Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?

I checked out GFI's Mail Security for Exchange/SMTP - looks good. Also went
to Symantec.com and looked at Mail Security for SMTP for Small Business and
Mail Security for Windows Small Business Server. Both Symantec products
also look good, but can't tell for sure which to get. I assume (there's
that word again) I should get the one that says it's for SBS. (I've been
bit so much by assuming things with SBS or Microsoft that I'm gun-shy.)
Has anyone experience with the GFI product and the Symantec product for SBS,
and willing to share a recommendation?

Mike

"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:O6p9DSq$GHA.4060@xxxxxxxxxxxxxxxxxxxxxxx
Wow you're running practically naked. Since you're already have Symantec
you may want to add Symantec Mail Security for Microsoft Exchange 5.0
designed to scan the IS store especially as messages flow into it. Another
alternative is the GFI Mail Security product.

"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:%23P5lKGq$GHA.4024@xxxxxxxxxxxxxxxxxxxxxxx
I don't have an "Exchange Aware" AV program. The AV version I ahve has a
tab labeled Exchange, so I assumed (bad word, I know) that it was scanning
Exchange. Guess I was wrong.

Mike

"Joel31622" <Batista@xxxxxxxxxxx> wrote in message
news:%23ujXq$p$GHA.996@xxxxxxxxxxxxxxxxxxxxxxx
Hi Mike, in your post you said that you were using Symantec Antivirus to
scan your PC/Server. Do you also have an "Exchange-Aware" anti-virus
program to scan your Exchange database, such as "Symantec Mail Security
for MS Exchange"? (Not to be confused with an "Outlook-Aware" AV
program)

Since you can't seem to find anything on the Server/Workstations, is it
possible you have some kind of malware/virus in your Exchange database?




Mike Webb wrote:
Running SBS 2003 Premium, Exchange, ISA 2004, WSUS, 2 NICs and a
router, dynamic IP from ISP, DDNS service from dyndns.org, downloaded
and am using GFI Web Monitor 30-day evaluation as of 1 Nov.
=======================
Noticed a week ago that our uploads through the ISP have spiked; had
been 10-40 MB/day, and now is up to 2 GB or more per day. Can't figure
out why, but I'm working on it. I downloaded GYI Web Monitor to help
me track individual users. It is a bit better than ISA reports for
that. Today I checked GFI and didn't see anything remarkable, then ran
a ISA report for yesterday and saw we had 242 MB sent (Bytes Out) on
the Traffic By User section of the report. And our Executive Director
had the most - 196 MB. When I asked him about it, he said he only sent
2 emails - and showed them to me. Should have been just a few KBs.
So, I now think we've been highjacked. Asked him to run a full scan
with his AV (Symantec Corporate Ed.), and a full scan with his SPAM
app.

I'm really not sure what I should do to try and identify the problem.
I know about NETMON, but not how to interpret the results. I'm also
worried about our security. I've got a good password policy in-place,
am running Symantec Corporate Ed. AV on the server and feeding to the
clients on each workstation. It runs (on the server) once per week.
(last scan was at 5:30 am on the 29th - am running a full scan now.)
Also have Windows Defender running on the server once per day.

Any advice??







.

Relevant Pages

  • Re: Best Antivirus Suite for SBS2003 is ?????
    ... Symantec's Mail Security for Exchange Server 'hooks' into Exchange Server ... MailSecurity product (confusing as Symantec have renamed their AntiVirus ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
    ... SAV Enterprise which includes both the Exchange product and the client ... For new clients I'll seriously consider GFI Mail Security as I ... Symantec products also look good, but can't tell for sure which to get. ...
    (microsoft.public.windows.server.sbs)
  • Re: How does Symantec Multi-Tier v10.0 stack up?
    ... won't kill the server like some Symantec AV stuff does). ... >> Thanks for the reply - does the Mail Security for Exchange not come as part ... >> Seems like you are doing a good job of the Spam - I want to be able to this ...
    (microsoft.public.windows.server.sbs)
  • Re: Thanks to all - todays the day!!!
    ... My SBS 2003 server has 1 NIC, and we have a linksys firewall. ... have the Exchange agent built in to their SBS product. ... server for GFI Mail Security and GFI Mail Essentials - better reporting ...
    (microsoft.public.windows.server.sbs)
  • Exchange and a cpu running at 100%
    ... I am running Mail Security for Exchange by symantec. ... people cant send e-mail. ...
    (microsoft.public.exchange2000.win2000)
Loading