This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mail Security Virus Mail gets through

Hi,

we have a strange behavior on our Astaro which is acting as a mail gateway V 7.507
Antivirus is configured with single-scan.
In the past days there has been a mail wich is infected by JS/Redirector.IY, that has been
delivered to our mail server, the antivirus seems not to detect this one.

The Avira Product on the mailserver has detectet the virus afterwards.

Is there any idea what could have happened.

Fredo

This thread was automatically locked due to age.

0 BAlfson over 15 years ago

This is why we recommend having three layers of security: perimeter, server, client. Normally, we prefer to have different products at each layer. Astaro currently uses Avira and ClamAV, so it's a little surprising that the malware was detected at the server, but that may be because, in this instance, the server got a new pattern before the Astaro did. I bet the same one would now be blocked by Astaro.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 vogonfleet over 15 years ago in reply to BAlfson

That is what i thought too, because i have read one of your posts before.
Thanks for teh reply.

Cheers - Fredo
Cancel
Vote Up 0 Vote Down

Cancel
0 Alvin over 15 years ago in reply to vogonfleet

Please do submit the virus sample to VirusTotal - Free Online Virus, Malware and URL Scanner so that those vendors get it processed and also for you to confirm yes it is detecting it now from the results.
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 15 years ago in reply to Alvin

Hi,
why do you only use one scanner for your incoming messages when the ASG has 2 from different suppliers?

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 vogonfleet over 15 years ago

Hi,

until now we don´t use both scanners, because the gateway maybe works much slower.
But we will test it in the next days.

Fredo
Cancel
Vote Up 0 Vote Down

Cancel