Hey Zafar, You already have a webshield server in front of Exchange? Yes, Webshield has its own SMTP server, it doesn't need IIS for anything. It's really easy to configure it, all you need to do is tell it if the mail server is on the same machine or on other machine, configure for which domains it should deliver mail internally, configure what's your internal IP range and you're protected. It works really well. The only problem is that this solution will tie you up, meaning that you won't be able to implement any other kind of defense on this server, and it'll hit the CPU hard. No need to be concerned about Open Relays and other security threats. Webshield will deal with these problems very well. Tiago de Aviz SoftSell (41) 340-2363 www.softsell.com.br <http://www.softsell.com.br/> _____ From: Zafar Pravaiz [mailto:Zafar.Pravaiz@xxxxxx] Sent: domingo, 8 de fevereiro de 2004 02:12 To: [ExchangeList] Subject: [exchangelist] RE: Mail gateway http://www.MSExchange.org/ Thanks for your kind reply. I have few doubt coz I m new with webshield . I'll be placing my webshield server behind my PIX without any ISA and in front of my Exchange 5.5. I guess webshield have its own SMTP services and do not use IIS SMTP. My concern about Open Relay and other security threats. Please throw some light on this. Of course GFI is the best option. Thanks Zafar -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Saturday, February 07, 2004 10:28 PM To: [ExchangeList] Subject: [exchangelist] RE: Mail gateway http://www.MSExchange.org/ Damn Chris, you didn't need to hammer Webshield =) My two customers have Webshield for SMTP and it acts as an SMTP server. It catches every virus that knocks on their door, but I think that the stress made on the machine with ISA + Webshield isn't worth it. And forget about using it as an anti-spam solution. Too poor. My ISA with eTrust and GFI MailEssentials can still run on an IBM Netfinity 3000 (Pentium II-266), because it can't hit much more than 10% of CPU usage. I guess eTrust AV7 + ME9 would definitely solve every problem you have there. But, if you buy MailEssentials+MailSecurity, GFI has a bundle that is a killer. I would suggest you this solution in top of any other. Tiago de Aviz SoftSell (41) 340-2363 www.softsell.com.br <http://www.softsell.com.br/> Disclaimer: Information contained in this e-mail and in any of its attached files, including replies and forwarded copies, is confidential and intended solely for the addressee(s) and may be legally privileged or prohibited from disclosure and unauthorized use. If you are not the named addressee, you may not use, copy or disclose this information to any other person. If you have received this message in error then please notify the sender immediately and delete all copies of the email and its associated files. If you are not the intended recipient, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication or any action taken in reliance upon this message or its attachments is prohibited and may be unlawful. Any views or opinions presented in this email and its attachments are solely those of the originator and do not necessarily represent those of the Cupola Information Group.