I do not know about the spam component, but I've not seen Vipre be a resource hog. Every time I've been able to investigate a complaint, as it was happening, it has always proven to be something else hogging CPU's and/or memory.
\\Steve// -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, August 16, 2010 10:08 AM To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Worth knowing thanks, they ring a bell but I know we deal with someone who deals with Clearswift. To be honest Sunbelt has outstanding Antispam (Cloudmark is superb) but the antivirus is a little hit and miss in that it seems to be a real performance hog, not sure if Exchange 2003 and it being a VM contribute to that. What we might be wanting to look at in the near future is the ability to say: "If the sender is @abc.com and the message contains a PDF or Office document and the document contains the words/phrase XYZ then <some action>" And most products I know of won't do that, they'll block by file type, they'll filter on subject/message body, but they won't inspect attachment content which I believe Clearswift and Brightmail/Symantec Mail Security can. Paul -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: 16 August 2010 15:03 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Sounds an interesting place to be. We use Foursys as our reseller. So far so good. What functionality do you lack with the current product that you would like with a new product? john -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 16 August 2010 14:58 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Test track, cool place :-) Thanks for the info - I'll see what sort of pricing our VAR comes back with and maybe have a chat with Clearswift. I'm sure it will be more than we're currently paying however it's a question of how much, and what degree of additional functionality it may offer. Thanks, Paul -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: 16 August 2010 14:51 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? I found this bit on the site http://www.clearswift.com/news/press-releases/clearswift-announces-enhan ced-data-loss-prevention-for-internal-e-mail AIUI ? We drop the Spam at the Edge server and dont inform the users of Spam. You can certainly setup PMM(Personal Message Manager) from within the MSW SMTP Software and I think you can also do it from the Edge server. Its not something I've looked into. John PS Mira as in showers or Mira as in test track type place? -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 16 August 2010 14:41 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Thanks, that's kind of how I understood the "flow" from what I've read, just their website is a little confusing about what products are available to new customers vs. available to existing customers and so on (for example I don't see MSW for Exchange listed on the products tab). AIUI quarantine of stuff like spam is done "on box" and the user is sent a digest and can release/manage their own settings through a web interface? I think this will become clearer once I have access to the evaluation and some full manuals. Paul -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: 16 August 2010 14:32 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? On list then :-) The Edge server is a Linux box running the soft appliance software built from a ISO image. We have enabled Kaspersky AV on this box and then I MSW to catch any EXE files that have slipped passed the AV filter. They also do Mailsweeper for Exchange(I've not looked at this) but i believe its managable from the Mailsweeper for SMTP MMC Console in terms of policy etc. Mailsweeper for Exchange maybe free if you have support for MSW (You'd have to check that) Internet > Firewall > Edge server > Internal Mailsweeper server > Exchange > End user John -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 16 August 2010 14:23 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Happy to stay on list as it may benefit others. So presumably the edge server is a "proper" virtual appliance and the MSW is just the software installed on a Windows based VM rather than a self-contained virtual appliance? I guess I'll find out when I speak to them but ideally I'd like to protect at the perimeter and still have a bit of a safety net internally (antivirus/attachment blocking) without having to spend $$$ twice on two different products. >From their website they seem to be trying to get people to transition to the virtual edge appliance, which seems to be what most folks are offering, but as per my original post that still leaves a bit of a gap if (big if) someone brings something inside the business. -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: 16 August 2010 14:18 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? As in Clearswift - correct. We have MSW 5.3 on VM Machines and the Edge Server (soft appliance)on physical hardware. If you want to take it off list, feel free to email me. John -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 16 August 2010 14:00 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? As in Clearswift? I'm waiting for a key to evaluate their product. Are you using the appliance or the product that appears to install on Windows? They seem to do two and the one that site on Windows sounds like it's being phased out in favour of the appliance, but that doesn't appear to hook into Exchange, it's an edge scanner? Is anyone using Symantec Brightmail Gateway or Symantec Mail Security for Exchange as both of those look very good (on paper)? Thanks, Paul -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: 16 August 2010 13:57 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? Woohoo another Mailsweeper user on the list :-) John -----Original Message----- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: 16 August 2010 13:13 To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? +1 -----Original Message----- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: Monday, August 16, 2010 2:10 AM To: MS-Exchange Admin Issues Subject: RE: Antivirus & Antispam Suggestion? We use Mailsweeper on the Gateway, two Mailsweeper Edge servers block virus's and also does spam blocking the inernally deployed Mailsweeper servers block on file type, i.e exe's, multimedia files, large emails etc John -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 14 August 2010 15:05 To: MS-Exchange Admin Issues Subject: Antivirus & Antispam Suggestion? We're currently running Exchange 2003 and I hope to be upgrading to Exchange 2010 in a few months time. Right now we use Sunbelt's Vipre for Exchange. The attachment blocking and Cloudmark antispam work great, the antivirus I'm a bit less keen on as it seems to be resource heavy. The renewal is up in a month or so, so I'm looking at options. I need to get some pricing on Antigen/Forefront which I'm keen on finding out more about as I figure nobody will be able to integrate Exchange a/v quite like Microsoft, plus I believe it also has the Cloudmark antispam engine. My question is who else should I look at? I should stress that due to perimeter filtering we see practically no viruses at our Exchange server, my main focus is on top quality antispam filtering and being able to block attachments (exe's etc.) and being able to scan the content of incoming Office/PDF attachments for keywords would be very useful. Any advice appreciated, thanks in advance. ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ********************************************************************** -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.