Re: Fortinet IDS

[Mark Teicher <mht3 () earthlink net>]

As I recall the Fortinet appliance utilizes the Trend Micro AV engine.  It 
does not utilize a SMTP proxy server, it scans for certain items (i.e. file 
size, attachment type, file extension)..

At 07:30 AM 10/14/2004, Don Draper wrote:
> In-Reply-To: <200407270109.i6R19ZZr041277 () mx-out daemonmail net>
>
> Does anyone know if Fortinet on-board virus scanning uses an SMTP proxy 
> server? Or is it able to accomplish this transparently by simply 
> inspecting the packets as most the IDS/IPS do.
>
> We just purchased a new Proventia M10 from ISS and have discovered that we 
> cannot use it for Anti-Virus (email) or Anti-Spam due the ffact that it 
> uses an on-board SMTP proxy server that does not support SMTP 
> authentication among other issues. The IPS module does not need the proxy 
> and works fine.  Having on-board virus scanning at the network edge would 
> be very helpful and Fortinet docs would make you think it is ALL done with 
> packet inspection and without any nasty proxies in the middle. Does anyone 
> know how this works?
>
> TIA,
> Don
>
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from 
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
> to learn more.
> --------------------------------------------------------------------------


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------