Re: ISA Server & SMTP/POP3 Virus Scan
- From: "Deus, Attonbitus" <Thor@xxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 05 Nov 2002 07:48:31 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
At 07:30 AM 11/5/2002, you wrote:
>http://www.ISAserver.org
>
>
>
>Hello All,
>
>
>
>I have been looking for a product for the ISA server to scan SMTP (port
>25) and POP3 (port 110) traffic (HTTP scanning would be a plus) against
>viruses. Have you got any good suggestions?
>
>
>
>PS. I have reviewed all the products suggested at the ISA server web
>pages, but I could not find what I desire.
>
>
Trend Micro has a product called the "InterScan Messaging Security Suite"
which I am happy with. However, the interface is HTTP- so, if you were to
install it on the ISA box itself, you would have to load and configure IIS
(something I personally recommend against) on the ISA box itself. I prefer
to keep the role of my ISA boxes very tight, and to publish such services
to other boxes as appropriate. I would engage the application filters on
ISA, and publish your SMTP and POP3 through a dedicated SMTP gateway box
running InterScan, which then routes SMTP to the back end server.
Note that there is a "bug" in the current version of InterScan in that it
only resolves DNS directly from the config on the NIC- though there is a
place to put the address for the DNS server for particular SMTP host
resolution, it does not work. IOW, you must configure it as a SNAT client
if you have internal DNS (as in a domain) with no forwarders in place. You
can download an eval copy from www.trendmicro.com.
HTH
AD
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1
iQA/AwUBPcfoTohsmyD15h5gEQKNvACdFW3h9ajkidfI/sByNXvW/5ZANywAnitJ
GK9NulaHuXGvHpwXFUbnYlkI
=0Yb0
-----END PGP SIGNATURE-----
Other related posts:
