Claude,
I have enjoyed good results running (I assume you mean Trend's InterScan)
VirusWall on a redundant pair of Linux bastion hosts that also do some IDS
and VPN services as well as secondary firewalling (behind packet filtering
bridges). I see no need for a dedicated scanning box at our email volume (a
couple thousand messages a day). I do find it necessary to run it in a
"sandwiched" configuration in conjunction with Sendmail daemons to take
advantage of Sendmail features like ant-spam, anti-relay, RBL, etc.
Of course gateway scanning does nothing to address common MTA
misconfiguration issues, and virus outbreaks tend to move faster that
signature updates, but we are not bothered by reoccurring trash like Hybris,
SirCam and the ilk. YMMV.
Gateway scanning alone will not help if a user is getting mail from an
outside POP server. For that and other reasons I don't believe it to be a
replacement for desktop scanners and therefore not an answer to your desktop
update "nightmares". I wouldn't think that a thin client environment would
present an obstacle to automated signature updates. Do you keep your pattern
files in flash rather than on a centralized network resource? Perhaps I
don't understand that aspect of your problem/question? That's a question
better addressed on a virus list anyway ;-)
I would like to think that gateway scanning (ingress AND egress) is a common
practice these days, at least for us corporate folks?
Hope that helps
Tim Pierce


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Claude Christophi
Sent: Friday, September 28, 2001 8:05 AM
To: [EMAIL PROTECTED]
Subject: VirusWall


Hi,

Does anyone use successfully a VirusWall on a dedicated box?
Which could be:
- a dedicated box only for AntiVirus active filtering
- a dedicated box for FireWall and for AntiVirus active filtering

If Yes, which one and why ?

I am searching for such a box, to avoid the nightmare problem antivirus
update on the Desktop ...
(I am using ThinClients so no Floppy or CD-Rom ;-)

TIA

[EMAIL PROTECTED]

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to