Great Circle Associates Firewalls
(April 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Virus Protection at the Firewall
From: Matt Wallace <mwallace @ netcom . com>
Date: Mon, 21 Apr 1997 20:19:32 -0700 (PDT)
To: "Sameer R. Manek" <manek @ challenger . atc . fhda . edu>
Cc: David Harley <harley @ nagos . lif . icnet . uk>, Jim Littlefield <little @ hks . com>, firewalls @ GreatCircle . COM
In-reply-to: <Pine . SGI . 3 . 96 . 970421172142 . 20696A-100000 @ challenger . atc . fhda . edu>


On Mon, 21 Apr 1997, Sameer R. Manek wrote:

> Basicly here is the scoop.  A virus scanning firewall can search for some
> viruses but not always, for example a pgp encrypted mime attached pkzip
> file. Not to mention that such a filter does add a bit of latency.  Plus
> I'll bet most virus infections are brought in on floppy or laptop. 

Obviously. Anything PGP'd is completely unscannable, regardless of the
type of file it is. A filter on a good machine can pass mail realtime.
I think many companies are well served with a viruswall product for email,
and a desktop product to be used regularly, including for anything
d/l'd over http or ftp.

> I wonder what are the legal issues around scanning files attached to
> email?

For viruses? None. You don't invade privacy unless you somehow monitor
content, and a virus infecting an attached file will never be perceived
as "content".

-Matt


References:
Indexed By Date Previous: Re: Virus Protection at the Firewall
From: Bob Beck <beck @ obtuse . com>
Next: Re: dns and the firewall
From: Brian Connolly <brian @ us . checkpoint . com>
Indexed By Thread Previous: Re: Virus Protection at the Firewall
From: peter @ baileynm . com (Peter da Silva)
Next: Re: Virus Protection at the Firewall
From: harley @ nagos . lif . icnet . uk (David Harley)

Google
 
Search Internet Search www.greatcircle.com