Solved

Does antivirus on the firewall replace antivirus on a mail server?

Posted on 2006-07-05
4
246 Views
Last Modified: 2013-11-16
I am looking at purchasing a sonicwall firewall and also setting up an exchange server. If I get the antivirus option for the sonicwall do I still need antivirus on the exchange server? Also, any feedback on sonicwall firewalls? SSL VPN?

Thanks in advance.
0
Comment
Question by:periker
4 Comments
 
LVL 13

Accepted Solution

by:
hstiles earned 25 total points
ID: 17057550
If the antivirus on the firewall is the only thing you'll be running, then I would say that you do need antivirus on the exchange server.  However, if you have antivirus already protecting your clients and file servers and you implemented a smart mail host then you could get away with not using mailstore antivirus on your exchange server.  If you will just be using a single Exchange server and the Sonicwall, then something like GFI MailSecurity would be a wise investment.
0
 
LVL 4

Assisted Solution

by:imreble1
imreble1 earned 25 total points
ID: 17087138
Mulitlayered protection is a must in security these days, think of it as a investment like a house. Your locking the door with the anti-virus at the firewall. Thats not everything you must do though. Put an alarm system in(anti-virus on exchange server) and lock the back door also(anti-virus on the end users) this away your are protected at different angles. Ex. iof a user accidently brings a infected file in from outside. another ex. Most firewalls cannot dig into zipped files or encrypted files that may contain viruses inside. This would bypass your firewall and exchange server and be caught at the user level. If your firewall doesn't catch it. Believe me if your buying a SOHO device the false-positives on those devices are horrible.

~DC
fishnetsecurity.com
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question