RE: Klez.H attack

  • From: <aorlowski@xxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 21 May 2002 12:21:10 -0400

Well Said Matt. I love Antigen, however has your campus received hundreds of
hits lately. Our college has. I am not real worried about because of antigen
cleans all of these out, but it seems to me that these hits are not a good
sign. We are also filtering exe,scr,etc.. all seems to work well.

Allen Orlowski
MCP, A+, Network +
aorlowski@xxxxxxxxxxx <mailto:aorlowski@xxxxxxxxxxx>






-----Original Message-----
From: Matt Dillingham [mailto:mdilling@xxxxxxxxx]
Sent: Tuesday, May 21, 2002 12:04 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Klez.H attack


http://www.MSExchange.org/


Denise Dorrance wrote:
>
> What exactly is Antigen?  Is it a virus software or an Anti-spam
software??
>

Denise-

Antigen is an antivirus engine that can scan all writes to the exchange
information store (mailboxes, ect) in real-time, can scan inside the store
(as a scheduled task, on demand, ect), and can scan and intercept messages
being sent across the SMTP virt-server (incoming and outgoing) in real-time.

since we have installed it and cleaned the information store for the first
time, we have not had ANY viruses actually infect anyone's mailbox.
everything has been stopped as incoming SMTP traffic.

i dont know if there is any other solution out there that will work as well
or better than antigen... because once i tried this, i stopped looking.  i
highly recommend it.

-matt


PS> however, it does not intercept spam... unless it has a virus- heh heh.

PS> also, i forgot to mention, antigen also has file filtering capability
(block all .exe & .scr, ect), but we are not using it.  i do know some
people that are, and i have heard that it works fine.
--
__________________________________________________________________
 Matt Dillingham                        Systems Administrator II
           University of Michigan, Bioinformatics

------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
aorlowski@xxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')



Other related posts: