I've recently been given the task of finding a new virus solution to the Symantec snap-in. The purpose for this move was the recent Beagle.AG virus and the inability of Symantec to treat password protected zips differently than regular zips. Currently with Symantec there is no way to tell it not to allow attachments it can't scan (such as password protected zips), and as such the files are considered clean and passed through.
That's one of the reasons why we started adding mailserver AV vulnerability detection to Declude Virus a couple years ago. As people started discovering these mailserver AV vulnerabilities (vulnerabilities that allow viruses to slip through a mailserver virus scanner -- there are about a dozen such vulnerabilities known at this time), we realized that if we did not add support for detecting them, it could potentially take weeks/months for a new release (as opposed to hours for new virus definitions).
If true, it's a shame that Symantec hasn't taken care of this vulnerability yet. It's been about 5 months since the first virus was released that used this vulnerability.
We would like the ability to tell the scan engine to either bounce, delete, or quarantine any attachment it can't scan. This should alleviate the curren problems we are having with Symantec passing password protected zips because it is unable to scan them.
Why not have the option to automatically treat encrypted .ZIP files as a vulnerability (which they are)? That is how Declude Virus handles the situation.
So I'm turning to the forum for some help on choosing a product. Which products are you all most familiar with that you feel would work well with IMail? Declude seems like the natural solution but I wanted some feedback on it from folks who have actually used it in their environment before I made my final decision.
I'll let others comment here, as my opinion is a bit biased. :)
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
