Yes you're right...

As an aside, I just turned off the emanager component of Trend and this
seems to have helped quite a bit with the CPU load. I'll do some monitoring
next week to find out for sure...

> -----Original Message-----
> From: Randal, Phil [mailto:[EMAIL PROTECTED] 
> Sent: 04 July 2003 16:09
> To: Exchange Discussions
> Subject: RE: best linux av?
> 
> 
> Nope, wrong.  Once again you're assuming that all your 
> desktops are happily protected and working fine, in fact that 
> every link in the chain is in place and secure.  With viruses 
> you cannot ensure that.  You have to attack viruses robustly 
> on ALL fronts, with as few assumptions as possible.
> 
> The "it will be OK because or desktop PCs are protected" 
> approach is a recipe for disaster.
> 
> Phil
> 
> ---------------------------------------------
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK 
> 
> > -----Original Message-----
> > From: Atkinson, Daniel [mailto:[EMAIL PROTECTED]
> > Sent: 04 July 2003 15:50
> > To: Exchange Discussions
> > Subject: RE: best linux av?
> > 
> > 
> > Yes, I see your point, although I'd hope my desktop AV would
> > catch this
> > stuff before it reaches the exchange server.
> > 
> > What I don't like is the burden of a realtime scan on
> > exchange. Perhaps a
> > combination of gateway scanning, nightly mailbox scans and 
> > realtime desktop
> > AV would be sufficient.
> > 
> > > -----Original Message-----
> > > From: Jason Clishe [mailto:[EMAIL PROTECTED]
> > > Sent: 04 July 2003 15:45
> > > To: Exchange Discussions
> > > Subject: RE: best linux av?
> > > 
> > > 
> > > Do you really think that the *ONLY* possible way a virus can
> > > get into your Exchange environment is through your SMTP gateway?
> > > 
> > > Let's say a user uses Outlook to POP an email from their
> > > personal account into their Exchange mailbox, and that email 
> > > is infected. Or let's say that a user downloads a file from 
> > > the Internet that infects their Exchange mailbox. Now what? 
> > > Since you don't have any mailbox-level virus protection, you 
> > > have to sit there and watch this thing propagate to all your 
> > > users and infect all your mailboxes.
> > > 
> > > But at least your gateway will clean it before it sends it
> > > out to your customers.
> > > 
> > > Jason
> > > 
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > [mailto:bounce-exchange-
> > > > [EMAIL PROTECTED] On Behalf Of Atkinson, Daniel
> > > > Sent: Friday, July 04, 2003 10:22 AM
> > > > To: Exchange Discussions
> > > > Subject: RE: best linux av?
> > > > 
> > > > why?
> > > > 
> > > > > -----Original Message-----
> > > > > From: Jason Clishe [mailto:[EMAIL PROTECTED]
> > > > > Sent: 04 July 2003 15:21
> > > > > To: Exchange Discussions
> > > > > Subject: RE: best linux av?
> > > > >
> > > > >
> > > > > It is absolutely essential that you have virus
> > protection on your
> > > > > Exchange servers, over and above whatever gateway virus
> > > protection
> > > > > you might be running.
> > > > >
> > > > > Jason
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: [EMAIL PROTECTED]
> > > [mailto:bounce-exchange-
> > > > > > [EMAIL PROTECTED] On Behalf Of Atkinson, Daniel
> > > > > > Sent: Friday, July 04, 2003 9:56 AM
> > > > > > To: Exchange Discussions
> > > > > > Subject: RE: best linux av?
> > > > > >
> > > > > > Well, the linux products do file blocking etc so I don't any
> > > > > > difference, apart from freeing up tons of CPU cycles on the
> > > > > exchange
> > > > > > box and seeing less of that crappy 'retrieving data'
> > dialog in
> > > > > > outlook...
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Paul Hutchings [mailto:[EMAIL PROTECTED]
> > > > > > > Sent: 04 July 2003 14:19
> > > > > > > To: Exchange Discussions
> > > > > > > Subject: RE: best linux av?
> > > > > > >
> > > > > > >
> > > > > > > I'm kind of in a similar position, I just can't help but
> > > > > think that
> > > > > > > whatever you have at the gateway there's a bit of added
> > > > > reassurance
> > > > > > > having something like Scanmail on the Exchange box, given
> > > > > the file
> > > > > > > blocking capabilities and all.
> > > > > > >
> > > > > > > regards,
> > > > > > > Paul
> > > > > > > --
> > > > > > > Paul Hutchings
> > > > > > > Network Administrator, MIRA Ltd.
> > > > > > > Tel: 024 7635 5378, Fax: 024 7635 8378
> > > > > > > mailto:[EMAIL PROTECTED]
> > > > > > >
> > > > > > > > -----Original
> > > > > > > Message-----
> > > > > > > > From: Atkinson, Daniel [mailto:[EMAIL PROTECTED]
> > > > > > > > Sent: 04 July 2003 13:08
> > > > > > > > To: Exchange Discussions
> > > > > > > > Subject: best linux av?
> > > > > > > >
> > > > > > > >
> > > > > > > > just wondering if anyone has a favourite AV scanner for
> > > > > linux with
> > > > > > > > postfix as the mta? our trend renewal is coming
> > up and i'm
> > > > > > > > thinking i'd like to remove the CPU burden of AV
> > > scanning from
> > > > > > > > the exchange box and put it on our
> > > > > > > > linux relay which also does the spam filtering.
> > > > > > > >
> > > > > > > > thanks
> > > > > > > > dan.
> > > > > > > >
> > > > > > > >
> > > > > 
> > _________________________________________________________________
> > > > > > > > List posting FAQ:
> > > > > http://www.swinc.com/resource/exch_faq.htm
> > > > > > > > Web
> > > > > Interface:
> > > > > > > > 
> > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> > > > > > > ext_mode=&lang=english
> > > > > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > > > > Exchange List admin:    [EMAIL PROTECTED]
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > 
> > > _________________________________________________________________
> > > > > > > List posting FAQ:       
> > > http://www.swinc.com/resource/exch_faq.htm
> > > > > > > Web Interface:
> > > > > > > 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> > > > > > ext_mode=&lang=english
> > > > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > > > Exchange List admin:    [EMAIL PROTECTED]
> > > > > >
> > > > > > 
> > > _________________________________________________________________
> > > > > > List posting FAQ:       
> > > http://www.swinc.com/resource/exch_faq.htm
> > > > > > Web
> > > Interface: http://intm-dl.sparklist.com/cgi-
> > > > > > bin/lyris.pl?enter=exchange&text_mode=&lang=english
> > > > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > > > Exchange List admin:    [EMAIL PROTECTED]
> > > > >
> > > > >
> > > > > 
> > _________________________________________________________________
> > > > > List posting FAQ:       
> > http://www.swinc.com/resource/exch_faq.htm
> > > > > Web Interface:
> > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> > > > ext_mode=&lang=english
> > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > Exchange List admin:    [EMAIL PROTECTED]
> > > > 
> > > > 
> _________________________________________________________________
> > > > List posting FAQ:       
> http://www.swinc.com/resource/exch_faq.htm
> > > > Web 
> Interface: http://intm-dl.sparklist.com/cgi-
> > > > bin/lyris.pl?enter=exchange&text_mode=&lang=english
> > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > Exchange List admin:    [EMAIL PROTECTED]
> > > 
> > > 
> > > _________________________________________________________________
> > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > > Web Interface:
> > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> > ext_mode=&lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&lang=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
ext_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to