Solved

Webmail threats to corporate lan

Posted on 2010-09-16
4
385 Views
Last Modified: 2012-06-21
Users in the company I work for are denied access to webmail via websense running on a web proxy.  My question is this.  If a business user was granted access to webmail - for example gmail - and downloaded or uploaded an attachment to or from gmail to his desktop within the corporate lan... would that attachment be subject to the scanning and filtering present on the proxy server?
0
Comment
Question by:dubsecurity
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 5

Accepted Solution

by:
StefanKamp earned 63 total points
ID: 33693296
I am not sure wheter attachments can be scanned when users browse through SSL (gmail is SSL enabled), as it is encrypted between both parties.

But can easily tested by downloading a test-virus through:
http://www.eicar.org/anti_virus_test_file.htm 

They host the testvirus both on HTTP and HTTPS. See what's happening.

Br. Stefan
0
 
LVL 14

Assisted Solution

by:Ehab Salem
Ehab Salem earned 62 total points
ID: 33710596
If the user uses SSL gmail, you won't be able to know what he is doing, otherwise, I am in doubt as well, as the files download are usually redirected from the http header.
If you want full control you need to have something like Websense Gateway, and not Websense Security suite.
0
 
LVL 59

Expert Comment

by:Chris Bottomley
ID: 35980543
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question