Network Exchange server 2003 question

[fdisk2003]

Hey all,

Just wondering if there are any Exchange 2003 server admins with some advice out there. We are currently using an antivirus/antispam package which we find entirely unsatisfactory.

We're looking for an integrated Antivirus/Antispam package with the following general functionality:

1) Scans & removes viruses, worms, trojans, etc. from attachments.
2) The anti spam can block a domain, but if the domain is blocked individual e-mail addresses can be excluded and allowed to come through.

I'm sure this may seem very run of the mill, but our current solution doesn't perform #1 reliably, and #2 isn't even available! If a domain is blocked, that's it.. it's ridicilous.

Anyway, if anyone has any advice for software packages we can look into please let us know. Thanks.

 

[dphantom]

We use Groupshield for Exchange 2003 in our Exchange cluster. We also use a Barracuda box in fornt of it, so I have layered protection. Better safe than sorry.

We really like the Barracuda, easy and quick to set up and provides basic anti-spam features to our users.

Outlook 2003 and OWA 2003 also provide pretty robusdt features for users. However, in our case our users feel it is an IT responsibility to manage spam, hence Barracuda.

 

[Crusty]

We have a Watchguard 700/III in front of our Exchange server. It strips off attachments based on content-type, as well as being a firewall. We then use Symantec Corporate AntiVirus AntiSpam. Nothing has gotten through thus far, with over a year under it's belt.

 

[fdisk2003]

this is interesting, i've seen a couple responses now where a hardware based solution - a network appliance - is used in lieu of or in addition to a software based solution running on the exchange server itself.

what are the advantages to using them over software package solutions? it must be harder to "demo" them because unlike software you can't just download an appliance. i honestly hadn't even considered it and was just looking for a software package to run on exchange 2003.

thanks

 

[dphantom]

Originally posted by: fdisk2003
this is interesting, i've seen a couple responses now where a hardware based solution - a network appliance - is used in lieu of or in addition to a software based solution running on the exchange server itself.

what are the advantages to using them over software package solutions? it must be harder to "demo" them because unlike software you can't just download an appliance. i honestly hadn't even considered it and was just looking for a software package to run on exchange 2003.

thanks

Software can impact server performance. I like the separate hardware for cutting out spam, virii etc... Let the Exchange server deliver mail, let something else handle the garbage although I do run Groupshield as a safety backup.

It's also layered protection. If something gets thru the hardware, you have software runnign as well.

As for demo, most appliances I am aware of sit between the email and firewall so its pretty easy to plug into a network. I also need not worry about installing software on my exchange server just to demo or test some a/v product.

We used to use a Firebox II but replaced it with dual Pix 525s. So I lost the ability to filter out attachements and added the Barracuda to do that for me.

Anyway, small sites are probably ok with a software filter You just have to analyze your needs based on email traffic, amount of virus/spam/unweanted attachemnts you receive and how secure you feel a software only filter will work for you.

 

[Brazen]

We run TrendMicro's InterScan Security Suite in front of the Exchange server and we have TrendMicro's ScanMail running on the server itself (InterScan blocks all the garbage coming in and ScanMail is in case a virus comes from an internal user).

Both of these are part of TrendMicro NeatSuite which includes server and desktop antivirus/anti-malware and a web proxy.

 

[ITJunkie]

Originally posted by: Brazen
We run TrendMicro's InterScan Security Suite in front of the Exchange server and we have TrendMicro's ScanMail running on the server itself (InterScan blocks all the garbage coming in and ScanMail is in case a virus comes from an internal user).

Both of these are part of TrendMicro NeatSuite which includes server and desktop antivirus/anti-malware and a web proxy.

^This is a good suite^. You can also look at Sophos offerings as they do this well too.