[THIN] Re: OT: Security response to BAGLE virus (password protected .z ips)

  • From: "King, Jesse" <JKing@xxxxxxxxxxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Thu, 4 Mar 2004 08:36:45 -0500

We have the trend a/v suite as well. 

At the gateway, with IMSS, you can have it delete, deliver, or quarantine
password protected files.

FYI..



-----Original Message-----
From: Claus, Brian [mailto:BClaus@xxxxxxxxxxxxx] 
Sent: Thursday, March 04, 2004 8:28 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] OT: Security response to BAGLE virus (password protected .z
ips)


Just wondering what others are doing to combat the latest BAGLE worm.  =
It's password protected so standard AV won't scan into it.  How is =
everyone else handling delivery of .zip files now?

We're using the Trend Micro AV suite.

Do you think the latest password protected BAGLE worm has caused the =
demise of password protected .zip files?

My immediate opinion in the matter is that password protected .zip files =
will now be treated with the same delivery restrictions that the .exe, =
.scr, .pif, .vbs have come under but I'm not aware of any AV software or =
other means to differentiate scanning options between p\w protected .zip =
files and non p\w protected .zip files.


Thanks,
=20

  _____ =20

=20
Brian Claus, A+, Network+, MCP
Network Administrator
WESCO Distribution, Inc.
225 West Station Square Drive, Suite 700
Pittsburgh, PA 15219-1122
Phone:  412-454-2412
Fax:  412-454-2540
bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>=20
  _____ =20

********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential applications to
eliminate your printing, policy and profile, and your application management
problems. http://www.triCerat.com 
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com 
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: