AntiVirus software for MS Proxy Server 2.0
JY
frequently, but it is definitely very important for me to choose the
antivirus software for our Proxy server.
Here is my current settings:
Proxy Server 2.0 used on NT platform
Web Proxy cache enabled only - ie cache only proxy
Proxy supporting 5000+ users for Internet browsing
2 chained proxy servers
Based on my above configurations, could you please recommend an antivirus
software to be run on the server itself for scanning the proxy traffic? I'm
thinking of the following three software:
1, McAfee Netshield
2, TrendMicros InterScan WebManager (does WebProtect has winNT version?)
3, NAV (to our experience in other servers, it is pretty slow in scanning)
There are a few questions I would like to ask too.
1, Will the above software scans the traffic while downloading? or it does a
harddisk/cache scan?
2, Does the scanning affects the proxy performance?
3, When it scans for virus, does it clean it automatically or do I have to
do this manually?
4, If I have chained proxy, do I have to install antivirus software on both
of them or just the upstream proxy?
I'll appreciate if you could share your experience with me if you have
already installed anyone of them.
Thank you very much for your help.
Regards,
JY
Tim Cox
what Web Manager does. ISVW scans all HTTP, SMTP and FTP traffic on the
gateway server...presumably your proxy server. I believe it scans files
after traffic is written to disk but scans HTTP on the fly but I am not
positive on that. Check with Trend if you must know.
Scanning does not affect proxy performance AFAICT. I have tested with scan
enabled and disabled and see no visible difference in speed. That doesn't
mean you don't notice anything. When you download a file using the scanner
you don't see the progress of the download. It appears as if the download is
stuck and not moving so you may be tempted to abort and retry. This is
because the scanner is downloading in the background in order to scan and
releases upon completion of scan. At that point the client download box
rapidly finishes and you have your file. It's just a nuisance not seeing the
progress of the download so you know how long to wait. Another nuisance
using HTTP scanning is that you won't see separate client sessions in MMC.
You will only see the IP address of your internal proxy NIC with a user name
attached to it...and that will be the name of the LAST person to browse.
Thus, you only see 1 session in MMC, not all sessions. Another PITA.
It will clean, quarantine or delete depending on what you want.
Don't know about chains. Trend can answer that.
Another nice thing about ISVW is you can buy the Emanager plug in which
gives you control over email. You can quarantine based on email size and
other characteristics of your choice. For instance, I screen ALL email that
comes with .vbs in it. That way I don't have to rely on the AV software
itself for brand new viruses. Speaking of AV, the software does update
itself automatically on whatever timetable you want. Their product works so
well for me that I dumped NAV on the client pcs and went with Trend's Office
Scan product. It also works very well and handles all client updates
automatically.
--
***************
No Email Replies
"JY" <bear...@hotmail.com> wrote in message
news:u6Xv5eUVBHA.1372@tkmsftngp07...