Difference between revisions of "Reveal Getting Started"

Latest revision as of 19:30, 5 March 2019

[edit] Overview

Reveal is an e-mail auditing solution for Novell GroupWise® that provides a quick, safe and immediate access to a company’s GroupWise® system so executives can review e-mail use for best practices and security.

Reveal allows authorized users to review the contents of any employee' mailbox, search for messages based on key words or content and retrieve these messages from GroupWise while maintaining the security of the system and leaving no hint to the mailbox owner that their e-mail accounts have been inspected for policy compliance. Reveal provides protection from information leaks, misuse of company e-mail, and legal liability. Reveal ensures that executives are able to accurately evaluate e-mail activity so they can properly enforce policy and procedure.

Product Overview From a MS Windows workstation connected to the GroupWise system, Reveal shows the executive any employee’s live mailbox without the need for IT staff assistance. Authorized executives to review the contents of any employee’s mail box, search for messages based on key words or content and retrieve these messages from GroupWise.

Live Confidential e-mail Inspection For legal, human resources and compliance auditors, Reveal provides the ability to maintain oversight to all e-mail communications within Novell GroupWise. Reveal monitors and scans all e-mail. This provides protection from information leaks, misuse of company e-mail, and legal liability. Executives can view live mailbox activity of individual users, and easily monitor company-wide e-mail communication.

Confidential e-mail investigations Reveal show authorized users the exact same mailbox that the user sees without any modification by an outside source.

Retrieve e-mail for evidentiary review Reveal can export e-mail into a wide range of formats for evidentiary review and assessment by your legal team including HTML, CSV, and XLS.

[edit] Previous Documentation

Reveal 2.0 Installation and User Guide

[edit] Bug Watch

These are the important bugs/enhancements:

• Reveal is not supported with GW 2014 yet

[edit] Licensing

Reveal 2.x requires a license to function properly. Demo users will need to contact their sales rep. for a demo license. You can help them find who their sales rep is HERE, if they don't know who it is already.

The license needs to be named license.pem and it needs to be placed in the Reveal application directory. The default location is C:\Program Files\GWAVA\GWAVA Reveal

[edit] Installation

Reveal can be downloaded from http://download.gwava.com/download.php?product=Reveal&version=versions.

Preparation

Pre-installation and pre-configuration:

• Workstation must have the Novell Client installed. (GW 2014 systems do not require the Novell client.)
• Know the address of the POA
• Have access to the domain database from the computer on which you are installing Reveal. (Linux systems require a mapped drive through a Samba share.)
• Administrator access to the primary GroupWise wpdomain.db database (Authenticated as Admin through the Novell client to the GroupWise system)
• Obtain / download the latest version of Reveal (GroupWise 2014 does not require access to the domain database or the Novell client, only an adminis-

trator account logged into the Win. 32 client.)

Note: Reveal doesn't work with GW 2014 yet. It is coming soon!!

System Requirements

Install Guide

Demo customers need to contact their sales rep for a demo license.

[edit] Administration

Reveal 2 Manual

[edit] Helpful Tips

Error Accessing a Mailbox in Reveal

[edit] Training Videos

GWForensics (Reveal) / GWMM (Vertigo) Fuze Meeting 2-28-19

[edit] Training Docs

Training Docs EMEA

[edit] Hands On

 Adding a license
 1) Get a Reveal license and rename it to license.pem.
 2) Place the license.pem file into the Reveal application directory C:\Program Files\GWAVA\GWAVA Reveal
 3) Open Reveal
 4) Click on Help | Registration
 5) It should show that Reveal is licensed and details about the license.

 Connecting to GW System
 1) Make sure you have the Novell client installed and are logged into the GW server.
 2) Make sure you have a mapped drive via the Novell Client to the GW domain.
 3) Open GW client and login as one of the user's on the GW Domain you are connecting to
 4) Open Reveal
 5) Click on 'Connect to GW system'
 6) Select 'Use current logged in account' for Step 1
 7) Browse to the mapped drive the GW domain, in Step 2
 8) Make sure 'Retrieve all objects from the 'live' GroupWise system and (re)create the cache file for other users' is selected.
 9) Click OK
 10) Type in the Reveal password of: GWAVA
 11) Click Login
 12) The Domain(s) and Post Office(s) should load on the left side

 Viewing Email from a User's Mailbox
 1) Open Reveal
 2) Connect to GW system
 3) Open the Domain and Post Office that this user resides in and double click on that username
 4) Double click on the user's Mailbox 
 5) The contents of the user's mailbox should load 

 Performing a Search
 1) Open Reveal
 2) Connect to GW system
 3) Click on 'Search Messages'
 4) Click on 'Users' and select the domain(s) post office(s) or user(s) that you would like to search on
 5) Choose a field you would like to search on, such as 'subject', and click on it
 6) Add a keyword to the list by right clicking in the white space and choose 'add keyword'. 
 7) Type in a word that you know is in a subject for at least one of the users selected in step 4.
 8) You can add other things to search on if desired, such as date range, etc.
 9) Click on 'search' 
 10) Click on 'Execute search'
 11) Click 'Start' to start the search
 12) Once the search has finished, you will see the search results
 13) You can click on 'close' to close the pop up search window

 Print Search Results
 1) Perform search using steps in above task
 2) Highlight all the messages that you want to print
 3) Click on 'Print messages'
 4) Messages should print

 Export Search Messages
 1) Perform search using steps in above task
 2) Highlight the messages that you want to export
 3) Click on 'Export messages'
 4) Leave 'All currently selected messages' selected
 5) Leave Export Format to MIME. You can only use Advansys Message Saver if you have a license
 6) Choose a location to export them to
 7) You can exclude the mime.822 or text.htm. Leave it at default to exclude the mime.822. 
 8) Click OK
 9) Click 'Start export'
 10) It will say 'Ready. X messages exported.' After you see this you can click 'close'
 11) You should see the exported file in the location you selected

 Export Messages
 1) Open Reveal
 2) Connect to GW system
 3) Open a user's mailbox and select a few messages
 4) Click 'Export messages'
 5) Leave 'All currently selected messages' selected
 6) Leave Export Format to MIME. You can only use Advansys Message Saver if you have a license
 7) Choose a location to export them to
 8) You can exclude the mime.822 or text.htm. Leave it at default to exclude the mime.822. 
 9) Click OK
 10) Click 'Start export'
 11) It will say 'Ready. X messages exported.' After you see this you can click 'close'
 12) You should see the exported file in the location you selected

 Print Messages
 1) Open Reveal
 2) Connect to GW system
 3) Open a user's mailbox and select a message
 4) Click 'Print messages'
 5) The message should print

[edit] Additional Training for Reveal

[edit] Reveal Training

Reveal is an administration tool that allows administrators to view, print, export, search messages in a live GroupWise system without hindering or impacting the e-mail system in any way. It’s design is to help administrators manage e-mail, especially for e-discovery purposes, and to help enforce policies and procedures mandated by management. Through this training, you will be able to install, connect, and use Reveal to see how the particular functionality may help administrators. Reveal is a tool that can benefit administrators through help managing their system in a very simple and efficient manner.

Prerequisites Reveal requires several things to be installed prior to installation of the product. • Reveal will only run on Windows Operating Systems. It will run on pretty much every Windows OS ranging from: Windows 2000 Server, to Microsoft Windows Server 2008. Windows ME is not supported and also earlier versions of Windows • GroupWise 6.5 + Reveal will be able to run. This is the back end. Anything earlier will not work. GroupWise 2012 I supported. In 2012 Reveal no longer can create a Trusted Application key automatically because that API was removed by Novell. Instead, it must be manually created. • Microsoft.net Framework 3.5 SP1+ must be installed to run the Print, and Permission Tool . It is recommended to install. • Novell Client v4.91 SP1 better I required to run Reveal. If running on Windows VISTA, 7, or Server 2008, Novell Client 2.0 is required. • Internet Explorer 7+ is essential for printing . It is recommended to update • A GroupWise client must also be installed on the workstation you intend to run Reveal. • Network connection to GroupWise system. It is recommended to setup a mapped drive to the GroupWise system domain and post office files. The file that needs to be accessed is the wpdomain.db • Install Word Processors, Spreadsheets or any other Microsoft products to be able to view, or export data to the respected format.

Installation of Reveal The install of Reveal is very straightforward. After downloading Reveal (latest version 2.0.9.0). Simply run the Reveal-setup-2.0.9.exe. Follow the prompts to install. It is recommended to install the product in the default location. (C:\Program Files\GWAVA\GWAVA Reveal) Subsequently if you need to uninstall, or modify the installation, you can run the Reveal-setup-2.0.9.exe again. You can also remove the Reveal program from the Add/Remove Programs in the Windows Control Panel.

Any errors that may occur during this installation may be due to incompatibility, permissions, or not having met the prerequisites above. Once the install is completed, a Reveal shortcut will be placed on the Desktop, and the Reveal application put into the Start Menu.

Licensing Reveal Licensing Reveal is done the same way as the other products. It does have a 30 day demo. If the program has never been installed on the workstation, then it will enter into 30 day demo. There are limitations to this however. After all, it is a demo after all. • Demo mode will only allow you to see 10 users (the first 10 in the domain). Will only be able to see a limited amount of messages. • Searching will also be limited to 25 messages. • Exporting will also only be able to do 25 messages. Once the expiration is up, the program must be licensed. The customer will need to work with their sales representative or licensing department to obtain a license key. Once they obtain a license key they can download the .pem file for Reveal at http://licenses.gwava.com

Once the license is downloaded it is important to rename it to: license.pem. If not renamed, the Reveal product will not recognize it. Copy the license.pem file to the Reveal application directory: C:\Program Files\GWAVA\GWAVA Reveal. Then launch the Reveal product. In the Menu Bar click on Help and Registration.

This will show the license information. If noting shows, check the name of the license and try again.

IMPORTANT Note on Users and Licensing Be aware the number of users that is in the license is based off of how many has been reported to the licensing department. To get an accurate count of the users in the system, make sure to count all users, including the disabled or expired accounts. External accounts do not count, and are not applicable. If needing more users, please have customer contact sales, or licensing. In ConsoleOne right click on GroupWise system and click on Information. This will show he number of Users that should coincide with what is needed for Reveal.

Launching Reveal Running Reveal is straightforward. Again, it is important that a GroupWise client is installed to run Reveal. If not, it will exit out of the program. Also, after the 30 day trial is up, it will detect a license does not exist and exit also. So be sure that both of those requirements are met before launching. Double click the shortcut, or run the application from the Start Menu. The Reveal logo will appear and the Reveal window will appear. It will be blank and only a few things will be highlighted. At this point there are several options to perform: • Connect to GroupWise system (also from Execute in Menu Bar) • Change the Language and enable Log file in Settings from Menu Bar • Look in the help Section to see About GWAVA Reveal (which shows the change notices for each revision, and the Credits), go to the Reveal website (GWAVA) , or look at the licensing section. • Print Setup (uses Internet Explorer settings, and latest versions of those are recommended). • Close the program. We will go over the connection to the GW system in great detail, as well as the Print Setup. The Language is self explanatory, as well as the Help section, so we will not go over those. The log files we will go over in another section. So without further ado, lets connect to our GroupWise system.

Novell Client, Mapped Drive, and Permissions Prior to connecting to the GroupWise system an NDS user must have full read and write permissions to the domain directory for GroupWise. Admin is the recommended log in for this. The Novell client must be installed on the workstation that Reveal is on in order to connect. Once the Novell client is installed, log into the domain, an organization with correct context and authentication. Make sure the user is a super user, who has full read and write access to the domain. If using a different user other than admin or root, check in ConsoleOne, or change to the admin user and try again.

In ConsoleOne/GroupWise Administration you can get the context, and information easily by looking in the NDS section and find the admin user there. Expand the NDS section, the Tree name, and click on the Server. Look for the admin user. Then simply find the user and then go up to see which Organization and OU the user belongs to: admin.users.treename

It is also important that in the Advanced Settings for the Novell client make sure that File Caching is turned On, and File Commit it is turned off. This can benefit in the connection. It is also highly recommended to map a drive to the domain so Reveal can connect. It isn’t required, but is certainly is helpful. Simply access the network location for the domain, right click and map a drive. Choose a letter. Then set to connect the drive upon startup of Windows, in case you restart the machine. This will prove very helpful in connecting to the GW system.

Connect to GroupWise System Reveal can only connect to a GroupWise system. It does not connect to Exchange or any other e-mail system. It also must connect to a live GroupWise system. Backup systems that aren’t part of the main domain, or the system in ConsoleOne cannot be accessed. If a customer wishes to access that system, they must incorporate it into their own system first, before Reveal can access it. The reason for this, is because the API restricts access unless it is part of the live system. After Launching Reveal, click on Connect to GW system (or Execute | Connect to GW System) The connection window will appear. The connection of the GW System is done in 3 steps. The instructions follow: 1)Step 1: The first step is to log into the desired GroupWise system. This checks for the GW client and will log into the GroupWise system. To be able to log into GroupWise it requires access from at least one mailbox in the system.

If you have a GroupWise client running it will detect that and provide you with access to 2 radio buttons: Use current logged in account, and Use other login credentials. If you do not have a GW client running, the Use current logged in account will not be highlighted. If using current logged in account, make sure it is a user that is part of the system you wish to connect. If not, Reveal will not be able to authenticate and will error out. If wanting to use another user besides the one logged in check the radio button and then enter in the User ID and other information. The User ID: is the mailbox name. Password for UserID (mailbox must have password setup or Reveal cannot authenticate) Address: This is the address of the post office where the mailbox above resides Port: Client port-default is 1677. Check ConsoleOne in the Properties of the POA to verify port. Once the information is filled out move on to step 2.

2)Step 2: The next step is to locate the domain directory so that Reveal can connect to it. It MUST be a primary domain. It will not be able to connect to Secondary domains. Click on the elipses button and navigate to the domain directory. Select the wpdomain.db and click ok. A mapped drive is helpful in this case. If you are unable to connect to GW and the path appears wrong in the connection screen, edit the settings.ini file and remove or change the path here.

Note: If you are running GroupWise on Linux you MUST check the Use Samba box. Even if you aren’t using SAMBA, you still must check this box if it is running on Linux. Setting up SAMBA will be covered in the advanced training module.

This is where the NDS login becomes important. The NDS login must have proper access to the domain directory and MUST have read and write access. (cannot just have read).

3)Step 3: The final step is to decide how to retrieve the GroupWise Objects. There are 2 ways to do this.

1) Live: This will connect directly to the GroupWise system and pull all of the objects in the system. This may take the longest because it has to go through the network, connect to the domain and then retrieve all of the post offices, domains, etc… This is required to do the initial connection, and after changes are made to the GW system. It is best to run a live connection every so often to make sure the cache file is renewed 2) Cache: When Reveal connects to the live GroupWise system it creates a cache file (gwsystem.xml) which is stored in the primary domain directory. The cache file contains all of the domains, po’s and users from GroupWise. On the subsequent connections with Reveal, you can select to retrieve the objects from a cache file instead, which will be a lot faster to connect than it would retrieving new objects. However, if you ever make changes to the GW system, it is best to connect to live GW system after the fact. If you ever encounter an issue where a user, domain, or information is not showing up, reconnect Reveal using live mode. Once you have finished with the settings click Ok. A new dialogue box will appear to enter in the Reveal password. This is the password Reveal uses so that it can restrict access to everyone except administrators.

The default password is GWAVA (all caps). After logging into Reveal for the first time, you can then change the password by clicking on Aministrator in the menu bar and selecting Change password.

Connection When Reveal tries to connect to GroupWise it will begin creating a cache file called gwsystem.xml and put that into the primary domain directory. At the same time, a reveal.ini file is created and put into the primary domain directory as well. The reveal.ini file contains the configuration settings to connect to GroupWise. This will contain the password for Reveal, trusted application key and Auditing information. This file can be recreated at any time. Be advised that if the reveal.ini file gets recreated, a new trusted application key, will be recreated, and the password will be reset to default. The Reveal.ini file is very important to reveal. This is where Reveal gets it’s information to connect to GroupWise. This is also where it stores it’s encrypted password, and the trusted application key. Prior to GW 2012, Reveal encrypted the key. With the Reveal fix for GW 2012, the key is not encrypted. To reset the password, or recreate trusted application key edit the file, or simply delete it. The next time Reveal is launched it will create a brand new default reveal.ini file. The reveal.ini gets created upon startup, hence the reason why it is important that the primary domain directory has read and write access. The next step is Reveal going to try to log into the GroupWise system using the credentials, but there is still one more thing it requires before being able to log in. GroupWise must receive a valid Trusted Application Key in order to log into the system. The Trusted Application Key gives access to 3rd party programs, such as Reveal, to be able to view and authenticate to the system. There are 2 ways to create a trusted application key:

Creating Trusted Application Key 1) The first way to create a trusted application key only works on GroupWise 7 and 8 versions. When Reveal first connects to GW, it will respond saying a trusted application key needs to be recreated and will proceed to do so. It may take up to a minute or longer for the Trusted Application key to filter down to all of the domains on the system, especially for larger systems. 2) The second way to create a trusted application key is done only on GroupWise 2012. Novell removed the trusted application .dll file for its new version, which Reveal can no longer automatically create trusted application. Instead, you must create a trusted application key manually. The steps are as follows: Manually Creating Trusted Application 1) Open up Console One and authenticate as admin, and log into Primary Domain 2) Select Primary domain. Then in the menu bar, click on Tools | GroupWise System Operations | Trusted Applications 3) Create a new trusted application 4) Name it Reveal. Leave all other settings unchecked. 5) At the bottom, select a location to where you wish to put the file. 6) For the name of the file give it a name (i.e. revealapp.txt) The trusted application key will be generated and saved in the file in the location specified. It may take 1 minute or more to filter down to the post offices.

Once that is completed the next step is to download the Reveal fix for GW 2012: ftp:\\ftp.gwava.com\outgoing\revealfix.zip Once that is downloaded, extract the contents. a) Copy the reveal.ini file and put that into the primary domain directory b) Open up the trusted application key file that was created in ConsoleOne. Copy the trusted application. c) Open the reveal.ini file and paste the key to the right of the line that contains EncAppkey= . Save the file and close d) Copy the Reveal.exe file and replace it with the .exe file in the Reveal application directory-C:\Program Files\GWAVA\ GWAVA Reveal Connect everything normally and you will be able to see the other information. In some cases where Reveal cannot see any users mailboxes or information, it is necessary to recreate trusted application. To do that in GW 7 and 8, click on Administrator in the menu after connecting to GW with Reveal, and select recreate trusted application. If on GW 12, remove the reveal.ini from the primary domain directory, and from ConsoleOne and create a new one using the steps above. Once you have connected to GW a screen will show the number of domains, post offices, and users are in the system. After that is finished, your GW system tree will show.

Configuration-Auditing, Log File, Language, Print Setup There is not much to the configuration of Reveal. For the most part as soon as you get connected you are ready to use the product. However, the initial run of the product will prompt to setup the Auditing.

Auditing: The auditing for Reveal creates a separate log file that contains all of the information on what the user logged into Reveal does. It will log everything that is done from printing, exporting, searching, or viewing messages. Auditing is required.

Select how you want to audit: using redline, or simple textfile only. If using Redline, make sure you have a Redline system setup and have the registration name and code available. For more information on this, please see Redline documentation. If using simple textfile auditing only, the middle section to configure Redline auditing settings will be grayed out. After selecting Use simple textfile auditing only, the bottom portion is highlighted. Specify the directory you wish to store the audit logs. They can be anywhere you choose. Then set how big you want the logs (recommended no bigger than 1 GB). Finally, set the option to stop creating log files at a minimum free disk space. Default is 50 MB. If disk space becomes lower than 50 MB, Reveal will not create audit logs to save space. Also, be sure to have read/write access to the chose auditing directory. You can access the Reveal auditing at a later time by clicking on Administrator | Reveal Auditing at any time.

Language The next setup is optional, but important. By default, Reveal will install as English. You can change the language by clicking on Settings | Language in the menu bar

Print Setup The print setup is to setup your printer settings how you wish when printing out messages. It uses the printer you have set on the workstation and uses the same settings as Internet Explorer. It is best to have the latest versions of IE, as the interface will be more limited on earlier versions.

Click the Print Setup button and a new window appear. From here you can change the page setup however you like, and the font. Click Ok to save the changes.

Interface-Basic Navigation Reveal has a simple and easy to user interface. It contains 4 different sections. The Menu Ba, Tool Bar, Navigation Window and the Message Window.

1.Menu Bar: The menu bar consists of 5 different menus: File, Execute Settings, Administrator and Help. Each one is explained here: • File: The file Menu drop down only contains one item to select. Close. This closes the Reveal Program • Execute: This menu option contains 2 items. Connect to GW system and Search messages. If already connected to GW System, this option will be grayed out and Search Messages will be highlighted. If not connected to GW system, the option to Connect will be highlighted and Search Messages will be grated out. • Settings: The settings menu gives 3 options-Language, Create logfile, and Archive settings. (Archive Settings will only show when editing settings.ini file and putting in UseArchiveBrowse=1. See Personal Archives section later in this module). The language lets you change the language of the Reveal program. Create logfile (checked by default) creates a debuglog.txt file, found in the Reveal application directory, that logs all of the details of Reveal, including errors. The Archive settings, which will be discussed later, allows you to select a personal archive location to browse for GW archives. • Administrator: This gives 4 options-Change password, (Re)create Trusted Application, Reveal Auditing, Reveal Rights. Change password allows you to change the password from the default GWAVA to something to something different. Recreating trusted application (only done on GroupWise 7, and 8), can help in reestablishing connection to the GW system, and is used for troubleshooting purposes. Reveal auditing, which has already been discusses, can show you what type of auditing settings that have been configured. Finally, Reveal rights allows you to give administrators access, or restrict them, from certain domains, post offices or users. This will be gone over at a later time.

Note: It is recommended to change the password from default GWAVA to something different after first logging in. This is for security purposes.

•Help: The last menu option is Help. The 3 options are: About GWAVA Reveal, GWAVA Reveal on the web, and Registration. About GWAVA Reveal shows you the version of Reveal and the changes in each of the revisions. It also can show you the credit on who created the program. GWAVA Reveal on the web takes you to the Reveal website on GWAVA.com. Registration shows you the license information, number of users and, and validity of the license. Any questions on licensing should be addressed to sales representatives, or the licensing department.

2.Tool Bar: The tool bar consists of 7 options to choose from that allow you to perform specific functions with Reveal. They are all addressed here. • Connect to GW system: This button allows you to Connect to the GW system. It will pull up the connection screen with the 3 steps (discussed above). If already connected with Reveal, it will be grayed out. This works exactly the same as Connect to GW system in the Execute File menu. • Connect to Reload: Reveal has the option to connect to Reload and view the messages from the system. Clicking this button allows you to enter in the Postoffice name, ipaddress and port you wish to connect. We will go over in more detail the connection to Reload at a later time. • Search Messages: This button takes you to a new menu which allows you to search or messages in GoupWise with Reveal. We will discuss the Searching at a later time and in more detail. • Export Messages: This allows you to export any selected messages browsed, or searched for. They can be formatted to be used in Advansys System, or simply exported as MIME messages. This will be discussed a bit later. • Print Message: This will allow you to print messages that you have selected. • Print Setup: This has already been discussed, but goes along with Printing Messages. This setup contains the configuration for how you want the messages to print ad the font to be used. • Proxy Report: This report will show you which users have access (proxy ) to one another with the permissions on each. This will be discussed in more detail later.

3.Navigation Window: The navigation window shows you the list of domains, post offices, and mailboxes. Click on the + signs next to each section to expand and view each user. All of the users are in alphabetical order, and organized in their own respected categories. A red user icon indicates a simple user. An orange box a resource. A blue is an external user, or administration user. When selecting a mailbox you must double click to see the items underneath. Once there expand further to see the different address box, proxy-rights, folders, etc.. for the user. Double click on the folder to view the messages therein. Each folder will contain a number, in parentheses, to give you an idea of how many messages are in the folder. You can only view messages from users that are not disabled or expired. If expired or disabled, a red minus sign will show as the icon.

Note: If for any reason there is a red minus sign next to the user when navigating, this means that the user or mailbox is not accessible, disables, or expired. When you double click on the user it will give you a similar message saying it cannot access the mailbox. Try and reconnect Reveal to GroupWise to see if that fixes the problem. Be sure to check the Use SAMBA box if GroupWise is running on a Linux system. If that still doesn’t work recreate the trusted application key and reconnect.

4.Message Window: The Message Window will contain the details of each message that is in the folder. If there is nothing in the folder, nothing will show in this window. Once you find a folder that contains messages, double click on the folder to load the messages.

Viewing Messages Now that we know the basic interface and can navigate to some extent through the system, we come to the most utilized and most important features in the Reveal program: Viewing messages. To view a message you must first select a user from the Navigation Window. After successfully double clicking on a user a list of the folders and items for the user will be displayed. Find the folder that you wish to view message and double click. Note the number next to the folder. If it says 0, then nothing will be displayed. Once you double click the folder, the messages will populate in the Message Window to the right.

This is how you browse messages in Reveal. Scroll up and down to view the messages. This is a brief overlook of the messages. You can sort them by clicking on the top header column of your choice. The headers are as follows: • From: This is who the message was sent from. • Subject: This is the subject of the message. • Date: This is the creation date of the message • Owner: This is where the message originates (where the message is stored) • Quelle: This tells if the user is online or offline. It just means that the user is active or inactive. • Ordner ID: This is the Message ID for the message. These 6 headers are the default headers. However, there are additional headers that you can view. To do this, right click on the header bar at the top and select Show/hide columns. The rest of the Headers are as follows: Note: When changing the columns, you must refresh the folder contents. Double click on the folder again in the Navigation Window to refresh. If a column is blank, refresh the folder.

• To: This is who the message recipient wa going to • Size: This is the size of the messages ( in KB) • Status: Tells if the status is Read or unread • StartDate: mostly used for appointments, but shows the start date of the appointment, task, or note • Enddate: mostly used for appointment, but shows the end date of the appointment, task, or note • Attachments: This will show count of attachments that are in each message • Folder: This shows which folder the message is located in. • MessageID: This is the exact same thing as Ordner ID Keep in mind as columns are added, this will increase the time that the messages are loaded into the Message Window. This is especially for the attachments, as when that’s added to the headers, this will be rather slow (depending on the amount of messages and attachments) and can take a while to bring up the messages. If it is slow, reduce the columns and refresh the folders again.

Also when looking at messages, you can perform specific tasks within the Message Window. Selecting Multiple Messages: To select multiple messages select a message, and then hold down the Ctrl key and click on others. Each one you select will be highlighted in green. Note: Holding down the shift key to select multiple messages in Reveal does not work. If you wish to select all messages, click in the Message Window and press Ctrl-a. You can then hold down the Ctrl key and click on individual messages to remove them from being selected. Open Message: You can open up a message to view more details of the message rather than just the overview. You can only view one message at a time. Even if you have multiple selected, you can only open the one message you click on. To open a message you can double click on the message, or right click on the message and click on Open Message. A new Window will appear. At the same time this will copy the message in the preview folder located in C:\Program Files\GWAVA\GWAVA Reveal\preview

In this window you can see who the message was from, to, CC and BCC (currently broken in 2.0.9.0) the Subject, and creation date and time of the message. Not only that you can see the body of the message along with the attachments. To open an attachment double click on it. There are also several things that can be done to the message at this point: Close: Closed the message and returns you to the Main Navigation Window Forward: Forwards the Message to an e-mail address you type in the field.

Next: Takes you to the next message in the list (if it hits the end of the list then it will not show the next) Previous: Takes you back to the previous message in the list (if at the beginning of the list it will not show any new messages) Print: Prints the message Save: Saves the message as a .txt file to your local workstation HTML: If the message contains HTML content you can click on this to view in HTML. Text: Switch to text view only

Viewing messages can be helpful to see the content of the message, and the recipient, and sender. It is helpful for e-discovery purposes, and the user will not know that the message has been read. Reveal will NOT change the status of the message if read in the Reveal program. Save Message: Selecting a message, or multiple messages and right clicking and click on Save Message(s) allows you to save the messages to your local workstation. All this will do though, is save he basic information of the message. It will not include attachments. If selected more than one message, each one will be separated by a divider. There is not a way to change the header displayed. It is hard coded.

Forwarding Message: To forward a message you can open up the message and forward it there. You can also right click on a message, or multiple messages, and click on Forward Message. Type in the address you wish to forward to and it will forward to that address. When forwarding it will display the user whom you are forwarding the message from. Also, in the subject it will say Fwd by GWAVA Reveal. These cannot be changed. They are hardcoded.

Print Message List: If your right click in the Message Window and click on Print Message List, this will print out a list of messages, that are in the folder you are looking. This only gives you a brief list of what is shown in the view.

Print Message: You can print a message by either opening up the message and clicking print, or selecting a message, or multiple messages and clicking print. You can also click on the Print Message button in the Tool bar. The message printed will show all of the details of the message. It will also contain a Reveal header stating it was printed by Reveal. When Reveal prints, it launches the RevealPrint.exe program that comes with the installation of the man program. Then sends information to a queue located in: C:\Program Files\GWAVA\GWAVA Reveal\printjob. Once this is loaded, Reveal adds it’s headers, and then sends the print job to the printer, with the settings from the location workstation. From there it prints. It is vital that Microsoft.net Framework 3.5 SP1 be installed for this to work, as this is the bridge to be able to print with Reveal. If nothing prints, or an error occurs in Reveal, install Microsoft .net Framework 3.5 SP1 or later. RevealPrint, since it is its own program essentially, contains its own logs. The tracelogs, found in C:\Program Files\GWAVA\ GWAVA Reveal\Tracelogs can help to see how the print gets loaded, moved to the queue, added the headers and printed. This can be helpful for troubleshooting purposes. There isn’t much you can do to change the header that Reveal includes in the printout, but you can go to Print Setup and change it to view whatever you choose. Click on Print setup prior to printing, and click on Page Setup. From here you can adjust the Headers and Footers to whatever you need, or simply choose empty to have Reveal not print anything.

You can also change the font size, or type to whatever you choose. When printing out multiple messages it will print each one on a separate page. Export messagelist: Export messagelist is similar to print messagelist except instead of going directly to the printer, it exports it in one of the 3 format you can choose: HTML document, CSV document, or MS-Excel document. This will show a list of all of the messages you are currently viewing in the folder. To use MS-Excel, you must have Excel installed, or an error will occur and the export will not work. Export Message: Exporting a message in Reveal allows you to move the message from Reveal, and GroupWise and save it to your desktop is a couple of formats. You can export by opening up a message and clicking export, or click on a message , or multiple messages, right click and click on Export Message(s). You can also click on Export messages in the tool bar. When you click on export a new window appears:

The first section asks what you want to export. The message you have selected from the previous screen, or Complete Mailboxes. If you click on complete mailboxes, the Select which mailboxes to export becomes active. You can then select all of the contents of the mailboxes, and even shared folders with the option “export incoming shared folders” The bottom section is how you want to export. You can export in 2 methods: MIME (which is the standard, text file export), or Advansys Message Saver, which offloads the messages to the Advansys program. More on that here in just a moment. Once you choose your format, select a location to export. This can be anywhere on the workstation. Just be sure you have enough space allocated to contain the messages. The minimum free disk space tells the program to stop if it reaches the number. Default is 50 MB. The last two options are to exlude the mime.822 attachment and text.htm attachments (if you so choose). You can only exclude text.htm attachments when MIME format is selected. Advanced export options:

These two options allow you to put in a personalized subject to the export, or to not export any attachments whatsoever. After exporting the messages will be saved as an EML format. (for MIME). This will allow you to view the messages in a text editor, or can load them into GroupWise and view them there. The messages will be exported based off of the owner of the message, and the folder. When exporting to Advansys, it will move them to a location where Advansys can pick them up and view them using their own utility.

Setting up Advansys With exporting messages, a 3rd party tool can be used to help view the messages exported and can an extra benefit for e-discovery purposes. Their program is designed to be able to view messages, and collaborate using e-mail system that can view messages, forward, print, and utilize. The training for Advansys is not included in this module, since they are their own product. We do not support or provide training for Advansys. However, Reveal does integrate with Advansys and it is important that we know how to integrate. The following steps must be taken in order to integrate with Advansys: The Advansys Archive To Go program is a third party application designed to provide a storage system for exported messages from GroupWise or Reveal. A viewer is provided for the user that allows administrators to peruse, or search for exported messages. For further information, documentation, and support for Advansys, Archive To Go or any of their products, please visit their website at : http://www.advansyscorp.com/

Note: GWAVA Technologies Inc. is not responsible for and does not provide technical support for Advansys or any of it's products. Please contact Advansys to answer any questions regarding sales, or support.

1) Install Reveal. Using Reveal documentation install the Reveal software. This would include installing Microsoft .net Framework, and making sure that a GroupWise client is installed, as well as the Novell client on the Windows workstation or server. For further information on the install of Reveal, or the support requirements visit http://support.gwava.com for system requirements, prerequisites and documenation.

2) Install Advansys Archive To Go Software. Install the Archive To Go software by simply downloading, and running the setup application. The instructions, requirements, as well as the download is found here: http://www.advansyscorp.com/a2g-gwava-reveal.htm

Note: The demo version of Advansys Archive To Go may not integrate or function with Reveal. A full version of Archive To Go is required in order to integrate successfully with Reveal.

3) Install Formativ .net Framework. This is a separate installation from the Microsoft .net Framework and contains separate files the are required in order to run Archive To Go and Reveal integration. The download for Formativ .net Framework is found here: http://www.advansyscorp.com/download/advansys-formativ-framework-1.0.msi

4) Install Message Saver Pack The final installation piece to integrate Reveal and Archive To Go is to install the Message Saver Pack. The download is found here: http://www.advansyscorp.com/formativ_pack_message_saver.htm

Once these components are installed, and you have licensed the version of Archive To Go, Reveal will be fully integrated with exporting messages using the Advansys Message Saver system.

Proxy Report The next feature in this list for Reveal is the Proxy report. This will show you a report on which users have access to mailboxes on the e-mail server. This is only a report, and you cannot change proxy access. This can be useful to display who has access to which folders, or accounts in the system.

Click on the Proxy report in the tool bar.  A new window will appear. Select the users you wish to see in the report: 

Click Ok. Click on Create Report. After it is finished it will display a screen showing the detailed information on user, who they are proxied to and which read and write access they have to certain areas of messages, appointments or items.

Another window will also appear asking if you want to save the report. If you do not, click Cancel. If so change the directories where you want the reports saved, and click Save.

Connect to Reload System Reveal has the ability to connect to Reload and view the messages there, as if it is a live GroupWise system. To do this there are certain requirements that must be done in order to do that: 1) Reload must have setup to integrate with Reveal. Without this setting, Reveal will not be able to connect to Reload. • Go into the Reload administration window (type Reload in terminal prompt). • Select System | Administer System • Select Integrations | GWAVA Product Integration • Enable Reveal | GWAVA Reveal Integration

2)You also must have Access Mode running in Reload also, with the backup you wish to view in Reveal. To enable access mode, please consult Reload documentation. 3)Once Access mode and integration is enabled, we then need to connect Reveal to the Reload POA. After connecting to your live GroupWise system, click on the Connect to Reload button in the Tool Bar. Enter in the POA Name, address and port (the same configuration as in Access Mode in Reload.) Note: It is important you get the correct post office information in there, or it may not connect.

The Connect to Reload button will be highlighted in orange to indicate you are connected to a Reload POA. Refresh the mailbox of the selected user, and you should be able to view the messages in Reload.

Connect to Personal GroupWise Archives Another feature in Reveal is the ability to connect to Personal GroupWise archives. If users have archived their messages from GroupWise to their local workstation, then Reveal can open up those archives and view them. The steps provided allow you to do this: 1. Navigate to the C:\Program Files\GWAVA\GWAVA Reveal 2. Edit the file: settings.ini 3. In the [Settings] section of the file (just below it) add in the line: UseArchiveBrowsing=1. Save the file

4. Launch Reveal and connect to GroupWise. 5. In the Menu bar click on Settings. A new item should appear called Archive Settings Note: Without the UseArchiveBrowsing=1 line in the settings.ini the option will not be there. If it still does not appear, check the setting in the ini file again, and relaunch Reveal. 6. After clicking on Archive settings you need to specify the location of the archives in which you want to look at. If the archive is in a network location select that. Keep in mind this can only look at one users archive at a time. Edit the path to the location and add it to the UNC paths to search for the archives. Do this for as many archives you with to look at for the users in the list.

Then click on the user and expand the contents. Below that will show an Archive section. Double click on that. Reveal will proceed to look at your search path and check for the users archive. Once it finds it you will be able to view the messages in folders under the archive. Note: You CANNOT search for archives in Reveal. You can only browse. If Reveal cannot find the archive, it will do a search for the archive on the system. If it still can’t find it will prompt you that it cannot find it, and ask to change your search paths.

Searching Messages Searching messages in Reveal is simple and easy to use. It allow you to filter for criteria such as subject, keywords, users, from, and to fields, date ranges and so forth. To start the search click on Search Messages in the Tool Bar or click on Execute | Search Messages from the Menu Bar Tip: A really good tip before searching messages is to make sure you are connected to the GW system. To check that, simply find a user that is active and open up their folders. If you are able to view messages then you are connected and the search will work just fine. A new window will appear allowing you to search for messages. Each of the sections of the Search is described below:

Search!: This section is the man search area and how you execute the search. There are 5 sections to this area. 1. Open Search Criteria: This allows you to open any saved search Criteria that was saved. There are 5 default search criteria that are preloaded with the program. These will show in the window, as well as any other custom, saved, searches. Select the Citeria you wish to Load and click on Load. In the Search Window under “Currently loaded criteria” will show the search criteria that Reveal will search on. Notice also, that the searches are loaded from the Searches directory located in C:\Program Files\GWAVA\GWAVA Reveal. You can change this directory by editing the Settings.ini file in C:\Program Files\GWAVA\GWAVA Reveal\. Change the SearchesDir= to whatever you choose. If you reinstall the program, or update, this path will change to default.

2. Save Search Criteria: After you have added keywords, users, dates, etc… to your search, you can then come back to the Search! Section and click on Save search. When you save it will save (by default) to C:\Program Files\GWAVA\GWAVA Reveal\Searches directory. You can save it in another directory, but when loading the search criteria, it will only look in the Searches directory. If you wish to remove the Saved Search criteria, you must navigate to the Searches directory and remove them manually.

3. Clear Searchcriteria: If you have loaded search criteria and wish to search on something different, or clear what Reveal is searching on, click this button. Once clicked, the search criteria will disappear from the “Currently loaded criteria”.

4. Execute search!: Once you are ready to perform the search click this button and it will initiate a search.

Users: This section allows you to filter the search based on users, or mailboxes. By default, all users in the GroupWise system will be searched. To select on specific domains, post offices, or users, click the Selected users only at the top and then expand the list to select the users.

Subject: This section allows you to search for a word or phrase in the subject portion of the message. By default it searches for all keywords. To search for specific keywords select the radio button Keyword(s) in list. Down at the bottom will show For this keyword list to do and has two options to choose from: Find ALL Keywords and Find ALL keywords (the 2nd option is actually find any keyword, but is a typo). The difference between the two is Find ALL will search for all the words you are searching for, and if one of the keywords is not found, the result will return not results (More like an AND Boolean expression). The 2nd option, Any keywords is more like an OR Boolean expression. It will search and find any of the words in the list, and if it only finds one of the words it will display the results. It is recommended to have the Find ALL keywords (on the right) selected for better results. To add a keyword to search for you must click on Edit the Keyword list.

The menu has multiple options. The first you want to do is Add a keyword. You can click on the Add Keyword, or press the letter a to shortcut to adding a new keyword. Type in the keyword or phrase you are searching for and click OK. The keyword will populate in the box above, and will be checked. If it is unchecked, Reveal will not search on that word. You can also edit the keyword after you have added it. Select the keyword, and click on the Edit the keyword list button. Then click on Edit keyword, or type the letter e. Retype the word to and click OK to edit. You can add more words to the list, as many as you would like to search on. There are also other features in the Edit the keyword list:

Select all: checks all keywords in the list to search on. Deselect all: unchecks all keywords for Reveal to search on. Remove Keyword: removes keyword from the list Save Keyword list: This will save the list of keywords in a (.lst) file. This is helpful to be able to load the list of keywords again without having to add them again. (you can also save the search criteria in the Search! Section too to save the keywords). Load Keyword list: loads a saved keyword list (.lst) file and puts them into the box. Add list to keywords: same as loading keyword list

Message Text: This criteria searches in the message body for keywords. The keywords work exactly the same as in Subject. Any field: This will search for keywords in any field, everywhere in the message, including attachments, from, and to fields etc.. The keywords work exactly the same as Subject, and Message Text.

Sender: This allows you to search for the sender in the message (message from). You can put in a partial sender address or a full sender address. You may use wildcards (*) to perform searches also. You add in the sender address just as you do a keyword. Recipient(s): This allows you to search for the recipients of the message 9message to). You can put in partial recipient address or full address. You may use wildcards (*) to perform searches also. You add in the recipient address just as you do a keyword. Attachments: This allows you to search for keywords within an attachment. There are two options to choose from. “Message MUST contain an attachment” or “Attachment type in list” or both. The Message MUST contain an attachment will skip messages without attachments and only show results that contain an attachment. The Attachment type is specific to what you are searching for (pdf, xls, .docx etc…) Once you select Attachment type in list you can edit the Keyword to add in your attachment types you are searching for. Size: You can search on messages with a specific size, or a size range. By default, it will look for all messages regardless of size. The other options are Size doesn’t matter (default), Small which is less than 5kb, Average, between 5 kb, and 500 kb, Large, which is larger than 500 kb, or a custom size of your choosing in KB. This can help to filter for content that you know is a certain size. Date range: Finally, the date range allows you to search for messages on a specific date, or a range of dates. By default, the Date doesn’t matter is turned on. If you want a specific date range select the Use date range. Select the date, or range of dates you wish to look for. Click in the calendar box the date you wish to search on, and click on As startdate, for the starting date range. Then choose the enddate. If searching only on one day, do both stardate and enddate the same date.

Once you have finished entering in your criteria you wish to search for in Reveal, you can save your criteria by going back to the Search! Section. Click on the Search section, save the data, and when you are ready to execute the search, click on the Execute search! Button. A new window will appear. To start the search, click Start. This will perform a count of messages for each user, and then begin to fill in the data above. It will go through each mailbox individually. If it hits a user that is disabled or expired it will automatically skip the user. It may pull up an error accessing the mailbox after the search is done. This can be ignored. You can also skip a mailbox yourself if you wish by cliking on the Skip this mailbox button. As it progresses, it will show you an overall number of messages it has scanned, and the results it has got so far. Those numbers don’t necessarily have to be the same, depending on the search criteria. If you have done a multiple searches, you can do a search and append to the already existing results. Check the box Keep existing results. Keep in mind, it may duplicate search results if it pulls the same messages in your subsequent searches. Once the search is complete, you can close out of the Search progress window to view the results. From here you can view the messages by double clicking on them, select multiple messages, and print, and export messages just like in the Browse section of Reveal.

Important Tip: If the progress bar does not do anything, then most likely you have lost connection with GroupWise. Reestablish the connection and double check you can view messages before initiating another search. Search in trash: There is another option that is hidden to perform a search in trash in Reveal. By default Reveal only searches in folders other than trash. To search in Trash you must turn it on in the Settings.ini file. Go to C:\Program Files\GWAVA\GWAVA Reveal\

Edit the settings.ini file. Underneath the [Settings] section insert the line: UseSearchInTrash=1. Save the file. Launch Reveal and when performing a search you can search in the trash. Settings.ini File and Switches Throughout this training module you have noticed we have edited the settings.ini file found in the Reveal application directory. What exactly does the settings.ini file do? The settings.ini provides version, paths, and functionality to the Reveal program, that is not included in the code. It also contains window sizes, fonts, and connection info that helps to load the program each and every time you run the program. This is helpful because then you don’t have to keep resizing your windows, changing your fonts, or retype your connection information each time you login. If the settings.ini file is deleted, it will reset all of the forms, sizes, fonts, etc… to default. The next time Reveal launches it will recreate a default settings.ini file. Most of the section can be adjusted to a size of your choosing.(MainForm, Reload, AddressForm, ReadMessageForm, Search Form). It is much easier, however, to resize the window when Reveal is launched than to figure out the margins, and size of window in the settings.ini. However, whenever windows do get resized they will be saved in the settings.ini file. The [Settings] section is very important, and contains the version of Reveal, the Primary domain path, search path, and font information. The primary domain path is important as this gets saved when first connecting Reveal to GroupWise. If you are unable to connect to GW and the path appears wrong in the connection screen, edit the settings.ini file and remove or change the path here. The other pieces of the Settings section are hidden switches that allow you to do certain things with Reveal that are not part of the main program. The switches must be placed underneath the [Settings] section to be able to work. They also are case sensitive, and must be typed exactly. We have already played around with some switches. Here are a list of switches and explanations for each. Switches only work after they have been saved in the settings.ini file and Reveal is relaunched.

AllowTrustedAppInSecDom=0 This switch allows you to connect to a secondary domain and view mailboxes and messages within the secondary domain just as you would do in the primary domain. This is turned off by default.

UseMultiLoginAddressbookSupport=1 This switch provides extra debug logging within Reveal. By default it is turned on.

UseOutgoingSharedFolders=1 This switch will show the shared folders for a mailbox that has shared the folder with other mailboxes. If turned off will not show the shared folders within Reveal. By default it is turned on.

UseSambaFix=0 This turns on the option to use a SAMBA share to connect to a primary domain on Linux. This is turned off by default.

UseFullNamesInTree=1 This option shows you the full name within the mailbox tree list. This is turned on by default.

UseArchiveBrowsing=1 This switch allows you to search the archives within GroupWise using Reveal. When turned on it gives you new menu options to specify the locations of the archives. This option must be added in manually to the settings.ini file and by default is turned off.

UseSearchInTrash=1 This switch turns on the ability to search messages within the trash container. This option must be added in manually to the settings.ini file and by default is turned off.

UseExternalDomains=1 This switch allows you to connect Reveal to external domains. This switch much be added in manually into the settings.ini and by default is turned off.

CanDelete=1 This switch allows you to delete messages from the live GroupWise system using Reveal. This option must be added in manually to the settings.ini file and by default is turned off.

Note: To delete a message right click and click Delete Message.

Hidden Easter Egg There is a hidden easter egg in Reveal called Reveal-tris (a play on Tetris) that was put in by the developer for fun. To access this easter egg, connect to GroupWise with reveal. Then in the “find a user field” type in letmeplay. As soon as you type in the last letter, GWAVA RevealTris will launch. Enjoy! Try to get the highest score!

Reveal Rights The final section in Reveal is the Reveal Rights. This allows you to have certain users logged into your NDS to view only specific post offices, domain, or user mailboxes. By default administrators will be able to see everything. If you wish to restrict access, this tool is the way to go. Note: There is a large bug with the program where even restricted users will be able to launch the Reveal Rights Editor and change their rights. This is a security problem, and is a known issue. To launch this program, you must have Microsoft.net Framework 3.5 SP1 or later installed. Without this, Reveal Rights editor will not launch. Once those prerequisites are met, you can launch the Reveal Rights editor by: 1) After connecting Reveal to GroupWise click on Administrator in the Menu bar, then Reveal rights. 2) Go to C:\Program Files\GWAVA\GWAVA Reveal and click on Reveal Rights.exe (you do not need to have Reveal connected to GroupWise). All the rights and permissions gets stored in a file called: Userrights.ini and is located in the primary domain directory. If you wish to start over with all rights, simply delete the userrights.ini file and relaunch Reveal. Reveal will create a brand new userrightssample.ini file and set everything back to default. Old versions of Reveal you had to use the Userrightssample.ini and make changes to it to restrict access to users. With the Reveal Rights editor, you no longer have to do this. If you wish to look at how to setup rights manually, please see this KB article: http://support.gwava.com/kb/?View=entry&EntryID=1317

Once you launch the Reveal rights editor, a new window will appear.

The first thing the program will do is check to make sure it as sufficient read and write access to the primary domain. If they do not, it will error out and the program will exit. Make sure the user logged into the Novell client has full access to the primary domain. The first screen shown is the Global Rights. This screen shows the permissions and access to domains, post offices and users globally. On the left in Status info, will show you the location of the settings.ini file, primary domain location, cache file used, and the rights file, which is the userrights.ini mentioned previously. The right side of the screen shows you the list of the GroupWisesystem. A green light means the user will be shown in Reveal by all users. A red will not show the user in the system. Click on the domain, post office, or mailbox to change to red or green. If selectin the domain, or the post office, that will recursively filter down the list. For example: if you set the domain to red, everything underneath that will not show in the Reveal navigation window. Personal Rights will override what is in the Global rights. Whatever settings you make in the Personal rights, will be changed, regardless of Global rights.

On the left side, select a user you wish to give, or restrict access to. You can select the domain or post office, or multiple users by holding down the SHIFT key.

Then on the right side set the domain, post office, or mailbox to Green or red. Gray means it will use the global rights. Again, if you choose the domain, or post office, it will filter down all the way to whatever setting you choose. 

Once the changes are done, they are automatically saved and written to the userrights.ini file. If you wish to change everything back to default, remove the userrights.ini file and launch Reveal to create a new file.

In the next section we will go over the logs for Reveal Print, Reveal Rights, and the main debug log. We will also go over a few of the most common issues in Reveal and how to troubleshoot those.