|
exchange
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Antivirus and SpamWe recently put up our own Exchange 2003 server for a group of about 20
people. Are there any recommended server based antivirus and spam filtering solutions? Money is no object, we just want something that works really well with a minimal amount of user (e.g. administrator) intervention. -a Well, you could upgrade to SP2 and use all the free products that come with
it (IMF, Sender-ID filtering, etc.) for filtering spam. However, they don't really do much to protect against viruses, and seeing as money is no object then you might want to look at getting yourself a decent firewall that has security+AV+spamblocking services at the gateway as well as a decent "server based" solution. I have a Watchguard Firebox X500 with its SpamBlocker and GAV services installed, and then Symantec Ent. Edition for all my desktops and servers, including Exchange 2003, and that works well for me. For email on the desktop side you configure the AV client to protect the Exchange mailbox it connects to. On your Exchange server you install Mail Security for Exchange to protect the Exchange server. You will need to set all this up, but once its done you shouldn't need to redress it, and the users don't think about it all - it all happens automatically in the background, configured and managed centrally on the AV server that the clients belong to. That said, setup isn't rocket science and depending on the support licence you get you should be able to call someone up and have them walk you through any setup issues or changes it if the manuals get a bit heavy. If money really is no object you can probably pay someone to come round and configure it for you, and after that it should just run itself if they have done it properly. I still think that even though it is a hassle someone should pick up the books and get their head around the basic setup and configuration steps and concepts. If you want it done properly, then you had best do it yourself, and I don't know of a solution that discovers all nodes on the network, identifies their role, and deploys and configures itself just how you would have done, but Symantec Enterprise Edition is quite easy to use and there is plenty of good of support for it. HTH, Jarryd Show quote "anon" <anon@nospam.com> wrote in message news:%23xA3NK9gGHA.4368@TK2MSFTNGP03.phx.gbl... > We recently put up our own Exchange 2003 server for a group of about 20 > people. Are there any recommended server based antivirus and spam > filtering solutions? Money is no object, we just want something that > works really well with a minimal amount of user (e.g. administrator) > intervention. > > -a > SOPHOS ! - Quite easy to administer and quite a nice program.
Show quote "Jarryd" <j@n.c> wrote in message news:u5MjXm9gGHA.4276@TK2MSFTNGP03.phx.gbl... > Well, you could upgrade to SP2 and use all the free products that come > with it (IMF, Sender-ID filtering, etc.) for filtering spam. However, > they don't really do much to protect against viruses, and seeing as money > is no object then you might want to look at getting yourself a decent > firewall that has security+AV+spamblocking services at the gateway as well > as a decent "server based" solution. I have a Watchguard Firebox X500 > with its SpamBlocker and GAV services installed, and then Symantec Ent. > Edition for all my desktops and servers, including Exchange 2003, and that > works well for me. For email on the desktop side you configure the AV > client to protect the Exchange mailbox it connects to. On your Exchange > server you install Mail Security for Exchange to protect the Exchange > server. You will need to set all this up, but once its done you shouldn't > need to redress it, and the users don't think about it all - it all > happens automatically in the background, configured and managed centrally > on the AV server that the clients belong to. That said, setup isn't > rocket science and depending on the support licence you get you should be > able to call someone up and have them walk you through any setup issues or > changes it if the manuals get a bit heavy. If money really is no object > you can probably pay someone to come round and configure it for you, and > after that it should just run itself if they have done it properly. I > still think that even though it is a hassle someone should pick up the > books and get their head around the basic setup and configuration steps > and concepts. If you want it done properly, then you had best do it > yourself, and I don't know of a solution that discovers all nodes on the > network, identifies their role, and deploys and configures itself just how > you would have done, but Symantec Enterprise Edition is quite easy to use > and there is plenty of good of support for it. > > HTH, > > Jarryd > > "anon" <anon@nospam.com> wrote in message > news:%23xA3NK9gGHA.4368@TK2MSFTNGP03.phx.gbl... >> We recently put up our own Exchange 2003 server for a group of about 20 >> people. Are there any recommended server based antivirus and spam >> filtering solutions? Money is no object, we just want something that >> works really well with a minimal amount of user (e.g. administrator) >> intervention. >> >> -a >> > > For AV there are generally two products you will find the MVP's prefer.
Trend Scanmail and Sybari (now Microsoft) Antigen. For Antispam, I don't think there is a general consensus. I for one prefer to do this at the gateway and not on the mailserver itself. I use a program called MailFrontier. But there are many others. Show quote "anon" <anon@nospam.com> wrote in message news:%23xA3NK9gGHA.4368@TK2MSFTNGP03.phx.gbl... > We recently put up our own Exchange 2003 server for a group of about 20 > people. Are there any recommended server based antivirus and spam > filtering solutions? Money is no object, we just want something that > works really well with a minimal amount of user (e.g. administrator) > intervention. > > -a > Awesome, thanks for the input everyone!
-a Show quote "Martin Blackstone - MVP" <exchange***@gmail.com> wrote in message news:O5HFnX%23gGHA.3996@TK2MSFTNGP03.phx.gbl... > For AV there are generally two products you will find the MVP's prefer. > Trend Scanmail and Sybari (now Microsoft) Antigen. > > For Antispam, I don't think there is a general consensus. > I for one prefer to do this at the gateway and not on the mailserver > itself. I use a program called MailFrontier. But there are many others. > > "anon" <anon@nospam.com> wrote in message > news:%23xA3NK9gGHA.4368@TK2MSFTNGP03.phx.gbl... >> We recently put up our own Exchange 2003 server for a group of about 20 >> people. Are there any recommended server based antivirus and spam >> filtering solutions? Money is no object, we just want something that >> works really well with a minimal amount of user (e.g. administrator) >> intervention. >> >> -a >> > > "anon" <anon@nospam.com> skrev i melding The best solutions is to have your ISP doing the virus and spam checking, news:%23xA3NK9gGHA.4368@TK2MSFTNGP03.phx.gbl... > We recently put up our own Exchange 2003 server for a group of about 20 > people. Are there any recommended server based antivirus and spam > filtering solutions? Money is no object, we just want something that > works really well with a minimal amount of user (e.g. administrator) > intervention. then they can be your backup smtp server too. /Per W. "Per W." <fungereri***@ikkegyldig.no.invalid> wrote in message I disagree. I would say that that's a nice additional solution if its done news:e5rmsa$dre$1@troll.powertech.no... > The best solutions is to have your ISP doing the virus and spam checking, > then they can be your backup smtp server too. > > /Per W. very well. On the AV part, I still think its a good idea to have AV on the Exchange server. Consider the following scenario: Bob is in the office surfing the net and logs in to his home webmail account. He see's an interesting email and opens the attachment only to unleash the latest and greatest virus and oops, it just got in the mail system. Yes, the desktop AV should have picked it up, but for some reason his wasn't up to date. So now what do you do? Everyone's mailbox now has a copy of the virus in it and you have no way to stop it. That's a good point, I never thought about webmail intrusion.
We also try to block out all "anti-productivity" and other harmful websites using a 3Com OfficeConnect router (about $400 plus a yearly subscription for blacklist updates). Maybe as well as getting antivirus on every machine, it might also possibly be a good idea to use multiple antivirus companies. Such as using Trend Micro VirusWall at the gateway and AVG for workstations (free!) steve Show quote "Martin Blackstone - MVP" <exchange***@gmail.com> wrote in message news:e8FGdJxhGHA.2364@TK2MSFTNGP04.phx.gbl... > > "Per W." <fungereri***@ikkegyldig.no.invalid> wrote in message > news:e5rmsa$dre$1@troll.powertech.no... > >> The best solutions is to have your ISP doing the virus and spam checking, >> then they can be your backup smtp server too. >> >> /Per W. > I disagree. I would say that that's a nice additional solution if its done > very well. > On the AV part, I still think its a good idea to have AV on the Exchange > server. > > Consider the following scenario: > Bob is in the office surfing the net and logs in to his home webmail > account. He see's an interesting email and opens the attachment only to > unleash the latest and greatest virus and oops, it just got in the mail > system. Yes, the desktop AV should have picked it up, but for some reason > his wasn't up to date. > > So now what do you do? Everyone's mailbox now has a copy of the virus in > it and you have no way to stop it. > Its never a bad idea.
For example, we use Symantec at the gateway, then Trend on the mail server, all the other servers and the desktops. We also do blocking like that at the firewall, but its less than perfect. Show quote "Steve" <tr***@byfire.com> wrote in message news:OZ3d%23Z9hGHA.4776@TK2MSFTNGP05.phx.gbl... > That's a good point, I never thought about webmail intrusion. > > We also try to block out all "anti-productivity" and other harmful > websites using a 3Com OfficeConnect router (about $400 plus a yearly > subscription for blacklist updates). > > Maybe as well as getting antivirus on every machine, it might also > possibly be a good idea to use multiple antivirus companies. Such as > using Trend Micro VirusWall at the gateway and AVG for workstations > (free!) > > steve > > > > "Martin Blackstone - MVP" <exchange***@gmail.com> wrote in message > news:e8FGdJxhGHA.2364@TK2MSFTNGP04.phx.gbl... >> >> "Per W." <fungereri***@ikkegyldig.no.invalid> wrote in message >> news:e5rmsa$dre$1@troll.powertech.no... >> >>> The best solutions is to have your ISP doing the virus and spam >>> checking, then they can be your backup smtp server too. >>> >>> /Per W. >> I disagree. I would say that that's a nice additional solution if its >> done very well. >> On the AV part, I still think its a good idea to have AV on the Exchange >> server. >> >> Consider the following scenario: >> Bob is in the office surfing the net and logs in to his home webmail >> account. He see's an interesting email and opens the attachment only to >> unleash the latest and greatest virus and oops, it just got in the mail >> system. Yes, the desktop AV should have picked it up, but for some reason >> his wasn't up to date. >> >> So now what do you do? Everyone's mailbox now has a copy of the virus in >> it and you have no way to stop it. >> > >  
Other interesting topics
|
|||||||||||||||||||||||
