I. Introduction

If you use Microsoft Outlook, you can protect yourself from the kinds of e-mail viruses or worm attacks that make headlines by unleashing damaging code and disrupting business operations. To prevent such attacks, Outlook provides several security features as well as free updates to address the latest security issues.

II. Configuring Outlook

1. Download any available updates/patches for Internet Explorer and Office products.

How: Go directly to Microsoft’s website

http://www.microsoft.com

http://office.microsoft.com/Downloads/default.aspx

http://www.microsoft.com/windows/ie/downloads/default.asp

Why: To update Microsoft products to ensure maximum protection against the latest vulnerabilities and security threats.

2. Disable the Preview Pane and AutoPreview to prevent Outlook from downloading mail messages with potentially unsafe content.

How: While in your Inbox go to the View menu and deselect Preview Pane and AutoPreview.

Why: Viewing email messages with the Preview Pane can cause viruses to activate.

3. Prevent active content, such as ActiveX Controls and scripts, to be run from inside HTML e-mail messages, and increase attachment security.

How: From the Tools menu select Options. Then click on the Security tab. Change the Security Zone to Restricted Sites.

§ Click the Zone Settings button, then OK.

§ Select Custom, and then click the Settings button.

§ Choose Disable for all options under these headings: ActiveX Controls and plug-ins and Scripting.

§ Return to the Security tab and click on Attachment Security. Then set the option to High. (This option is not available in Office 2002)

Why: Protect HTML messages from viruses spread by means of scripting, and prevent attachments from launching a viral attack.

1. Protect your email with encryption and digital signatures.

How: Obtain a certificate, also known as a digital ID. From within Outlook, go to the Tools menu, then Options to bring up the Options dialog, then switch to the Security tab and click the Get a Digital ID button.

§ Depending on who issued your certificate, it might be automatically installed, or you might have to import it yourself by using the Security tab's Import/Export button.

§ After your certificate is installed, you can click the Security tab's Settings… button to see the S/MIME settings available to you. You can create signed or encrypted messages by composing the message normally, then opening its Options dialog. Click the Security Settings button, and you'll see the Security Properties dialog. Check the boxes corresponding to the security you want applied to the message, then send it.

§ For more information visit the Step-by-Step guide from Microsoft.

Why: To allow your mail to be protected against tampering and eavesdropping.

2. Configure Windows to display file extensions.

How: Click Start > Settings > Control Panel > Folder Options. Go to the View tab and uncheck Hide file extensions for known file types.

Why: To ensure that file extensions are properly displayed in order to recognize potential malicious file types.

III. Conclusions

Microsoft Outlook (not to be confused with Outlook Express) is by far the favorite target of viruses. Outlook is particularly vulnerable to email viruses, and many email viruses spread by sending out new copies of itself via email and using the Outlook address book as its mailing list. Alternative methods of protecting your computer, in addition to those listed above, include using current anti-virus software. Be sure to frequently update the virus definitions which can be obtained from the manufacturer’s website. Also, never open or download an attachment that you did not expect to receive, and be suspicious of any e-mail from an unknown source. Consider disabling Windows Script Host or render it incapable of automatically executing VBS files. Please consult with your local IT staff before proceeding with this option, as they may be aware of specific reasons why your computer requires Windows Host Script.