RE: Exchange server & Web Security for mid size company.... Need advise.

["Chinnery, Paul" <PaulC () mmcwm com>]

> From a licensing standpoint, check with the a/v vendor before putting a "regular" a/v client on the server.  I know 
> Trendmicro licensing for the OfficeScan product prohibits deploying the Officescan s/ware on a server.  If you want to 
> do that, then you have to buy Trend's "server protect" client.  

-----Original Message-----
From: phunked up! [mailto:phunkodelic () gmail com]
Sent: Monday, January 09, 2006 10:14 AM
To: security-basics () securityfocus com
Subject: Exchange server & Web Security for mid size company.... Need
advise.


Am getting ready to run install a complete email system (Exchange
server) for approximatley 175 users.  For antivirus we are currently
running Trend company wide and it has served us well.  We currently
have no spyware solution to filter web traffic.  My plan is to
purchase Norton 8200 Antivirus & Antispam firewall (applicance) and to
put Trend Scanmail for exchange  on our server.  Figured that that
might be overkill int the antivrus department and here is why:

Clients-Trend Micro
Exchange Server - Scan Mail for Exchange
Gateway Solution - Norton 8200 Spam-Virus Firewall.

What I was thinking of doing was just puttting regular antivirus
client on Exchange and using the saved money to purchase an
anitspyware appliance from Barracuda Networks.  I would think that two
layers of virus protection (gateway, client) would be fine and three
layers (gatway, email server, client) may be a bit much for a
small-medium environment.  In my last exchange deployment several
years ago I had it set up with regular cleint on exchange server and a
gatway solution.  Of course years ago things were a bit different.

Any opinions would be much apprecaited.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------