Link to home
Start Free TrialLog in
Avatar of blotto99
blotto99

asked on

Symantec Gateway Security 5620 appliance + IMAP

I am installing a Symantec Gateway Security 5620 appliance.  It has nice wizards for applying Anti-spam and Anti-virus for POP3 and SMTP.  But, we are using IMAP for incoming mail and SMTP for outgoing mail.  Our mail server is at another location, which we simply connect to via Internet.

From viewing the logs, outgoing SMTP traffic is being properly scanned with Anti-spam and Anti-virus settings.  I cannot get the IMAP traffic to be scanned though.  I had to create an IMAP protocol, but when I set my rule to use my IMAP protocol, Anti-Spam and Anti-Virus tabs are unavailable.  So, I created a rule with a Source of my network and a Destination of the remote mail server, with a protocol of ALL.  I can then set Anti-spam and Anti-virus...but the traffic never shows up in the log.  The "log if successful" box is checked.  The rule should be getting hit.

Bottom line, I need to have my incoming IMAP mail scanned with Anti-spam and Anti-virus.  Thank you in advance for your help.
ASKER CERTIFIED SOLUTION
Avatar of Keith Alabaster
Keith Alabaster
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The SGS can can POP3 and SMTP only.   Perhaps you can move to POP3 instead of IMAP?
Avatar of blotto99
blotto99

ASKER

Thank you, I just needed to confirm the limitation.

Keith, do you happen to have a link to those comments?  I need to be able to present it in print.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It was actually from one of the competitors - Fortigate in this instance but there were a couple.
http://www.web-netdirect.com/files/fortinet/partners/files/COM137-Fortinet-vs-Symantec-SGS-Competitive.pdf

I'd agree with Tim on this. The client should be dealing with the imap content, not the SGS.
Nothing else on the market, except Fortinet, then...  ;)