Re: Anti-Virus on Terminal Server 2003 POP3 email
- From: "Josh Rosenberg [MSFT]" <joshrose@xxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 23 May 2007 17:37:24 -0700
Try searching for something like:
POP3 virus scanning enterprise terminal
I found at least one product that seems to meet your requirements (eScan Corporate Edition), though I can't vouch for it one way or another. All the usual disclaimers apply.
--
Josh Rosenberg [MSFT]
SDE - Terminal Services
"Julie" <julie@xxxxxxxxxxxxx> wrote in message news:u9HFvpZnHHA.3952@xxxxxxxxxxxxxxxxxxxxxxx
No, the desired scanner would be installed on the Terminal Server,
not the client machine. Of course a scanner on a client machine would
be of no use to Outlook running on the Terminal Server.
The solution I'm looking for and tried to describe is the same as what
you describe in your second paragraph, and my question is part of my
research into this.
So far, all the POP3 email virus scanners I've found won't work on
a Terminal Server. If anyone knows of a solution, I'd like to hear about it!
Thanks.
"Josh Rosenberg [MSFT]" <joshrose@xxxxxxxxxxxxxxxxxxxx> wrote in message news:0373EAAF-505A-4CA7-8091-DC6C14213017@xxxxxxxxxxxxxxxxIf I understand you, you want a virus scanner that would be installed on the client machine to scan e-mail going to Outlook on the remote machine. That is, by definition, impossible. The connection to the remote machine is an encrypted stream of graphics, input commands, etc. Unless the user then copied the attachment to the local machine, the virus scanner would not see e-mail or attachments, just encrypted graphics that are used to draw them. If the user downloads the attachment, the scanner could scan it on reaching the local machine, but no earlier. If they ran it from the server, you'd be stuck.
What you need is an enterprise class virus scanner for the server that you run concurrently with the Outlook session and does POP3 e-mail scanning. The downside is that running scanners on the server can reduce performance; you'll need to do research to find the best options.
To reduce attack profile, you should probably make sure that your users are not given Administrative privileges on your TS. If they don't have Admin privileges, just normal User and Remote Desktop privileges, the damage potential for any given virus is dramatically reduced.
--
Josh Rosenberg [MSFT]
SDE - Terminal Services
"Julie" <julie@xxxxxxxxxxxxx> wrote in message news:ONFIAdOnHHA.1240@xxxxxxxxxxxxxxxxxxxxxxxI've been looking into this and found a recent discussion
about this general topic here. However, I'm not sure
it applies to my situation so I'd like to ask a question.
We're installing a Terminal Server (Server 2003) on which
each remote user will use Outlook on the TS to retrieve
their email from a POP3 email server. There's no Exchange
Server here, so Scanmail isn't the answer.
Our main concern is scanning this email for viruses as it is
downloaded. Scanning of the data files and documents on the
server machine is not a concern for us.
Many of the client antivirus products perform this scanning
of messages as they are downloaded from a POP3 email
server, and we're looking for a product that will perform
this function for the TS remote users as they use their TS
Outlook to retrieve email.
Does anyone know what, if any, products behave this way?
Thanks.
.
- References:
- Anti-Virus on Terminal Server 2003 POP3 email
- From: Julie
- Re: Anti-Virus on Terminal Server 2003 POP3 email
- From: Josh Rosenberg [MSFT]
- Re: Anti-Virus on Terminal Server 2003 POP3 email
- From: Julie
- Anti-Virus on Terminal Server 2003 POP3 email
- Prev by Date: Re: Anti-Virus on Terminal Server 2003 POP3 email
- Next by Date: Re: TS Detection During Logon
- Previous by thread: Re: Anti-Virus on Terminal Server 2003 POP3 email
- Next by thread: Re: Anti-Virus on Terminal Server 2003 POP3 email
- Index(es):
Relevant Pages
|
