I think your theory is flawed, but that is just IMHO. While I agree you
should have perimeter scanning, I think it is foolish to not have something
on the server as well.
If you don't have AV on the server and something gets through, how will you
ever clean it? If a sender on the network sends a virus or other
objectionable file, it will still be in their mailbox even if the perimeter
scanner gets it.

Bottom line is I believe you should have as many layers as possible. This
means perimeter, server, desktop, etc.

I dislike Groupshield as well. As far as I am concerned there are only 2
worth using. Trend and Antigen. Performance should not be too much of an
issue and should NEVER take precedence over safety.

-----Original Message-----
From: Adam Romain [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, February 07, 2002 5:34 AM
To: Exchange Discussions
Subject: X400 virus scanning.


Guys,

I have a large org with a huge x400 connection topology.  I'm going to be
responsible for a particular site.  I want to protect my site (single server
5.5) on the X400 connector and the SMTP connector.  

I've solved the SMTP with a content checking relay.  I want to protect the
internal mail routed via x400 too.  I would like to have x400 'relayed' from
another server in my DMZ.  (I'm also using a Firewall to protect my LAN from
other LAN's).  i.e. I want the mail scanned before it gets to my Exchange
server as I have a complete dislike for products like Group Shield for
Exchange and Mailsweeper for Exchange etc.  I believe Exchange should have
perimeter security for performance and reliability issues.



Any suggestions ?

Ps .I have free choice of firewall.  Currently, I don't know of any
firewalls that can proxy x400 and use CVP.

Rgds

Adam Romain



**********************************************************************
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager.

Network Defence Ltd
**********************************************************************


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to