That seems to be their answer to everything lately. I got the full court
press to go to the e500 as well. The only thing that really intrigues me is
the ability to check/scan/stop web-based mail as well.

WS SMTP has really worked well for us. I have not had the problems that
others have had it seems with support. I take that back, I did used to have
problems until we upped our support to a higher level. I never wait more
than 1 minute and get escalated pretty quickly. Also, the TVDUG on Yahoo
groups has a lot of NAI back line support people on it.

Ken Powell
Systems Administrator
Clark County Office of Budget and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax: (360) 759-6001


-----Original Message-----
From: Mellott, Bill [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, June 13, 2002 10:19 AM
To: Exchange 5.5 List
Subject: RE: Possible New Virus?

Yeh I looked at the small appliance....and went round them bend with them on
how they bundle it....It was pathetic the answers I got..
Boiled down to too much $$ for me and they where going to jam their hardware
down my thought, and they wouldn't play nice....did sound cool...

Tech supp....I find it hit and miss.. had good... had bad...

bill

-----Original Message-----
From: Hansen, Eric [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 13, 2002 1:09 PM
To: Exchange Discussions
Subject: RE: Possible New Virus?


Although their tech sup is terrifically stupid(imo) that webshield appliance
is sweet.

We dumped our desktop NAI solution based on the lack of expertise of their
tech supp department, once they came back and told us once that they wern't
sure if they could support the Groupshield product anymore we knew we were
in trouble.

-----Original Message-----
From: Mellott, Bill [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, June 13, 2002 10:58 AM
To: Exchange Discussions
Subject: RE: Possible New Virus?

possible...But when I "talked with disgust.." a bit with NAI on the phone
about WS-SMTP and this...and basically their response was......Yep...it'll
miss'em...IF you really want to get them, then buy our Websheild
Applicane......

bill

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 13, 2002 12:49 PM
To: Exchange Discussions
Subject: RE: Possible New Virus?


I have believe that I have stopped FW:, FW:, FW: ,etc. before. I think that
this is really the problem/danger with WS. It will work flawlessly on one
installation and completely miss on others.

Ken Powell
Systems Administrator
Clark County Office of Budget and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax: (360) 759-6001


-----Original Message-----
From: Mellott, Bill [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, June 12, 2002 5:28 PM
To: Exchange 5.5 List
Subject: RE: Possible New Virus?

Note do not assume the WS product will catch the EXE.
If it is in the first layer then yes likely it will. 

BUT if it happens to be in like 2 or more layers (layer..I mean FW >
FW..etc)
it will miss it...every time....

But yes GS should then get it...if it's working right ;-)

bill

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 12, 2002 7:22 PM
To: Exchange Discussions
Subject: RE: Possible New Virus?


Webshield SMTP 4.51 MR1a with engine 4160. As far as DAT files, it has been
catching it since as far back as the middle of last month (my ePO records do
not go back any further.) Even if the engine and DAT files had not been up
to date WS would have stopped it due to us blocking all executables.

I would assume that GS would have caught it if it had made it that far since
it is running the same engine and dat versions.

Ken Powell
Systems Administrator
Clark County Office of Budget and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax: (360) 759-6001


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, June 12, 2002 8:55 AM
To: Exchange 5.5 List
Subject: RE: Possible New Virus?

We have been seeing it for a couple of days. McAfee has been reporting it as
Exploit-MIME.gen.

I just got something from Sophos giving it the name that John reported it
as. It has been showing up quite a lot lately.

Ken Powell
Systems Administrator
Clark County Office of Budget and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax: (360) 759-6001


-----Original Message-----
From: John Steniger [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, June 11, 2002 10:23 AM
To: Exchange 5.5 List
Subject: RE: Possible New Virus?

Appears to be a Frethem Worm.  From Norton:

http:[EMAIL PROTECTED]
l

John J. Steniger
Network and Security Manager
Familymeds, Inc.
Phone: 860-676-1222 X633
Email: [EMAIL PROTECTED]
http://www.familymeds.com


> -----Original Message-----
> From: Durkee, Peter [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 1:22 PM
> To: Exchange Discussions
> Subject: Possible New Virus?
> 
> 
> Hi All,
> I've seen several messages coming in this morning with the 
> subject line Re: Your Password!, an attachment named 
> decrypt-password.exe, and the same Content-Type: audio/x-midi 
> that Klez uses to auto-run. The messages are 50k or so in 
> size. Is anyone else seeing this? My usual virus info sources 
> don't have anything on it.
> 
> -Peter
> 
> 
> ______________________________________________
> This message is private or privileged.  If you are not the
> person for whom this message is intended, please delete it
> and notify me immediately, and please do not copy or send
> this message to anyone else. 
> 
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to