Home page logo
/

basics logo Security Basics mailing list archives

RE: All-in-one Spam/Virus Solution
From: "Joel Pippin" <joel () securena com>
Date: Wed, 15 Aug 2007 21:50:13 -0400

My clients are very happy with the IronPort Blocker I procured last month.
If you have 3 grand or so to put towards a solution that actually works with
reliable support, then I recommend a gateway like this one. I have a few
admin friends who are happy with Barracuda, but I've read that the false
positives are pretty high. Another thing that swayed me was that Dell uses
IronPort and that IronPort's SenderBase reputation scoring is relied upon
industry-wide.

I'm still waiting for my SpamAssassin clients to stop complaining about how
bad spam has become.

- J Pippin

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Chad Perrin
Sent: Monday, July 30, 2007 3:49 PM
To: security-basics () securityfocus com
Subject: Re: All-in-one Spam/Virus Solution

On Sat, Jul 28, 2007 at 01:43:00PM +0200, Hylton Conacher (ZR1HPC) wrote:
Hi Mike,

Mike Preslicka wrote:
Hey everyone,
    My company is the process of looking for a new all-in-one 
spam/virus solution for our servers and workstations.  Along with 
those we want something for exchange as well.  We're currently using 
Trend Micro's Client Server Messaging Suite.  The reason we want to 
replace this product is: 1) there technical support is horrible and 
seems like the people I talk to in tech support know nothing about 
their product, and 2) Every time an update is made, some useful 
feature has been removed.  So we're looking for an alternative 
solution.  In reality an all-in-one type solution would be 
preferred, but separate solutions for workstations, servers, and email
would be considered as well.

If anyone has any suggestions, please let me know!  Thank you for 
your time and help!

I'd suggest running your email thru a Postfix mailserver with ClamAv 
and SpamAssassin active. Keep your email store as your exchange box 
and then install AVG free on the desktops to automatically update from 
your proxy server. This will initially need someone to decide what 
email is spam and what not so that SpamAssassin can learn. Keep a 
daily check on it and soon you should have SpamAssasin catching all 
the spam and likewise ClamAv catching the viruses. Whatever they don't 
catch the AVG product on the desktop will. I believe that the paid 
version of AVG offers a spam detection engine as well so it might be a 
good idea to add this onto your workstations.

Technically, using the free version of AVG on desktops in a business network
is a violation of license terms.  If you want to use AVG (which is an
excellent desktop antivirus solution), you should look into the paid version
of the software.

ClamWin is one of the best virus scanners available, and may also be worth
looking into for that reason (as well as being open source software).  On
the downside, ClamWin does not provide "realtime"
scanning.

--
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ] John W. Russell:
"People point. Sometimes that's just easier. They also use words. Sometimes
that's just easier. For the same reasons that pointing has not made words
obsolete, there will always be command lines."



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]