FW: RE: Spam and A/V appliances.

  • From: "Taylor, George" <gtaylor@xxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 5 Jan 2006 12:35:29 -0700

We run Surf-Control's EMail filter.  Very configurable for Spam,
Profanity, Adult content, etc..  The user gets a daily email (or how
ever often you configure it to send) with a link to a website on the
server where they can view, delete or deliver the emails.  They can also
work on thier own white list there.  It gives some pretty nice
statistics which gave us a good way to justify the cost to Admin Row,
see below:
         # of SPAM Emails        Total # of Emails       Percentage of
December-04      78,315  122,837         63.8%  
January-05       224,026         361,629         61.9%  
February-05      202,071         331,226         61.0%  
March-05         217,851         373,192         58.4%  
April-05         201,594         337,383         59.8%  
May-05   221,291         359,719         61.5%  
June-05  233,097         369,333         63.1%  
July-05  256,098         381,275         67.2%  
August-05        254,089         406,847         62.5%  
September-05     222,293         405,325         54.8%  
October-05       270,150         449,590         60.1%  
November-05      289,527         455,497         63.6%  
December-05      325,522         501,412         64.9%  
Total    2,995,924       4,855,265       61.7%  
You can also go into things like how much was adult content, how much
was sales pitches, etc...  It's the first device, i.e it's what our
public MX record points to, then things move on to the antivirus and Zix
servers.  By being the first device it cuts the load on the other
servers by more than half, it's been a noticable performance enhancer
for the exchange servers.
George Taylor
Systems Programmer
Regional Health Inc.

-----Original Message-----
From: Evan Mann [mailto:emann@xxxxxxxxxxxxxxxxxxxxx] 
Sent: Thursday, January 05, 2006 10:46 AM
To: [ExchangeList]
Subject: [exchangelist] Spam and A/V appliances.



Hello all. I'm looking for input on an SMTP e-mail appliances for
spam/content filtering and antivirus.  I prefer an appliance over
software I run on a server, but I'll also accept input for software
based products.

My exchange front end does nothing but SMTP transport work, and A/V
scanning. It has no stores on it.  My current spam product runs on the
back end servers, because it uses SMTP Event Sink to pick off spam.
This means I have to let spam come to the back end server, causes
unnecessary load.  I want something to put all the way in front to
reduce these loads.

Two of the popular names in appliances are Ironmail and Barracuda, so
I'm obviously interested in those.  I'm also looking at St. Bernanrds
ePrism, as we have their iPrism already.

One of my absolute requirements is how spam is managed.  I must have
ability for end users to manage their spam and it's settings.  In
conjunction with global black/white lists Users must have the ability to
maintain their own (through web interface, directly in outlook,
whatever).  The user must be able to view the items in their quarantine.
The key to his is the USER has some control.  I cannot utilize a device
where an admin has to go digging through quarantines for legit mail, or
where an admin has to approve a mail from being released from the

Beyond that, I'm somewhat flexible.  I'll continue to use my Exchange
front end A/V, but I want some decent A/V functionality in the appliance
to reduce some scan load.

Based on this, can those of you who have used any of the boxes I've
mentioned, and others, provide input on if they would meet my
requirements, and what your experiences have been.

***Note: The information contained in this message, including any attachments, 
may be privileged, confidential, and protected from disclosure. If the reader 
of this message is not the intended recipient, or an employee or agent 
responsible for delivering this message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify the Sender immediately by a "reply to sender only" 
message and destroy all electronic or paper copies of the communication, 
including any attachments.

Other related posts:

  • » FW: RE: Spam and A/V appliances.