Hi I was looking at some policy examples on rr.sans.org(we are gearing up for hippa) and I ran across this in a section talking about policy for AV on mail servers.....
** When large numbers of attachments must be blocked within a short period of time, such as during an outbreak of a new Microsoft Outlook Visual Basic virus, running attachment blocking on both the mail gateway and the internal mail server helps prevent infected attachments from slipping through due to overload. ** I wasn't aware of behavior such as this and was curious if this happened where a email server lets otherwise infected emails through because its getting overworked? I would imagine those items would bounce or queue up in some way or possibly even down the IMS and stop traffic. any thoughts? e- _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
