Initial situation:

Splitting up the SEPPmail Secure E-Mail Gateway into different functional units may be necessary, e.g. due to an existing infrastructure with demilitarised zones (DMZ). Therefore, a GINA Satellite configuration is to be established.

 

Question:

What is to be taken into consideration when setting up a GINA Satellite configuration?

 

Answer:

Since three variants of GINA Satellite configurations exist, the procedure for setting up each of these versions is different.

 

•Variant 1
This basically corresponds to the Frontend/Backend Cluster, in which the frontend system exclusively assumes the GINA function.
 

•Variant 2
The communication between the base system and the satellite system takes place via SMTP port 25. Towards the Internet, the GINA web interface is usually provided separately via a web application firewall (WAF) via SSL port 443.

 

•Variant 2a
If the GINA is to be operated purely as a web server, that is external access to the machine is possible, but the system itself may not communicate with the outside, emails may be temporarily stored on the satellite system after being processed there. In this case, the backend system would collect the emails stored temporarily on the satellite system via POP3s.