Security
by ebob
You should have a tool on your email gateway that scans incoming email. "Just" configure it to quarantine all suspect attachments. A quarantine is a separate file system (or at least a directory) in which these attachments are placed. You go there manually and scan the files, before letting them go onto your network.
See the discussion "extension Blocking, The Debate" for some views on this.
by t_p
We have been kicking the quarantine idea around and are tyring to decide how long a file should be kept in isolation.
Sometimes our current virus detection software vendor is a little behind the curve in publishing pattern/detection updates.
We are thinking that 24 hours may be too short.
by ebob
We dump files into quarantine and they stay there until they've been scanned, and passed. If there is any doubt, we scan them with at least 2 products (e.g., McAfee + Trend, or CA + Norton, etc.) which we try to keep as current as possible. If thereis still doubt, we keep them until that doubt has passed.
In general, our Friendly Users can count on a MINIMUM of 24 hours. Although in reality, files get through to them often the same business day. This thanks to a "reasonable" user:admin ratio.
by microbuff
Yes,
I would say invest is a good email client and
a good antivirus. I use systemworks 2002 which allows you to put the item in question is a isolated area for checking or deletion. If you use a good antivirus it will check attachments. You canalso move over to lesser
prone to attach email client.
by alexmc013
I agree with you as far as using foreign formats. However, why bother with more than one mailbox? Obviously, there is a risk, but will the point not become obsolete when the spare mailbox is "infected?" Suppose it is a vital e-mail with a harmful attachment? Then regardless of the mailbox, something important will be lost.
by alexmc013
by sheilau
This discussion is closed to new replies.
Sort by Trending