Mike Stoico @ METLIFE
02/28/97 08:30 AM
I agree but there are times when you can't avoid encrypted files all the
way to the desktop, such as mail and their attachments (which is what I was
thinking of). I do agree that just about everything else should taken care
of in the DMZ before it gets to the internal network.
Mike
pgalynin @
chipnet .
cz on 02/27/97 06:32:25 AM
To: Mike Stoico/Bsg/MetLife/US
cc: lists @
reflections .
mindspring .
com, firewalls @
GreatCircle .
COM
Subject: Re: virus checking
Mike Stoico wrote:
>
> Mike Stoico @ METLIFE
> 02/27/97 04:35 PM
>
> In addition, you're gonna have to put some sort of virus scanning at the
> client anyway if they're doing any sort of encryption. This is only
place > where the message can be decrypted and scanned.
Files which aren't reliable shouldn't be encrypted, and the files that
are encrypted should be reliable, so that you wouldn't have to check it.
My strong belief is, that anything that poses such a security threat as
virii, IRC, FTP and HTTP should be kept on machines outside of the
firewall.
Paul.
|
|
