Re: Sybari or Trendmicro?

From: Stuart Mackie [MCP, MSP] (newsgroups_at_--REMOVE_THIS-NO_SPAM--stu.uk.com)
Date: 12/10/04


Date: Fri, 10 Dec 2004 18:06:33 -0000

Hi. We also found the Symante SCL Heuristic a little weak in areas, but
when combined with the Exchange IMF we noticed a massive increase in
filtering performance. Symantec Mail Security can work in conjunction with
the Exchange IMF. Both IMF and SMSE can be configured individually to take
action upon certain SCL scores, but you can also configure SMSE to take into
account the IMF score when deciding whether an email is spam, e.g. IMF sets
a score of 6 (i.e. spam) and SMSE sets a score of 3 (probably not spam) you
can configure SMSE to take the higher of the two scores, the lower of the
two scores, or use the average of both scores and then action appropriately.

-- 
Hth,
Stuart Mackie [MCP, MSP]
www.stu.uk.com
"TheSingingCat" <meowmeowmeow@meowmeowmeowmeow.com> wrote in message 
news:41b8d2af@news.nucleus.com...
> Hi Boris,
>
> We are using Symantec Mailsecurity 4.5 now for our 2003 box, as Ron 
> mentioned in his original post, it is a decent package, does a lot, but 
> I've noticed the antispam portion of it, is indeed a bit of a let down. 
> It runs based off of Spam Confidence Levels (SCL) 0 - 9
>
> 0 = legit mail (presumably, but lots still spam)
> 9 = hot teens looking for love and sell v1agr4 while refinacing your 
> m0rtg4g3 !!11 oneoneone
>
> A lot of stuff around 3 or 4 seems to be relating to rolex watches... 
> anyhow, if I set the thing to reject message 3 or higher, I found some 
> client mail was being tagged as spam when it sure didn't seem that way to 
> me.  I sent a test message from my offsite account to my corp. mailbox and 
> just wrote:
>
> "Nov 25, new spam def installed" in the body, subject was 'hi' and it 
> rated that as a 3 and rejected it.  So now I've moved the rejection level 
> to 6 or higher to curb false positives but a lot more spam is now coming 
> in as well.
>
> I really like the symantec product though for the desktop / server end of 
> it, great management and easy updates for all the clients / auto def 
> updates etc.  I am *hoping* that they release a new version of the 
> Exchange gateway product with enhanced spam detection.  Failing that, I 
> may have to look at GFI or an additional product just for our anti spam 
> (I've never heard of 'Barracuda spam/virus appliance' before, but I may 
> investigate).
>
> Our problem is we're a relatively small shop of 80 or so users, we have 1 
> exchange box behind our firewall, no front end / back end setup and 
> currently the $$$ isn't available for such a setup.  I like the Symantec 
> Gateway product because it also runs on top of the same machine as 
> Exchange and checks the mail before it even hits the SMTP virtual server.
>
> tsc
>
>
> "Boris Lokhvitsky" <msexpert@community.nospam> wrote in message 
> news:eDTOIrj3EHA.2156@TK2MSFTNGP10.phx.gbl...
>> Good question and good discussion. I am about to face the similar 
>> problem,
>> so I'm interested in real opinions too (no marketing crap please).
>>
>> What about GFi Mail Essentials + Mail Security? Did you consider it?
>>
>> What is bad about Symantec MailSecurity for Exchange?
>>
>> How do you plan to protect the back-end server? (from viruses brought by
>> internal MAPI users)?
>>
>> Regards,
>> Boris
>>
>>
>> "Ron" <jfkfjdsarewureow@ruioewuroiewvkjhdkghdska.com> wrote in message
>> news:OTsixzi3EHA.1408@TK2MSFTNGP10.phx.gbl...
>>> I'm currently using Symantec Antivirus for SMTP gateway server (it is an
>>> SMTP server and it acts as an SMTP relay server for Exchange in the
>> internal
>>> network). It does the following:
>>>
>>> - Spam filter
>>> - Sender's address block, subject line block, attachments block
>>> - Query 3 RBLs (at most)
>>> - Heuristic Detection (not useful - too many false positives)
>>> - Virus scanning
>>> and others
>>>
>>> I'm looking for an antivirus + antispam gateway software solution from
>> other
>>> companies. It can be an SMTP server itself or an add-on to MS SMTP 
>>> server
>>> (runs on top of MS SMTP). I've narrowed it down to 2 software companies
>> but
>>> unsure which one is better. Sybari or Trendmicro? Which product should I
>>> get? I'm currently reading Antigen for SMTP gateways manuals.
>>>
>> http://www.sybari.ws/portal/alias__Rainbow/lang__en-US/tabID__3344/DesktopDefault.aspx
>>>
>>> Thanks.
>>>
>>>
>>
>>
>
> 


Relevant Pages

  • Re: IMF blocking an internal e-mail - Help!
    ... your mail server. ... by default Exchange does not filter or block messages from other ... list and enable Connection Filtering on SMTP virtual server. ... products like WinDeveloper IMF Tune do allow you to ...
    (microsoft.public.exchange.admin)
  • Re: Strange IMF behaviour
    ... Global Accept List takes ip addresses of sending hosts, not smtp ... MVP - Exchange ... Does anyone know why the IMF seems to set the SCL-level 7 on mails ... I connect to the Exchange server using telnet: ...
    (microsoft.public.exchange.admin)
  • Re: IMF Query
    ... Do you have Exchange 2003 SP2 installed? ... I wanted to configure the Intelligent Messaging Filter, ... to be enabled - i.e in ESM there are no IMF tabs on either server nor SMTP ...
    (microsoft.public.windows.server.sbs)
  • Re: high-priority emails deliverable
    ... How does the Symantec Anti-Virus program submit messages? ... to the Exchange server via SMTP, if so it could a setting under the SMTP ... symantec AV box listed in the computers that can relay through the Exchange ...
    (microsoft.public.exchange.admin)
  • Re: Intelligent Message Filter and SMTP
    ... IMF works at the SMTP transport layer - so if you're picking up your mail from an ISP using some kind of POP connector or similar mechanism - IMF isn't working. ... SMTP and Exchange just runs on my SBS machine to pick up the mail from ...
    (microsoft.public.exchange.admin)