RE: Microsoft Exchange and a content filtering conundrum

["Depp, Dennis M." <deppdm () ornl gov>]

I think MimeSweeper runs via SMTP.  If so you should be able to have
mail sent to the Mimesweeper machine and have that machine forward all
the mail to Exchange.  For outgoing mail you can setup the Mimesweeper
box as a smart host and have all the Exchange mail sent to the
Mimesweeper machine.  The mimesweeper machine would then forward it to
its destination.  We have a similar situation with PMDF in front of our
Exchange machines.

Dennis
 

-----Original Message-----
From: Pranav Lal [mailto:pranav.lal () gmail com] 
Sent: Friday, July 08, 2005 11:22 AM
To: security-basics () securityfocus com
Subject: Microsoft Exchange and a content filtering conundrum

Hi all,

I have been tasked by a customer to find a content filter that does 
not allow the filter administrator to view the message body of the 
messages that the content filter catches. One such product is 
Clearswift's MimeSweaper. (www.clearswift.com) You can assign several 
roles to a user. So, there would be a super user who would be able to 
administer everything but the day-to-day work would be done by a 
restricted user. This product runs only on SMTP.

The customer has Microsoft Exchange 2003. Is there any way to 
interface MimeSweaper with exchange? Clearswift does have an Exchange 
MimeSweaper but that product does not allow for the role based 
segregation of user permissions. The customer wants all messages 
whether they be internal that is on the same exchange domain or 
external that is going to different domains filtered in the content 
filter. I see no way of accomplishing this. Yes, for messages going 
outside via SMTP, I can use SMTP MimeSweaper but what about internal 
messages?

Can I route all exchange mail via some kind of SMTP relay so that 
SMTP mimesweaper catches it?
Note:
I have already discussed this with ClearSwift support and they say 
that the SMTP MimeSweaper is the only product that has this 
functionality.

I can recommend other content filters but I have not found any 
suitable product.

Pranav


-- 
Internal Virus Database is out-of-date.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005