We use Sybari Antigen and love it
-Tony
-----Original Message-----
From: Matt Hoffman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 8:59 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
So, does anyone have a strong opinion on what filtering software to use? We
haven't done anything along those lines before (hell, we didn't have
antivirus until last year). I just want to use it for blocking attachments;
we don't care about abilities relating to disclaimers or scanning for
certain language/words. Any opinions would help.
Thanks!
Matt
-----Original Message-----
From: Waters, Jeff [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 11:33 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Jennifer,
Most everyone has already hit on the obvious, most of us use the auto-update
feature from the A/V product of our choosing. Then we go the extra step and
use some sort of filtering, be it at the fire wall or just simple attachment
blocking in our e-mail server A/V product. Here I block
.exe;.vbs;.eml;.shs;.lnk attachments from even getting through the e-mail
server. Take what has happened to your site up the ladder as a reason to
put all this stuff in place! You might get some resistance, and even some
complaints, however every time one of these things happens the efforts you
have made will be seen and will be appreciated. TrueSecure
www.trusecure.com has some good white papers on what types of attachments
you should be, or at least thinking about blocking.
Oh, the other thing we did was, well we threw IIS right out the window!!!!!!
Good Luck
Jeffrey R. Waters
Senior Systems Engineer
Information Technology, Hanover County
-----Original Message-----
From: Jennifer Baker [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 6:10 AM
To: Exchange Discussions
Subject: today's admin backwards virus
I was just noticing that most of the gurus of the list had plenty of time
to respond to the list regarding various questions. Am I missing
something?
I have been updating virus software, scanning mailboxes, patching iis/owa
servers etc. all night. We were hit externally, but we only had to
restore one webserver (although it was similiar to a slightly compressed
support.microsoft.com). Is there some
secret to this sh*t that you are keeping from me regarding quick draw
administration or is this something you pawn off to others?
I will compensate for information. (Depending on
validity.)
I'm not jealous or bitter, btw...not.
Jennifer Baker
Fluke Corporation
http://www.fluke.com
http://www.flukenetworks.com
mailto:[EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
