RE: Mail gateway

  • From: "Tiago de Aviz" <Tiago@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sun, 8 Feb 2004 15:57:27 -0300

Hey Zafar,


You already have a webshield server in front of Exchange? Yes, Webshield
has its own SMTP server, it doesn't need IIS for anything. It's really
easy to configure it, all you need to do is tell it if the mail server
is on the same machine or on other machine, configure for which domains
it should deliver mail internally, configure what's your internal IP
range and you're protected. It works really well. 


The only problem is that this solution will tie you up, meaning that you
won't be able to implement any other kind of defense on this server, and
it'll hit the CPU hard.


No need to be concerned about Open Relays and other security threats.
Webshield will deal with these problems very well.


Tiago de Aviz


(41) 340-2363 <> 



From: Zafar Pravaiz [mailto:Zafar.Pravaiz@xxxxxx] 
Sent: domingo, 8 de fevereiro de 2004 02:12
To: [ExchangeList]
Subject: [exchangelist] RE: Mail gateway

Thanks for your kind reply.


I have few doubt coz I m new with webshield . I'll be placing my
webshield server behind my PIX without any ISA and in front of my
Exchange 5.5. I guess webshield have its own SMTP services and do not
use IIS SMTP. My concern about Open Relay and other security threats.
Please throw some light on this. Of course GFI is the best option. 






-----Original Message-----
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] 
Sent: Saturday, February 07, 2004 10:28 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Mail gateway

        Damn Chris, you didn't need to hammer Webshield =)


        My two customers have Webshield for SMTP and it acts as an SMTP
server. It catches every virus that knocks on their door, but I think
that the stress made on the machine with ISA + Webshield isn't worth it.
And forget about using it as an anti-spam solution. Too poor.


        My ISA with eTrust and GFI MailEssentials can still run on an
IBM Netfinity 3000 (Pentium II-266), because it can't hit much more than
10% of CPU usage. I guess eTrust AV7 + ME9 would definitely solve every
problem you have there.


        But, if you buy MailEssentials+MailSecurity, GFI has a bundle
that is a killer. I would suggest you this solution in top of any other.


        Tiago de Aviz


        (41) 340-2363 <> 


Disclaimer: Information contained in this e-mail and in any of its
attached files, including replies and forwarded copies, is confidential
and intended solely for the addressee(s) and may be legally privileged
or prohibited from disclosure and unauthorized use. If you are not the
named addressee, you may not use, copy or disclose this information to
any other person. If you have received this message in error then please
notify the sender immediately and delete all copies of the email and its
associated files. If you are not the intended recipient, any form of
reproduction, dissemination, copying, disclosure, modification,
distribution and/or publication or any action taken in reliance upon
this message or its attachments is prohibited and may be unlawful. Any
views or opinions presented in this email and its attachments are solely
those of the originator and do not necessarily represent those of the
Cupola Information Group.

Other related posts: