RE: A/V Scanning
You need both. You want to catch what you can at the gateway, but whatever slips by the gateway and into the store can be caught when definitions are updated. Otherwise, new viruses could get past the gateway undetected and you would never find them without store scanning. JMHO Bob Fronk [EMAIL PROTECTED] From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
Re: A/V Scanning
IS scanning will also catch output from an infected client that did not come in through the gateway. - Sent from my BlackBerry Wireless Handheld - Original Message - From: Bob Fronk [EMAIL PROTECTED] To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Fri Nov 07 07:28:00 2008 Subject: RE: A/V Scanning You need both. You want to catch what you can at the gateway, but whatever slips by the gateway and into the store can be caught when definitions are updated. Otherwise, new viruses could get past the gateway undetected and you would never find them without store scanning. JMHO Bob Fronk [EMAIL PROTECTED] From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I’m thinking that while it adds more depth to the protection, it really doesn’t do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: A/V Scanning
Both, and use different vendors for each system. I had one slip past the gateway AV but get caught by the Exchange server. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 [cid:image001.jpg@01C940BD.AFC723B0] _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~inline: image001.jpg
RE: A/V Scanning
Even if you use the same vendor, there's still a chance that the A/V patterns might be updated after arrival at the gateway and before the recipient tries to access the email. My votes is for both, and multiple scan engines on both gateway and information store. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: [EMAIL PROTECTED] Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: 07 November 2008 14:46 To: MS-Exchange Admin Issues Subject: RE: A/V Scanning Both, and use different vendors for each system. I had one slip past the gateway AV but get caught by the Exchange server. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
Re: A/V Scanning
The only reason NOT to do both is if you have some very large stores with very large mailbox item counts. VSAPI scanning can start to be a performance problem in those environments. For environments with reasonable quotas - no reason not to scan at every level. On 11/7/08, Randal, Phil [EMAIL PROTECTED] wrote: Even if you use the same vendor, there's still a chance that the A/V patterns might be updated after arrival at the gateway and before the recipient tries to access the email. My votes is for both, and multiple scan engines on both gateway and information store. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: [EMAIL PROTECTED] Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: 07 November 2008 14:46 To: MS-Exchange Admin Issues Subject: RE: A/V Scanning Both, and use different vendors for each system. I had one slip past the gateway AV but get caught by the Exchange server. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sent from my mobile device ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: A/V Scanning
I agree. Also you want to catch anything that a user may bring in, say on a laptop, that send internally. From: Bob Fronk [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:28 AM To: MS-Exchange Admin Issues Subject: RE: A/V Scanning You need both. You want to catch what you can at the gateway, but whatever slips by the gateway and into the store can be caught when definitions are updated. Otherwise, new viruses could get past the gateway undetected and you would never find them without store scanning. JMHO Bob Fronk [EMAIL PROTECTED] From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
RE: A/V Scanning
Thanks for the pointers, all. Sounds like dual protection is the way to go. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
RE: A/V Scanning
We actually do 3 - 1 at the gateway, different one on the IS with multiple engines and a 3rd for desktop/server file systems. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 7:53 AM To: MS-Exchange Admin Issues Subject: RE: A/V Scanning Thanks for the pointers, all. Sounds like dual protection is the way to go. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
RE: A/V Scanning
We do gateway, server, and client scanning. If you're not checking it, it's probably getting infected. Thanks, Jake Gardner TTC Network Administrator Ext. 246 From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 10:53 AM To: MS-Exchange Admin Issues Subject: RE: A/V Scanning Thanks for the pointers, all. Sounds like dual protection is the way to go. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ***Teletronics Technology Corporation*** This e-mail is confidential and may also be privileged. If you are not the addressee or authorized by the addressee to receive this e-mail, you may not disclose, copy, distribute, or use this e-mail. If you have received this e-mail in error, please notify the sender immediately by reply e-mail or by telephone at 267-352-2020 and destroy this message and any copies. Thank you. *** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
