Solved

Webmail threats to corporate lan

Posted on 2010-09-16
4
346 Views
Last Modified: 2012-06-21
Users in the company I work for are denied access to webmail via websense running on a web proxy.  My question is this.  If a business user was granted access to webmail - for example gmail - and downloaded or uploaded an attachment to or from gmail to his desktop within the corporate lan... would that attachment be subject to the scanning and filtering present on the proxy server?
0
Comment
Question by:dubsecurity
4 Comments
 
LVL 5

Accepted Solution

by:
StefanKamp earned 63 total points
ID: 33693296
I am not sure wheter attachments can be scanned when users browse through SSL (gmail is SSL enabled), as it is encrypted between both parties.

But can easily tested by downloading a test-virus through:
http://www.eicar.org/anti_virus_test_file.htm

They host the testvirus both on HTTP and HTTPS. See what's happening.

Br. Stefan
0
 
LVL 14

Assisted Solution

by:Ehab Salem
Ehab Salem earned 62 total points
ID: 33710596
If the user uses SSL gmail, you won't be able to know what he is doing, otherwise, I am in doubt as well, as the files download are usually redirected from the http header.
If you want full control you need to have something like Websense Gateway, and not Websense Security suite.
0
 
LVL 59

Expert Comment

by:Chris Bottomley
ID: 35980543
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Are you having trouble connecting or getting your iPhone / Samsung device(s) to sync with Microsoft Exchange Server?   What have you tried?   What haven't you tried?
Find out what Office 365 Transport Rules are, how they work and their limitations managing Office 365 signatures.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now