upgrading to mailmarshal smtp version 6€¦ · smtp array manager to another computer and repeat...

Contents

Introduction ................................ 3

Case 1: Standalone MailMarshal SMTP Server ....... 3

Case 2: Array of MailMarshal SMTP Servers ........................... 14

Additional Resources................ 38

Upgrading to MailMarshal Version 6.0 SMTP Technical Reference April 19, 2005

This document describes the process required to upgrade from MailMarshal version 5.x SMTP to MailMarshal version 6.0 SMTP in two typical environments:

• Standalone MailMarshal version 5.x SMTP email processing server

• Array of MailMarshal version 5.x SMTP email processing servers

If you are upgrading to an array of MailMarshal version 6.0 SMTP email processing servers, additional steps may be required.

The process described in this technical reference helps you meet the following product upgrade and data migration objectives:

• Upgrade the product to MailMarshal version 6.0 SMTP

• Migrate your MailMarshal version 5.x SMTP data to MailMarshal version 6.0 SMTP

• In an array scenario, move your MailMarshal version 6.0 SMTP Array Manager to another computer and repeat the product upgrade and migration process on additional nodes

This document cannot be a definitive guide to all possible environments. For best results, use the information in this document along with specific knowledge of your environment to plan your MailMarshal SMTP product upgrade and data migration.

For more information, see “Additional Resources” on page 38 or contact NetIQ Technical Support at www.netiq.com/support.

THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU.

This document and the software described in this document may not be lent, sold, or given away without the prior written permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non-disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data.

This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time.

© 1995-2005 NetIQ Corporation, all rights reserved.

U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4 (for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government’s rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the license agreement.

Check Point, FireWall-1, and Provider-1 are trademarks or registered trademarks of Check Point Software Technologies Ltd.

ActiveAgent, ActiveAnalytics, ActiveAudit, ActiveKnowledge, ActiveReporting, ADcheck, AppAnalyzer, Application Scanner, AppManager, AuditTrack, AutoSync, Chariot, ClusterTrends, CommerceTrends, Configuration Assessor, ConfigurationManager, the cube logo design, DBTrends, DiagnosticManager, Directory and Resource Administrator, Directory Security Administrator, Domain Migration Administrator, End2End, Exchange Administrator, Exchange Migrator, Extended Management Pack, FastTrends, File Security Administrator, Firewall Appliance Analyzer, Firewall Reporting Center, Firewall Suite, Ganymede, the Ganymede logo, Ganymede Software, Group Policy Administrator, Intergreat, Knowledge Scripts, Migrate.Monitor.Manage, Mission Critical Software, Mission Critical Software for E-Business, the Mission Critical Software logo, MP3check, NetIQ, the NetIQ logo, the NetIQ Partner Network design, NetWare Migrator, OnePoint, the OnePoint logo, Operations Manager, PentaSafe, PSAudit, PSDetect, PSPasswordManager, PSSecure, Qcheck, RecoveryManager, Security Analyzer, Security Manager, Server Consolidator, SQLcheck, VigilEnt, Visitor Mean Business, Vivinet, W logo, WebTrends, WebTrends Analysis Suite, WebTrends for Content Management Systems, WebTrends Intelligence Suite, WebTrends Live, WebTrends Log Analyzer, WebTrends Network, WebTrends OLAP Manager, WebTrends Report Designer, WebTrends Reporting Center, WebTrends Warehouse, Work Smarter, WWWorld, and XMP are trademarks or registered trademarks of NetIQ Corporation or its subsidiaries in the United States and other jurisdictions. All other company and product names mentioned are used only for identification purposes and may be trademarks or registered trademarks of their respective companies.

Upgrading to MailMarshal Version 6.0 SMTP 3

Introduction

This document guides you through the process of upgrading from MailMarshal version 5.x SMTP to MailMarshal version 6.0 SMTP. To complete the product upgrade and data migration processes, you may have to complete a number of steps on various computers in your existing MailMarshal SMTP installation.

This document presents the following typical MailMarshal SMTP configurations and the steps required to upgrade each to MailMarshal version 6.0 SMTP:

• Case 1: A standalone MailMarshal version 5.x SMTP email processing server. For more information, see “Case 1: Standalone MailMarshal SMTP Server” on page 3.

• Case 2: An array of MailMarshal version 5.x SMTP email processing servers in a DMZ. For more information see “Case 2: Array of MailMarshal SMTP Servers” on page 14.

Note: If you are using Microsoft Desktop Engine (MSDE) as your database, references in this document to Microsoft SQL Server (SQL) also apply to MSDE.

Case 1: Standalone MailMarshal SMTP Server

If your current MailMarshal SMTP version 5.x installation uses an array of MailMarshal email processing servers in a Demilitarized Zone (DMZ), skip to “Case 2: Array of MailMarshal SMTP Servers,” starting on page 14.

If your current MailMarshal SMTP version 5.x installation uses a standalone MailMarshal email processing server, continue with the following the steps.

Standalone: Before and After the Upgrade to MailMarshal Version 6.0 SMTP

The following figure illustrates a typical MailMarshal version 5.x SMTP configuration using a standalone email processing server.

4 Technical Reference

Frequently, the MailMarshal s SMTP erver also hosts the MS SQL Server and acts as internal email server. There may or may not be a DMZ in this configuration.

The following figure shows the minor configuration changes that occur when you upgrade a standalone MailMarshal version 5.x SMTP server. The primary change is that the MailMarshal SMTP server now also hosts the MailMarshal SMTP Array Manager.

In the upgraded configuration, you can add additional email processing servers to MailMarshal SMTP to create an array of email processing servers, called nodes. The upgrade also creates a new MailMarshal version 6.0 SMTP database. Using MailMarshal version 6.0 SMTP, you can also offer end users the Web-based Spam Quarantine Management tool if you deploy Microsoft Internet Information Services (IIS).

Standalone: Product Upgrade and Data Migration Process Checklist

The following checklist identifies the steps required to upgrade a standalone MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP Array Manager and migrate data from your MailMarshal version 5.x SMTP database. The checklist also provides cross-references to detailed instructions for each step. Complete the steps in the following order.

Standalone Upgrade Procedure Checklist

1. Back up important MailMarshal SMTP configuration and database files. For more information, see “Standalone Step 1: Back Up Important MailMarshal SMTP Data” on page 5.

2. Upgrade the standalone MailMarshal version 5.x SMTP Master to MailMarshal version 6.0 SMTP. For more information, see “Standalone Step 2: Upgrading to a MailMarshal Version 6.0 SMTP Array Manager” on page 6.

3. Run the MailMarshal SMTP Migration Wizard to migrate your database records and quarantined email, archive, and log files. For more information, see “Standalone Step 3: Migrating Your Data to MailMarshal Version 6.0 SMTP” on page 10.


Standalone Step 1: Back Up Important MailMarshal SMTP Data

The first step in the upgrade process is to back up important MailMarshal version 5.x SMTP database and configuration data files. The following table lists the files to back up and refers you to additional information.

File Name or Extension

Typical Location Description

*.mmr MailMarshal version 5.0 SMTP server

MailMarshal version 5.x SMTP configuration information. For more information, see “Backing Up the MailMarshal SMTP Configuration” on page 5.

filetype.cfg

*.xml

usergroups.txt

install path install path\config

install path\config

Additional MailMarshal SMTP configuration data, SpamCensor extended rules, and your MailMarshal SMTP user group definitions. For more information, see “Back Up Custom Information” on page 6.

MailMarshal version 5.x database

MS SQL Server computer Microsoft SQL Server (SQL) database. For more information, see NetIQKB29284 at www.netiq.com/support.

Quarantined and archived email which is migrated from MailMarshal version 5.x SMTP to MailMarshal version 6.x SMTP will be unavailable in a MailMarshal version 5.x SMTP Console. If you wish to retain access to this email with a MailMarshal version 5.5 SMTP Console you can back up the contents of your \Rulesets folder. The contents of the \Rulesets folders can be very large depending on your volume of email and your retention period.

Backing Up the MailMarshal SMTP Configuration Back up your MailMarshal version 5.x SMTP configuration before you upgrade to MailMarshal version 6.0 SMTP. It is important to preserve your MailMarshal version 5.x SMTP configuration, however the configuration cannot be imported to MailMarshal version 6.0 SMTP.

To back up the MailMarshal version 5.x SMTP configuration files:

1. Start the MailMarshal version 5.x SMTP Configurator on the MailMarshal SMTP Master email processing server.

2. On the Tools menu, click Server Properties.

3. On the Server Properties window, select the General tab.

4. Click Export.

5. Specify a storage location and file name, and then click Save.

6. Click OK.


Back Up Custom Information When you configure MailMarshal SMTP to enforce your email policies, MailMarshal SMTP stores your custom settings in a number of files. Use standard Windows techniques to back up the following files.

Filename and extension

Typical file location

Description

filetype.cfg install path Additional MailMarshal SMTP configuration data you have customized

*.xml install path\config SpamCensor extended rules

usergroups.txt install path\config Your MailMarshal SMTP user group definitions

For example, if you installed MailMarshal SMTP in the default location, \Program Files\NetIQ\MailMarshal, back up the files specified in the table from the following folders: \Program Files\NetIQ\MailMarshal

\Program Files\NetIQ\MailMarshal\config

Back Up the MailMarshal SMTP Database Use standard SQL Server backup techniques to store a safe copy of your MailMarshal version 5.x SMTP database. The Migration Wizard later migrate the information so you can access your data using MailMarshal version 6.0 SMTP. For more information about backing up a MailMarshal version 5.x SMTP database, see NetIQ Knowledge Base article NetIQKB29284 at www.netiq.com\support.

Standalone Step 2: Upgrading to a MailMarshal Version 6.0 SMTP Array Manager

The following steps upgrade your MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP server and Array Manager. During this step, you will run the MailMarshal version 6.0 SMTP setup program on your existing MailMarshal version 5.x SMTP server using the default settings.

The upgrade process leaves your MailMarshal version 5.x SMTP database in place, creates a new MailMarshal version 6.0 database, and installs the MailMarshal version 6.0 SMTP Array Manager component.

When the setup program is complete, run the MailMarshal version 6.0 SMTP Configurator to reload your MailMarshal version 5.x SMTP rules. Finish Step 2 by making a backup copy of your new MailMarshal SMTP configuration file.

To upgrade your MailMarshal version 5.x SMTP server to MailMarshal version 6.0 SMTP:

1. If you are upgrading MailMarshal within a DMZ, you may need to temporarily open port 1433 (SQL Server port) to allow communication with a SQL Server in your trusted network. For more information, refer to the documentation for your firewall or other perimeter defense tools.

2. If you are using MSDE and hosting it on a Microsoft Small Business Server (SBS), install MSDE 2000 on the server before you continue. For more information, see NetIQKB45716 at www.netiq.com/support.

3. On the MailMarshal version 5.x SMTP server, run the MailMarshal version 6.0 SMTP setup program from the CD or Web download.


4. On the autorun window, click Begin Server Setup.

5. Read the Welcome window, and then click Next.

6. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement, and then click Next.

7. On the Upgrade Type window, shown in the following figure, click I want to install a full version of MailMarshal on this server, and then click Next. This option upgrades the MailMarshal version 5.x server to a MailMarshal version 6.0 SMTP Array Manager.

8. If you are using an existing MailMarshal installation that includes a database, on the SQL Server Options window, shown in the following figure, click I want to use an existing installation of SQL Server 2000 or MSDE 2000. Click Next.

If your existing MailMarshal SMTP configuration does not include a database, you can click I want to install and use the Microsoft SQL Desktop Engine (MSDE). If your company needs multiple MailMarshal SMTP servers to handle your email volume, use Microsoft SQL Server rather than MSDE.


9. On the Folder Locations window, shown in the following figure, specify the current location of your MailMarshal version 5.x SMTP folders. By default, the setup program creates the new folders in \Program Files\NetIQ\MailMarshal.

If you want to install MailMarshal on a different drive, click Customize. When you have completed specifying a new location, and return to this window, click Next.


10. On the Database window, specify the connection details for the new MailMarshal version 6.0 SMTP database, and then click Next.

Note: Do not specify your current MailMarshal version 5.x SMTP database. Specify the MS SQL Server computer name or IP address, a name for the new MailMarshal version 6.0 SMTP database, and the MS SQL Server or Windows credentials to access the database.

11. On the Ready to Install the Program window, click Install.

12. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service so the setup program can continue.

13. On the License window, make a note of the new license number the setup program generates for you. You may need the new License Key to reinstall MailMarshal on this computer at a later time. Click OK.

14. When the setup program is complete, ensure Launch Configurator is selected, and then click Finish.

15. Select the Server and Array Configuration node in the left pane and then, click Tools > Commit Configuration Changes.

16. In the right pane, right-click the current computer and click Properties.

17. On the General tab of the Properties window, click Restart All to restart all MailMarshal SMTP services, and then click OK. The MailMarshal version 5.x SMTP server is now upgraded to the MailMarshal version 6.0 SMTP Array Manager with the new MailMarshal version 6.0 SMTP database.

18. On the Tools menu, click MailMarshal Properties.


19. On the MailMarshal Manager Properties window, click Backup.

20. Specify a backup location and file name. MailMarshal SMTP stores your upgraded configuration in MailMarshal version 6.0 SMTP XML format. Click Save.

21. Click OK to close the Properties window.

Standalone Step 3: Migrating Your Data to MailMarshal Version 6.0 SMTP

MailMarshal version 6.0 SMTP introduces changes that affect the MailMarshal SMTP SQL database schema, the MailMarshal SMTP folder structure, and some MailMarshal SMTP ile naming conventions. In this step of the upgrade process, you will download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard, from the NetIQ product upgrade download page at www.netiq.com.

Note: It is important to download the updated Migration Wizard tool. The MM60Update01.exe version of the Migration Wizard supersedes the version of the tool delivered with the MailMarshal version 6.0 SMTP product.

The last part of Step 3 is to run the MailMarshal SMTP Migration Tool from the Windows Start menu to migrate the MailMarshal version 5.x SMTP email history database records and the quarantined and archived email and associated log files to the new MailMarshal version 6.0 SMTP database and folder structure. Until you migrate your quarantined and archived email and associated log files, you cannot view or manage the quarantined email using the MailMarshal SMTP Console.

The following sections provide details instructions for completing these steps.

http://www.netiq.com/


Folder and Filename Changes MailMarshal version 6.0 SMTP revises the folder structure and file naming conventions to support the new features and functions of the product.

Folder Structure Remapping The following table shows how the MailMarshal version 5.x SMTP folders correspond to folders in MailMarshal version 6.0 SMTP. The table uses the default installation location, \Program Files\NetIQ\MailMarshal.

MailMarshal version 5.x SMTP Folders

MailMarshal version 6.x SMTP Folders

\MailMarshal\MMExp \MailMarshal \Unpacking

\MailMarshal \Logging (no SQL logging)

\MailMarshal \Logging \DBLog

\ManagerDBLog (new folders now include database activity logs)

\MailMarshal

\Decryption

\Encryption

\Incoming

\Processed OK

\Sending

\MailMarshal \Queues

\Decryption

\Encryption

\Incoming

\Processed OK

\Sending

\MailMarshal

\Deadletter

N/A

\Rulesets

\Rulesets subfolders

\ValidFingerprints

\MailMarshal \Quarantine

\Deadletter

\GUID (one per each Rulesets subfolder)

\Symbolic

\Rulesets subfolders

\ValidFingerprints

The MailMarshal SMTP setup program duplicates your MailMarshal version 5.x SMTP and earlier \Rulesets folder structure in the new \Quarantine\Symbolic folder, copies the \Rulesets folder structure, and copies all folder data to the new structure. When the setup program is complete, however, MailMarshal version 6.0 SMTP annot yet recognize the MailMarshal version 5.x SMTP filenames.

File Naming Changes Because MailMarshal version 6.0 SMTP introduces multi-node arrays, MailMarshal version 6.0 SMTP changed the quarantine and archive email and associated log file naming conventions. The Migration Wizard renames the files as it migrates your MailMarshal version 5.x SMTP data to the new folder structure.


The following table shows the file naming convention changes in MailMarshal version 6.0 SMTP. The new naming convention uses four digits before the extensions *.mml and *.log to indicate which MailMarshal version 6.0 SMTP server quarantines the message.

MailMarshal version 5.x SMTP Filenames MailMarshal version 6.0 SMTP Filenames

B000000010.00000010.mml B41e5befe000.000000000002.0001.mml

B000000010.00000010.log B41e5befe000.000000000002.0001.log

Downloading and Installing the Update After you have upgraded your MailMarshal version 5.x SMTP server to a MailMarshal version 6.0 SMTP Array Manager, download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard. This update supersedes the Quarantine Upgrade Tool originally supplied with MailMarshal version 6.0 SMTP.

In addition to the wizard, the update provides additional files, such as the MM60Update01_ReadMe.txt file and an updated MailMarshal SMTP Help file.

To download and install MM60Update01.exeMM60Update01.exeMM60Update01.exeMM60Update01.exe:

1. Download MM60Update01.exe from the Product Download page. You must use your MyNetIQ account as a customer with current maintenance to download this updated file. The update is available at the following location: http://www.netiq.com/support/mmas/extended/upgrade.asp

2. Follow the instructions on the download page to download the MM60Update01.exe file.

3. On the upgraded MailMarshal version 6.0 SMTP server, run MM60Update01.exe to install the Migration Wizard.

Running the MailMarshal SMTP Migration Wizard Run the MailMarshal SMTP Migration Wizard only after you have upgraded your standalone MailMarshal version 5.x SMTP email processing server to MailMarshal version 6.0 SMTP. Use the MailMarshal Migration Wizard to complete the following tasks:

• Migrate MailMarshal version 5.x SMTP email history database records to the new MailMarshal version 6.0 database

• Migrate your MailMarshal version 5.x SMTP quarantined and archived email and associated log files in the \Rulesets folder to the MailMarshal SMTP Array Manager \Quarantine folder

Note: To ensure upgraded messages are logged with the correct timestamp, ensure the MS SQL Server hosting the new MailMarshal version 6.0 SMTP database and the upgraded MailMarshal version 6.0 SMTP Array Manager are in the same time zone. The wizard converts the internal representation of times from local time to UTC.

The migration process can take a long time (hours or days), depending on the volume of database records and file data. MailMarshal continues to process new email messages while the wizard is running.


To run the MailMarshal SMTP Migration Wizard:

1. To start the Upgrade and Migration Wizard, click Start > Programs > NetIQ MailMarshal > MailMarshal Tools >MailMarshal Migration Tool.


3. Click Migrate both the email history database records and the quarantined and archived email and associated log files and then click OK.

If you need to stage the upgrade and migration process due to time or other constraints, you can click Migrate only the email history database records and run the wizard again later to migrate the quarantined and archived email and associated log files.

4. If the MailMarshal version 5.x SMTP database connection information is not stored in the MailMarshal version 6.0 SMTP Configuration file, the wizard displays the Select Database window. Specify the MailMarshal version 5.x SMTP database location and credentials, and then click OK.

5. Select Automatic mapping and click Next. This option is available only after upgrading to MailMarshal version 6.0 SMTP.

6. Click Start to begin the data migration process.

7. The Status window displays the wizard progress. The wizard starts by migrating the email history database records and then continues by migrating the quarantined and archived email and associated log files.

8. The import process can take a long time (hours or days) depending on the volume of data. If you need to interrupt the process, click Stop. You can rerun the wizard later without losing data to complete the migration.

Note: If the wizard encounters a message it cannot convert, you can choose to abort, retry, ignore the message, or ignore all problem messages. By choosing to ignore all problem messages, you can allow the wizard to run unattended. The wizard logs activity in Installation path\Logging\migration.log file. Review the migration log text file to identify any messages the Migration Wizard cannot convert.

9. When the Status window indicates the data migration is complete, click Next.

10. The Finished window displays a summary of the migration. Click Finish to close the wizard.

If you have interrupted the Migration Wizard before the data migration is complete, you can run the Wizard again at a later time to complete the process without losing data. Be sure to check the status in the migration.log file to identify and handle any unmigrated data.

For more information about configuring and using your upgraded MailMarshal version 6.0 SMTP product, see the User Guide for MailMarshal Version 6.0 SMTP.


Case 2: Array of MailMarshal SMTP Servers

If your current MailMarshal version 5.x SMTP installation uses a standalone MailMarshal email processing server, return to “Case 1: Standalone MailMarshal SMTP Server,” starting on page 3.

If your current MailMarshal version 5.x SMTP installation uses an array of MailMarshal email processing servers in the DMZ, continue with following the steps.

Array: Existing MailMarshal Version 5.x SMTP Configuration

The following figure illustrates a typical MailMarshal version 5.x SMTP configuration using multiple email processing servers inside the DMZ, labeled MM1, MM2, and MM3.

To complete an upgrade to MailMarshal version 6.0 SMTP, you must upgrade one email server to the MailMarshal version 6.0 SMTP Array Manager, and then upgrade the additional MailMarshal version 5.x SMTP email processing servers to MailMarshal version 6.0 SMTP. You must also migrate data on each upgraded server.

In this MailMarshal version 5.x SMTP configuration, you normally run the MailMarshal Configurator by logging on to the Master email processing server (MM1) inside the DMZ. However, other email administrators are able to run the MailMarshal SMTP Management Console from a computer in the trusted network.

In the scenario shown in the previous figure, the following ports are typically open between the DMZ and trusted network.

Port Owner Description

25 SMTP Email traffic

389 LDAP LDAP connectivity to your directory server

1433 MS SQL MS SQL logging

19001 MailMarshal MailMarshal SMTP Management Console


Array: Configuration After Upgrading to MailMarshal Version 6.0 SMTP

When the upgrade to MailMarshal version 6.0 SMTP is complete, your environment should be similar to the following figure. The new configuration still has email processing servers, called nodes, inside the DMZ (MM1, MM2, and MM3). However, a new component, the MailMarshal SMTP Array Manager (labeled MM4), is moved to the trusted network. The detailed steps refer you to the proper computers using the MM1, MM2, MM3, and MM4 notation.

If you want to provide MailMarshal SMTP end users with the MailMarshal SMTP Spam Quarantine Management tool, you can deploy Microsoft Internet Information Server (IIS). The Spam Quarantine Management tool allows end users to review their quarantined email and to specify a personal email address blacklist and whitelist.

You can install the MailMarshal SMTP Array Manager, Microsoft SQL Server, and Microsoft IIS on just one computer, but for clarity, the figure shows these applications installed on separate computers. For more information about deploying Microsoft IIS and using the Spam Quarantine Management tool, see the User Guide for MailMarshal version 6.0 SMTP.


Because the Array Manager communicates with the email processing nodes in the DMZ as well as the other services MailMarshal SMTP requires, only two ports must be open between the DMZ and trusted network, resulting in a more secure configuration. Using MailMarshal version 6.0 SMTP with the Array Manager, you must open only the following ports to your trusted network.

Port Owner Description

25 SMTP MailMarshal SMTP email servers to your existing email environment

19001 MailMarshal MailMarshal SMTP Array Manager to MailMarshal SMTP email processing nodes

Using MailMarshal version 6.0 SMTP also simplifies maintaining your MailMarshal SMTP configuration since the Array Manager replicates email policy to each of the nodes in the MailMarshal SMTP array. You can run the MailMarshal SMTP Configurator inside the trusted network. All the other components MailMarshal SMTP communicates with reside within the trusted network.

Array: Upgrade and Migration Process Checklist The following checklist includes the steps required to upgrade a MailMarshal version 5.x SMTP array of servers to MailMarshal version 6.0 SMTP, and provides cross-references to the detailed instructions. Complete the steps in the following order.

Array Upgrade Procedure Checklist

1. Back up important MailMarshal configuration and database files. For more information, see “Array Step 1: Back Up Important MailMarshal SMTP Data” on page 17.

2. Upgrade your MailMarshal version 5.x SMTP Master server to MailMarshal version 6.0 SMTP. For more information, see “Array Step 2: Upgrading the MailMarshal Version 5.x SMTP Master Server to MailMarshal Version 6.0 SMTP” on page 18.

3. Move the upgraded MailMarshal version 6.0 SMTP Array Manager components from the DMZ to a computer in your trusted network. For more information, see “Array Step 3: Moving the MailMarshal Version 6.0 SMTP Array Manager” on page 23.

4. Run the MailMarshal Migration Wizard to migrate your email history database records and quarantined and archived email and associated log files. For more information, see “Array Step 4: Install and Run the Migration Wizard” on page 31.

5. Repeat the upgrade installation process on each MailMarshal version 5.x SMTP server. Connect the upgraded nodes to the MailMarshal version 6.0 SMTP Array Manager, and run the Migration Wizard on each upgraded node. For more information, see “Array Step 5: Upgrade Additional MailMarshal Version 5.x SMTP Servers” on page 33.


Array Step 1: Back Up Important MailMarshal SMTP Data

The first step in the upgrade process is to back up important MailMarshal version 5.x SMTP database and configuration files. Back these files up to a network share or removable media to simplify moving the Array Manager later in the upgrade process.

The following table lists the files to back up and refers you to additional information.

File Name or Extension

Typical Location Description

*.mmr N/A MailMarshal SMTP configuration information. For more information, see “Backing Up the MailMarshal Configuration” on page 17.

filetype.cfg

*.xml

usergroups.txt

install path install path\config

install path\config

Additional MailMarshal configuration data, SpamCensor extended rules, and your MailMarshal user group definitions. For more information, see “Back Up Custom Information” on page 18.

MailMarshal database MS SQL Server computer

Microsoft SQL Server (SQL) database. For more information, see NetIQKB29284 at www.netiq.com/support.

Quarantined and archived email which is migrated from MailMarshal version 5.x SMTP to MailMarshal version 6.x SMTP will be unavailable in a MailMarshal version 5.x SMTP Console. If you wish to retain access to this email with a MailMarshal version 5.5 SMTP Console you can back up the contents of your \Rulesets folder. Be aware the contents of the \Rulesets folders can be very large depending on your volume of email and your retention period.

Backing Up the MailMarshal Configuration Back up your MailMarshal version 5.x SMTP configuration before you begin installing the MailMarshal version 6.0 SMTP upgrade.

To back up the MailMarshal SMTP configuration files:

1. Start the MailMarshal version 5.x SMTP Configuration console on the Master server.

2. On the Tools menu, click Server Properties.

3. On the Server Properties window, select the General tab.

4. Click Export.

5. Specify a storage location and file name and then click Save. Store the configuration data on a network share or removable media to simplify moving the Array Manager from this computer to another computer later in the upgrade process.

6. Click OK.


Back Up Custom Information When you configure MailMarshal to enforce your email policies, MailMarshal stores your customizations in a number of files. To simplify the upgrade process, back up these files using standard Windows techniques by copying them from the following locations to a network share or removable media.

Filename and extension

Typical file location

Description

filetype.cfg install path Additional MailMarshal SMTP configuration data

*.xml install path\config SpamCensor extended rules

usergroups.txt install path\config Your MailMarshal user group definitions

For example, if you installed MailMarshal SMTP in the default location, \Program Files\NetIQ\MailMarshal, back up the files specified in the table from the following folders: \Program Files\NetIQ\MailMarshal

\Program Files\NetIQ\MailMarshal\config

Back Up the MailMarshal SMTP Database Use standard SQL Server backup techniques to store a safe copy of your MailMarshal version 5.x SMTP database. The Migration Wizard later migrate the information so you can access your data using MailMarshal version 6.0 SMTP. For more information about backing up a MailMarshal version 5.x SMTP database, see NetIQ KB article NetIQKB 29284 at www.netiq.com\support.

Array Step 2: Upgrading the MailMarshal Version 5.x SMTP Master Server to MailMarshal Version 6.0 SMTP

The following steps upgrade your MailMarshal version 5.x SMTP Master server to the MailMarshal version 6.0 SMTP Array Manager. During this step, run the MailMarshal version 6.0 SMTP setup program on your existing MailMarshal version 5.x SMTP Master server using the default settings to create a new database on your SQL Server.

The upgrade process leaves your MailMarshal version 5.x SMTP database in place, creates a new MailMarshal version 6.0 SMTP database, and installs the MailMarshal version 6.0 SMTP rray Manager on the Master server. Next, run the MailMarshal SMTP Configurator to reload existing MailMarshal version 5.x SMTP rules. Finish by making a backup copy of the new configuration file.

To upgrade the MailMarshal version 5.x SMTP Master server to MailMarshal version 6.0 SMTP:

1. If you are upgrading MailMarshal SMTP within a DMZ, you may need to temporarily open port 1433 (SQL Server port) to allow communication with a SQL Server in your trusted network. For more information, refer to the documentation for your firewall or other perimeter defense tools.

2. If you are using MSDE and hosting it on a Microsoft Small Business Server (SBS), install MSDE on the server before you continue. For more information, see NetIQKB45716 at www.netiq.com/support.

3. On the MailMarshal version 5.x SMTP server, run the MailMarshal version 6.0 SMTP setup program from the CD or Web download.


4. On the autorun window, click Begin Server Setup.

5. On the Welcome window, click Next.

6. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement. Click Next.

7. On the Upgrade Type window, shown in the following figure, click I want to install a full version of MailMarshal on this server, and then click Next. This option upgrades all installed components and installs the MailMarshal Array Manager component.


8. If you are using an existing MailMarshal SMTP installation that includes a database, on the SQL Server Options window, shown in the following figure, click I want to use an existing installation of SQL Server 2000 or MSDE 2000. Click Next.

If your existing MailMarshal SMTP configuration does not include a database, you can click I want to install and use the Microsoft SQL Desktop Engine (MSDE). If your company needs a MailMarshal SMTP array to handle your email volume, use Microsoft SQL Server rather than MSDE.


9. On the Folder Locations window, shown in the following figure, specify the current location of your MailMarshal version 5.x SMTP folders. By default, the setup program creates the new folders in \Program Files\NetIQ\MailMarshal.

If you want to install MailMarshal on a different drive, click Customize to specify the new location, and then click Next.


10. On the Database window specify the connection details for the new MailMarshal version 6.0 SMTP database, and then click Next.

Note: Do not specify your current MailMarshal version 5.x SMTP database. Specify the MS SQL Server computer name or IP address, a name for the new MailMarshal version 6.0 SMTP database, and the credentials to access the database.

11. On the Ready to Install the Program window, click Install.

12. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service to allow setup to continue.

13. On the License window, make a note of the new license number the setup program generates for you. You may need the new License Key to reinstall MailMarshal on this computer. Click OK.

14. When the setup program is complete, ensure Launch Configurator is selected, and then click Finish.

15. On the Tools menu, click Commit Configuration Changes.

16. Right-click the current computer and click Properties.

17. On the General tab of the Properties window, click Restart All to restart all MailMarshal services, and then click OK.


19. On the MailMarshal Manager Properties window, click Backup.

20. Specify a backup location and file name. To simplify the process of moving your MailMarshal SMTP Array Manager later, choose a network share or removable media for your backup location. MailMarshal SMTP stores your upgraded configuration in MailMarshal version 6.0 SMTP XML format. Click Save.

21. Click OK to close the Properties window.


The upgraded MailMarshal version 5.x SMTP Master server is now upgraded to the Array Manager for MailMarshal version 6.0 SMTP. Later references in this document to MM1 refer to this upgraded computer.

At this point, your product is upgraded to MailMarshal version 6.0 SMTP, however, MailMarshal version 5.x SMTP data has not yet been migrated to the new configuration and you cannot yet manage email from the MailMarshal SMTP Console. You will migrate your MailMarshal version 5.x SMTP data in a later step.

Array Step 3: Moving the MailMarshal Version 6.0 SMTP Array Manager

This section describes the steps for moving the upgraded MailMarshal version 6.0 SMTP Array Manager from MM1 in the DMZ to a new computer, such as MM4, in the trusted network.

Moving the Array Manager into the trusted network makes the MailMarshal SMTP configuration easier to manage and more secure, requiring fewer open ports between the DMZ and the trusted network.

The following procedure requires you to perform steps on at least two computers:

• The upgraded MailMarshal version 6.0 SMTP Array Manager in the DMZ (MM1) • The computer in the trusted network to which you are moving the MailMarshal

version 6.0 SMTP Array Manager (MM4) You also must also be able to run MS SQL Enterprise Manager to remove a temporary database you create during the installation process.

The following table provides an overview of the steps required to move a newly upgraded MailMarshal version 6.0 SMTP Array Manager in the DMZ (on MM1) to a new computer in the trusted network (MM4). The table also identifies the computers on which you perform the steps.

On this computer… Perform these steps…

New computer in trusted network where you want to move the Array Manager (MM4)

• Install MailMarshal version 6.0 SMTP with Array Manager only option

• Create a temporary database during the installation process (TempMMDB)

• Point the new Array Manager to the previously upgraded database (MailMarshal6)

SQL Server hosting MailMarshal database (SQL Server host)

Delete the temporary database created during the installation (TempMMDB)

MailMarshal SMTP Array Manager in the DMZ (MM1)

• Remove the Array Manager component

• Rejoin the server to the array by pointing to the IP address of the new Array Manager in the trusted network (MM4)

Note: The computer to which you move the Array Manager software (MM4) must not have any MailMarshal SMTP components installed. Ensure any MailMarshal SMTP services and tools are removed prior to installing the Array Manager component.


To install the MailMarshal SMTP Array Manager component on the new computer in the trusted network:

1. On the computer in the trusted network where you want to move the Array Manager (MM4), run the MailMarshal SMTP setup program. On the autorun window, click Begin Server Setup.

2. On the Welcome window, click Next.

3. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement. Click Next.

4. On the Setup Type window, click Array of MailMarshal Servers, and then click Next.


5. On the Array Deployment window, click I want to create a new array, and then click Next.

6. On the Array Manager Options window, click This server is only for managing

the array, and then click Next.

7. Choose the installation location, and then click Next.


8. On the Database window, specify details for a new temporary database that you will later delete, such as TempMMDB. Specify the correct MS SQL Server name or IP address, the temporary database name, and access credentials.

Note: Do not specify the new MailMarshal version 6.0 SMTP database (MailMarshal6). Specify a temporary “dummy” database that you will later delete.

9. Click Install.

10. After the installation is complete, the setup program prompts you to start the MailMarshal SMTP Configuration Tool. The Configuration tool prompts you for basic information that will later be overwritten with the Backup configuration you previously saved. Complete the fields and then click OK.



12. On the MailMarshal Manager Properties window, click Restore.

13. Navigate to the backup file you created on the upgraded MailMarshal version 6.0

SMTP Array Manager in the DMZ (MM1). Choose the backup file you created and click Open.

14. When MailMarshal SMTP has restored the configuration, the Configurator prompts you to commit the changes. Click OK.


16. When prompted to restart services and commit the changes, click Yes.

17. Click OK.

18. On the Windows Start menu, click Start >Programs > NetIQ MailMarshal > MailMarshal Tools > MailMarshal Server Tool.


19. On the Database tab, click Change.

20. Specify the SQL Server name or IP address, the MailMarshal version 6.0 SMTP

database (MailMarshal6), and the credentials for accessing the database.

21. The MailMarshal Server Tool prompts you that a valid MailMarshal version 6.0

SMTP database already exists. Click Use to continue using the upgraded MailMarshal version 6.0 SMTP database. The database contains the upgraded MailMarshal version 5.x SMTP configuration but does not yet contain any data. You will migrate your data in later steps.


22. When prompted to restart the MailMarshal SMTP MMArrayManager service, click Yes.

23. Perform the following steps on the MailMarshal SMTP Array Manager in the DMZ

(MM1). Run the MailMarshal setup program.

24. Click Modify, and then click Next.

25. Read the License agreement. If you agree with the terms, click I accept the terms

of the license agreement, and then click Next.

26. On the Setup Type window, click Array of MailMarshal Servers, and then click Next.


27. On the Array Deployment window, click I want to join an existing array and then click Next.

28. On the MailMarshal Array window, specify the name or IP address of the newly

installed Array Manager computer (MM4) and the port number. If the MM1 server is in a DMZ and not part of the Windows domain in which the Array Manager MM4 is a member, provide a valid Username, Password, and Domain.

It is not necessary to provide an Administrator account. You can provide credentials for any user account to which you have delegated appropriate rights under the Manager Security tab of the MailMarshal Properties window in the MailMarshal Configuration tool. When complete, click Next.

29. If you are prompted to restart the Windows Management Instrumentation

(WMI) services, click Yes.


30. When prompted to rejoin the array, click Rejoin.

31. Perform the following step on the new Array Manager computer in the trusted network

(MM4). On the Start menu, click Start >Programs > NetIQ MailMarshal > MailMarshal Configurator. Ensure the computer name for MM1 appears in the list and that all services on the upgraded MailMarshal version 6.0 SMTP server are running.

32. Perform the following step on the MS SQL Server computer. Delete the temporary database you created in Step 8 to conserve space on the SQL Server disk.

Array Step 4: Install and Run the Migration Wizard MailMarshal version 6.0 introduces changes that affect the MailMarshal database schema, the MailMarshal folder structure, and some file names. To help you upgrade from MailMarshal version 5.x SMTP, NetIQ Corporation provides the Migration Wizard tool.

In this step, download and install MM60Update01.exe, the updated Migration Wizard, from the Product Upgrade Download page at www.netiq.com. Then, run the wizard to migrate the email history database records and the quarantined and archived email and associated log files from the \Rulesets folder of your MailMarshal version 5.x SMTP server into the new MailMarshal version 6.0 SMTP folder structure. Until you migrate your quarantined and archived email and associated log files, you cannot view or manage the quarantined email using the MailMarshal Console.

The file structure and naming conventions changed for MailMarshal version 6.0 SMTP. For more information and details about the changes, see “Folder and Filename Changes” on page 11.

Downloading and Installing the Update After you have upgraded the MailMarshal SMTP Array Manager computer, download and install MM60Update01.exe, the MailMarshal SMTP Migration Wizard update. This update supersedes the Quarantine Upgrade Tool originally provided with MailMarshal version 6.0 SMTP.

In addition to the wizard, the update provides additional files, such as the MM60Update01_ReadMe.txt file and an updated MailMarshal SMTP Help file.

To download and install MM60Update01.exeMM60Update01.exeMM60Update01.exeMM60Update01.exe:

1. Download MM60Update01.exe from the Product Download page. You must use your MyNetIQ account as a customer with current maintenance to download this updated file. The update is available at the following location: http://www.netiq.com/support/mmas/extended/upgrade.asp

2. Follow the instructions on the download page to download the MM60Update01.exe file.

3. On the Array Manager computer you upgraded to MailMarshal version 6.0 SMTP (MM1), run MM60Update01.exe to install the wizard and files.

http://www.netiq.com/

http://www.netiq.com/support/mmas/extended/upgrade.asp


Running the MailMarshal SMTP Migration Wizard Run the MailMarshal SMTP Migration Wizard only after you have upgraded your MailMarshal version 5.x SMTP Master server (MM1) to MailMarshal version 6.0 SMTP. Use the MailMarshal SMTP Migration Wizard to complete the following tasks:

• Migrate MailMarshal version 5.x SMTP email history database records to the new MailMarshal version 6.0 SMTP database

• Migrate your MailMarshal version 5.x SMTP quarantined and archived email and associated log files in the \Rulesets folder to the MailMarshal Array Manager \Quarantine folder

Note: To ensure upgraded messages are logged with the correct timestamp, ensure the MS SQL Server hosting the new MailMarshal version 6.0 SMTP database and the upgraded MailMarshal version 6.0 SMTP Array Manager are in the same time zone. The wizard converts the internal representation of times from local time to UTC.

The migration process can take a long time (hours or days), depending on the volume of database records and file data. MailMarshal SMTP continues to process new email messages while the wizard is running.

To run the MailMarshal SMTP Migration Wizard:

1. On the upgraded MailMarshal version 5.x SMTP server (MM1), start the Migration Wizard. Click Start > Programs > NetIQ > MailMarshal > MailMarshal Tools >MailMarshal Migration Tool.


3. Click Migrate both the email history database records and the quarantined and archived email and associated log files and then click

If you need to stage the upgrade and migration process due to time or other constraints, you can click Migrate only the email history database records and run the wizard again later to migrate the quarantined and archived email and associated log files.

4. If the MailMarshal version 5.x SMTP database connection information is not stored in the MailMarshal version 6.0 SMTP Configuration file, the wizard displays the Select Database window. Specify the MailMarshal version 5.x SMTP database location and credentials, and then click OK.

5. Select Automatic mapping and click Next. This option is available only after upgrading to MailMarshal version 6.0 SMTP.

6. Click Start to begin the data migration process.

The Status window displays the wizard progress. The wizard starts by migrating the email history database records and then continues by migrating the quarantined and archived email and associated log files.

7. The import process can take a long time (hours or days) depending on the volume of data. If you need to interrupt the process, click Stop. You can rerun the wizard later without losing data to complete the migration.


Note: If the wizard encounters a message it cannot convert, you can choose to abort, retry, ignore the message, or ignore all problem messages. By choosing to ignore all problem messages, you can allow the wizard to run unattended. The wizard logs activity in Installation path\Logging\migration.log file. Review the migration log text file to identify any messages the Migration Wizard cannot convert.

8. When the Status window indicates the data migration is complete, click Next.

9. The Finished window displays a summary of the migration. Click Finish to close the wizard.

If you have interrupted the Migration Wizard before the data migration is complete, you can run the Wizard again at a later time to complete the process. Be sure to check the status in the migration.log file to identify and handle any unmigrated data.

Array Step 5: Upgrade Additional MailMarshal Version 5.x SMTP Servers

After you have installed and moved the upgraded MailMarshal SMTP Array Manager to the computer in the trusted network (MM4), upgrade any additional MailMarshal version 5.x SMTP servers, such as MM2 and MM3, and connect them to the MailMarshal version 6.0 SMTP array by completing the following additional steps:

• Run the setup program on each MailMarshal version 5.x SMTP server, such as MM2 and MM3, you want to upgrade to MailMarshal version 6.0 n SMTP odes. Connect the upgraded nodes to the MailMarshal version 6.0 SMTP Array Manager (MM4)

• Run the Migration Wizard on each upgraded node (MM2 and MM3) to transfer your MailMarshal version 5.x SMTP data to MailMarshal version 6.0 SMTP

Upgrading Additional MailMarshal Version 5.x SMTP Servers Complete the following steps on each additional MailMarshal version 5.x SMTP email processing server in your DMZ, such as MM2 and MM3.

To upgrade additional MailMarshal version 5.x SMTP servers:

1. On another MailMarshal version 5.x SMTP server in the DMZ, such as MM2 or MM3, run the MailMarshal version 6.0 SMTP setup program.

2. Read the License agreement. If you agree with the terms, click I accept the terms of the license agreement, and then click Next.


3. On the Upgrade Type window, click I wish to install the node components onto this server. This option allows you to upgrade all installed components and connect to the MailMarshal version 6.0 SMTP Array Manager (MM4).

4. On the Folder Locations window, specify the current location of your

MailMarshal folders. The setup program creates the new folders in the installation folder, which by default is \Program Files\NetIQ\MailMarshal.

If you want to install MailMarshal SMTP on a different location, click Customize and specify the new location, and then click Next.


5. On the MailMarshal Array window, specify the name or IP address and credentials for the Array Manager computer (MM4).

If the computer is in a DMZ and not part of the Array Manager computer Windows domain, you must provide credentials. You are not required to provide an Administrator account. You can supply credentials for any account to which you have given proper rights on the Manager Security tab of the MailMarshal Properties window.

6. Click Install.

7. If you have Windows Management Instrumentation (WMI) services installed on the computer, click Yes to restart the WMI service.


8. On the Windows Start menu, click Start > Programs > NetIQ > MailMarshal > MailMarshal Server Tool.

9. On the Array / Node Communications tab, click Change.


10. Specify details for the Array Manager (MM4) port and server name, and the current port to use. Click Join Array.

Note: If the node is in a DMZ and not part of the Array Manager computer Windows Domain, you must provide credentials. Supply credentials for any account to which you have granted proper rights on the Manager Security tab of the MailMarshal Properties window.

11. When you click OK, the MailMarshal SMTP Server Tool prompts you to restart the services on the node. Click OK.

12. On the Windows Start menu, click Start > Programs > NetIQ MailMarshal > MailMarshal Configurator.


14. Install and run the Migration Wizard. For more information, see “Array Step 4: Install and Run the Migration Wizard” on page 31.

15. Repeat Steps 1 to 13 from this task on each additional MailMarshal version 5.x SMTP server, such as MM3 or others.

16. On the MailMarshal SMTP Array Manager computer (MM4), run the MailMarshal Configurator. Ensure the MailMarshal SMTP service on each node is started and running.


Additional Resources

If the upgrade process described in this document does not apply to your environment, contact NetIQ Professional Services to help plan and implement your upgrade to MailMarshal version 6.0 SMTP.

For more information about restoring your directory services connections, see NetIQKB40548 at www.netiq.com/support.

For more information about running your upgraded MailMarshal version 6.0 SMTP product, see the User Guide for MailMarshal SMTP version 6.0 SMTP.

http://www.netiq.com/support

upgrading to mailmarshal smtp version 6€¦ · smtp array manager to another computer and repeat...

Documents