Installing and Configuring MailMarshal

​

Installation Checklist

​

Installing Prerequisite Software

1. Run the setup program from the MailMarshal installation.
2. On the Prerequisites or Antivirus tab, click the link for the product you want to install or download.
3. Follow the instructions until the product is installed.
4. When product installation is complete, return to the setup program.

​

Installing MailMarshal on a Standalone Server

1. Ensure you have installed all prerequisite software specified for a standalone installation. For more information, see Standalone Installation Requirements and Installing Prerequisite Software.
2. Log on to the computer as a member of the local Administrators group.
3. Close any open applications.
4. Run the setup program from the MailMarshal installation package.
5. On the Setup tab, click Install MailMarshal.
6. On the Welcome window, click Next.
7. On the License Agreement window, carefully read the license information.
8. Click I accept the terms of the license agreement, and then click Next.
9. On the Setup Type window, select Basic Install, and then click Next. If you choose to install SQL Express:
   1. Note that SQL Express will install .NET Framework 4.6. The setup program prompts you to enter a strong password for the SQL Express sa account.
   2. SQL Express setup executes in silent mode. This process may take a number of minutes. Once installation is complete, MailMarshal installation continues.
10. The Basic Install process attempts to connect to a SQL instance on the local computer using Windows authentication, and create a database named MailMarshal.
    Note: If the process encounters problems connecting, you can use Custom Install for more options. See the instructions under Installing a MailMarshal Array Manager. If the database already exists, you can choose to use or re-create it. If you are unsure, use Custom Install to create a database with a different name.
11. The Settings Summary window displays the folder locations and database details for the installation. Review the settings, and then click Next.
12. On the Ready to Install window, click Install. The setup program displays a progress bar until the program is installed.
13. On the Finished window, ensure Run Configuration Wizard is selected, and then click Finish.

​

Installing MailMarshal as an Array

​

Installing a MailMarshal Array Manager

1. Ensure you have installed all prerequisite software specified for an array installation. For more information, see Array Manager Requirements and Installing Prerequisite Software.
2. Log on to the computer as a member of the local Administrators group.
3. Close any open applications.
4. Run the MailMarshal installation package.
5. On the Setup tab, click Install MailMarshal.
6. On the Welcome window, click Next.
7. On the License Agreement window, carefully read the license information.
8. Click I accept the terms of the license agreement, and then click Next.
9. On the Setup Type window, select Custom Install, and then click Next.
10. On the Installation Options window, ensure Array Manager is selected. The MailMarshal Management Console user interface is installed by default when you install the Array Manager component.
11. Clear SMTP Server, and then click Next. The installer verifies the presence of IIS, required for the Management Console website.
    
12. On the SQL Server Options window, choose to use an existing SQL server or install SQL Express locally (if the installation package includes SQL Express).
13. On the Choose Installation Location window, optionally change the installation and folder locations.
14. On the Configuration Services and Management Console Websites window, set site names and ports for the MailMarshal Configuration Service and Management Console websites. By default, the Configuration Service site is named MailMarshal Config Service on port 19007, and the Management Console site is named MailMarshal Management Console on port 443.
    
15. On the Configuration Service Administrator window, specify a Windows username and password, full name and email address for the Config Service.
    Note: These credentials are used as the initial login for the MailMarshal Management Console website. You can create other credentials after completing installation.
16. On the MailMarshal Configuration Service Database window, set SQL Server options for the MailMarshal Configuration Service database.
    
    1. Specify a local or remote SQL server.
       • If the endpoint is an Availability Group or Failover Cluster Instance, select Multi-Subnet Support to improve failover performance (see Microsoft documentation for details).
       • If the endpoint is configured with encryption, select Encrypt Connection and Trust Server Certificate. For more information about encryption settings for SQL Server and MailMarshal, see Knowledgebase article Q21224.
    2. Specify a database name (by default, MailMarshalConfigService).
       Note: A database name must start with a letter (a..z) or an underscore (_). The name can also contain digits (0..9). Other characters including the hyphen (-) are generally NOT allowed.
    3. Choose an account to use for database access. This account can be a Windows or SQL Server account. If the SQL Server is on the same computer as MailMarshal, you can use the Application Pool account (the Application Pool Identity of the MailMarshal Management Console website).
       Note: You can change the account information later using the MailMarshal Config Service Admin Tool.
17. Click Next. MailMarshal verifies the database information. If the database you selected already exists, you can choose options to use it, or cancel and provide a different database name. The available options depend on the database that is actually found.
    
18. On the MailMarshal Database window, set SQL Server options for the MailMarshal database.
    
    1. Specify a local or remote SQL server.
       • If the endpoint is an Availability Group or Failover Cluster Instance, select Multi-Subnet Support to improve failover performance (see Microsoft documentation for details).
       • If the endpoint is configured with encryption, select Encrypt Connection and Trust Server Certificate. For more information about encryption settings for SQL Server and MailMarshal, see Knowledgebase article Q21224.
    2. Specify a database name (by default, MailMarshal).
       Note: A database name must start with a letter (a..z) or an underscore (_). The name can also contain digits (0..9). Other characters including the hyphen (-) are generally NOT allowed.
    3. Choose an account to use for database access. This account can be a Windows or SQL Server account. If the SQL Server is on the same computer as MailMarshal, you can use the system service account (the Local System account used by default to run MailMarshal services). MailMarshal can also configure an “operational user” account with limited permissions, and use this account for most processing. For full information about available database connection and security options, see Knowledgebase article Q12939.
       Note: You can change the account information later using the MailMarshal Server Tool.
19. Click Next. MailMarshal verifies the database information. If the database you selected already exists, you can choose options to use it, or cancel and provide a different database name. The available options depend on the database that is actually found.
20. Follow the instructions in the setup program until you finish installing MailMarshal.
21. On the Setup Complete window, ensure Open the Management Console Website is selected, and then click Finish. The Management Console opens in the default browser. The Management Console installs by default as the default HTTPS website of the local machine.
    Notes:

    • You cannot use Internet Explorer to access the Management Console.
    • The HTTPS certificate that is automatically generated may be reported as invalid by some web browsers. You can configure another certificate using IIS.

​

Installing a MailMarshal Server

1. Ensure you have installed all prerequisite software specified for a MailMarshal Server computer. For more information, see Server Requirements and Installing Prerequisite Software.
2. Log on to the computer you plan to use as a MailMarshal Server as a member of the local administrator group.
3. Close any open applications.
4. Run the setup program from the MailMarshal installation kit.
5. On the Setup tab, click Install MailMarshal.
6. On the Welcome window, click Next.
7. On the License Agreement window, carefully read the license information.
8. Click I accept the terms of the license agreement, and then click Next.
9. On the Setup Type window, select Custom Install, and then click Next.
10. On the Installation Options window, ensure SMTP Server is selected.
11. Clear Array Manager, and then click Next.
    
12. On the MailMarshal Array window, enter the name of the MailMarshal Array Manager that you will use to manage policy for this server. The name can be the computer name, IP address, or Fully Qualified Domain Name.
13. If you have changed the default MailMarshal port, enter the new value in the Port field.
14. If you are not logged in as a user with permission to join the MailMarshal array, select Connect using following account and enter Windows credentials with permission to connect to the Array Manager server.
    
15. Click Next.
16. Enter a MailMarshal Array Join credential. To create and administer these credentials, see the Array Join tab of the MailMarshal Server Tool on the Array Manager. Both the username and password are case sensitive. The default credential is:
    • Username: arrayJoin
    • Password: the server name of the Array Manager computer in uppercase
      
17. Click Next.
18. Continue running the setup program until you finish installing a MailMarshal Server.
19. On the Setup Complete window, click Finish to close the setup wizard. The server retrieves configuration information from the Array Manager immediately and begins accepting email connections.
20. If you plan to install the MailMarshal Server on additional computers, repeat the MailMarshal Server installation process on the other computers.

​

Running the Configuration Wizard

1. If the Configuration Wizard is not running, start the Wizard by browsing to the MailMarshal Management Console website. Use a supported browser (Chrome, Edge, Firefox, or Safari).
2. Log in to the Management Console. For a custom install use the Username and Password you entered in the Installation Wizard. For a basic install use Username admin and Password admin.
   Note: For security, you should change the default password as soon as possible after completing the Wizard. See the Authorized Users item in the Management Console.
3. On the Welcome window, click Next.
4. On the General window:
   
   1. Type your company or organization name. This information identifies your organization when you request a license key for MailMarshal.
   2. Enter a Recipient Address. MailMarshal sends administrative notifications (such as Dead Letter reports) to the address you specify in this field. This address should be a valid and appropriate mailbox or group alias within the local delivery domains of MailMarshal.
   3. MailMarshal sends administrative and user notifications and other automated email from the address you specify in the From Address field. This address should be a valid address to allow for replies to notifications within the local delivery domains of MailMarshal.
5. Click Next.
6. On the Local Domains window, enter one or more domain names for which this MailMarshal server will accept incoming mail.
   
   1. Enter a domain name, and then click Add.
   2. Repeat the above steps for each local domain
   3. To delete an existing entry, select it and then click Remove.
   4. To change an entry, delete it and then add it again.
7. Click Next.
   Note: You will set the delivery location in a later step. To choose advanced options (such as POP3 delivery and multiple delivery locations), after completing the wizard you can edit Routes.
8. On the DNS Servers window, enter the addresses of servers MailMarshal uses for domain name resolution. The wizard pre-populates the fields using Windows DNS settings, but MailMarshal performs DNS lookups independently of the Windows settings. The DNS servers used by MailMarshal should be located no further away than your ISP.
   
   Note: If MailMarshal must perform DNS lookups through a firewall, the firewall must permit both TCP and UDP based lookups.
   1. Enter the IP address of the primary DNS server. You must enter a valid IPv4 or IPv6 address.
   2. Enter a secondary address. You can leave this entry blank, but your configuration is more robust if you supply a secondary DNS server.
   3. Click Next.
9. On the Delivery window, specify the methods MailMarshal will use by default to deliver inbound and outbound email.
   
   Note: After you complete the wizard, you can configure other delivery options, including POP3 delivery, load balancing, and multiple routes. For more information, see Configuring Delivery Options and Customizing Settings for Nodes.
   1. Enter the server name, fully qualified domain name, IPv4 address, or IPv6 address, and the port of a local server that MailMarshal will use to deliver all incoming email (addressed to local domains).
      • If you entered a name, you can choose to deliver mail over IPv4, IPv6, or either protocol.
   2. Choose to deliver outgoing email directly using DNS lookup, or to forward email to another server for delivery.
   3. If you select “forward email to another SMTP server”:
      • Specify the server name, fully qualified domain name, IPv4 address, or IPv6 address, and the port of the server (usually port 25). For instance, use this option to send all outbound email through the email servers at your ISP.
      • If you entered a name, you can choose to deliver mail over IPv4, IPv6, or either protocol.
   4. Click Next.
10. Review the Completing window, and then click Finish.

​

Configuring Email Routing

​

Creating Directory Connectors

1. Open the MailMarshal Management Interface website.
2. In the left menu, expand Policy Elements.
3. In the right pane, click Connectors.
4. Click Add.
   Note: For detailed guidance on fields, click Help.
5. On the Connector Type tab, choose the type of directory this connector will access. MailMarshal supports connections to Azure Entra, Microsoft Active Directory and several types of LDAP directories.
6. Enter a connector name and description
7. In the Reload Schedule section, specify how often MailMarshal will import directory information through this connector, and then click Next.
8. If this is an Azure Entra connection, on the Entra Properties tab, enter the required credentials. For more details about generating and retrieving the credentials from Entra, see LevelBlue Knowledgebase article Q21246.
9. If this is a Microsoft Active Directory connection, on the Microsoft Active Directory Logon tab, choose to connect as anonymous, or as a specific account. If you choose to connect using a specific account, enter the account details.
10. If this is an LDAP connection, specify the following information:
    1. Select a specific type of LDAP directory server from the list. MailMarshal sets default parameters to retrieve group and member details for the type of server you choose.
    2. On the LDAP Server tab enter the server name, port, and logon information if required. If you choose to log on using a specific account, specify the account details. If you do not know the required information, contact the administrator of the LDAP server.
       
    3. On the LDAP Search Root tab, identify a search root for this server. If you do not know whether a search root is required, contact the administrator of the LDAP server.
    4. If this is a generic LDAP connection, on the LDAP Group Attributes and LDAP User Attributes tabs, customize the information MailMarshal will use to query the LDAP server for group names and group members. For details of the fields, see Help.
    Note: The wizard populates default values depending on the server type you selected. You may need to customize the values. Consult the LDAP server documentation and the LDAP server administrator.
11. Click Test to validate the connection settings. Click Save to create the connector.

​

Configuring Antivirus Scanning

​

Excluding Working Folders From Virus Scanning

C:\Program Files\Trustwave\Secure Email Gateway\Quarantine
C:\Program Files\Trustwave\Secure Email Gateway\Queues\Decryption
C:\Program Files\Trustwave\Secure Email Gateway\Queues\Incoming
C:\Program Files\Trustwave\Secure Email Gateway\Unpacking

​

Configuring MailMarshal to Use an Antivirus Product

1. Ensure you have installed one or more supported virus scanners on each MailMarshal Server computer, following the manufacturer’s instructions.
2. Ensure the scanner does not perform on-demand scanning of the MailMarshal excluded folders. For more information, see Excluding Working Folders From Virus Scanning.
3. Access the MailMarshal Management Console website.
4. In the left pane, under Configuration, expand Policy Elements.
5. In the right pane menu list, click Virus Scanners.
6. In the left pane of the Management Console, click Policy Elements, and then select Virus Scanners.
7. Click Add.
   Note: For detailed guidance on adding scanners, click Help.
8. Select your antivirus scanner from the list.
   
9. If you are configuring a command line scanner, in the Path field, enter the location of the antivirus scanner program, such as c:\McAfee\Scan.exe.
10. If your command line scanner is not in the list and you selected New Command Line, specify the additional details required. For assistance see Help.
11. Click Save to add the virus scanner. MailMarshal will test the action of the scanner on each installed MailMarshal email processing server.
12. If you plan to use more than one virus scanner, repeat Steps 7 through 11 for each scanner.

​

Installing and Customizing Web Components

​

Installing the MailMarshal Web Components

1. Ensure you have installed all prerequisite software specified for a Web components computer, and opened required ports for communication with the Array Manager and client browsers. For more information, see Web Components Requirements.
2. Log on as a local administrator to the computer on which you want to install the MailMarshal Web components.
3. Close any open applications.
4. Run the setup program from the MailMarshal installation kit.
5. On the Setup tab, click Web Components Setup.
6. On the Welcome window, click Next.
7. On the License Agreement window, carefully read the license information.
8. Click I accept the terms of the license agreement, and then click Next.
9. Choose a destination location and program folder. Web Components install as a 32 bit application. By default the location is C:\Program Files (x86)\Trustwave\SEG Web Components.
10. On the Virtual Directory window, enter a website directory name. This name becomes the virtual path of the site URL, in the default website on the server.
    
11. Click Next.
12. On the Ready to Install the Program window, click Install.
13. On the Setup Wizard Complete window, click Finish.
14. To complete setup of the Spam Quarantine Management website, run your default browser. The default URL for this site is http://IISServerName/SpamConsole where IISServerName is the name of the Microsoft IIS server where you installed the Web components.
15. On the configuration page of the Spam Quarantine management site, specify the Site URL, Array Manager connection information, User Authentication method, and User Interface settings. For more information, click Help.
    
    Note: You can set the authentication method for a MailMarshal installation only once. If you install the Spam Quarantine Management Web component on more than one Microsoft IIS server, all the servers must use the same method
16. As part of Spam Quarantine management site setup, the site creates an administrator login (for the specified email address, or the Windows login used to access the configuration page). You can change many site settings later by logging in to the site using the Administrator login.

​

Customizing the Web Components

• Default Theme
• Availability of custom Blocked and Safe Senders lists
• Availability of email address management (add or delete an email address from the list of addresses managed by the user)
• Availability of mail history charts, folder message counts, and the “all folders” view.

​

Upgrading MailMarshal

​

Upgrading from MailMarshal Version 10.1.0 or Above

1. Ensure the computer you want to upgrade meets the prerequisites for the latest version of MailMarshal.
   • You must enable the Windows Authentication feature in IIS.
2. Ensure the Microsoft SQL Server is a supported version. For supported direct upgrades, no change in SQL Server is required.
3. Log on as a local administrator to the MailMarshal Array Manager computer.
4. Verify anti-virus exclusions.
5. Back up your MailMarshal configuration. Use the MailMarshal 10.X Management Console. You can also use the MMExportCfg command line tool.
6. Close any running MailMarshal user interfaces (including Server Tool, other tools, and web interfaces).
7. Run the MailMarshal setup program from the installation package.
8. On the Setup tab, click Install MailMarshal. On the Welcome window, the setup program displays the current version of MailMarshal and the version to which it will upgrade. Click Next.
9. On the License Agreement window, carefully read the license information.
10. Click I accept the terms of the license agreement, and then click Next.
11. On the Ready to Install window, click Install.
12. The setup program stops the MailMarshal services, installs any required prerequisites, updates the product files and database, installs the management websites if required, and starts the services.
13. On the Update Complete window, click Finish.
14. If you are upgrading a MailMarshal Array, install the software on each processing server.
15. Open the Management Console website, verify that each email server is connected and to ensure the Receiver, Engine, and Sender services are running.
16. If you are using the MailMarshal Web components:
    1. If you have customized any Web component graphics, make a backup copy of the custom files to a backup folder. For more information, see Customizing the Web Components.
    2. On the Web components computer, run the MailMarshal setup program from the installation package.
    3. On the Setup tab, click Install Web Components.
    4. Run the Web components setup until you have completed the installation process. If the previous version of the Admin Console website was installed it will be removed.
    5. If you backed up custom graphic files, copy your backup files to the proper locations in the new install folders.
17. Refer to the Release Notes to learn more about new product features and updates. For more information about using the new version of the product, see the User Guide.

​

Upgrading from Other Versions of MailMarshal

​

Uninstalling MailMarshal

1. Connect to the MailMarshal Management Console.
2. In the left pane, select Mail Servers.
3. In the right section of the right pane, select the Server you wish to uninstall and then click Edit.
4. On the General tab, Services section, select the Receiver service, and then click Stop.
5. Allow the Engine and Sender services to run until MailMarshal processes all the received email. You can verify that all mail queues are empty by viewing the lists in the menu tree of the main Mail Servers page.
6. Reroute your email delivery settings to exclude the MailMarshal Server you want to uninstall. For example, you may need to change the DNS MX records, firewall translation settings, and internal email server settings that directed email to the MailMarshal server both from external email and from your internal email server.
7. Verify that email is flowing through the new path and no email is being delivered to the MailMarshal server you plan to uninstall.
8. If you want to preserve the data from the MailMarshal Server you are uninstalling, back up the contents of the MailMarshal Quarantine folder and all sub folders.
9. On the server you want to uninstall, run Add/Remove Programs in Control Panel to remove MailMarshal. You may have to restart your computer to remove some program files.
10. To delete the Quarantine folders, first delete the contents of the Symbolic sub folder.
11. Delete the remaining Quarantine folders and files.
12. If you are using a MailMarshal array and want to remove the product completely, repeat Steps 1 through 12 on each additional email processing server.
13. Use Add/Remove Programs from the Windows Control Panel to remove additional components you may have installed, such as Web Components.
14. Use Add/Remove programs from the Windows Control Panel to remove the MailMarshal Array Manager. The Management Console will also be removed.