RE: OWA Publishing

  • From: "Ara" <ara@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 4 May 2005 09:58:40 -0700

David,
,lol, " Show me any AV for ISA and I will show you how to bypass it with
any
Virus" I want to know for GFI ,lol

-----Original Message-----
From: David Farinic [mailto:davidf@xxxxxxx] 
Sent: Wednesday, May 04, 2005 7:19 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OWA Publishing

http://www.ISAserver.org

Every AV scanning on ISA server scans just some things. 
In another words traffic or data objects which are recognized by AV.
Show me any AV for ISA and I will show you how to bypass it with any
virus.
Of course they, ISA AV products, usually don't tell you what is not
scanned to keep you happy.

In case of OWA  I would rely more on scanning on native email format
scanning on Mail server then scanning it on not native transport
protocol for these objects.

In Another words more not standard encapsulation == more probability AV
will not check some levels of message encapsulation.

Regards DavidF



-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, May 04, 2005 3:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OWA Publishing

http://www.ISAserver.org

Hi Jim,

But can't the AV access it during the bridging? The HTTP Security Filter
has access at the point.

Thanks! 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Wednesday, May 04, 2005 8:54 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OWA Publishing

http://www.ISAserver.org

Since OWA should be operating over SSL, this makes the virus scanning
nearly irrelevant.
You should investigate a virus tool for the Exch server instead.
GFI rocks, period.

  
This mail was checked for viruses by GFI MailSecurity. 
GFI also develops anti-spam software (GFI MailEssentials), a fax server
(GFI FAXmaker), and network security and management software (GFI
LANguard) - www.gfi.com 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

Attention:
This message, including any attachment(s), is intended only for the use of the 
individual(s) to which it is addressed and may contain information that is 
privileged or confidential.  Any other distribution, copying or disclosure is 
strictly prohibited.  If you are not the intended recipient or have received 
this message in error, please notify us immediately by reply e-mail and 
permanently delete this message including any attachment(s), without reading it 
or making a copy.
Any outgoing message has been scanned for possible harmful file(s) or 
script(s), but it is your sole responsibility to run detection tools as we 
won't guarantee the safety of message(s).




Other related posts: