RE: Anti-virus on Exchange
- From: "Rick Boza" <rickb@xxxxxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Tue, 15 Feb 2005 20:08:25 -0500
Some Exchange AV products - Sybari Antigen, for example - examine the
attachment 'blob' rather than looking at the extension. Renaming the
file doesn't change the file type in the header, and thus scanning works
just as if the extension had never been changed. Whether your clients
use OWA, Outlook, Entourage, or even POP your mail off with PocoMail,
you're still protected.
Oh, and following on John's suggestion, don't forget to lock down USB
drives. Heck better get the fax machines and copiers too, those can
serve as security risks for getting intellectual property out of an
organization undetected as well ;)
________________________________
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, February 15, 2005 7:20 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Anti-virus on Exchange
http://www.MSExchange.org/
Banning of attachments is policy based. It is impossible for a virus to
spread automatically through OWA. If you are concerned about a user
using OWA to purposefully attaching a malicious payload to an e-mail
message to local users through OWA, then I assume you have removed all
floppy drives and CD drives from computers and have the desktops locked
down preventing the running of unapproved executables.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From: Raji Arulambalam [mailto:RajiA@xxxxxxxxxxxxxx]
Sent: Tuesday, February 15, 2005 4:09 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Anti-virus on Exchange
http://www.MSExchange.org/
How would you stop malware (worms, virus) from being introduced into
Exchange when using OWA with attachments enabled. You can send a binary
file by renaming it with a txt ext or some other thats allowed. So we
have disabled all attachments when using OWA.
RajiA
________________________________
From: John Tolmachoff (Lists)
[mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, 16 February 2005 5:52 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Anti-virus on Exchange
http://www.MSExchange.org/
I would rather not let the virus get that far. It is much better
to stop it before even touching Exchange.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From: C Drawers [mailto:cdrawers@xxxxxxxxx]
Sent: Tuesday, February 15, 2005 8:32 AM
To: [ExchangeList]
Subject: [exchangelist] Anti-virus on Exchange
http://www.MSExchange.org/
What do people use and recommend as an anti-virus
product to for scanning of Information Stores?
Thanks,
C
________________________________
Email disclaimer: This email and any attachments are confidential. If
you are not the intended recipient, do not copy, disclose or use the
contents in any way. If you receive this message in error, please let
us know by return email and then destroy the message. Environment Bay of
Plenty is not responsible for any changes made to this message and/or
any attachments after sending.
________________________________
This e-mail has been checked for viruses and no viruses were detected.
________________________________
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
rickb@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
