RE: Transparent Anti spam and virus web/mail/ftp Proxying on a Bridge

["Mike Sweeney" <mikesweeney () packetattack com>]

If you are willing to consider an appliance solution, take a look at the Bluecoat which is a high performance proxy and 
filtering solution. It has an extensive set of rules and policies that you can configure, IM reflection, AV, content 
filtering, HTTP header redirection, policy enforcement (time on site, access at all and so on) plus more. We have had 
excellent success using them. Full command line or GUI access.

MikeS

_________________________________

Packetattack.com
Network Design and Security
www.packetattack.com

Office (714).637.4235

"QUIS CUSTODIET IPOS CUSTODES"
    WHO SHALL GUARD THE GUARDS

-----Original Message-----
From: STANESCU Ionut [mailto:ionut.stanescu () brd ro]
Sent: Monday, February 07, 2005 4:58 AM
To: T'Krin
Cc: security-basics () securityfocus com
Subject: RE: Transparent Anti spam and virus web/mail/ftp Proxying on a Bridge


Hi,

Stop for a while and think that with any kind of filters, will be some traffic delays. So I think, instead of any 
solution do you will adopt one or more machines for every kind of filters will be needed (one for SMTP, and another for 
http and ftp).

We use a CA eTrust Secure Content Manager for SMTP only (ant spam and email virus analyze) installed on heavy machine.

Regards,

Ionut Stanescu
BRD - Groupe Société Générale
Departamentul Sisteme Informatice / Directia Sisteme si Retele / Sisteme de Operare
(DSI/DSR/SSO)


-----Original Message-----
From: T'Krin [mailto:tkrin () tkrin net]
Sent: Friday, February 04, 2005 4:58 PM
To: security-basics () securityfocus com
Subject: Transparent Anti spam and virus web/mail/ftp Proxying on a Bridge

Hello everyone.

I am interested in setting up a bridge to check all web, mail and ftp traffic for viruses and spam.  Setting up the 
bridge is the easy part, but I'm wondering if any of you all could give recommendations on what proxy applications may 
be useful.

I am planning on using ClamAV for the virus checking, and will use either SpamAssassin or Dspam as well for spam.  
DansGuardian looked valid as did PCScan for web and pop3 proxying, but would appreciate any ideas you all could share.

Thanks all.

~Dan