Manage Jobs

  • Article

 

Applies to: Forefront Server Security Management Console

The Manage Jobs work pane (reached by clicking Jobs, in the Job Management section of the Navigation Area) includes the following jobs:

  • Deployment Jobs

  • Signature Redistribution Jobs

  • Schedule Report Jobs

  • General Options Jobs

  • Manual Scan Jobs

  • Remote Logs Retrieval Jobs

  • Product Activation Jobs

  • Operation Jobs

    Note

    You may edit, copy, delete, or see the status of a job from the Manage Jobs work pane. (For more information, see Editing a Job, Copying a Job, Deleting a Job, and Viewing Job Status.

Deployment Jobs

Deployment jobs provide a way for administrators to deploy the following to managed servers:

  • Full installations and hotfixes. For more information, see Installing Forefront Security on Remote Servers.

  • Configuration templates. For more information, see Deploying Forefront Security Template Files on Remote Servers.

  • Product activation keys and license agreement numbers. For more information, see Product Activation Jobs.

    Note

    When you run a deployment job, the Forefront Server Security Administrator must not be running on the target servers. If it is, the job will fail.

Creating a deployment job requires the following major steps:

  1. Create a deployment package.
  2. Configure the deployment job.

Installing Forefront Security on Remote Servers

To deploy Forefront Security to remote servers, you must configure the deployment package and then create and run a deployment job for the target server. Follow the same procedures for hotfixes.

Note

You can also uninstall Forefront Security using the FSSMC. For more information, see Uninstalling Forefront Security with the Rollback Button.

Creating a deployment package

The deployment package consists of the Forefront Security installation image file or the hotfix installation file and the install parameters, as configured by the Forefront Server Security Management Console.

Note

You can deploy hotfixes, but not private fixes ("buddy fixes"). These are unofficial hotfixes released for testing purposes only, just to determine that they solve the problems they were created to fix. Buddy fixes are not yet fully tested or packaged and cannot be deployed.

To create a deployment package

  1. Click Packages in the Job Management section of the Navigation Area. The Manage Packages work pane appears.

  2. Click Add. The Add Package work pane appears.

  3. Enter a name for the package in the Package Name field. (We recommend that you use a name containing the build number as well as the product name. For example: Forefront Security for Exchange Server 10.0.1414.1.)

  4. Enter the path to the Setup.exe file (or the .exe file for the hotfix) in the File to Upload field (or browse to its folder on your local computer using the Browse button).

  5. Click Add. The installation files are uploaded to the FSSMC database and the Configure Installation Package work pane appears.

    Note

    This may take several minutes because the file has to be uploaded to the FSSMC database through your local Web browser. The upload time will be increased if you are working from a remote computer. Depending on network speed and server usage, the time may vary.

  6. Complete the information on the Configure Installation Package pane:

    Target Folders

    Install Folder

    Enter the path to the Installation folder to be used on the target servers or use the default folder provided. (These paths are only used for clean installations, and not upgrades.)

    Start Menu Folder

    Enter the path to the Start Menu folder to be used on the target servers or use the default folder provided. (These paths are only used for clean installations, not upgrades.)

    Microsoft Update

    Indicate whether you want to use Microsoft Update to deliver updates to your servers.

    Proxy Server

    Indicate whether to use a proxy server and indicate its name and port.

    Quarantine Security Settings

    Indicate if content and file filters should be applied to messages delivered from Quarantine (Secure mode) or not applied (Compatibility mode).

    Hot Upgrade - Critical File

    If critical files need to be updated during the upgrade, services will need to be recycled during the installation process. (Normally, upgrades do not require services to be stopped or recycled.) Choose the desired action: Recycle services (the default) or Abort upgrade.

    Hot Upgrade - Mail Flow

    During an upgrade, mail is queued to prevent it from being delivered without being scanned. You will need to select the action to take, should this not be possible. The options are: Recycle services (the default), Disable scanning, or Abort upgrade. We recommend selecting Recycle services (normally, upgrades do not require services to be stopped or recycled), so that no mail will be delivered without being scanned.

    There is an additional section for Forefront Security for Exchange Server and Antigen installations:

    Cluster Match Shared Drive

    To install Forefront Security for Exchange Server into a Single Copy Cluster (SCC) cluster system or Antigen 9.1 for Exchange into an Exchange 2003 cluster system, select the Cluster Server check box and enter the drive letter of the shared drive, followed by a colon (for example, E:). This is where the product's data files are stored.

    There is an additional section for Forefront Security for SharePoint installations:

    SharePoint Login

    To install into Microsoft Windows SharePoint® Services, the FSSMC requires a user name and password with administrative rights to the server.

  7. Click Finish to complete the package configuration and add the new package to the Package Names list in the Manage Packages work pane.

  8. Create a deployment job for the new package. For more information, see Configuring the Install Deployment Job.

Note

Packages can be copied, edited, renamed, or deleted by selecting the package and clicking the appropriate button.

Configuring the Install Deployment Job

After the deployment package is created, you must configure the deployment job to run it.

To configure the install deployment job

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Deployment Jobs and click Create. The Deployment Job work pane appears.

  3. Name the deployment job in the Job Name field.

    Note

    Job names may contain alphanumeric characters only.

  4. Select the package to be deployed in the Select Package field. Either select an existing package from the list or upload and configure a new package using the Add Package button. For more information about adding a package, see Creating a Deployment Package.

  5. Schedule the installation, if desired. If you do not schedule the installation (by selecting Do Not Schedule Deployment), you must manually start the deployment job after you complete the configuration.

  6. Enter the e-mail address of someone who should receive the success or failure notification following the deployment.

  7. Click Next. The Assign Job work pane appears.

  8. Assign the job by selecting the target servers or server groups.

  9. Click Finish to complete the job configuration. It will be added to the Manage Jobs work pane, under the Deployment Jobs section.

  10. If you have not scheduled the job, you can run it by selecting it on the Manage Jobs work pane, and then clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Note

After an installation package or a hotfix is deployed to a remote server, the installation is started automatically.

Deploying Forefront Security Template Files on Remote Servers

To deploy Forefront Security template files to remote servers, you must configure a template package and then create and run a deployment job for the target servers.

Creating a template package

A template package consists of the template file (Template.adb for Antigen installations or Template.fdb for Forefront Security installations) and the associated template options. Configure your Template file using the Microsoft Forefront Server Security Administrator on a local Forefront Security server. (For more information about template files, see the user guide for your Forefront Security product.) After the template has been configured, create a template package.

To create a template package

  1. Click Packages in the Job Management section of the Navigation Area. The Manage Packages work pane appears.

  2. Click Add. The Add Package work pane appears.

  3. Enter a name for the package in the Package Name field.

  4. Enter the path to the Template file (Template.adb or Template.fdb) in the File to Upload field or use the Browse button to navigate to the file.

  5. Click Add. The template file is uploaded to the FSSMC database and the Configure Template Package work pane appears.

  6. Select Template Options to indicate which templates to deploy. (The templates are all found in the Template file you just uploaded.) Choose Select All to deploy all the templates or select as many of the individual templates as needed. The choices are:

    • Select All
    • Update Scan Job and Antivirus Settings
    • Update File Filter Settings
    • Update Notification Settings
    • Update File Scanner Updates Path and Proxy Server Settings
    • Update Content Filter Settings
    • Update Filter Lists

  7. Click Finish to complete the package configuration and add the new package to the Package Names list in the Manage Packages work pane.

  8. Create a deployment job for the new package. For more information, see Configuring the Template Deployment Job.

Note

Packages can be copied, edited, renamed, or deleted by selecting the package and clicking the appropriate button.

Configuring the Template Deployment Job

After the template package is created, you must configure the template deployment job to run it.

To configure the template deployment job

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Deployment Jobs and click Create. The Deployment Job work pane appears.

  3. Name the deployment job in the Job Name field. Job names may contain alphanumeric characters only.

  4. Select the package to be deployed in the Select Package field. Either select an existing package from the list (in this case, the template file that you uploaded previously), or upload and configure a new package using the Add Package button. For more information about adding a package, see Creating a Deployment Package.

  5. Schedule the deployment, if desired. If you do not schedule the installation (by selecting Do Not Schedule Deployment), you must manually start the deployment job after you complete the configuration.

  6. Enter the e-mail address of someone who should receive the success or failure notification following the deployment. Type an address in the E-mail recipients field and click Add to have the address appear in the Destination addresses section. You may enter multiple addresses, one at a time. After addresses have been added to the Destination addresses section, each has associated Edit, Delete, and Test buttons. If you modify the address, the Edit button changes to Update. Click Update to save your change. There is no confirmation when you click Delete.

  7. Click Next. The Assign Job work pane appears.

  8. Assign the job by selecting the target servers or server groups.

  9. Click Finish to complete the job configuration. It will be added to the Manage Jobs work pane, under the Deployment Jobs section.

  10. If you have not scheduled the job, you can run it by selecting it on the Manage Jobs work pane, and then clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Uninstalling Forefront Security with the Rollback Button

You can completely uninstall Forefront Security or remove a hotfix by using the Rollback button on the Manage Jobs work pane.

To roll back a deployment job

  1. Select the installation deployment or hotfix deployment job you would like to roll back.

  2. Click Rollback. The Deployment Rollback work pane appears. The Job Description section contains a summary of the job to be rolled back.

  3. Select the servers to be rolled back in the Server Selection section.

  4. Click Run. The job is rolled back.

Signature Redistribution Jobs

The signature redistribution job is used to deploy antivirus signature updates to all (or selected) servers in an environment. The most efficient way to update engine signatures on all your servers is to create a redistribution job to download them to a single staging server. The staging server is then used as the retrieval point for all the other servers in the environment.

To create a redistribution job

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Signature Redistribution Jobs.

  3. Click Create. The Signature Redistribution Job work pane appears.

    1. Enter a name for the job in the Job Name field.

    2. Set the update schedule in the Schedule Download section. These settings control when and how often the FSSMC will poll the download Web site for new signature file updates.

      Note

      If you do not want new engine updates to be distributed to all managed servers after they are downloaded, you must check Do Not Schedule Redistribution Job. If it is not scheduled, you must click Run Now (on the Manage Jobs work pane) to start it.

      Specify a Download Frequency (in minutes or hours) to indicate how often to check for updates.
      Indicate a Start Time.
      Set the Number of Retries, if desired. This enables the FSSMC to poll the download Web site again if it encounters a problem during a download.
      Set the Retry Delay. This is the number of minutes the FSSMC will wait before attempting a download again.

    3. Enter an e-mail address where update notifications can be sent. The recipient is notified of the success or failure of an update job. Type an address in the E-mail recipients field and click Add to have the address appear in the Destination addresses section. You may enter multiple addresses, one at a time. After addresses have been added to the Destination addresses section, each has associated Edit, Delete, and Test buttons. If you modify the address, the Edit button changes to Update. Click Update to save your change. There is no confirmation when you click Delete.

    4. Click Next to continue. The Engine Selection portion of the Redistribution Job work pane appears.

  4. Select the engines for which the job will download signatures. You may update all of your engines using one job, create a different job to update each engine, or create multiple jobs to update various combinations of engines. The engine designations in the Names column are those that you would see in notification and alert logs.

  5. Click Next to continue. The Assign Job work pane appears.

  6. Select the servers and server groups that the job will run on in the Assign Job work pane.

  7. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the Signature Redistribution Jobs list.

  8. Specify the main signature download location in the Download Configuration section. Click Global Configuration in the Administration section of the Navigation Area. The Manage Global Configuration work pane appears. If a proxy server is used, enter its name and port number. If needed, enter the proxy username and password.

  9. To run the signature redistribution job, see Running the Signature Redistribution Job.

Domain Considerations

For Signature Redistribution Jobs, both the Management Console and the managed servers should be joined to a domain. Since a managed server must copy the signature files from a shared folder on the Management Console’s server, they should be in the same domain or the domains should have a trust relationship such that a managed server in one domain has read access to the shared data on the Management Console in a different domain.

If this is not done, the managed server will not be able to access the signatures unless the Guest account is enabled on the Management Console. We strongly discourage this practice because of security risks (enabling the Guest account allows anonymous access).

Running the Signature Redistribution Job

If the signature redistribution job is scheduled, it will start automatically at the scheduled time. If it is not scheduled, you must click Run Now (on the Manage Jobs work pane) to start it.

Note

When using the signature redistribution job to update the scan engines, scheduled updates should be disabled (using the Forefront Server Security Administrator), so that the engines are not updated twice. For more information about scheduled updates, see “File Scanner Updating” in any Forefront Security product user guide.
If you update your Forefront Security servers using a UNC share, you must cancel the selection of Use UNC Credentials in Forefront Security General Options. For more information, see General Options Jobs. If this setting remains selected, engine updates will fail because the Forefront Server Security Management Console does not support the use of credentials when accessing staged engine updates.

The best practice is to download the latest signatures immediately, after you create a signature distribution job (rather than wait for the Start Time of the schedule you set up).

To immediately download signatures

  1. Select the new job in the Signature Redistribution Jobs section of the Manage Jobs work pane.

  2. Click Run Now. The Run Job Now work pane appears.

  3. Click Start Download. A new window opens to show you the status of the download. As soon as the download of an engine's new signatures is complete, distribution to the various servers begins.

    Note

    The Start Distribution button on the Run Job Now work pane allows you to distribute already-downloaded updates, usually to newly-added servers, without checking for new updates. While this is faster, it is always a better practice to check for new updates.

  4. Click Close, after all the distributions have ended, to close the download status window.

Viewing the Status of a Signature Redistribution Job

To view the status of a signature redistribution job, select it in the Signature Redistribution Job section of the Manage Jobs work pane, and then click Status. Each signature redistribution job and its current status is shown in a new window. To return to Manage Jobs, click Close.

Rolling Back Engine Signature Updates

If you encounter a problem with a signature update, the fastest way of restoring the previous good version is to run a rollback job.

To roll back engine signature updates

  1. On the Manage Jobs work pane, select the Signature Redistribution Job that you would like to roll back.

  2. Click Rollback. The Engine Rollback work pane appears.

  3. Select the engines to roll back. The engine designations in the Names column are those that you would see in notification and alert logs.

  4. Click Start. The selected engines are rolled back to the last good version.

Schedule Report Jobs

You can schedule reports that will be sent by e-mail to a specified list of recipients. Reports are sent as .mht archive files and can be viewed using Internet Explorer, Microsoft Office Word, Microsoft Outlook®, and other Microsoft products.

To schedule a report

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Schedule Report Jobs, and then click Create. The Schedule Report Job work pane appears.

  3. Complete the fields to schedule a report job:

    • Job Name - Enter a name for the report job.
    • Report Frequency - Set the frequency for the reports to be run (a number of hours, minutes, or days).
    • Do Not Schedule Report - Selecting this means that the report will not run automatically. It will have to be run manually.
    • Start Date - Indicate the date the report should start running.
    • Start Time - Indicate the time the report should start running.
    • E-mail Subject - Enter the subject line of the e-mail message.
    • E-mail Body - Enter the body of the e-mail message.
    • E-mail Recipients - Enter a recipient for the e-mail message, and then click Add to have that address added to the Destination addresses list. You may enter multiple addresses, one at a time. After addresses have been added to the Destination addresses section, each has associated Edit, Delete, and Test buttons. If you modify the address, the Edit button changes to Update. Click Update to save your change. There is no confirmation when you click Delete.

  4. Click Next. The Report Parameters work pane appears.

  5. On the Report Parameters work pane, select the report to be run. You may only schedule one report at a time. Multiple reports must be scheduled individually.

  6. Click Next. The second page of the Report Parameters work pane appears.

  7. Complete the fields as follows:

    • Select Products - Select the products to be included in the report. You can run the report for Forefront Security for Exchange Server and Forefront Security for SharePoint.
    • Time Interval - Select the time interval for the report. You can choose one day, one week, one month (the default), or one year.
    • Select Server - Select the servers to be included in the report.

  8. Click Finish to save the scheduled report job. It will run at the indicated time and be sent to the designated recipients.

  9. If you have not scheduled the job, you can run it by selecting it on the Manage Jobs work pane, and then clicking Run Now. The Run Job Now work pane appears. Click View Report to run and view the report or Send Report to run it and have it sent by e-mail to the designated recipients.

General Options Jobs

General Options are system-level settings provided by Forefront Security to eliminate the need for you to directly access the registry. The General Options job allows administrators to configure General Options settings on selected managed servers in the enterprise. The settings are configured in the FSSMC and then distributed to the desired servers.

Warning

When the General Options job is run, all General Options settings will be overwritten with the values on the FSSMC work pane. Therefore, be sure to set all values correctly before running the job.

To configure the General Options settings and prepare them for distribution

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select General Option Jobs and click Create. The General Options work pane appears.

  3. Set the job parameters:

    • Enter a name for the job in the Job Name field.
    • Indicate the Product Type. Your selection will determine the various General Options settings that you will fill out in a subsequent step. You can create a General Options Job for Forefront Security for Exchange Server, Forefront Security for SharePoint, Antigen 9.0 for Exchange, or Antigen 9.0 for SMTP.
    • Set the update schedule in the Schedule Update section. Indicate the date and time that the agent should begin deploying these options to the target servers. If you do not schedule the job (by selecting Do Not Schedule), you must manually start the job after you complete the configuration by clicking Run Now (on the Manage Jobs work pane).
    • Click Next. The General Options work pane appears.

  4. Configure the General Options settings. For more information about General Options, refer to your product User Guide.

    Important

    When deploying the General Option Enable Microsoft Forefront Security for Exchange Server Scan to your managed FSE servers, or Enable Antigen for Exchange Scan to your managed Antigen for Exchange servers, be aware that the Enable Store Scanning option not only enables store scanning, but disables Transport or Internet scanning. Conversely, the Enable Transport Scanning (for FSE) and Enable Internet Scanning (for Antigen) options enable Transport or Internet scanning while disabling store scanning. You should be aware of the impact of deploying these options, especially when deploying to servers that have only the Mailbox or Transport role.

  5. Click Save, and then click Next. The Assign Job work pane appears.

  6. Select the servers and server groups that the job will run on.

    Note

    The only servers that will be displayed on this work pane are those on which the product type you selected is installed. To have this feature work correctly, FSSMC must know what kind of product is installed on each server. It would know this if you had deployed the product using the FSSMC. If the product was already installed on the remote server, the Polling Interval (as set on the Global Configuration work pane) must have passed to have the server correctly listed. (If it has not, you can click Poll Now.)

  7. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the General Option Jobs section.

  8. If you have not scheduled the job, you can run it by selecting it on the Manage Jobs work pane, and then clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Manual Scan Jobs

The manual scan job allows administrators to create and run manual scans on managed Forefront Security for Exchange servers.

To configure a manual scan job and prepare it for distribution

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Manual Scan Job and click the Create button. The Manual Scan Job work pane appears.

  3. Set the job parameters:

    1. Enter a name for the job in the Job Name field.
    2. Select the Product Type in the Manual Scan Job section. The choices are Forefront Security for Exchange Server, Forefront Security for SharePoint, and Antigen 9.0 for Exchange.
    3. Set the schedule in the Schedule Job section. Indicate the date and time that the agent should run the job on the target servers. If you do not schedule the job (by selecting Do Not Schedule Job), you must manually start the job after you complete the configuration by clicking Run Now on the Manage Jobs work pane.

  4. Click Next. The Assign Job work pane appears.

  5. Select the servers and server groups that the job will run on in the Assign Job work pane.

  6. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the Manual Scan Jobs section.

  7. If you have not scheduled the job, you can run it by selecting it and clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Note

After the manual scan job is initiated, the FSSMC will report a status of Job Completed in the FSSMC administrator. This does not mean that the manual scan is completed. It indicates that the job was started successfully by the FSSMC.

Remote Logs Retrieval Jobs

Use the remote logs retrieval job to retrieve the Program log, Incidents database, or Quarantine database from managed Forefront Security servers and save them as comma-delimited text files.

Note

Since there may be time zone differences between the FSSMC server and the logs on remote servers, and since the log files do not contain any time zone information, when the logs are retrieved, FSSMC changes all time to UTC (GMT) time. This allows FSSMC to show correct and consistent statistical information in reports.

To configure and deploy a remote logs retrieval job

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Remote Logs Retrieval Jobs and click Create. The Remote Logs Retrieval Job work pane appears.

  3. Set the job parameters:

    1. Enter a name for the job in the Job Name field.
    2. Indicate the logs to be retrieved in the Remote Log Retrieval Job section. You can choose any combination of the Program log, Incidents database, or Quarantine database. If you select the Incidents or Quarantine database, enter a date range. If you leave the range fields blank, all records will be returned.
    3. In the Output Directory section, indicate the directory that the files will be returned to. The computer name will be appended to the path shown before the files are saved.
    4. Set the schedule in the Schedule Retrieval section. Indicate the date and time that the agent should run the job on the target servers. If you do not schedule the job (by selecting Do Not Schedule), you must manually start the job after you complete the configuration by clicking Run Now on the Manage Jobs work pane.
    5. Click Next. The Assign Job work pane appears.

  4. Select the servers and server groups that the job will run on in the Assign Job work pane.

  5. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the Remote Logs Retrieval Jobs section.

  6. If you have not scheduled the job, you can run it by selecting it and clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Product Activation Jobs

After you have purchased a license for your evaluation copy of Forefront Security, you will want to activate it and license it on all your remote servers. You can activate and license Antigen for Exchange, Antigen for SMTP, and Forefront Server Security products.

To configure the product activation job

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Product Activation Jobs and click Create. The Product Activation Job work pane appears.

  3. Set the job parameters:

    1. Enter a name for the job in the Job Name field.
    2. Indicate the Product Type. This can be either Forefront Server Security or Antigen.
    3. Set the schedule in the Schedule Job section. Indicate the date and time that the agent should run the job on the target servers. If you do not schedule the job (by selecting Do Not Schedule), you must manually start the job after you complete the configuration by clicking Run Now on the Manage Jobs work pane.

  4. Click Next. The second page of the Product Activation Job work pane appears.

    • If the product to be activated is Antigen for Exchange or Antigen for SMTP, fill in the following fields:
      a.**  Activate product**. Select this field to indicate that you are going to upload a license file.
      b.**  Upload a license file**. Indicate the name and path of the license file. You can either type it or use the Upload Package button to locate it.
      c.**  Update product license information on a registered product**. Select this field to indicate that a registered version of Antigen for Exchange with Service Pack 1 or Antigen for SMTP with Service Pack 1 has already been registered and is now to be updated with license information.
      d.**  Enter your seven digit license number**. Enter the license number here.
      e.**  Expiration date**. Either enter the expiration date or click the calendar icon to select it.
    • If the product to be activated is Forefront Server Security 10 or Forefront Server Security 10 with Service Pack 1, fill in the following fields:
      a.**  Activate product**. Select this field to indicate that you are going to enter a product key.
      b.**  Product key**. Enter the activation key. The 25-character key is not case-sensitive.
      c.**  Update product license information on a registered product**. Select this field to indicate that a registered version of Forefront Security for Exchange Server with Service Pack 1 has already been registered and is now to be updated with license information.
      d.**  Enter your seven digit license number**. Enter the license number here.
      e.**  Expiration date**. Either enter the expiration date or click the calendar icon to select it.

  5. Click Next. The Assign Job work pane appears.

  6. Select the servers and server groups that the job will run on in the Assign Job work pane.

  7. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the Product Activation Jobs section.

  8. If you have not scheduled the job, you can run it by selecting it and clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Operation Jobs

Operation Jobs allow you to rapidly respond to a virus or spam outbreak by turning scanning and filtering features on and off for the various kinds of scan jobs. You can control whether virus scanning, file filtering, content filtering, and keyword filtering run for the Transport Scan Job, the Realtime Scan Job, and the Manual Scan Job. You can also specify the location that scan engine signatures are updated from. Operation jobs can be created and run on both Primary and Backup servers.

To learn more about File Filters and Keyword Filters, see the "Forefront Security for Exchange Server User Guide" or the "Forefront Security for SharePoint User Guide".

Note

The Operations Job will not work with Antigen Version 9 products. Instead, use templates to make configuration changes in Antigen Version 9 products. For more information on deploying templates in FSSMC, see Deployment Jobs.

To configure the operation settings

  1. Click Jobs in the Job Management section of the Navigation Area. The Manage Jobs work pane appears.

  2. Select Operation Jobs and click Create. The Operation work pane appears.

  3. Set the job parameters. By default, all scanning features are marked "Unchanged".

    1. Enter a name for the job in the Job Name field.
    2. Indicate the Transport Scan Job settings. You can enable or disable any combination of virus scanning, file filtering, and keyword filtering. Select "Unchanged" to leave the setting as it currently is. You can enter a file filter for the Transport Scan Job and indicate which file types it will apply to. (The default, if a file filter is entered, is All Types.) Finally, you can enter a keyword filter for the Transport Scan Job.
    3. Indicate the Realtime Scan Job settings. You can enable or disable any combination of virus scanning, file filtering, and content filtering. Select "Unchanged" to leave the setting as it currently is. You can enter a file filter for the Realtime Scan Job and indicate which file types it will apply to. (The default, if a file filter is entered, is All Types.)
    4. Indicate the Manual Scan Job settings. You can enable or disable any combination of virus scanning, file filtering, and content filtering. Select "Unchanged" to leave the setting as it currently is. You can enter a file filter for the Manual Scan Job and indicate which file types it will apply to. (The default, if a file filter is entered, is All Types.)
    5. Indicate your Signature Update choice. You can choose to have scan engine signatures updated from FSSMC (that is, from the choices you made in the Signature Redistribution Job) or from the Internet. Whichever you choose becomes the primary update location; the other one becomes the secondary update location. Select "Unchanged" to leave the choice as it currently is.
    6. Set the job schedule in the Schedule Job section. Indicate the date and time that the job should start on the target servers. If you do not schedule the job (by selecting Do Not Schedule), you must manually start the job, after you complete the configuration, by clicking Run Now (on the Manage Jobs work pane).
    7. Click Next. The Assign Job work pane appears.

  4. On the Assign Job work pane, select the servers and server groups that the job will run on.

  5. Click Finish to return to the Manage Jobs work pane. Your new job will appear in the Operation Jobs section.

  6. If you have not scheduled the job, you can run it by selecting it on the Manage Jobs work pane, and then clicking Run Now. The Run Job Now work pane appears. Click Run to start the job.

Editing a Job

To change the settings of a job, select it in the Manage Jobs work pane, click Edit, and then make your changes on the work panes that appear. These are the same work panes that were used when you created the job.

Copying a Job

To create multiple jobs that are similar, you can use the copy function. For example, if you want to create a separate redistribution job for each engine, you can configure one and then copy and modify it for each engine.

To copy a job

  1. Select a job on the Manage Jobs work pane.

  2. Click Copy. The Copy Job work pane appears.

  3. Enter a new job name for the copy.

  4. Click Copy to return to the Manage Jobs work pane. Your new job will be in the same location as the original.

  5. Select the new job, and then click Edit to make any needed changes. (For more information, see Editing a Job.)

Deleting a Job

To delete a job, select it in the Manage Jobs work pane, click Delete, and confirm your decision.

Viewing Job Status

You can check the status of any job by selecting it on the Manage Jobs work pane and clicking View. The current status of the job appears in a new window. Click Close to return to Manage Jobs.