RE: AntiVirus & ISA 2000

  • From: "Jeff Sloan" <jeffs@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 20 Nov 2004 21:09:55 -0600

I have, in the Air Force.


Jeff Sloan
Manager of Computer Technologies and Support Systems

Strategic Marketing & Distribution, Inc.
1070 Hinson Rd.
El Dorado, AR 71730

Cell:     870-866-6125 


-----Original Message-----
From: Quillman Shawn (RBNA/CSA1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] 
Sent: Friday, November 19, 2004 12:09 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000


http://www.ISAserver.org


Still alive and well in alt.government.conspiracy.paranoid :) 


-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F) shawn.quillman@xxxxxxxxxxxx

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, November 19, 2004 12:11 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000

http://www.ISAserver.org

Ha!

I have to wonder how many folks on this list ever encountered
"Tempest-certified computers"...?

If it means nothing to you, don't worry.  It's a dead idea and
good-freakin'-riddance...

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Friday, November 19, 2004 08:52
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000

http://www.ISAserver.org

Hey Jim,

Psychotronic influence is much more likely than falling pieces from passing
airplanes. The AFDB is absolutely required if you live anywhere near a city
and it would be nuts not to wear it on plane flights, since you don't have
the atmospheric protection you might otherwise have.

You should also wrap your RAM in an AFDB to protect from hackers too.
 
;-P

Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, November 19, 2004 10:45 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000

http://www.ISAserver.org

Of course not; but you shouldn't forget your foil hat.
http://zapatopi.net/afdb.html 

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Friday, November 19, 2004 07:36
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000

http://www.ISAserver.org

Hi Mithu,

Its possible that a piece of a jet aircraft will break off and fall on your
head while you're sleeping. Does that mean you wear a helmet to bed? 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx] 
Sent: Friday, November 19, 2004 12:35 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: AntiVirus & ISA 2000

http://www.ISAserver.org

If a LAN machine got compromised - and, there was a worm/virus that targets
ISA Server 2000 on the inside in some way - is it not possible to get a
virus with some unknown w2k vulnerability?

System resources are not an issue for me - I'm just more concerned about
knowing that it does not cause any system problems on ISA 2000. If it has no
affect on the firewall functions then it would be nice to at least know you
are looking out for viruses. Of course, I'd like to hear your expert
opinions on my reasoning....

> Hello
> No worm can come in since there is no allow or publish rule created
from
> outside to ISA itself. It just passes packets. As an example if there
is a
> new virus going to web servers running IIS, ISA machine just passes it 
> unless you run any server on ISA and then you need an army
> 
> > -----Original Message-----
> > From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx]
> > Sent: November 18, 2004 11:16 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: AntiVirus & ISA 2000
> > 
> > http://www.ISAserver.org
> > 
> > What about a worm that comes thru some unexpected future w2k 
> > vulnerability?
> > 
> > Has anyone put Symantec AntiVirus Corporate for the server's own 
> > protection in a ISA 2000 box?
> > 
> > 
> > > I see no reason to put AV on the firewall. How would it ever
become
> > > infected? You never run the browser, you never run e-mail clients,
you
> > > never run any client software or server software other than the
ISA
> > > firewall software on it. You don't allow connections from hosts to
any
> > > vulnerable ports either. So, the only function of AV software is
to
> > > introduce perforamnce reduction and potential for increased attack 
> > > surface.=20
> > >
> > > HTH,
> > >
> > > Tom
> > > www.isaserver.org/shinder
> > > Tom and Deb Shinder's Configuring ISA Server 2004 
> > > http://tinyurl.com/3xqb7 MVP -- ISA Firewalls
> > >
> > >
> > > -----Original Message-----
> > > From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]=20
> > > Sent: Thursday, November 18, 2004 8:32 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: AntiVirus & ISA 2000
> > >
> > > http://www.ISAserver.org
> > >
> > > I can't see why not? I use Trend Server Protect on my ISA 2004
box.=20
> > >
> > > Andrew
> > >
> > >
> > > -----Original Message-----
> > > From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx]=20
> > > Sent: Thursday, November 18, 2004 8:27 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: AntiVirus & ISA 2000
> > >
> > > http://www.ISAserver.org
> > >
> > > To protect the server itself. Is Symantec AntiVirus Corp 9.0 an 
> > > acceptable solution to run on the machine? Will it interfere with 
> > > the ISA in anyway?
> > >
> > > > Please clarify what you are asking about.
> > > >=20
> > > > Are you asking about AV to scan the data flowing through ISA, or
are
> > > you
> > > > asking about AV to protect the server itself?
> > > >=20
> > > > John Tolmachoff
> > > > Engineer/Consultant/Owner
> > > > eServices For You
> > > >=20
> > > > > -----Original Message-----
> > > > > From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx]
> > > > > Sent: Thursday, November 18, 2004 10:29 AM
> > > > > To: [ISAserver.org Discussion List]
> > > > > Subject: [isalist] AntiVirus & ISA 2000
> > > > >=20
> > > > > http://www.ISAserver.org
> > > > >=20
> > > > > On this site it says don't install any applications on an ISA
2000
> > > box -
> > > > > now, does that include AntiVirus software?
> > > > >=20
> > > > > If AV software is allowable - what do you recommend? Is Norton
> > > AntiVirus
> > > > > Corporate 9.0 a workable solution on an ISA 2000 box? =20
> > > > > Thanks.
> > > > >=20
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com 
> > Leading Network Software Directory: http://www.serverfiles.com No.1 
> > Exchange Server Resource Site: http://www.msexchange.org Windows 
> > Security Resource Site: http://www.windowsecurity.com/ Network 
> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as:
> > ara@xxxxxxxxxx
> > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jeffs@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: