Solved

Webmail threats to corporate lan

Posted on 2010-09-16
4
366 Views
Last Modified: 2012-06-21
Users in the company I work for are denied access to webmail via websense running on a web proxy.  My question is this.  If a business user was granted access to webmail - for example gmail - and downloaded or uploaded an attachment to or from gmail to his desktop within the corporate lan... would that attachment be subject to the scanning and filtering present on the proxy server?
0
Comment
Question by:dubsecurity
4 Comments
 
LVL 5

Accepted Solution

by:
StefanKamp earned 63 total points
ID: 33693296
I am not sure wheter attachments can be scanned when users browse through SSL (gmail is SSL enabled), as it is encrypted between both parties.

But can easily tested by downloading a test-virus through:
http://www.eicar.org/anti_virus_test_file.htm 

They host the testvirus both on HTTP and HTTPS. See what's happening.

Br. Stefan
0
 
LVL 14

Assisted Solution

by:Ehab Salem
Ehab Salem earned 62 total points
ID: 33710596
If the user uses SSL gmail, you won't be able to know what he is doing, otherwise, I am in doubt as well, as the files download are usually redirected from the http header.
If you want full control you need to have something like Websense Gateway, and not Websense Security suite.
0
 
LVL 59

Expert Comment

by:Chris Bottomley
ID: 35980543
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Email Relay Service 4 47
set url:tel to a website 3 50
WebSite Direction 1 42
What are the best practices for updating dead links to valid ones? 6 38
Are you having trouble connecting or getting your iPhone / Samsung device(s) to sync with Microsoft Exchange Server?   What have you tried?   What haven't you tried?
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question