subject:"RE\: Is virus protection on the Exchange server necessary\?"

Title: RE: Is virus protection on the Exchange server necessary?









Do you have anything more
to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the
firewall for anti-virus and content filtering. We have NAV running on the
desktops. We are currently evaluating Antigen and SAVF (Symantec) to put
on our E2K Exchange servers (including an E2K cluster on a Compaq SAN).
However, our Microsoft resident is suggesting to us that AV on the servers
themselves is not necessary and will only introduce problems and instability
(particularly Symantec's product). He said that when a virus outbreak
occurs that actually gets inside, a quick ExMerge on the server is just as
effective as pushing out virus defs using the AV product.

With AV software on the firewall and on
the desktops, what do people think about not putting AV on the Exchange servers
themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. 
DOH!

  -Original Message-From: Lathrum Matt-P55173 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 
  1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Do you have anything more to 
  add to back up your statement?
  
  Matt
  
  -Original 
  Message-From: Micciche, 
  Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  I think it's 
  ridiculous. 
  -Original Message- 
  From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
  Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment has Trend 
  running on the firewall for anti-virus and content filtering. We have 
  NAV running on the desktops. We are currently evaluating Antigen and 
  SAVF (Symantec) to put on our E2K Exchange servers (including an E2K cluster 
  on a Compaq SAN). However, our Microsoft resident is suggesting to us 
  that AV on the servers themselves is not necessary and will only introduce 
  problems and instability (particularly Symantec's product). He said that 
  when a virus outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.
  With AV software on the 
  firewall and on the desktops, what do people think about not putting AV on the 
  Exchange servers themselves?
  -- Matt Lathrum 
  General Dynamics Decision 
  Systems 
   
  When cryptography is outlawed, 
   
  bayl bhgynjf jvyy unir cevinpl. 
  
  List Charter and FAQ at: 
  http://www.sunbelt-software.com/exchange_list_charter.htm 
  
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message



You 
think what is ridiculous? Shall I code an evil script really quick and get 
every password on your network?


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 
  10, 2002 1:13 PMTo: MS-Exchange Admin IssuesSubject: RE: 
  Is virus protection on the Exchange server necessary?
  I think it's ridiculous. 
  -Original Message- From: 
  Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues Subject: Is virus 
  protection on the Exchange server necessary? 
  Our environment has Trend running on the firewall for 
  anti-virus and content filtering. We have NAV running on the 
  desktops. We are currently evaluating Antigen and SAVF (Symantec) to put 
  on our E2K Exchange servers (including an E2K cluster on a Compaq SAN). 
  However, our Microsoft resident is suggesting to us that AV on the servers 
  themselves is not necessary and will only introduce problems and instability 
  (particularly Symantec's product). He said that when a virus outbreak 
  occurs that actually gets inside, a quick ExMerge on the server is just as 
  effective as pushing out virus defs using the AV product.
  With AV software on the firewall and on the desktops, what do 
  people think about not putting AV on the Exchange servers 
  themselves?
  -- Matt Lathrum General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. 
  List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message



???
Robertthinks it's ridiculous to not have an Exchange-aware 
anti-virus even though Matt has all that other protection. 


  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 
  10:15 AMTo: MS-Exchange Admin IssuesSubject: RE: Is 
  virus protection on the Exchange server necessary?
  You 
  think what is ridiculous? Shall I code an evil script really quick and 
  get every password on your network?
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Micciche, 
Robert [mailto:[EMAIL PROTECTED]] Sent: 
Wednesday, April 10, 2002 1:13 PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus protection on the Exchange server 
necessary?
I think it's ridiculous. 
-Original Message- From: 
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues Subject: Is 
virus protection on the Exchange server necessary? 
Our environment has Trend running on the firewall for 
anti-virus and content filtering. We have NAV running on the 
desktops. We are currently evaluating Antigen and SAVF (Symantec) to 
put on our E2K Exchange servers (including an E2K cluster on a Compaq 
SAN). However, our Microsoft resident is suggesting to us that AV on 
the servers themselves is not necessary and will only introduce problems and 
instability (particularly Symantec's product). He said that when a 
virus outbreak occurs that actually gets inside, a quick ExMerge on the 
server is just as effective as pushing out virus defs using the AV 
product.
With AV software on the firewall and on the desktops, what 
do people think about not putting AV on the Exchange servers 
themselves?
-- Matt Lathrum General Dynamics Decision 
Systems  
When cryptography is outlawed,  
bayl bhgynjf jvyy unir cevinpl. 
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Matthew Carpenter

Title: Message









I think that Robert said that. Matt asked
the question



-Original Message-
From: Ray Zorz
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:26 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?





???





Robertthinks it's
ridiculous to not have an Exchange-aware anti-virus even though Matt has all
that other protection. 





-Original
Message-
From: Ely, Don
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:15 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



You think what is
ridiculous? Shall I code an evil script really quick and get every
password on your network?


















Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com





-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
1:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002
1:10 PM 
To: MS-Exchange Admin Issues

Subject: Is virus protection on the
Exchange server necessary? 



Our environment has Trend running on the firewall for
anti-virus and content filtering. We have NAV running on the
desktops. We are currently evaluating Antigen and SAVF (Symantec) to put
on our E2K Exchange servers (including an E2K cluster on a Compaq SAN).
However, our Microsoft resident is suggesting to us that AV on the servers
themselves is not necessary and will only introduce problems and instability
(particularly Symantec's product). He said that when a virus outbreak
occurs that actually gets inside, a quick ExMerge on the server is just as
effective as pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops,
what do people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision
Systems 

When cryptography is outlawed, 

bayl bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?


I have considered the use of external web mailboxes.  Even if they would pull it down, 
the AV on their desktop should clean it. Even if it doesn't clean it and it spreads 
internally, a simple ExMerge against the offending attachment would take care of the 
problem.  I take some stock in what our Microsoft resident has to say and I'm trying 
to get my ducks in a row before proposing it to our security department.  Is my logic 
above flawed?  Is it not as simple as that?  Are there other issues I'm not 
considering?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Steven Peck DNET [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 10:36 AM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

No anti-virus on Exchange?  Ick.

Years ago, during the 'Iloveyou' virus, we had .vbs attachment blocking on
the Exchange gateway.  We also had McAffee on the server(so it was fairly
useless anyway).  On to the story.  We weathered the first few hours of the
global outbreak just fine, THEN, one of the developers who was downloading
his Hotmail account into his Outlook through POP3 'opened' an attachment
from the CEO of a client.  BAM, our poor server was infected.  (No, I do not
know why he would think that the CEO of a client company would send him a
message that said he loved you, we did ask him and he was unable to answer
shrug).

This doesn't even account for the few folks who bring in files from home on
floppies or CD's.

I would not run without anti-virus on the Exchange server.  Even one I
consider as slow as McAfee.  McAfee's main problem seems to be that it
cannot keep up with an infection once it starts replicating.  

Of course, we disabled POP and IMAP through the firewall and discovered that
the developers thought the INCONVIENIENCE of renaming vbs and js files to
txt tooo onerous so they had done an end run with the hotmail accounts.
Needless to say, a number of attachments became imposible to mail internally
as well, and several people had to explain to managers WHY they had bypassed
normal proceedures which cost the company money in downtime, etc, etc. 

There are a number of entry points for virii, so you jut kind of have to go
with a layered defense and protect everything as well as posible.

Hope this helps.

-sp



-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:10 AM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?


Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary? (ridicu lous)

2002-04-10 Thread Micciche, Robert

Title: RE: Is virus protection on the Exchange server necessary?



1. Laptops

A) I have Users who sneak in laptops from home (non-corporate), 
they are intelligent enough to connect to the exchange servers. I would 
hate to see one of these people bring their world of home viruses onto my 
Exchange server.

B) My 
AV solution on "roaming" laptops is not perfect yet, when I have people out on 
the road a while, they seem to pick up viruses now and then. When they 
come back, or VPN or dial-up to the network, they are able to spread their 
crap.

2. Internal Desktops:

A) In a perfect world, all the desktops are completely protected at 
a local level. But my experience has been that the local PC AV solutions 
are less then perfect. Again, I am afraid of Users bringing their crap in 
from home on floppy's and CD-ROMS.

3. Remote Desktops 

A) Home users using their own PC connected via VPN. These 
people are directly connected to the LAN and are directly connecting to the 
Exchange server. I have no control of the garbage on their 
PC's.

I 
guess my primary concern is internal havoc. I am scared about people 
spreading things internally, example:

1. "Killer Virus" comes out.
2. The Firewall updates itself and begins protecting inbound 
SMTP
3. Luser at home gets infected from private 
Email
4. Connects to network via VPN, or Direct Dial to RAS 
Server.
5. Luser begins spreading "Killer Virus" via the Exchange 
server.
6. Internal Users begin suffering from this attack. (Deleted 
files? Corrupted MBR?ect. ect. ect.)
7. Exmerge is not going to help.

Depending on your environment, this scenario may not be applicable to 
you, so perhaps I jumped the gun by saying "ridiculous".


  -Original Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 1:17 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  Hi, here is a target on my head, beat me, beat me. 
  DOH!
  
-Original Message-From: Lathrum Matt-P55173 
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 
1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
    virus protection on the Exchange server necessary?

Do you have anything more to 
add to back up your statement?

Matt

-Original 
Message-From: 
Micciche, Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
    virus protection on the Exchange server necessary?

I think it's 
ridiculous. 
-Original 
Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 


Our environment has Trend 
running on the firewall for anti-virus and content filtering. We have 
NAV running on the desktops. We are currently evaluating Antigen and 
SAVF (Symantec) to put on our E2K Exchange servers (including an E2K cluster 
on a Compaq SAN). However, our Microsoft resident is suggesting to us 
that AV on the servers themselves is not necessary and will only introduce 
problems and instability (particularly Symantec's product). He said 
that when a virus outbreak occurs that actually gets inside, a quick ExMerge 
on the server is just as effective as pushing out virus defs using the AV 
product.
With AV software on the 
firewall and on the desktops, what do people think about not putting AV on 
the Exchange servers themselves?
-- Matt Lathrum 
General Dynamics Decision 
Systems 
 
When cryptography is outlawed, 
 
bayl bhgynjf jvyy unir cevinpl. 

List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter 
and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?









This is not
being helpful. It is a serious
question. Any viruses that
actually get through Trend on the firewall will most likely get cleaned by NAV
on the desktop. This seems to make
AV on the server itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's
ridiculous. 

-Original
Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment
has Trend running on the firewall for anti-virus and content filtering.
We have NAV running on the desktops. We are currently evaluating Antigen
and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K
cluster on a Compaq SAN). However, our Microsoft resident is suggesting
to us that AV on the servers themselves is not necessary and will only
introduce problems and instability (particularly Symantec's product). He
said that when a virus outbreak occurs that actually gets inside, a quick
ExMerge on the server is just as effective as pushing out virus defs using the
AV product.

With AV
software on the firewall and on the desktops, what do people think about not
putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter
and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary? (ridicu lous)

Title: Message



SO you 
advocate having AV on your Exchange server? Just want to clarify your 
earlier statement...


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 
  10, 2002 1:42 PMTo: MS-Exchange Admin IssuesSubject: RE: 
  Is virus protection on the Exchange server necessary? (ridicu 
  lous)
  1. Laptops
  
  A) I have Users who sneak in laptops from home (non-corporate), 
  they are intelligent enough to connect to the exchange servers. I would 
  hate to see one of these people bring their world of home viruses onto my 
  Exchange server.
  
  B) 
  My AV solution on "roaming" laptops is not perfect yet, when I have people out 
  on the road a while, they seem to pick up viruses now and then. When 
  they come back, or VPN or dial-up to the network, they are able to spread 
  their crap.
  
  2. Internal Desktops:
  
  A) In a perfect world, all the desktops are completely protected 
  at a local level. But my experience has been that the local PC AV 
  solutions are less then perfect. Again, I am afraid of Users bringing 
  their crap in from home on floppy's and CD-ROMS.
  
  3. Remote Desktops 
  
  A) Home users using their own PC connected via VPN. These 
  people are directly connected to the LAN and are directly connecting to the 
  Exchange server. I have no control of the garbage on their 
  PC's.
  
  I 
  guess my primary concern is internal havoc. I am scared about people 
  spreading things internally, example:
  
  1. "Killer Virus" comes out.
  2. The Firewall updates itself and begins protecting inbound 
  SMTP
  3. Luser at home gets infected from private 
  Email
  4. Connects to network via VPN, or Direct Dial to RAS 
  Server.
  5. Luser begins spreading "Killer Virus" via the Exchange 
  server.
  6. Internal Users begin suffering from this attack. 
  (Deleted files? Corrupted MBR?ect. ect. ect.)
  7. Exmerge is not going to help.
  
  Depending on your environment, this scenario may not be applicable to 
  you, so perhaps I jumped the gun by saying "ridiculous".
  
  
-Original Message-From: Clayton 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 
1:17 PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
    virus protection on the Exchange server necessary?
Hi, here is a target on my head, beat me, beat me. 
DOH!

  -Original Message-From: Lathrum Matt-P55173 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 
  2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: 
  Is virus protection on the Exchange server necessary?
  
  Do you have anything more 
  to add to back up your statement?
  
  Matt
  
  -Original 
  Message-From: 
  Micciche, Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is 
  virus protection on the Exchange server necessary?
  
  I think it's 
  ridiculous. 
  -Original 
  Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin 
  Issues Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment has 
  Trend running on the firewall for anti-virus and content filtering. 
  We have NAV running on the desktops. We are currently evaluating 
  Antigen and SAVF (Symantec) to put on our E2K Exchange servers (including 
  an E2K cluster on a Compaq SAN). However, our Microsoft resident is 
  suggesting to us that AV on the servers themselves is not necessary and 
  will only introduce problems and instability (particularly Symantec's 
  product). He said that when a virus outbreak occurs that actually 
  gets inside, a quick ExMerge on the server is just as effective as pushing 
  out virus defs using the AV product.
  With AV software on the 
  firewall and on the desktops, what do people think about not putting AV on 
  the Exchange servers themselves?
  -- Matt Lathrum 
  General Dynamics Decision 
  Systems 
   
  When cryptography is outlawed, 
   
  bayl bhgynjf jvyy unir cevinpl. 
  
  List Charter and FAQ 
  at: http://www.sunbelt-software.com/exchange_list_charter.htm 
  
  List 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
Lis

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?



In 
theory that should be correct. But at least with the servers you 
absolutely know the definitions are up to date. Little harder to make sure 
the desktops (including laptops)are up to date. 


  -Original Message-From: Lathrum Matt-P55173 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
  10, 2002 10:21 AMTo: MS-Exchange Admin IssuesSubject: 
  RE: Is virus protection on the Exchange server necessary?
  
  This is not being 
  helpful. It is a serious 
  question. Any viruses that 
  actually get through Trend on the firewall will most likely get cleaned by NAV 
  on the desktop. This seems to 
  make AV on the server itself not 
necessary.
  
  Matt
  
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Hi, here is 
  a target on my head, beat me, beat me. DOH!
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
  Exchange server necessary?
  Do you have anything more to add to back up your 
  statement?
  
  Matt
  
  -Original 
  Message-From: Micciche, 
  Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  I think it's 
  ridiculous. 
  -Original 
  Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
  Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment 
  has Trend running on the firewall for anti-virus and content filtering. 
  We have NAV running on the desktops. We are currently evaluating Antigen 
  and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K 
  cluster on a Compaq SAN). However, our Microsoft resident is suggesting 
  to us that AV on the servers themselves is not necessary and will only 
  introduce problems and instability (particularly Symantec's product). He 
  said that when a virus outbreak occurs that actually gets inside, a quick 
  ExMerge on the server is just as effective as pushing out virus defs using the 
  AV product.
  With AV 
  software on the firewall and on the desktops, what do people think about not 
  putting AV on the Exchange servers themselves?
  -- Matt 
  Lathrum General Dynamics Decision 
  Systems 
   
  When cryptography is outlawed, 
   
  bayl bhgynjf jvyy unir cevinpl. 
  
  List Charter 
  and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
  
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Matthew Carpenter

Title: RE: Is virus protection on the Exchange server necessary?









What if the target of
the virus is not a desktop? What if the target is IIS? How will a desktop
handle that. You need AV on the servers. It does not degrade functionality or
stability so much as to let that slide.



-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question. Any viruses
that actually get through Trend on the firewall will most likely get cleaned by
NAV on the desktop. This seems to make AV on the server itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you have anything more
to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly
Symantec's product). He said that when a virus outbreak occurs that
actually gets inside, a quick ExMerge on the server is just as effective as
pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List
Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?









Thats what SMS or
Live Update is for :)



-- 

Matt Lathrum

General Dynamics
Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Ray Zorz
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:55 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



In theory that should be
correct. But at least with the servers you absolutely know the
definitions are up to date. Little harder to make sure the desktops
(including laptops)are up to date. 

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:21 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

This is not being helpful.
It is a serious question.
Any viruses that actually get through Trend on the firewall will most
likely get cleaned by NAV on the desktop.
This seems to make AV on the server itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's
ridiculous. 

-Original
Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment
has Trend running on the firewall for anti-virus and content filtering.
We have NAV running on the desktops. We are currently evaluating Antigen
and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K
cluster on a Compaq SAN). However, our Microsoft resident is suggesting
to us that AV on the servers themselves is not necessary and will only
introduce problems and instability (particularly Symantec's product). He
said that when a virus outbreak occurs that actually gets inside, a quick
ExMerge on the server is just as effective as pushing out virus defs using the
AV product.

With AV
software on the firewall and on the desktops, what do people think about not
putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter
and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Majetic, John RAME


If your firewall av protection keeps the virus getting in through normal
mail operations that's fine, but there are many other ways for it to get in.


If your company is like mine many remote users will connect in with their
remote PCs, and do so without updating their virus definitions. They Also
connect in with their home PCs over a VPN, which I believe would bypass the
firewall, since the info is encrypted.

Also doing an exmerge on the server will work, but you have to take the
server down to do it, plus clean the various connector queues. Trust me if
you have to do this everytime a new virus comes out you will look pretty
silly, and the upper management types will start asking why your are
spending money on AV software if it doesn't work.

My parent company has had just about every AV product on their exchange
servers, McAfee, NAV, F-secure, and Trend, and have reported no stability
problems with any of them. 

Bottom line get something on the Exchange server.

I would recommend Trend, if you have any X.400 connectors as it has been the
only one to block all viruses coming over the x.400 connector from out
parent company, and our other worldwide distributors. 

Also the company we rent space to has trend, and never got I Love you,
Anna Kornacova, Naked Wife or any of the other recent viruses, and we got
them all with McAfee. I would definitely recommend against McAfee. Never
worked as advertised.

John Majetic
Radiometer America

-Original Message-
From: Steven Peck DNET [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 1:36 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


No anti-virus on Exchange?  Ick.

Years ago, during the 'Iloveyou' virus, we had .vbs attachment blocking on
the Exchange gateway.  We also had McAffee on the server(so it was fairly
useless anyway).  On to the story.  We weathered the first few hours of the
global outbreak just fine, THEN, one of the developers who was downloading
his Hotmail account into his Outlook through POP3 'opened' an attachment
from the CEO of a client.  BAM, our poor server was infected.  (No, I do not
know why he would think that the CEO of a client company would send him a
message that said he loved you, we did ask him and he was unable to answer
shrug).

This doesn't even account for the few folks who bring in files from home on
floppies or CD's.

I would not run without anti-virus on the Exchange server.  Even one I
consider as slow as McAfee.  McAfee's main problem seems to be that it
cannot keep up with an infection once it starts replicating.  

Of course, we disabled POP and IMAP through the firewall and discovered that
the developers thought the INCONVIENIENCE of renaming vbs and js files to
txt tooo onerous so they had done an end run with the hotmail accounts.
Needless to say, a number of attachments became imposible to mail internally
as well, and several people had to explain to managers WHY they had bypassed
normal proceedures which cost the company money in downtime, etc, etc. 

There are a number of entry points for virii, so you jut kind of have to go
with a layered defense and protect everything as well as posible.

Hope this helps.

-sp



-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:10 AM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?


Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Moody, Jacqueline

Title: RE: Is virus protection on the Exchange server necessary?





Personally, I would make sure I had anti-virus on my Exchange servers - either Trend or Antigen. For your situation, you have Trend Virus Wall protecting you at your Internet point of entry and NAV for desktops protecting you from all desktops that have it installed.

That leaves you with no protection from any machines brought inside your network without up to date virus patterns. Your Exchange server would be at a potential risk depending on what the virus/worm did. You could also get a big political black eye if a virus goes visibly through your mail system. 

You'll have to evaluate that risk for yourself and your own company. Is there any possibility a user might bring a computer in from home and plug it in to your internal network? What about a vendor/presenter that needs to print something? Do you have any wireless networks? Are you 100% sure that no unknown computers will plug into your internal network?

Jacqueline



-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:42 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?



I have considered the use of external web mailboxes. Even if they would pull it down, the AV on their desktop should clean it. Even if it doesn't clean it and it spreads internally, a simple ExMerge against the offending attachment would take care of the problem. I take some stock in what our Microsoft resident has to say and I'm trying to get my ducks in a row before proposing it to our security department. Is my logic above flawed? Is it not as simple as that? Are there other issues I'm not considering?

-- 
Matt Lathrum
General Dynamics Decision Systems 
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.


-Original Message-
From:  Steven Peck DNET [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:36 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


No anti-virus on Exchange? Ick.


Years ago, during the 'Iloveyou' virus, we had .vbs attachment blocking on the Exchange gateway. We also had McAffee on the server(so it was fairly useless anyway). On to the story. We weathered the first few hours of the global outbreak just fine, THEN, one of the developers who was downloading his Hotmail account into his Outlook through POP3 'opened' an attachment from the CEO of a client. BAM, our poor server was infected. (No, I do not know why he would think that the CEO of a client company would send him a message that said he loved you, we did ask him and he was unable to answer shrug).

This doesn't even account for the few folks who bring in files from home on floppies or CD's.


I would not run without anti-virus on the Exchange server. Even one I consider as slow as McAfee. McAfee's main problem seems to be that it cannot keep up with an infection once it starts replicating. 

Of course, we disabled POP and IMAP through the firewall and discovered that the developers thought the INCONVIENIENCE of renaming vbs and js files to txt tooo onerous so they had done an end run with the hotmail accounts. Needless to say, a number of attachments became imposible to mail internally as well, and several people had to explain to managers WHY they had bypassed normal proceedures which cost the company money in downtime, etc, etc. 

There are a number of entry points for virii, so you jut kind of have to go with a layered defense and protect everything as well as posible.

Hope this helps.


-sp




-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:10 AM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?



Our environment has Trend running on the firewall for anti-virus and content filtering. We have NAV running on the desktops. We are currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K cluster on a Compaq SAN). However, our Microsoft resident is suggesting to us that AV on the servers themselves is not necessary and will only introduce problems and instability (particularly Symantec's product). He said that when a virus outbreak occurs that actually gets inside, a quick ExMerge on the server is just as effective as pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems 
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.



List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?









If the target is IIS, then
NAV running LiveUpdate on the server can handle that.



-- 

Matt Lathrum

General Dynamics
Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



What
if the target of the virus is not a desktop? What if the target is IIS? How
will a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.



-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question.
Any viruses that actually get through Trend on the firewall will most likely
get cleaned by NAV on the desktop. This seems to make AV on the server
itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on
the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN). However, our Microsoft
resident is suggesting to us that AV on the servers themselves is not necessary
and will only introduce problems and instability (particularly Symantec's
product). He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out virus
defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Ben Winzenz

Title: RE: Is virus protection on the Exchange server necessary?









Obviously, you have never seen a server be
infected with a virus, then. We have. Even Exchange servers, that all they do
is host e-mail. Since then, we have put File-scanning AV on the Exchange servers
(exclude the exchsrvr directories) and Exchange-aware AV on as well, to scan all
in/out mailflow.





Ben Winzenz, MCSE

Network/Systems Administrator

Peregrine Systems





-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not
being helpful. It is a serious question. Any viruses that actually get
through Trend on the firewall will most likely get cleaned by NAV on the
desktop. This seems to make AV on the server itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you have anything more
to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly Symantec's
product). He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out virus
defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List
Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?


This is a very good point.  This would be a big reason to have AV on the Exchange 
server.

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Martin Blackstone [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 11:11 AM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

A simple Exmerge?
OK, consider this.  You get a virus, it has replicated like mad on your
server. CPU is at 100%, logs are growing like crazy and the box is on its
knees. You tell everyone to get out of email. Now you cant stop the server,
cause then you cant exmerge. You get 70% of the data out, and its still
chugging away 10 hours later when suddenly Sally in marketing comes into the
office. She hasn't been there to hear there is a virus outbreak, so she sits
down and opens OL, and sees and email from Bob in accounting that says
ILOVEYOU. She opens it, and suddenly it hammers every email box in the GAL
with the virus. Well, that's just great. Now you have to Exmerge the whole
server againOh, but wait, this time while you are doing it, Marge the
CEO's admin JUST HAS TO CHECK his email. Oops, I didn't mean to open
that!!

Think again

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:42 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


I have considered the use of external web mailboxes.  Even if they would
pull it down, the AV on their desktop should clean it. Even if it doesn't
clean it and it spreads internally, a simple ExMerge against the offending
attachment would take care of the problem.  I take some stock in what our
Microsoft resident has to say and I'm trying to get my ducks in a row before
proposing it to our security department.  Is my logic above flawed?  Is it
not as simple as that?  Are there other issues I'm not considering?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Steven Peck DNET [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 10:36 AM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

No anti-virus on Exchange?  Ick.

Years ago, during the 'Iloveyou' virus, we had .vbs attachment blocking on
the Exchange gateway.  We also had McAffee on the server(so it was fairly
useless anyway).  On to the story.  We weathered the first few hours of the
global outbreak just fine, THEN, one of the developers who was downloading
his Hotmail account into his Outlook through POP3 'opened' an attachment
from the CEO of a client.  BAM, our poor server was infected.  (No, I do not
know why he would think that the CEO of a client company would send him a
message that said he loved you, we did ask him and he was unable to answer
shrug).

This doesn't even account for the few folks who bring in files from home on
floppies or CD's.

I would not run without anti-virus on the Exchange server.  Even one I
consider as slow as McAfee.  McAfee's main problem seems to be that it
cannot keep up with an infection once it starts replicating.  

Of course, we disabled POP and IMAP through the firewall and discovered that
the developers thought the INCONVIENIENCE of renaming vbs and js files to
txt tooo onerous so they had done an end run with the hotmail accounts.
Needless to say, a number of attachments became imposible to mail internally
as well, and several people had to explain to managers WHY they had bypassed
normal proceedures which cost the company money in downtime, etc, etc. 

There are a number of entry points for virii, so you jut kind of have to go
with a layered defense and protect everything as well as posible.

Hope this helps.

-sp



-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 10:10 AM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?


Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Scot Parsons

Title: RE: Is virus protection on the Exchange server necessary?



Is 
IIS/OWA running on the Exchange box?


-Original Message-From: Lathrum Matt-P55173 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
10, 2002 2:24 PMTo: MS-Exchange Admin IssuesSubject: RE: 
Is virus protection on the Exchange server necessary?

If the target is IIS, then NAV 
running LiveUpdate on the server can handle 
that.

-- 

Matt 
Lathrum
General 
Dynamics Decision Systems 

 
When cryptography is outlawed,
 
bayl bhgynjf jvyy unir cevinpl.

-Original 
Message-From: Matthew 
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

What if 
the target of the virus is not a desktop? What if the target is IIS? How will a 
desktop handle that. You need AV on the servers. It does not degrade 
functionality or stability so much as to let that slide.

-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

This is not being helpful. It is a 
serious question. Any viruses that actually get through Trend on the 
firewall will most likely get cleaned by NAV on the desktop. This seems to 
make AV on the server itself not necessary.

Matt

-Original 
Message-From: Clayton 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

Hi, here is a 
target on my head, beat me, beat me. DOH!
-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
Exchange server necessary?
Do you have anything more to add to back up your 
statement?

Matt

-Original 
Message-From: Micciche, 
Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

I think it's ridiculous. 

-Original Message- From: 
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 


Our environment has Trend running on the 
firewall for anti-virus and content filtering. We have NAV running on the 
desktops. We are currently evaluating Antigen and SAVF (Symantec) to put 
on our E2K Exchange servers (including an E2K cluster on a Compaq SAN). 
However, our Microsoft resident is suggesting to us that AV on the servers 
themselves is not necessary and will only introduce problems and instability 
(particularly Symantec's product). He said that when a virus outbreak 
occurs that actually gets inside, a quick ExMerge on the server is just as 
effective as pushing out virus defs using the AV product.
With AV software on the firewall and on 
the desktops, what do people think about not putting AV on the Exchange servers 
themselves?
-- Matt Lathrum General Dynamics 
Decision Systems 
 
When cryptography is outlawed, 
 
bayl bhgynjf jvyy unir cevinpl. 

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and 
FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and 
FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message

Wrong. What if
the virus def isn't out yet?

Look, bottom
line, onlya fool would tell you NOT to put AV protection on something that
the entire industry knows needs it. You need to cover as many bases as possible.
That means this:

Internet - AV
gateway
Exchange - Exch
AV
Servers - Server
AV
Desktops -
Desktop AV

Does your
management agree that it is worth the risk of serious long downtimes just to
avoid spending a few thousand dollars on Exch AV. As for Antigen, it works
great. I use Trend and in the 3 years I have had it have NEVER had a problem
with it on my Exch box.

I PROMISE
YOUthat if you do not cover your butt now with Exch AV, you will be in
your server room crying all night long within a year.

-Original Message-From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April
10, 2002 11:24 AMTo: MS-Exchange Admin IssuesSubject:
RE: Is virus protection on the Exchange server necessary?

If the target is IIS, then NAV
running LiveUpdate on the server can handle
that.

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

-Original
Message-From: Matthew
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

What
if the target of the virus is not a desktop? What if the target is IIS? How
will a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.

-Original
Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21
PMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

This is not being helpful. It is a
serious question. Any viruses that actually get through Trend on the
firewall will most likely get cleaned by NAV on the desktop. This seems
to make AV on the server itself not necessary.

Matt

-Original
Message-From: Clayton
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

Hi, here is
a target on my head, beat me, beat me. DOH!
-Original
Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the
Exchange server necessary?
Do you have anything more to add to back up your
statement?

Matt

-Original
Message-From: Micciche,
Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

I think it's ridiculous.

-Original Message- From:
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?

Our environment has Trend running on the
firewall for anti-virus and content filtering. We have NAV running on
the desktops. We are currently evaluating Antigen and SAVF (Symantec) to
put on our E2K Exchange servers (including an E2K cluster on a Compaq
SAN). However, our Microsoft resident is suggesting to us that AV on the
servers themselves is not necessary and will only introduce problems and
instability (particularly Symantec's product). He said that when a virus
outbreak occurs that actually gets inside, a quick ExMerge on the server is
just as effective as pushing out virus defs using the AV
product.
With AV software on the firewall and on
the desktops, what do people think about not putting AV on the Exchange
servers themselves?
-- Matt Lathrum General Dynamics
Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter
and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List
Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter
and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htmList
Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?



Providing you have that, the pc is on, etc. You could just go ahead 
with your plan and see what happens. 

  -Original Message-From: Lathrum Matt-P55173 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
  10, 2002 11:08 AMTo: MS-Exchange Admin IssuesSubject: 
  RE: Is virus protection on the Exchange server necessary?
  
  Thats what SMS 
  or Live Update is for :)
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Ray Zorz 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:55 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  In 
  theory that should be correct. But at least with the servers you 
  absolutely know the definitions are up to date. Little harder to make 
  sure the desktops (including laptops)are up to date. 
  
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:21 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  This is not being helpful. It is a serious question. Any viruses that actually get through 
  Trend on the firewall will most likely get cleaned by NAV on the desktop. This seems to make AV on the server 
  itself not necessary.
  
  Matt
  
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Hi, here is 
  a target on my head, beat me, beat me. DOH!
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
  Exchange server necessary?
  Do you have anything more to add to back up your 
  statement?
  
  Matt
  
  -Original 
  Message-From: Micciche, 
  Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  I think it's 
  ridiculous. 
  -Original 
  Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
  Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment 
  has Trend running on the firewall for anti-virus and content filtering. 
  We have NAV running on the desktops. We are currently evaluating Antigen 
  and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K 
  cluster on a Compaq SAN). However, our Microsoft resident is suggesting 
  to us that AV on the servers themselves is not necessary and will only 
  introduce problems and instability (particularly Symantec's product). He 
  said that when a virus outbreak occurs that actually gets inside, a quick 
  ExMerge on the server is just as effective as pushing out virus defs using the 
  AV product.
  With AV 
  software on the firewall and on the desktops, what do people think about not 
  putting AV on the Exchange servers themselves?
  -- Matt 
  Lathrum General Dynamics Decision 
  Systems 
   
  When cryptography is outlawed, 
   
  bayl bhgynjf jvyy unir cevinpl. 
  
  List Charter 
  and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
  
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?









Well, IIS is
required on Exchange.



-- 

Matt Lathrum

General Dynamics
Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Scot Parsons
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
11:28 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Is IIS/OWA running on the
Exchange box?





-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
2:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

If the
target is IIS, then NAV running LiveUpdate on the server can handle that.



-- 

Matt Lathrum

General Dynamics Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



What
if the target of the virus is not a desktop? What if the target is IIS? How
will a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.



-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question.
Any viruses that actually get through Trend on the firewall will most likely
get cleaned by NAV on the desktop. This seems to make AV on the server
itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly
Symantec's product). He said that when a virus outbreak occurs that
actually gets inside, a quick ExMerge on the server is just as effective as
pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Matthew Carpenter

Title: RE: Is virus protection on the Exchange server necessary?









You are confusing.
Then why did you state this "This seems to make AV
on the server itself not necessary."



If you agree
with us?



-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
1:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



If the
target is IIS, then NAV running LiveUpdate on the server can handle that.



-- 

Matt Lathrum

General Dynamics Decision
Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



What
if the target of the virus is not a desktop? What if the target is IIS? How
will a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.



-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question.
Any viruses that actually get through Trend on the firewall will most likely
get cleaned by NAV on the desktop. This seems to make AV on the server
itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you have anything more
to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:13
AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly
Symantec's product). He said that when a virus outbreak occurs that
actually gets inside, a quick ExMerge on the server is just as effective as
pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?

For the cost of a license, is it not worth it to be protected from every
possible angle? Sure, for the most part, your set up should trap most things,
but it is not going to get everything. Why go through the hassle of running
Exmerge etc., when a 3 minute session at the server to install AV will prevent
(hopefully) you from ever having to do that. My previous bit of sarcasm is based
on that thinking. Why take the chance?

-Original Message-From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002
2:24 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

If the target is IIS, then NAV
running LiveUpdate on the server can handle
that.

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

Matt

-Original
Message-From: Clayton
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

Matt

I think it's ridiculous.

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Still doesn't explain how the virus got on your system to begin nor why the
Desktop AV didn't catch it.

But as long as you're convinced it's a good thing, then that's great.

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 11:27 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

This is a very good point.  This would be a big reason to have AV on the
Exchange server.

--
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent:   Wednesday, April 10, 2002 11:11 AM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

A simple Exmerge?
OK, consider this.  You get a virus, it has replicated like mad on your
server. CPU is at 100%, logs are growing like crazy and the box is on its
knees. You tell everyone to get out of email. Now you cant stop the server,
cause then you cant exmerge. You get 70% of the data out, and its still
chugging away 10 hours later when suddenly Sally in marketing comes into the
office. She hasn't been there to hear there is a virus outbreak, so she sits
down and opens OL, and sees and email from Bob in accounting that says
ILOVEYOU. She opens it, and suddenly it hammers every email box in the GAL
with the virus. Well, that's just great. Now you have to Exmerge the whole
server againOh, but wait, this time while you are doing it, Marge the
CEO's admin JUST HAS TO CHECK his email. Oops, I didn't mean to open
that!!

Think again

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:42 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

I have considered the use of external web mailboxes.  Even if they would
pull it down, the AV on their desktop should clean it. Even if it doesn't
clean it and it spreads internally, a simple ExMerge against the offending
attachment would take care of the problem.  I take some stock in what our
Microsoft resident has to say and I'm trying to get my ducks in a row before
proposing it to our security department.  Is my logic above flawed?  Is it
not as simple as that?  Are there other issues I'm not considering?

--
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Steven Peck DNET [mailto:[EMAIL PROTECTED]]
Sent:   Wednesday, April 10, 2002 10:36 AM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

No anti-virus on Exchange?  Ick.

Years ago, during the 'Iloveyou' virus, we had .vbs attachment blocking on
the Exchange gateway.  We also had McAffee on the server(so it was fairly
useless anyway).  On to the story.  We weathered the first few hours of the
global outbreak just fine, THEN, one of the developers who was downloading
his Hotmail account into his Outlook through POP3 'opened' an attachment
from the CEO of a client.  BAM, our poor server was infected.  (No, I do not
know why he would think that the CEO of a client company would send him a
message that said he loved you, we did ask him and he was unable to answer
shrug).

This doesn't even account for the few folks who bring in files from home on
floppies or CD's.

I would not run without anti-virus on the Exchange server.  Even one I
consider as slow as McAfee.  McAfee's main problem seems to be that it
cannot keep up with an infection once it starts replicating.

Of course, we disabled POP and IMAP through the firewall and discovered that
the developers thought the INCONVIENIENCE of renaming vbs and js files to
txt tooo onerous so they had done an end run with the hotmail accounts.
Needless to say, a number of attachments became imposible to mail internally
as well, and several people had to explain to managers WHY they had bypassed
normal proceedures which cost the company money in downtime, etc, etc.

There are a number of entry points for virii, so you jut kind of have to go
with a layered defense and protect everything as well as posible.

Hope this helps.

-sp

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:10 AM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?

Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Carl Houseman


Not only would I put some kind of AV on every possible platform, I would consider 
using different brands of AV on each type of platform (e.g. NAV on the desktops, 
Inoculate-It on the file servers, and Trend on Exchange).  This can improve protection 
when a new threat is going around, since any given vendor may be faster than another 
at issuing updated signatures.

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 1:10 PM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?


Our environment has Trend running on the firewall for anti-virus and content 
filtering.  We have NAV running on the desktops.  We are currently evaluating Antigen 
and SAVF (Symantec) to put on our E2K Exchange servers (including an E2K cluster on a 
Compaq SAN).  However, our Microsoft resident is suggesting to us that AV on the 
servers themselves is not necessary and will only introduce problems and instability 
(particularly Symantec's product).  He said that when a virus outbreak occurs that 
actually gets inside, a quick ExMerge on the server is just as effective as pushing 
out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think about not 
putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Scot Parsons

Title: RE: Is virus protection on the Exchange server necessary?



That's 
my point. IIS makes the Exchange box susceptible to attack. To me, the most 
critical data is on the Exchange box and I want my protection with that 
data.


-Original Message-From: Lathrum Matt-P55173 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
10, 2002 2:31 PMTo: MS-Exchange Admin IssuesSubject: RE: 
Is virus protection on the Exchange server necessary?

Well, IIS is 
required on Exchange.

-- 

Matt 
Lathrum
General 
Dynamics Decision Systems 

 
When cryptography is outlawed,
 
bayl bhgynjf jvyy unir cevinpl.

-Original 
Message-From: Scot Parsons 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:28 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

Is IIS/OWA 
running on the Exchange box?


-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 2:24 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?
If the 
target is IIS, then NAV running LiveUpdate on the server can handle 
that.

-- 

Matt 
Lathrum
General 
Dynamics Decision Systems 

 
When cryptography is outlawed,
 
bayl bhgynjf jvyy unir cevinpl.

-Original 
Message-From: Matthew 
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

What if 
the target of the virus is not a desktop? What if the target is IIS? How will a 
desktop handle that. You need AV on the servers. It does not degrade 
functionality or stability so much as to let that slide.

-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

This is not being helpful. It is a 
serious question. Any viruses that actually get through Trend on the 
firewall will most likely get cleaned by NAV on the desktop. This seems to 
make AV on the server itself not necessary.

Matt

-Original 
Message-From: Clayton 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

Hi, here is a 
target on my head, beat me, beat me. DOH!
-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
Exchange server necessary?
Do you have anything more to add to back up your 
statement?

Matt

-Original 
Message-From: Micciche, 
Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?

I think it's ridiculous. 

-Original Message- From: 
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 


Our environment has Trend running on the 
firewall for anti-virus and content filtering. We have NAV running on the 
desktops. We are currently evaluating Antigen and SAVF (Symantec) to put 
on our E2K Exchange servers (including an E2K cluster on a Compaq SAN). 
However, our Microsoft resident is suggesting to us that AV on the servers 
themselves is not necessary and will only introduce problems and instability 
(particularly Symantec's product). He said that when a virus outbreak 
occurs that actually gets inside, a quick ExMerge on the server is just as 
effective as pushing out virus defs using the AV product.
With AV software on the firewall and on 
the desktops, what do people think about not putting AV on the Exchange servers 
themselves?
-- Matt Lathrum General Dynamics 
Decision Systems 
 
When cryptography is outlawed, 
 
bayl bhgynjf jvyy unir cevinpl. 

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and 
FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and 
FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and 
FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter 
and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message



E2K, 
but not Exch 5.5...

Speakin of, we haven't heard any version info from 
you...


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: 
  Wednesday, April 10, 2002 2:31 PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  
  Well, IIS is 
  required on Exchange.
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Scot 
  Parsons [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:28 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Is 
  IIS/OWA running on the Exchange box?
  
  
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 2:24 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  If the 
  target is IIS, then NAV running LiveUpdate on the server can handle 
  that.
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Matthew 
  Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  What 
  if the target of the virus is not a desktop? What if the target is IIS? How 
  will a desktop handle that. You need AV on the servers. It does not degrade 
  functionality or stability so much as to let that slide.
  
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  This is not being helpful. It is a 
  serious question. Any viruses that actually get through Trend on the 
  firewall will most likely get cleaned by NAV on the desktop. This seems 
  to make AV on the server itself not necessary.
  
  Matt
  
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Hi, here is 
  a target on my head, beat me, beat me. DOH!
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
  Exchange server necessary?
  Do you have anything more to add to back up your 
  statement?
  
  Matt
  
  -Original 
  Message-From: Micciche, 
  Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  I think it's ridiculous. 
  
  -Original Message- From: 
  Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
  Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment has Trend running on the 
  firewall for anti-virus and content filtering. We have NAV running on 
  the desktops. We are currently evaluating Antigen and SAVF (Symantec) to 
  put on our E2K Exchange servers (including an E2K cluster on a Compaq 
  SAN). However, our Microsoft resident is suggesting to us that AV on the 
  servers themselves is not necessary and will only introduce problems and 
  instability (particularly Symantec's product). He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the server is 
  just as effective as pushing out virus defs using the AV 
  product.
  With AV software on the firewall and on 
  the desktops, what do people think about not putting AV on the Exchange 
  servers themselves?
  -- Matt Lathrum General Dynamics 
  Decision Systems 
   
  When cryptography is outlawed, 
   
  bayl bhgynjf jvyy unir cevinpl. 
  
  List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
  
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?









Actually, I was talking
about the NAV client piece, not NAV for Exchange server.



And I was on the fence
about it. Thats why I posted here
trying to get feedback. There have
been some very good points to use AV filtering on Exchange and I am going to
suggest that to my management that it is worth the money. I do appreciate everyones responses.



The next question  Has anyone
been able to compare SAVF and Antigen?
Yes, lots of people compare NAVfE with Antigen and love Sybaris product
much more.



However, SAVF appears to be
a lot better. Has anyone played with
it?



-- 

Matt Lathrum

General Dynamics
Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
11:31 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



You
are confusing. Then why did you state this This seems to make
AV on the server itself not necessary.



If you agree with us?



-Original
Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002
1:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



If the
target is IIS, then NAV running LiveUpdate on the server can handle that.



-- 

Matt Lathrum

General Dynamics Decision
Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



What
if the target of the virus is not a desktop? What if the target is IIS? How will
a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.



-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question.
Any viruses that actually get through Trend on the firewall will most likely
get cleaned by NAV on the desktop. This seems to make AV on the server
itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly
Symantec's product). He said that when a virus outbreak occurs that actually
gets inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?


Innocuwhat?


Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com




-Original Message-
From: Carl Houseman [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 2:30 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


Not only would I put some kind of AV on every possible platform, I would
consider using different brands of AV on each type of platform (e.g. NAV on
the desktops, Inoculate-It on the file servers, and Trend on Exchange).
This can improve protection when a new threat is going around, since any
given vendor may be faster than another at issuing updated signatures.

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 1:10 PM
To: MS-Exchange Admin Issues
Subject: Is virus protection on the Exchange server necessary?


Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message









My original
message stated E2K.



-- 

Matt Lathrum

General Dynamics
Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Ely, Don
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
11:33 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



E2K, but not Exch 5.5...



Speakin of, we haven't
heard any version info from you...






Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com



-Original Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
2:31 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Well, IIS is required on Exchange.



-- 

Matt Lathrum

General Dynamics Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Scot Parsons
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
11:28 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Is
IIS/OWA running on the Exchange box?





-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
2:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

If the
target is IIS, then NAV running LiveUpdate on the server can handle that.



-- 

Matt Lathrum

General Dynamics Decision Systems 


When cryptography is outlawed,


bayl bhgynjf jvyy unir cevinpl.



-Original
Message-
From: Matthew Carpenter
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



What
if the target of the virus is not a desktop? What if the target is IIS? How
will a desktop handle that. You need AV on the servers. It does not degrade
functionality or stability so much as to let that slide.



-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002
12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



This is not being helpful. It is a serious question.
Any viruses that actually get through Trend on the firewall will most likely
get cleaned by NAV on the desktop. This seems to make AV on the server
itself not necessary.



Matt



-Original
Message-
From: Clayton
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



Hi, here is a target on my head, beat me, beat me. DOH!

-Original
Message-
From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?

Do you
have anything more to add to back up your statement?



Matt



-Original
Message-
From: Micciche, Robert
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002
10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection
on the Exchange server necessary?



I think it's ridiculous. 

-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]

Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 



Our environment has Trend running on the firewall for anti-virus
and content filtering. We have NAV running on the desktops. We are
currently evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
servers (including an E2K cluster on a Compaq SAN). However, our
Microsoft resident is suggesting to us that AV on the servers themselves is not
necessary and will only introduce problems and instability (particularly
Symantec's product). He said that when a virus outbreak occurs that
actually gets inside, a quick ExMerge on the server is just as effective as
pushing out virus defs using the AV product.

With AV software on the firewall and on the desktops, what do
people think about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum 
General Dynamics Decision Systems 
 When
cryptography is outlawed, 
 bayl
bhgynjf jvyy unir cevinpl. 



List Charter and FAQ at: 
http://www.sunbelt-software.com/exchange_list_charter.htm 

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter
and FAQ at:
http://www.sunbelt-software.com

RE: Is virus protection on the Exchange server necessary?

Title: Message

I think you will
find the Symantec isn't even in the same ballpark as AntigenAntigen is much
better

-Original Message-From: Lathrum Matt-P55173
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April
10, 2002 11:39 AMTo: MS-Exchange Admin IssuesSubject:
RE: Is virus protection on the Exchange server necessary?

Actually, I was talking about
the NAV client piece, not NAV for Exchange
server.

And I was on the fence about
it. That's why I posted here
trying to get feedback. There
have been some very good points to use AV filtering on Exchange and I am going
to suggest that to my management that it is worth the money. I do appreciate everyone's
responses.

The next question - Has anyone
been able to compare SAVF and Antigen?
Yes, lots of people compare NAVfE with Antigen and love Sybari's
product much more.

However, SAVF appears to be a
lot better. Has anyone played
with it?

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

-Original
Message-From: Matthew
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:31
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

You
are confusing. Then why did you state this "This seems to
make AV on the server itself not necessary."

If you agree with
us?

-Original
Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 1:24
PMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

If the
target is IIS, then NAV running LiveUpdate on the server can handle
that.

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

Matt

-Original
Message-From: Clayton
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

Matt

I think it's ridiculous.

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_c

RE: Is virus protection on the Exchange server necessary?

Title: Message

What's
SAVF?

Trend
Micro and Sybari make the best AV for Exchange period...

Don
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 -
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

-Original Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent:
Wednesday, April 10, 2002 2:39 PMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus protection on the Exchange server
necessary?

Actually, I was talking about
the NAV client piece, not NAV for Exchange
server.

The next question - Has anyone
been able to compare SAVF and Antigen?
Yes, lots of people compare NAVfE with Antigen and love Sybari's
product much more.

However, SAVF appears to be a
lot better. Has anyone played
with it?

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

You
are confusing. Then why did you state this "This seems to
make AV on the server itself not necessary."

If you agree with
us?

If the
target is IIS, then NAV running LiveUpdate on the server can handle
that.

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

Matt

-Original
Message-From: Clayton
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

Matt

I think it's ridiculous.

RE: Is virus protection on the Exchange server necessary?

Title: Message



Oh, 
sorry. Got lost in the thread and forgot. :o)


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: 
  Wednesday, April 10, 2002 2:42 PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  
  My original 
  message stated E2K.
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:33 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  E2K, but 
  not Exch 5.5...
  
  Speakin 
  of, we haven't heard any version info from you...
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 2:31 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  Well, IIS is required on 
  Exchange.
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Scot 
  Parsons [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:28 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Is 
  IIS/OWA running on the Exchange box?
  
  
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 2:24 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  If the 
  target is IIS, then NAV running LiveUpdate on the server can handle 
  that.
  
  -- 
  
  Matt 
  Lathrum
  General 
  Dynamics Decision Systems 
  
   
  When cryptography is outlawed,
   
  bayl bhgynjf jvyy unir cevinpl.
  
  -Original 
  Message-From: Matthew 
  Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  What 
  if the target of the virus is not a desktop? What if the target is IIS? How 
  will a desktop handle that. You need AV on the servers. It does not degrade 
  functionality or stability so much as to let that slide.
  
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  This is not being helpful. It is a 
  serious question. Any viruses that actually get through Trend on the 
  firewall will most likely get cleaned by NAV on the desktop. This seems 
  to make AV on the server itself not necessary.
  
  Matt
  
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  Hi, here is 
  a target on my head, beat me, beat me. DOH!
  -Original 
  Message-From: Lathrum 
  Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
  Exchange server necessary?
  Do you have anything more to add to back up your 
  statement?
  
  Matt
  
  -Original 
  Message-From: Micciche, 
  Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
  AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  
  I think it's ridiculous. 
  
  -Original Message- From: 
  Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
  Subject: Is virus protection on the Exchange server necessary? 
  
  
  Our environment has Trend running on the 
  firewall for anti-virus and content filtering. We have NAV running on 
  the desktops. We are currently evaluating Antigen and SAVF (Symantec) to 
  put on our E2K Exchange servers (including an E2K cluster on a Compaq 
  SAN). However, our Microsoft resident is suggesting to us that AV on the 
  servers themselves is not necessary and will only introduce problems and 
  instability (particularly Symantec's product). He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the server is 
  just as effective as pushing out virus defs

RE: Is virus protection on the Exchange server necessary?

Title: Message



Agreed

  
  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 
  11:39 AMTo: MS-Exchange Admin IssuesSubject: RE: Is 
  virus protection on the Exchange server necessary?
  What's SAVF?
  
  Trend Micro and Sybari make the best AV for Exchange 
  period...
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: 
Wednesday, April 10, 2002 2:39 PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus protection on the Exchange server 
necessary?

Actually, I was talking 
about the NAV client piece, not NAV for Exchange 
server.

And I was on the fence about 
it. That's why I posted here 
trying to get feedback. There 
have been some very good points to use AV filtering on Exchange and I am 
going to suggest that to my management that it is worth the money. I do appreciate everyone's 
responses.

The next question - Has 
anyone been able to compare SAVF and Antigen? Yes, lots of people compare NAVfE 
with Antigen and love Sybari's product much 
more.

However, SAVF appears to be 
a lot better. Has anyone played 
with it?

-- 

Matt 
Lathrum
General 
Dynamics Decision Systems 

 
When cryptography is outlawed,
 
bayl bhgynjf jvyy unir cevinpl.

-Original 
Message-From: Matthew 
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:31 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

You 
are confusing. Then why did you state this "This seems to 
make AV on the server itself not necessary."

If you agree with 
us?

-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 1:24 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

If the 
target is IIS, then NAV running LiveUpdate on the server can handle 
that.

-- 

Matt 
Lathrum
General 
Dynamics Decision Systems 

 
When cryptography is outlawed,
 
bayl bhgynjf jvyy unir cevinpl.

-Original 
Message-From: Matthew 
Carpenter [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:58 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

What if the 
target of the virus is not a desktop? What if the target is IIS? How will a 
desktop handle that. You need AV on the servers. It does not degrade 
functionality or stability so much as to let that slide.

-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 12:21 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

This is not being helpful. It is 
a serious question. Any viruses that actually get through Trend on the 
firewall will most likely get cleaned by NAV on the desktop. This 
seems to make AV on the server itself not 
necessary.

Matt

-Original 
Message-From: Clayton 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:17 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

Hi, here 
is a target on my head, beat me, beat me. DOH!
-Original 
Message-From: Lathrum 
Matt-P55173 [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 1:16 
PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
Do you have anything more to add to back up your 
statement?

Matt

-Original 
Message-From: 
Micciche, Robert [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 10:13 
AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?

I think it's ridiculous. 

-Original Message- From: 
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues 
Subject: Is virus protection on the Exchange server necessary? 


Our environment has Trend running on 
the firewall for anti-virus and content filtering. We have NAV running 
on the desktops. We are currently evaluating Antigen and SAVF 
(Symantec) to put on our E2K Exchange servers (including an E2K cluster on a 
Compaq SAN). However, our Microsof

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?





Exactly. This is just a new version of the same old crap.




-Original Message-
From: Ely, Don [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 11:56 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?



No, it's about 4 years old and it's crap...




Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com




-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 2:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?



SAVF is Symantec Anti-Virus and Filtering for Exchange:

http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=66=10300065=0

It's pretty new... 

-- 
Matt Lathrum
General Dynamics Decision Systems 
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

-Original Message-
From: Ely, Don [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 11:39 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

What's SAVF?

Trend Micro and Sybari make the best AV for Exchange period...



Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com



-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 2:39 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?
Actually, I was talking about the NAV client piece, not NAV for Exchange server.

And I was on the fence about it. That's why I posted here trying to get feedback. There have been some very good points to use AV filtering on Exchange and I am going to suggest that to my management that it is worth the money. I do appreciate everyone's responses.


The next question - Has anyone been able to compare SAVF and Antigen? Yes, lots of people compare NAVfE with Antigen and love Sybari's product much more.


However, SAVF appears to be a lot better. Has anyone played with it?

-- 
Matt Lathrum
General Dynamics Decision Systems 
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

-Original Message-
From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 11:31 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

You are confusing. Then why did you state this This seems to make AV on the server itself not necessary.

If you agree with us?

-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

If the target is IIS, then NAV running LiveUpdate on the server can handle that.

-- 
Matt Lathrum
General Dynamics Decision Systems 
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

-Original Message-
From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:58 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

What if the target of the virus is not a desktop? What if the target is IIS? How will a desktop handle that. You need AV on the servers. It does not degrade functionality or stability so much as to let that slide.


-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 12:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

This is not being helpful. It is a serious question. Any viruses that actually get through Trend on the firewall will most likely get cleaned by NAV on the desktop. This seems to make AV on the server itself not necessary.


Matt

-Original Message-
From: Clayton [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:17 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

Hi, here is a target on my head, beat me, beat me. DOH!
-Original Message-
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]]
Sent: April 10, 2002 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?
Do you have anything more to add to back up your statement?

Matt

-Original Message-
From: Micciche, Robert [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

I think it's ridiculous. 
-Original Message- 
From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent

RE: Is virus protection on the Exchange server necessary?


I have a copy of InouclateIT Exchange Option you can have if you really want
to give your Microsoft resident some ammo to support their argument ;-)

Why would you knowingly let a virus in just because it's easy to clean up?
How many PC's/servers/etc will be melting down while you're shutting down
Exchange to do the exmerge?  How much of your sensitive data (passwords,
whatever) could be floating out to wherever by that time?  AV is not
foolproof by itself.  Not by a longshot.  His comment is ...when a virus
outbreak occurs that actually gets inside  H... I would personally
want to be a bit more proactive.

By the time you discover the virus even exists, it's may not just the
Exchange server that's toast.  We had a recent incident with an exe file
(virus) that snuck by the SMTP proxy service (firewall) and got into the
Exchange box before the latest AV signatures made it here.  It made it into
41 mailboxes, oh joy  Fortunately we hammered it with a trial version of
a content filtering gateway (a test relay) that used a policy-based ruleset
to strip it as it blew past the broken proxy on it's towards the
not-yet-updated Exchange server (and ultimately a whole network of
potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
later, and even at that point it took some time (not much - but how much
does a worm need?) for the sigs to roll out to every PC.  But the test relay
system rendered it useless.  We were lucky.  AV (clients, agents. etc.) and
the SMTP proxy both failed us.  A trial system saved out butts.  Yeah, I
know, having AV agent on the Exchange box did not help in this specific
instance, but that's just the point - AV updates (even automated, on the
Exchange server, or the desktops, wherever) always have the potential to
leave little windows of opportunity for a brand-new and aggressive worm to
get in.  You have to plug every hole.  You should be trying to kill it at
the gateway, on any relay servers, on the Exchange box, on the desktops, at
the servers, wherever you can.  

Defense in depth.  Be proactive.  Don't knowingly turn your back on any
potential threats.


 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 1:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  Is virus protection on the Exchange server necessary?
 
 Our environment has Trend running on the firewall for anti-virus and
 content filtering.  We have NAV running on the desktops.  We are currently
 evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
 (including an E2K cluster on a Compaq SAN).  However, our Microsoft
 resident is suggesting to us that AV on the servers themselves is not
 necessary and will only introduce problems and instability (particularly
 Symantec's product).  He said that when a virus outbreak occurs that
 actually gets inside, a quick ExMerge on the server is just as effective
 as pushing out virus defs using the AV product.
 
 With AV software on the firewall and on the desktops, what do people think
 about not putting AV on the Exchange servers themselves?
 
 -- 
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.
 
 
 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread William Lefkovics

Title: RE: Is virus protection on the Exchange server necessary?



What 
is a 'Microsoft resident'? Is that some form of 
internship?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
  10, 2002 10:13 AMTo: MS-Exchange Admin IssuesSubject: 
  RE: Is virus protection on the Exchange server necessary?
  I think it's ridiculous. 
  -Original Message- From: 
  Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues Subject: Is virus 
  protection on the Exchange server necessary? 
  Our environment has Trend running on the firewall for 
  anti-virus and content filtering. We have NAV running on the 
  desktops. We are currently evaluating Antigen and SAVF (Symantec) to put 
  on our E2K Exchange servers (including an E2K cluster on a Compaq SAN). 
  However, our Microsoft resident is suggesting to us that AV on the servers 
  themselves is not necessary and will only introduce problems and instability 
  (particularly Symantec's product). He said that when a virus outbreak 
  occurs that actually gets inside, a quick ExMerge on the server is just as 
  effective as pushing out virus defs using the AV product.
  With AV software on the firewall and on the desktops, what do 
  people think about not putting AV on the Exchange servers 
  themselves?
  -- Matt Lathrum General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. 
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?


Ok! Ok! I got it! I agree! :)

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

 -Original Message-
From:   Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 12:50 PM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

I have a copy of InouclateIT Exchange Option you can have if you really want
to give your Microsoft resident some ammo to support their argument ;-)

Why would you knowingly let a virus in just because it's easy to clean up?
How many PC's/servers/etc will be melting down while you're shutting down
Exchange to do the exmerge?  How much of your sensitive data (passwords,
whatever) could be floating out to wherever by that time?  AV is not
foolproof by itself.  Not by a longshot.  His comment is ...when a virus
outbreak occurs that actually gets inside  H... I would personally
want to be a bit more proactive.

By the time you discover the virus even exists, it's may not just the
Exchange server that's toast.  We had a recent incident with an exe file
(virus) that snuck by the SMTP proxy service (firewall) and got into the
Exchange box before the latest AV signatures made it here.  It made it into
41 mailboxes, oh joy  Fortunately we hammered it with a trial version of
a content filtering gateway (a test relay) that used a policy-based ruleset
to strip it as it blew past the broken proxy on it's towards the
not-yet-updated Exchange server (and ultimately a whole network of
potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
later, and even at that point it took some time (not much - but how much
does a worm need?) for the sigs to roll out to every PC.  But the test relay
system rendered it useless.  We were lucky.  AV (clients, agents. etc.) and
the SMTP proxy both failed us.  A trial system saved out butts.  Yeah, I
know, having AV agent on the Exchange box did not help in this specific
instance, but that's just the point - AV updates (even automated, on the
Exchange server, or the desktops, wherever) always have the potential to
leave little windows of opportunity for a brand-new and aggressive worm to
get in.  You have to plug every hole.  You should be trying to kill it at
the gateway, on any relay servers, on the Exchange box, on the desktops, at
the servers, wherever you can.  

Defense in depth.  Be proactive.  Don't knowingly turn your back on any
potential threats.


 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 1:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  Is virus protection on the Exchange server necessary?
 
 Our environment has Trend running on the firewall for anti-virus and
 content filtering.  We have NAV running on the desktops.  We are currently
 evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
 (including an E2K cluster on a Compaq SAN).  However, our Microsoft
 resident is suggesting to us that AV on the servers themselves is not
 necessary and will only introduce problems and instability (particularly
 Symantec's product).  He said that when a virus outbreak occurs that
 actually gets inside, a quick ExMerge on the server is just as effective
 as pushing out virus defs using the AV product.
 
 With AV software on the firewall and on the desktops, what do people think
 about not putting AV on the Exchange servers themselves?
 
 -- 
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.
 
 
 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

so, you want the InoculateIT CD? (heh heh)

 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 Ok! Ok! I got it! I agree! :)

 -- 
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.

  -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 12:50 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 I have a copy of InouclateIT Exchange Option you can have if you really
 want
 to give your Microsoft resident some ammo to support their argument ;-)

 Why would you knowingly let a virus in just because it's easy to clean
 up?
 How many PC's/servers/etc will be melting down while you're shutting down
 Exchange to do the exmerge?  How much of your sensitive data (passwords,
 whatever) could be floating out to wherever by that time?  AV is not
 foolproof by itself.  Not by a longshot.  His comment is ...when a virus
 outbreak occurs that actually gets inside  H... I would
 personally
 want to be a bit more proactive.

 By the time you discover the virus even exists, it's may not just the
 Exchange server that's toast.  We had a recent incident with an exe file
 (virus) that snuck by the SMTP proxy service (firewall) and got into the
 Exchange box before the latest AV signatures made it here.  It made it
 into
 41 mailboxes, oh joy  Fortunately we hammered it with a trial version
 of
 a content filtering gateway (a test relay) that used a policy-based
 ruleset
 to strip it as it blew past the broken proxy on it's towards the
 not-yet-updated Exchange server (and ultimately a whole network of
 potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
 later, and even at that point it took some time (not much - but how much
 does a worm need?) for the sigs to roll out to every PC.  But the test
 relay
 system rendered it useless.  We were lucky.  AV (clients, agents. etc.)
 and
 the SMTP proxy both failed us.  A trial system saved out butts.  Yeah, I
 know, having AV agent on the Exchange box did not help in this specific
 instance, but that's just the point - AV updates (even automated, on the
 Exchange server, or the desktops, wherever) always have the potential to
 leave little windows of opportunity for a brand-new and aggressive worm to
 get in.  You have to plug every hole.  You should be trying to kill it at
 the gateway, on any relay servers, on the Exchange box, on the desktops,
 at
 the servers, wherever you can.  

 Defense in depth.  Be proactive.  Don't knowingly turn your back on any
 potential threats.

  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 1:10 PM
  To: MS-Exchange Admin Issues
  Subject:Is virus protection on the Exchange server necessary?

  Our environment has Trend running on the firewall for anti-virus and
  content filtering.  We have NAV running on the desktops.  We are
 currently
  evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
 servers
  (including an E2K cluster on a Compaq SAN).  However, our Microsoft
  resident is suggesting to us that AV on the servers themselves is not
  necessary and will only introduce problems and instability (particularly
  Symantec's product).  He said that when a virus outbreak occurs that
  actually gets inside, a quick ExMerge on the server is just as effective
  as pushing out virus defs using the AV product.

  With AV software on the firewall and on the desktops, what do people
 think
  about not putting AV on the Exchange servers themselves?

  -- 
  Matt Lathrum
  General Dynamics Decision Systems
   When cryptography is outlawed,
   bayl bhgynjf jvyy unir cevinpl.

  List Charter and FAQ at:
  http://www.sunbelt-software.com/exchange_list_charter.htm

 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm

 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: RE: Is virus protection on the Exchange server necessary?



lives in Redmond?

  -Original Message-From: William Lefkovics 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  What 
  is a 'Microsoft resident'? Is that some form of 
  internship?
  
-Original Message-From: Micciche, Robert 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 
10, 2002 10:13 AMTo: MS-Exchange Admin IssuesSubject: 
RE: Is virus protection on the Exchange server 
necessary?
I think it's ridiculous. 
-Original Message- From: 
Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues Subject: Is 
virus protection on the Exchange server necessary? 
Our environment has Trend running on the firewall for 
anti-virus and content filtering. We have NAV running on the 
desktops. We are currently evaluating Antigen and SAVF (Symantec) to 
put on our E2K Exchange servers (including an E2K cluster on a Compaq 
SAN). However, our Microsoft resident is suggesting to us that AV on 
the servers themselves is not necessary and will only introduce problems and 
instability (particularly Symantec's product). He said that when a 
virus outbreak occurs that actually gets inside, a quick ExMerge on the 
server is just as effective as pushing out virus defs using the AV 
product.
With AV software on the firewall and on the desktops, what 
do people think about not putting AV on the Exchange servers 
themselves?
-- Matt Lathrum General Dynamics Decision 
Systems  
When cryptography is outlawed,  
bayl bhgynjf jvyy unir cevinpl. List Charter and 
  FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

I need something to put my coke cans on.

-Original Message-
From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

so, you want the InoculateIT CD? (heh heh)

 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 Ok! Ok! I got it! I agree! :)

 --
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.

  -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 12:50 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 I have a copy of InouclateIT Exchange Option you can have if you 
 really want to give your Microsoft resident some ammo to support their 
 argument ;-)

 Why would you knowingly let a virus in just because it's easy to 
 clean up? How many PC's/servers/etc will be melting down while you're 
 shutting down Exchange to do the exmerge?  How much of your sensitive 
 data (passwords,
 whatever) could be floating out to wherever by that time?  AV is not 
 foolproof by itself.  Not by a longshot.  His comment is ...when a 
 virus outbreak occurs that actually gets inside  H... I would 
 personally want to be a bit more proactive.

 By the time you discover the virus even exists, it's may not just the 
 Exchange server that's toast.  We had a recent incident with an exe 
 file
 (virus) that snuck by the SMTP proxy service (firewall) and got into the
 Exchange box before the latest AV signatures made it here.  It made it
 into
 41 mailboxes, oh joy  Fortunately we hammered it with a trial version
 of
 a content filtering gateway (a test relay) that used a policy-based
 ruleset
 to strip it as it blew past the broken proxy on it's towards the
 not-yet-updated Exchange server (and ultimately a whole network of
 potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
 later, and even at that point it took some time (not much - but how much
 does a worm need?) for the sigs to roll out to every PC.  But the test
 relay
 system rendered it useless.  We were lucky.  AV (clients, agents. etc.)
 and
 the SMTP proxy both failed us.  A trial system saved out butts.  Yeah, I
 know, having AV agent on the Exchange box did not help in this specific
 instance, but that's just the point - AV updates (even automated, on the
 Exchange server, or the desktops, wherever) always have the potential to
 leave little windows of opportunity for a brand-new and aggressive worm to
 get in.  You have to plug every hole.  You should be trying to kill it at
 the gateway, on any relay servers, on the Exchange box, on the desktops,
 at
 the servers, wherever you can.  

 Defense in depth.  Be proactive.  Don't knowingly turn your back on 
 any potential threats.

  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 1:10 PM
  To: MS-Exchange Admin Issues
  Subject:Is virus protection on the Exchange server necessary?

  Our environment has Trend running on the firewall for anti-virus and 
  content filtering.  We have NAV running on the desktops.  We are
 currently
  evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
 servers
  (including an E2K cluster on a Compaq SAN).  However, our Microsoft 
  resident is suggesting to us that AV on the servers themselves is 
  not necessary and will only introduce problems and instability 
  (particularly Symantec's product).  He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.

  With AV software on the firewall and on the desktops, what do people
 think
  about not putting AV on the Exchange servers themselves?

  --
  Matt Lathrum
  General Dynamics Decision Systems
   When cryptography is outlawed,
   bayl bhgynjf jvyy unir cevinpl.

  List Charter and FAQ at: 
  http://www.sunbelt-software.com/exchange_list_charter.htm

 List Charter and FAQ at: 
 http://www.sunbelt-software.com/exchange_list_charter.htm

 List Charter and FAQ at: 
 http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Paul Green

Title: RE: Is virus protection on the Exchange server necessary?



Anything between 156th and E. Lake Sammamish/Fall City 
Road??? Heheh
-Original Message-From: 
Clayton [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 
10, 2002 1:17 PMPosted To: Exchange 2000 
ServerConversation: Is virus protection on the Exchange server 
necessary?Subject: RE: Is virus protection on the Exchange server 
necessary?

  lives in Redmond?
  
-Original Message-From: William Lefkovics 
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?
What is a 'Microsoft resident'? Is that some 
form of internship?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, 
  April 10, 2002 10:13 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  I think it's ridiculous. 
  -Original Message- From: 
  Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM To: MS-Exchange Admin Issues Subject: Is 
  virus protection on the Exchange server necessary? 
  Our environment has Trend running on the firewall for 
  anti-virus and content filtering. We have NAV running on the 
  desktops. We are currently evaluating Antigen and SAVF (Symantec) to 
  put on our E2K Exchange servers (including an E2K cluster on a Compaq 
  SAN). However, our Microsoft resident is suggesting to us that AV on 
  the servers themselves is not necessary and will only introduce problems 
  and instability (particularly Symantec's product). He said that when 
  a virus outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.
  With AV software on the firewall and on the desktops, what 
  do people think about not putting AV on the Exchange servers 
  themselves?
  -- Matt Lathrum General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. List Charter and 
FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Incoming mail is certified Virus Free.Checked by 
  AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
  Database: 191 - Release Date: 4/2/2002
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.344 / Virus Database: 191 - Release Date: 4/2/2002

RE: Is virus protection on the Exchange server necessary?

Title: Message



Did you have AV 
on your Exch server

  
  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 
  1:33 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  Used 
  to live a few blocks from there...
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Paul Green 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 4:22 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?
Anything between 156th and E. Lake Sammamish/Fall City 
Road??? Heheh
-Original Message-From: 
Clayton [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, 
April 10, 2002 1:17 PMPosted To: Exchange 2000 
ServerConversation: Is virus protection on the Exchange server 
necessary?Subject: RE: Is virus protection on the Exchange server 
necessary?

  lives in Redmond?
  
-Original Message-From: William Lefkovics 
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
What is a 'Microsoft resident'? Is that 
some form of internship?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, 
  April 10, 2002 10:13 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange 
  server necessary?
  I think it's ridiculous. 
  -Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM 
  To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
  necessary? 
  Our environment has Trend running on the firewall for 
  anti-virus and content filtering. We have NAV running on the 
  desktops. We are currently evaluating Antigen and SAVF 
  (Symantec) to put on our E2K Exchange servers (including an E2K 
  cluster on a Compaq SAN). However, our Microsoft resident is 
  suggesting to us that AV on the servers themselves is not necessary 
  and will only introduce problems and instability (particularly 
  Symantec's product). He said that when a virus outbreak occurs 
  that actually gets inside, a quick ExMerge on the server is just as 
  effective as pushing out virus defs using the AV product.
  With AV software on the firewall and on the desktops, 
  what do people think about not putting AV on the Exchange servers 
  themselves?
  -- Matt Lathrum 
  General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. List Charter 
and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Incoming mail is certified Virus Free.Checked 
  by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
  Virus Database: 191 - Release Date: 4/2/2002List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Outgoing mail is certified Virus Free.Checked by 
AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
Database: 191 - Release Date: 4/2/2002List Charter 
  and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Moody, Jacqueline

Title: Message

Intelligent Updater:Virus Definitions created
April 9Virus Definitions
released April 9Norton
AntiVirus Corp. Edition Defs Version: 40409sNorton AntiVirus Corp.
Edition Sequence Number:
16286Total Viruses Detected: 60617LiveUpdate:Virus
Definitions released April 3Norton AntiVirus Corp. Edition Defs Version: 40403fNorton AntiVirus
Corp. Edition Sequence Number: 16063Total Viruses Detected: 60441
You
mentioned using Live Update. If you are using live update, then today you
are protected with anti-viruspatterns that came out on April 3rd.
You must use the manual Intelligent Updater to get yesterday's April 9 virus
patterns.

You
can read more about it here.

http://service4.symantec.com/SUPPORT/sharedtech.nsf/docid/2002021908382713

Jacqueline

-Original Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent:
Wednesday, April 10, 2002 2:55 PMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus protection on the Exchange server
necessary?

SAVF is Symantec
Anti-Virus and Filtering for Exchange:

http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=66PID=10300065EID=0

It's pretty
new...

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

-Original
Message-From: Ely, Don
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, April 10, 2002 11:39
AMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?

What's
SAVF?

Trend
Micro and Sybari make the best AV for Exchange period...

Don
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 -
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
-Original
Message-From: Lathrum
Matt-P55173 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 2:39
PMTo: MS-Exchange Admin
IssuesSubject: RE: Is virus
protection on the Exchange server necessary?
Actually,
I was talking about the NAV client piece, not NAV for Exchange
server.

And I was
on the fence about it. That's why
I posted here trying to get feedback.
There have been some very good points to use AV filtering on Exchange
and I am going to suggest that to my management that it is worth the
money. I do appreciate everyone's
responses.

The next
question - Has anyone been able to compare SAVF and Antigen? Yes, lots of people compare NAVfE with
Antigen and love Sybari's product much
more.

However,
SAVF appears to be a lot better.
Has anyone played with it?

Matt
Lathrum
General
Dynamics Decision Systems

When cryptography is outlawed,

bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Paul Green

Title: Message



I used 
lived on westlake sammamish and 40th. 2 minute drive to work from there to 
the main campus.

  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 10, 
  2002 1:33 PMPosted To: Exchange 2000 ServerConversation: 
  Is virus protection on the Exchange server necessary?Subject: RE: 
  Is virus protection on the Exchange server necessary?
  Used 
  to live a few blocks from there...
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Paul Green 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 4:22 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
protection on the Exchange server necessary?
Anything between 156th and E. Lake Sammamish/Fall City 
Road??? Heheh
-Original Message-From: 
Clayton [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, 
April 10, 2002 1:17 PMPosted To: Exchange 2000 
ServerConversation: Is virus protection on the Exchange server 
necessary?Subject: RE: Is virus protection on the Exchange server 
necessary?

  lives in Redmond?
  
-Original Message-From: William Lefkovics 
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
What is a 'Microsoft resident'? Is that 
some form of internship?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, 
  April 10, 2002 10:13 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange 
  server necessary?
  I think it's ridiculous. 
  -Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM 
  To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
  necessary? 
  Our environment has Trend running on the firewall for 
  anti-virus and content filtering. We have NAV running on the 
  desktops. We are currently evaluating Antigen and SAVF 
  (Symantec) to put on our E2K Exchange servers (including an E2K 
  cluster on a Compaq SAN). However, our Microsoft resident is 
  suggesting to us that AV on the servers themselves is not necessary 
  and will only introduce problems and instability (particularly 
  Symantec's product). He said that when a virus outbreak occurs 
  that actually gets inside, a quick ExMerge on the server is just as 
  effective as pushing out virus defs using the AV product.
  With AV software on the firewall and on the desktops, 
  what do people think about not putting AV on the Exchange servers 
  themselves?
  -- Matt Lathrum 
  General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. List Charter 
and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Incoming mail is certified Virus Free.Checked 
  by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
  Virus Database: 191 - Release Date: 4/2/2002List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Outgoing mail is certified Virus Free.Checked by 
AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
Database: 191 - Release Date: 4/2/2002List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Incoming mail is certified Virus Free.Checked by 
  AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
  Database: 191 - Release Date: 4/2/2002
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.344 / Virus Database: 191 - Release Date: 4/2/2002

RE: Is virus protection on the Exchange server necessary?

Title: Message



I used to live in Vancouver, does that count? We had AV on Exchange and 
the desktops, and the servers, and the net gateways there.

  -Original Message-From: Paul Green 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:44 PMTo: 
  MS-Exchange Admin IssuesSubject: RE: Is virus protection on the 
  Exchange server necessary?
  I 
  used lived on westlake sammamish and 40th. 2 minute drive to work from 
  there to the main campus.
  
-Original Message-From: Ely, Don 
[mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 10, 
2002 1:33 PMPosted To: Exchange 2000 
ServerConversation: Is virus protection on the Exchange server 
necessary?Subject: RE: Is virus protection on the Exchange server 
necessary?
Used to live a few blocks from there...


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Paul Green 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 4:22 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  Anything between 156th and E. Lake Sammamish/Fall City 
  Road??? Heheh
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 10, 
  2002 1:17 PMPosted To: Exchange 2000 
  ServerConversation: Is virus protection on the Exchange server 
  necessary?Subject: RE: Is virus protection on the Exchange 
  server necessary?
  
lives in Redmond?

  -Original Message-From: William Lefkovics 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
  virus protection on the Exchange server 
necessary?
  What is a 'Microsoft resident'? Is that 
  some form of internship?
  
-Original Message-From: Micciche, Robert 
[mailto:[EMAIL PROTECTED]]Sent: 
Wednesday, April 10, 2002 10:13 AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus protection on the Exchange 
server necessary?
I think it's ridiculous. 
-Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
necessary? 
Our environment has Trend running on the firewall 
for anti-virus and content filtering. We have NAV running on 
the desktops. We are currently evaluating Antigen and SAVF 
(Symantec) to put on our E2K Exchange servers (including an E2K 
cluster on a Compaq SAN). However, our Microsoft resident is 
suggesting to us that AV on the servers themselves is not necessary 
and will only introduce problems and instability (particularly 
Symantec's product). He said that when a virus outbreak occurs 
that actually gets inside, a quick ExMerge on the server is just as 
effective as pushing out virus defs using the AV product.
With AV software on the firewall and on the 
desktops, what do people think about not putting AV on the Exchange 
servers themselves?
-- Matt Lathrum 
General Dynamics Decision 
Systems  
When cryptography is outlawed,  
bayl bhgynjf jvyy unir cevinpl. List 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Incoming mail is certified Virus Free.Checked 
by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
Virus Database: 191 - Release Date: 
  4/2/2002List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Outgoing mail is certified Virus Free.Checked 
  by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
  Virus Database: 191 - Release Date: 4/2/2002List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Incoming mail is certified Virus Free.Checked by 
AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
Database: 191 - Release Date: 4/2/2002List Charter 
  and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Outgoing mail is certified Virus Free.Checked by 
  AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / Virus 
  Database: 191 - Release Date: 4/2/2002
List Charter and FAQ at:
http://www.sunbelt-software.com

RE: Is virus protection on the Exchange server necessary?

Title: Message



No, I 
chose not to, I loved shutting down MTA's and servers to run Exmerge. 
;o)


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Martin 
  Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 
  April 10, 2002 4:41 PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  Did you have AV 
  on your Exch server
  

-Original Message-From: Ely, Don 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 
1:33 PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
Used to live a few blocks from there...


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Paul Green 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 4:22 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  Anything between 156th and E. Lake Sammamish/Fall City 
  Road??? Heheh
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 10, 
  2002 1:17 PMPosted To: Exchange 2000 
  ServerConversation: Is virus protection on the Exchange server 
  necessary?Subject: RE: Is virus protection on the Exchange 
  server necessary?
  
lives in Redmond?

  -Original Message-From: William Lefkovics 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 4:10 
  PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
  virus protection on the Exchange server 
necessary?
  What is a 'Microsoft resident'? Is that 
  some form of internship?
  
-Original Message-From: Micciche, Robert 
[mailto:[EMAIL PROTECTED]]Sent: 
Wednesday, April 10, 2002 10:13 AMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus protection on the Exchange 
server necessary?
I think it's ridiculous. 
-Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
necessary? 
Our environment has Trend running on the firewall 
for anti-virus and content filtering. We have NAV running on 
the desktops. We are currently evaluating Antigen and SAVF 
(Symantec) to put on our E2K Exchange servers (including an E2K 
cluster on a Compaq SAN). However, our Microsoft resident is 
suggesting to us that AV on the servers themselves is not necessary 
and will only introduce problems and instability (particularly 
Symantec's product). He said that when a virus outbreak occurs 
that actually gets inside, a quick ExMerge on the server is just as 
effective as pushing out virus defs using the AV product.
With AV software on the firewall and on the 
desktops, what do people think about not putting AV on the Exchange 
servers themselves?
-- Matt Lathrum 
General Dynamics Decision 
Systems  
When cryptography is outlawed,  
bayl bhgynjf jvyy unir cevinpl. List 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Incoming mail is certified Virus Free.Checked 
by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
Virus Database: 191 - Release Date: 
  4/2/2002List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Outgoing mail is certified Virus Free.Checked 
  by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
  Virus Database: 191 - Release Date: 4/2/2002List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

Title: Message



Word Bizatch!! 
The Exmerge is in the hizouse!!

  
  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 
  1:42 PMTo: MS-Exchange Admin IssuesSubject: RE: Is virus 
  protection on the Exchange server necessary?
  No, 
  I chose not to, I loved shutting down MTA's and servers to run Exmerge. 
  ;o)
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Martin 
Blackstone [mailto:[EMAIL PROTECTED]] Sent: 
Wednesday, April 10, 2002 4:41 PMTo: MS-Exchange Admin 
IssuesSubject: RE: Is virus protection on the Exchange server 
necessary?
Did you have 
AV on your Exch server

  
  -Original Message-From: Ely, Don 
  [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 
  2002 1:33 PMTo: MS-Exchange Admin IssuesSubject: RE: 
  Is virus protection on the Exchange server necessary?
  Used to live a few blocks from there...
  
  
  Don 
  ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
  Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com
  

-Original Message-From: Paul Green 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 4:22 
PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
Anything between 156th and E. Lake Sammamish/Fall City 
Road??? Heheh
-Original 
Message-From: Clayton 
[mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 
10, 2002 1:17 PMPosted To: Exchange 2000 
ServerConversation: Is virus protection on the Exchange 
server necessary?Subject: RE: Is virus protection on the 
Exchange server necessary?

  lives in Redmond?
  
-Original Message-From: William Lefkovics 
[mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 
4:10 PMTo: MS-Exchange Admin IssuesSubject: 
RE: Is virus protection on the Exchange server 
necessary?
What is a 'Microsoft resident'? Is 
that some form of internship?

  -Original Message-From: 
  Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: 
  Wednesday, April 10, 2002 10:13 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange 
  server necessary?
  I think it's ridiculous. 
  -Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, April 10, 2002 1:10 PM 
  To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
  necessary? 
  Our environment has Trend running on the firewall 
  for anti-virus and content filtering. We have NAV running on 
  the desktops. We are currently evaluating Antigen and SAVF 
  (Symantec) to put on our E2K Exchange servers (including an E2K 
  cluster on a Compaq SAN). However, our Microsoft resident is 
  suggesting to us that AV on the servers themselves is not 
  necessary and will only introduce problems and instability 
  (particularly Symantec's product). He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.
  With AV software on the firewall and on the 
  desktops, what do people think about not putting AV on the 
  Exchange servers themselves?
  -- Matt Lathrum 
  General Dynamics Decision 
  Systems  
  When cryptography is outlawed,  
  bayl bhgynjf jvyy unir cevinpl. List 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
  ---Incoming mail is certified Virus 
  Free.Checked by AVG anti-virus system 
  (http://www.grisoft.com).Version: 6.0.344 / Virus Database: 191 - 
  Release Date: 4/2/2002List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Outgoing mail is certified Virus Free.Checked 
by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.344 / 
Virus Database: 191 - Release Date: 
  4/2/2002List Charter and FAQ 
  at:http://www.sunbelt-software.com

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Erik Sojka

Title: Message



Yo.

  
  -Original Message-From: Martin 
  Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 
  April 10, 2002 4:50 PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  Word Bizatch!! 
  The Exmerge is in the hizouse!!
  

-Original Message-From: Ely, Don 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 
1:42 PMTo: MS-Exchange Admin IssuesSubject: RE: Is 
virus protection on the Exchange server necessary?
No, I chose not to, I loved shutting down MTA's and servers to run 
Exmerge. ;o)


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - emailhttp://www.tripathimaging.com

  
  -Original Message-From: Martin 
  Blackstone [mailto:[EMAIL PROTECTED]] Sent: 
  Wednesday, April 10, 2002 4:41 PMTo: MS-Exchange Admin 
  IssuesSubject: RE: Is virus protection on the Exchange server 
  necessary?
  Did you 
  have AV on your Exch server
  

-Original Message-From: Ely, Don 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 
2002 1:33 PMTo: MS-Exchange Admin IssuesSubject: 
RE: Is virus protection on the Exchange server 
necessary?
Used to live a few blocks from there...


Don 
ElyNetwork EngineerTripath Imaging, Inc.(336) 290-8293 - 
Direct(336) 516-4519 - Mobile[EMAIL PROTECTED] - 
emailhttp://www.tripathimaging.com

  
  -Original Message-From: Paul 
  Green [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 
  2002 4:22 PMTo: MS-Exchange Admin IssuesSubject: 
  RE: Is virus protection on the Exchange server 
  necessary?
  Anything between 156th and E. Lake Sammamish/Fall City 
  Road??? Heheh
  -Original 
  Message-From: Clayton 
  [mailto:[EMAIL PROTECTED]]Posted At: Wednesday, April 
  10, 2002 1:17 PMPosted To: Exchange 2000 
  ServerConversation: Is virus protection on the Exchange 
  server necessary?Subject: RE: Is virus protection on the 
  Exchange server necessary?
  
lives in Redmond?

  -Original Message-From: 
  William Lefkovics 
  [mailto:[EMAIL PROTECTED]]Sent: April 10, 2002 
  4:10 PMTo: MS-Exchange Admin IssuesSubject: 
  RE: Is virus protection on the Exchange server 
  necessary?
  What is a 'Microsoft resident'? Is 
  that some form of internship?
  
-Original Message-From: 
Micciche, Robert 
[mailto:[EMAIL PROTECTED]]Sent: 
Wednesday, April 10, 2002 10:13 AMTo: MS-Exchange 
Admin IssuesSubject: RE: Is virus protection on the 
Exchange server necessary?
I think it's ridiculous. 
-Original Message- From: Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:10 PM 
To: MS-Exchange Admin Issues Subject: Is virus protection on the Exchange server 
necessary? 
Our environment has Trend running on the 
firewall for anti-virus and content filtering. We have NAV 
running on the desktops. We are currently evaluating 
Antigen and SAVF (Symantec) to put on our E2K Exchange servers 
(including an E2K cluster on a Compaq SAN). However, our 
Microsoft resident is suggesting to us that AV on the servers 
themselves is not necessary and will only introduce problems and 
instability (particularly Symantec's product). He said 
that when a virus outbreak occurs that actually gets inside, a 
quick ExMerge on the server is just as effective as pushing out 
virus defs using the AV product.
With AV software on the firewall and on the 
desktops, what do people think about not putting AV on the 
Exchange servers themselves?
-- Matt Lathrum 
General Dynamics Decision 
Systems 
 
When cryptography is outlawed,  
bayl bhgynjf jvyy unir cevinpl. List 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
---Incoming mail is certified Virus 
Free.Checked by AVG

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Kevin Miller [Ed]


Paul used to have a very nice pyramid of coke cans.. 

--Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond
http://www.daughtry.ca/ For Graphics and WebDesign, GO here!


-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:19 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


I need something to put my coke cans on.

-Original Message-
From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


so, you want the InoculateIT CD? (heh heh)

 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 Ok! Ok! I got it! I agree! :)
 
 --
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.
 
  -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 12:50 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 I have a copy of InouclateIT Exchange Option you can have if you
 really want to give your Microsoft resident some ammo to support their

 argument ;-)
 
 Why would you knowingly let a virus in just because it's easy to
 clean up? How many PC's/servers/etc will be melting down while you're 
 shutting down Exchange to do the exmerge?  How much of your sensitive 
 data (passwords,
 whatever) could be floating out to wherever by that time?  AV is not 
 foolproof by itself.  Not by a longshot.  His comment is ...when a 
 virus outbreak occurs that actually gets inside  H... I would

 personally want to be a bit more proactive.
 
 By the time you discover the virus even exists, it's may not just the
 Exchange server that's toast.  We had a recent incident with an exe 
 file
 (virus) that snuck by the SMTP proxy service (firewall) and got into
the
 Exchange box before the latest AV signatures made it here.  It made it
 into
 41 mailboxes, oh joy  Fortunately we hammered it with a trial
version
 of
 a content filtering gateway (a test relay) that used a policy-based
 ruleset
 to strip it as it blew past the broken proxy on it's towards the
 not-yet-updated Exchange server (and ultimately a whole network of
 potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
 later, and even at that point it took some time (not much - but how
much
 does a worm need?) for the sigs to roll out to every PC.  But the test
 relay
 system rendered it useless.  We were lucky.  AV (clients, agents.
etc.)
 and
 the SMTP proxy both failed us.  A trial system saved out butts.  Yeah,
I
 know, having AV agent on the Exchange box did not help in this
specific
 instance, but that's just the point - AV updates (even automated, on
the
 Exchange server, or the desktops, wherever) always have the potential
to
 leave little windows of opportunity for a brand-new and aggressive
worm to
 get in.  You have to plug every hole.  You should be trying to kill it
at
 the gateway, on any relay servers, on the Exchange box, on the
desktops,
 at
 the servers, wherever you can.  
 
 Defense in depth.  Be proactive.  Don't knowingly turn your back on
 any potential threats.
 
 
  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 1:10 PM
  To: MS-Exchange Admin Issues
  Subject:Is virus protection on the Exchange server necessary?
  
  Our environment has Trend running on the firewall for anti-virus and
  content filtering.  We have NAV running on the desktops.  We are
 currently
  evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
 servers
  (including an E2K cluster on a Compaq SAN).  However, our Microsoft
  resident is suggesting to us that AV on the servers themselves is 
  not necessary and will only introduce problems and instability 
  (particularly Symantec's product).  He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.
  
  With AV software on the firewall and on the desktops, what do people
 think
  about not putting AV on the Exchange servers themselves?
  
  --
  Matt Lathrum
  General Dynamics Decision Systems
   When cryptography is outlawed,
   bayl bhgynjf jvyy unir cevinpl.
  
  
  List Charter and FAQ at:
  http://www.sunbelt-software.com/exchange_list_charter.htm
 
 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm
 
 List Charter and FAQ at:
 http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter

RE: Is virus protection on the Exchange server necessary?


How come I never met Paul?


Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com




-Original Message-
From: Kevin Miller [Ed] [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 4:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


Paul used to have a very nice pyramid of coke cans.. 

--Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond http://www.daughtry.ca/ For
Graphics and WebDesign, GO here!


-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:19 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


I need something to put my coke cans on.

-Original Message-
From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


so, you want the InoculateIT CD? (heh heh)

 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 Ok! Ok! I got it! I agree! :)
 
 --
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.
 
  -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 12:50 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 I have a copy of InouclateIT Exchange Option you can have if you 
 really want to give your Microsoft resident some ammo to support their

 argument ;-)
 
 Why would you knowingly let a virus in just because it's easy to 
 clean up? How many PC's/servers/etc will be melting down while you're 
 shutting down Exchange to do the exmerge?  How much of your sensitive 
 data (passwords,
 whatever) could be floating out to wherever by that time?  AV is not
 foolproof by itself.  Not by a longshot.  His comment is ...when a 
 virus outbreak occurs that actually gets inside  H... I would

 personally want to be a bit more proactive.
 
 By the time you discover the virus even exists, it's may not just the 
 Exchange server that's toast.  We had a recent incident with an exe 
 file
 (virus) that snuck by the SMTP proxy service (firewall) and got into
the
 Exchange box before the latest AV signatures made it here.  It made it 
 into 41 mailboxes, oh joy  Fortunately we hammered it with a trial
version
 of
 a content filtering gateway (a test relay) that used a policy-based 
 ruleset to strip it as it blew past the broken proxy on it's towards 
 the not-yet-updated Exchange server (and ultimately a whole network of
 potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
 later, and even at that point it took some time (not much - but how
much
 does a worm need?) for the sigs to roll out to every PC.  But the test 
 relay system rendered it useless.  We were lucky.  AV (clients, 
 agents.
etc.)
 and
 the SMTP proxy both failed us.  A trial system saved out butts.  Yeah,
I
 know, having AV agent on the Exchange box did not help in this
specific
 instance, but that's just the point - AV updates (even automated, on
the
 Exchange server, or the desktops, wherever) always have the potential
to
 leave little windows of opportunity for a brand-new and aggressive
worm to
 get in.  You have to plug every hole.  You should be trying to kill it
at
 the gateway, on any relay servers, on the Exchange box, on the
desktops,
 at
 the servers, wherever you can.
 
 Defense in depth.  Be proactive.  Don't knowingly turn your back on 
 any potential threats.
 
 
  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 1:10 PM
  To: MS-Exchange Admin Issues
  Subject:Is virus protection on the Exchange server necessary?
  
  Our environment has Trend running on the firewall for anti-virus and 
  content filtering.  We have NAV running on the desktops.  We are
 currently
  evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
 servers
  (including an E2K cluster on a Compaq SAN).  However, our Microsoft 
  resident is suggesting to us that AV on the servers themselves is 
  not necessary and will only introduce problems and instability 
  (particularly Symantec's product).  He said that when a virus 
  outbreak occurs that actually gets inside, a quick ExMerge on the 
  server is just as effective as pushing out virus defs using the AV 
  product.
  
  With AV software on the firewall and on the desktops, what do people
 think
  about not putting AV on the Exchange servers

RE: Is virus protection on the Exchange server necessary?

too bad I only have one InoculateIT CD (I can't believe I said that)...

 -Original Message-
 From: Kevin Miller [Ed] [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:55 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 Paul used to have a very nice pyramid of coke cans.. 

 --Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond
 http://www.daughtry.ca/ For Graphics and WebDesign, GO here!

 -Original Message-
 From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 1:19 PM
 To: MS-Exchange Admin Issues
 Subject: RE: Is virus protection on the Exchange server necessary?

 I need something to put my coke cans on.

 -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 1:18 PM
 To: MS-Exchange Admin Issues
 Subject: RE: Is virus protection on the Exchange server necessary?

 so, you want the InoculateIT CD? (heh heh)

  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 4:10 PM
  To: MS-Exchange Admin Issues
  Subject:RE: Is virus protection on the Exchange server
 necessary?

  Ok! Ok! I got it! I agree! :)

  --
  Matt Lathrum
  General Dynamics Decision Systems
   When cryptography is outlawed,
   bayl bhgynjf jvyy unir cevinpl.

   -Original Message-
  From:   Toni, Randy [mailto:[EMAIL PROTECTED]] 
  Sent:   Wednesday, April 10, 2002 12:50 PM
  To: MS-Exchange Admin Issues
  Subject:RE: Is virus protection on the Exchange server
 necessary?

  I have a copy of InouclateIT Exchange Option you can have if you
  really want to give your Microsoft resident some ammo to support their

  argument ;-)

  Why would you knowingly let a virus in just because it's easy to
  clean up? How many PC's/servers/etc will be melting down while you're 
  shutting down Exchange to do the exmerge?  How much of your sensitive 
  data (passwords,
  whatever) could be floating out to wherever by that time?  AV is not 
  foolproof by itself.  Not by a longshot.  His comment is ...when a 
  virus outbreak occurs that actually gets inside  H... I would

  personally want to be a bit more proactive.

  By the time you discover the virus even exists, it's may not just the
  Exchange server that's toast.  We had a recent incident with an exe 
  file
  (virus) that snuck by the SMTP proxy service (firewall) and got into
 the
  Exchange box before the latest AV signatures made it here.  It made it
  into
  41 mailboxes, oh joy  Fortunately we hammered it with a trial
 version
  of
  a content filtering gateway (a test relay) that used a policy-based
  ruleset
  to strip it as it blew past the broken proxy on it's towards the
  not-yet-updated Exchange server (and ultimately a whole network of
  potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
  later, and even at that point it took some time (not much - but how
 much
  does a worm need?) for the sigs to roll out to every PC.  But the test
  relay
  system rendered it useless.  We were lucky.  AV (clients, agents.
 etc.)
  and
  the SMTP proxy both failed us.  A trial system saved out butts.  Yeah,
 I
  know, having AV agent on the Exchange box did not help in this
 specific
  instance, but that's just the point - AV updates (even automated, on
 the
  Exchange server, or the desktops, wherever) always have the potential
 to
  leave little windows of opportunity for a brand-new and aggressive
 worm to
  get in.  You have to plug every hole.  You should be trying to kill it
 at
  the gateway, on any relay servers, on the Exchange box, on the
 desktops,
  at
  the servers, wherever you can.  

  Defense in depth.  Be proactive.  Don't knowingly turn your back on
  any potential threats.

   -Original Message-
   From: Lathrum Matt-P55173
  [SMTP:[EMAIL PROTECTED]]
   Sent: Wednesday, April 10, 2002 1:10 PM
   To:   MS-Exchange Admin Issues
   Subject:  Is virus protection on the Exchange server necessary?

   Our environment has Trend running on the firewall for anti-virus and
   content filtering.  We have NAV running on the desktops.  We are
  currently
   evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
  servers
   (including an E2K cluster on a Compaq SAN).  However, our Microsoft
   resident is suggesting to us that AV on the servers themselves is 
   not necessary and will only introduce problems and instability 
   (particularly Symantec's product).  He said that when a virus 
   outbreak occurs that actually gets inside, a quick ExMerge on the 
   server is just as effective as pushing out virus defs using the AV 
   product.

   With AV software on the firewall and on the desktops, what do people
  think
   about not putting AV on the Exchange servers themselves

RE: Is virus protection on the Exchange server necessary?

::Laughs at Toni or Randy or whichever is his/her first name::

-Original Message-
From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:58 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

too bad I only have one InoculateIT CD (I can't believe I said that)...

 -Original Message-
 From: Kevin Miller [Ed] [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:55 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server necessary?

 Paul used to have a very nice pyramid of coke cans..

 --Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond 
 http://www.daughtry.ca/ For Graphics and WebDesign, GO here!

 -Original Message-
 From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 1:19 PM
 To: MS-Exchange Admin Issues
 Subject: RE: Is virus protection on the Exchange server necessary?

 I need something to put my coke cans on.

 -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 1:18 PM
 To: MS-Exchange Admin Issues
 Subject: RE: Is virus protection on the Exchange server necessary?

 so, you want the InoculateIT CD? (heh heh)

  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 4:10 PM
  To: MS-Exchange Admin Issues
  Subject:RE: Is virus protection on the Exchange server
 necessary?

  Ok! Ok! I got it! I agree! :)

  --
  Matt Lathrum
  General Dynamics Decision Systems
   When cryptography is outlawed,
   bayl bhgynjf jvyy unir cevinpl.

   -Original Message-
  From:   Toni, Randy [mailto:[EMAIL PROTECTED]] 
  Sent:   Wednesday, April 10, 2002 12:50 PM
  To: MS-Exchange Admin Issues
  Subject:RE: Is virus protection on the Exchange server
 necessary?

  I have a copy of InouclateIT Exchange Option you can have if you 
  really want to give your Microsoft resident some ammo to support 
  their

  argument ;-)

  Why would you knowingly let a virus in just because it's easy to 
  clean up? How many PC's/servers/etc will be melting down while 
  you're shutting down Exchange to do the exmerge?  How much of your 
  sensitive data (passwords,
  whatever) could be floating out to wherever by that time?  AV is not
  foolproof by itself.  Not by a longshot.  His comment is ...when a 
  virus outbreak occurs that actually gets inside  H... I would

  personally want to be a bit more proactive.

  By the time you discover the virus even exists, it's may not just 
  the Exchange server that's toast.  We had a recent incident with an 
  exe file
  (virus) that snuck by the SMTP proxy service (firewall) and got into
 the
  Exchange box before the latest AV signatures made it here.  It made 
  it into 41 mailboxes, oh joy  Fortunately we hammered it with a 
  trial
 version
  of
  a content filtering gateway (a test relay) that used a policy-based 
  ruleset to strip it as it blew past the broken proxy on it's towards 
  the not-yet-updated Exchange server (and ultimately a whole network 
  of potentially-not-yet-updated PC's).  We got the AV sig's a couple 
  hours later, and even at that point it took some time (not much - 
  but how
 much
  does a worm need?) for the sigs to roll out to every PC.  But the 
  test relay system rendered it useless.  We were lucky.  AV (clients, 
  agents.
 etc.)
  and
  the SMTP proxy both failed us.  A trial system saved out butts.  
  Yeah,
 I
  know, having AV agent on the Exchange box did not help in this
 specific
  instance, but that's just the point - AV updates (even automated, on
 the
  Exchange server, or the desktops, wherever) always have the 
  potential
 to
  leave little windows of opportunity for a brand-new and aggressive
 worm to
  get in.  You have to plug every hole.  You should be trying to kill 
  it
 at
  the gateway, on any relay servers, on the Exchange box, on the
 desktops,
  at
  the servers, wherever you can.

  Defense in depth.  Be proactive.  Don't knowingly turn your back on 
  any potential threats.

   -Original Message-
   From: Lathrum Matt-P55173
  [SMTP:[EMAIL PROTECTED]]
   Sent: Wednesday, April 10, 2002 1:10 PM
   To:   MS-Exchange Admin Issues
   Subject:  Is virus protection on the Exchange server necessary?

   Our environment has Trend running on the firewall for anti-virus 
   and content filtering.  We have NAV running on the desktops.  We 
   are
  currently
   evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
  servers
   (including an E2K cluster on a Compaq SAN).  However, our 
   Microsoft resident is suggesting to us that AV on the servers 
   themselves is not necessary and will only introduce problems and 
   instability (particularly Symantec's product).  He said that when 
   a virus

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Kevin Miller [Ed]


You can meet him next time you are out here.. We will make sure of that.


--Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond
http://www.daughtry.ca/ For Graphics and WebDesign, GO here!


-Original Message-
From: Ely, Don [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


How come I never met Paul?


Don Ely
Network Engineer
Tripath Imaging, Inc.
(336) 290-8293 - Direct
(336) 516-4519 - Mobile
[EMAIL PROTECTED] - email
http://www.tripathimaging.com




-Original Message-
From: Kevin Miller [Ed] [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 4:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


Paul used to have a very nice pyramid of coke cans.. 

--Kevinm TSSSBE, M, WLKMMAS, UCC+WCA, And Beyond http://www.daughtry.ca/
For Graphics and WebDesign, GO here!


-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:19 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


I need something to put my coke cans on.

-Original Message-
From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, April 10, 2002 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?


so, you want the InoculateIT CD? (heh heh)

 -Original Message-
 From: Lathrum Matt-P55173 [SMTP:[EMAIL PROTECTED]]
 Sent: Wednesday, April 10, 2002 4:10 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 Ok! Ok! I got it! I agree! :)
 
 --
 Matt Lathrum
 General Dynamics Decision Systems
  When cryptography is outlawed,
  bayl bhgynjf jvyy unir cevinpl.
 
  -Original Message-
 From: Toni, Randy [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, April 10, 2002 12:50 PM
 To:   MS-Exchange Admin Issues
 Subject:  RE: Is virus protection on the Exchange server
necessary?
 
 I have a copy of InouclateIT Exchange Option you can have if you
 really want to give your Microsoft resident some ammo to support their

 argument ;-)
 
 Why would you knowingly let a virus in just because it's easy to
 clean up? How many PC's/servers/etc will be melting down while you're 
 shutting down Exchange to do the exmerge?  How much of your sensitive 
 data (passwords,
 whatever) could be floating out to wherever by that time?  AV is not
 foolproof by itself.  Not by a longshot.  His comment is ...when a 
 virus outbreak occurs that actually gets inside  H... I would

 personally want to be a bit more proactive.
 
 By the time you discover the virus even exists, it's may not just the
 Exchange server that's toast.  We had a recent incident with an exe 
 file
 (virus) that snuck by the SMTP proxy service (firewall) and got into
the
 Exchange box before the latest AV signatures made it here.  It made it
 into 41 mailboxes, oh joy  Fortunately we hammered it with a trial
version
 of
 a content filtering gateway (a test relay) that used a policy-based
 ruleset to strip it as it blew past the broken proxy on it's towards 
 the not-yet-updated Exchange server (and ultimately a whole network of
 potentially-not-yet-updated PC's).  We got the AV sig's a couple hours
 later, and even at that point it took some time (not much - but how
much
 does a worm need?) for the sigs to roll out to every PC.  But the test
 relay system rendered it useless.  We were lucky.  AV (clients, 
 agents.
etc.)
 and
 the SMTP proxy both failed us.  A trial system saved out butts.  Yeah,
I
 know, having AV agent on the Exchange box did not help in this
specific
 instance, but that's just the point - AV updates (even automated, on
the
 Exchange server, or the desktops, wherever) always have the potential
to
 leave little windows of opportunity for a brand-new and aggressive
worm to
 get in.  You have to plug every hole.  You should be trying to kill it
at
 the gateway, on any relay servers, on the Exchange box, on the
desktops,
 at
 the servers, wherever you can.
 
 Defense in depth.  Be proactive.  Don't knowingly turn your back on
 any potential threats.
 
 
  -Original Message-
  From:   Lathrum Matt-P55173
 [SMTP:[EMAIL PROTECTED]]
  Sent:   Wednesday, April 10, 2002 1:10 PM
  To: MS-Exchange Admin Issues
  Subject:Is virus protection on the Exchange server necessary?
  
  Our environment has Trend running on the firewall for anti-virus and
  content filtering.  We have NAV running on the desktops.  We are
 currently
  evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange
 servers
  (including an E2K cluster on a Compaq SAN).  However, our Microsoft
  resident is suggesting to us that AV on the servers themselves is 
  not necessary and will only

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Allen Crawford

I would have AV on the Exchange server before any other server considering
that 99%* of all viruses are spread via email.

* Fact that I made up, but I bet is pretty close to being accurate.

 -Original Message-
From:   Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 12:10 PM
To: MS-Exchange Admin Issues
Subject:Is virus protection on the Exchange server necessary?

Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread William Lefkovics

Well, 99% of computer viruses, maybe.

And as I said to Matt offline, with a 60GB Store (and I think Matt's will be
larger), there is no such thing as a 'quick Exmerge'.

-Original Message-
From: Allen Crawford [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

I would have AV on the Exchange server before any other server considering
that 99%* of all viruses are spread via email.

* Fact that I made up, but I bet is pretty close to being accurate.

 -Original Message-
From:   Lathrum Matt-P55173 [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 12:10 PM
To: MS-Exchange Admin Issues
Subject:Is virus protection on the Exchange server necessary?

Our environment has Trend running on the firewall for anti-virus and content
filtering.  We have NAV running on the desktops.  We are currently
evaluating Antigen and SAVF (Symantec) to put on our E2K Exchange servers
(including an E2K cluster on a Compaq SAN).  However, our Microsoft resident
is suggesting to us that AV on the servers themselves is not necessary and
will only introduce problems and instability (particularly Symantec's
product).  He said that when a virus outbreak occurs that actually gets
inside, a quick ExMerge on the server is just as effective as pushing out
virus defs using the AV product.

With AV software on the firewall and on the desktops, what do people think
about not putting AV on the Exchange servers themselves?

-- 
Matt Lathrum
General Dynamics Decision Systems
 When cryptography is outlawed,
 bayl bhgynjf jvyy unir cevinpl.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?

2002-04-10 Thread Allen Crawford

Good point, although I'm pretty sure I got the flu from an email one time...

 -Original Message-
From:   William Lefkovics [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, April 10, 2002 4:25 PM
To: MS-Exchange Admin Issues
Subject:RE: Is virus protection on the Exchange server necessary?

Well, 99% of computer viruses, maybe.

And as I said to Matt offline, with a 60GB Store (and I think Matt's will be
larger), there is no such thing as a 'quick Exmerge'.

-Original Message-
From: Allen Crawford [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Is virus protection on the Exchange server necessary?

I would have AV on the Exchange server before any other server considering
that 99%* of all viruses are spread via email.

* Fact that I made up, but I bet is pretty close to being accurate.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

RE: Is virus protection on the Exchange server necessary?