message copy opens.

3. Click the Save button in the upper part of the workspace.

   The message is saved on the hard drive of your computer in the folder specified as the destination folder for downloading files from the Internet in the settings of the web browser that you use to manage Kaspersky Secure Mail Gateway.

   For example, if you are using the Microsoft Windows operating system and the Downloads folder is specified as the destination folder for downloading files from the Internet, the message is saved in the Downloads folder on the hard drive of your computer.

4. To return to the list of message copies in Backup, click the To messages list button in the upper part of the workspace.

To save a message from Backup without previewing it:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace select check boxes in the line with the details of the message that you want to save.
3. Click the Save button in the upper part of the workspace.

   The message is saved on the hard drive of your computer in the folder specified as the destination folder for downloading files from the Internet in the settings of the web browser that you use to manage Kaspersky Secure Mail Gateway.

   For example, if you are using the Microsoft Windows operating system and the Downloads folder is specified as the destination folder for downloading files from the Internet, the message is saved in the Downloads folder on the hard drive of your computer.

Deleting a message copy from Backup

You can delete a message copy from Backup after previewing it or by selecting messages that you want to delete in the list of message copies in Backup (one or several messages).

To delete a message copy from Backup after previewing it:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace do one of the following:
   • In the line with the details of the message that you want to view, click any of the following links: From, To, or Subject.
   • In the line with the details of the message that you want to view, select the check box and click the View button.

   The message copy opens.

3. Click the Delete button in the upper part of the workspace.
4. The Delete message(s) window opens.
5. Click the Delete button in the Delete message(s) window.

   A copy of the message is deleted from Backup.

6. To return to the list of message copies in Backup, click the To messages list button in the upper part of the workspace.

   The Marked message has been deleted message appears in the list of message copies in Backup.

7. To hide the Marked message has been deleted message, click the Hide link in the right part of the line with the message.

To delete one or several messages from Backup without previewing them:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. In the list of message copies in Backup, in the lower part of the workspace select check boxes in the lines with the details of messages that you want to delete.
3. Click the Delete button in the upper part of the workspace.
4. The Delete message(s) window opens.
5. Click the Delete button in the Delete message(s) window.

   The message copies are deleted from Backup.

   The Marked messages have been deleted message appears in the list of message copies in Backup.

6. To hide the Marked messages have been deleted message, click the Hide link in the right part of the line with the message.

Configuring Backup settings

To configure Backup settings:

1. In the main window of the application web interface, open the management console tree and select the Backup section.
2. Click any link to open the Backup settings window.
3. In the Backup maximum size field, specify the maximum hard drive space that can be taken up by Backup.

   A value of 100 MB or greater is recommended.

4. In the Free space threshold to notify about field, specify the amount of Backup free space that, when left, causes the application to send a notification to the administrator of Kaspersky Secure Mail Gateway.
5. In the Allow delivery of infected messages list, select one of the following options:
   • Yes, if you want to allow delivery of infected messages from Backup to recipients.
   • No, if you do not want to allow delivery of infected messages from Backup to recipients.
6. In the Actions to take on messages if Backup is unavailable list, select one of the following options:
   • Process messages, if you want the application to continue processing messages regardless of whether or not Backup is available.
   • Temporary fail, if you want the application to send a notification that Backup is temporarily unavailable.
   • Reject messages, if you want the application to reject messages when Backup is unavailable.
7. Click OK.

   The Backup settings window closes.