RE: Antivirus for exchange..follow-up
This KB has a list: 245822 -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 12:12 PM To: Exchange Discussions Subject: Antivirus for exchange..follow-up One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Antivirus for exchange..follow-up
Danny, Do not scan the logs (dir,stores) directories. Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: 20 February 2003 17:12 To: Exchange Discussions Subject: Antivirus for exchange..follow-up One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] *** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (6) *** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Antivirus for exchange..follow-up
Exclude the entire \Exchsrvr folders on all disks. -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Antivirus for exchange..follow-up
I recommend a subset, excluding the \exchsrvr\*data directories on all disks, but Martin's suggestion will work too! Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up Exclude the entire \Exchsrvr folders on all disks. -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Antivirus for exchange..follow-up
My concern is that some of the dirctories have the HTML for the OWA. I want to make sure that these files are scanned at each access. This means (I think) that I want to make sure that exchsrvr\webdata is included in the AV scan. Right now, the priv and pub databases are on a separate physical disk (D:) than the rest of the \exchsrvr files (E:). The D: drive excludes \exchsrvr (with just 2 files in the tree). The E: drive is completely scanned. Am I on the wrong track? Thanks, Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Thursday, February 20, 2003 10:39 AM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up I recommend a subset, excluding the \exchsrvr\*data directories on all disks, but Martin's suggestion will work too! Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up Exclude the entire \Exchsrvr folders on all disks. -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Antivirus for exchange..follow-up
Ill throw in 2 cents Have you read and properly implemented/understood security and security recommendations for IIS4 for your OWA in your application??? If not you have a LOT more to worry about.. Hey I might scan the WEBDATA directory myself.in fact... I have my OWA on it's own IIS server so yes I do scan the entire exchsrvr dir... of course file base AV scanning get no where near the exch server itself, just exch AV a where does bill -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 1:58 PM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up My concern is that some of the dirctories have the HTML for the OWA. I want to make sure that these files are scanned at each access. This means (I think) that I want to make sure that exchsrvr\webdata is included in the AV scan. Right now, the priv and pub databases are on a separate physical disk (D:) than the rest of the \exchsrvr files (E:). The D: drive excludes \exchsrvr (with just 2 files in the tree). The E: drive is completely scanned. Am I on the wrong track? Thanks, Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Thursday, February 20, 2003 10:39 AM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up I recommend a subset, excluding the \exchsrvr\*data directories on all disks, but Martin's suggestion will work too! Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions Subject: RE: Antivirus for exchange..follow-up Exclude the entire \Exchsrvr folders on all disks. -Original Message- From: Nunez, Danny [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 9:12 AM To: Exchange Discussions One a similar subject. NT 4.0 sp6a, Exchange 5.5 sp4 (?) with OWA on the server box. Besides AV for the Exchange, I also have an AV software scanning the disks and scanning disk accesses. I have excluded pub.mdb, priv.mdb and the pagefile from the AV scan. My question: Is there anything else I should exclude from the scan? Say log files or MTA directories? I have not heard performance complaints from the users (the box is not overloaded by any stretch of the imagination) but do not want to cause trouble with the smooth operation of the box. Any suggestion or advice is greatly appreciated. TIA Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mustafa E. Senyuz Sent: 20 February 2003 10:57 To: Exchange Discussions Subject: Antivirus for exchange Hi, I'm trying to find a good antivirus solution for exchange. I checked out Norton AV for Exchange, McCafee and TrendMicro's antivirus for exchange. TrendMicro's seems good. Which one do you advice? Or is there any better product? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
