| #

## Establishing a Security Baseline

When you have registered and activated ScanMail, you are ready to configure ScanMail features. Trend Micro recommends the following steps to establish a security baseline for your Exchange servers.

### Procedure

1. Update ScanMail.
   When ScanMail is released it contains a Smart Scan Agent pattern file, scan engine, virus pattern file, spam engine, and spam pattern file that was available at the time. However, Trend Micro continuously updates pattern files and engines. Update these components immediately following installation to gain optimal protection for ScanMail. See About ScanMail Updates.
2. Verify that ScanMail is running and functioning correctly.
   From the web management console, click Real-time monitor. The Real-time monitor page opens and shows ScanMail activities in real time. When you can read Real-time scan has been running since, then you know ScanMail is running. See Understanding Real-time Monitor.
3. Perform a manual scan of your entire Information Store.
   Trend Micro recommends performing a manual scan of your entire Information Store following installation. When ScanMail detects viruses/malware or other malicious code it takes action against them according to Trend Micro defaults. The Trend Micro default action for viruses/malware is clean, or quarantine when it is unable to clean.

When the manual scan is complete, you have established a security baseline for your Exchange environment and you can start to focus on maintaining a secure environment.

| ##### Note After installation and activation, ScanMail begins to protect your Exchange servers. ScanMail uses Trend Micro default values to filter undesirable content, block potentially harmful attachments, and scan for viruses/malware and other security threats in real time. When you are ready, customize ScanMail configurations to gain the optimal protection and efficiency for your network.