Re[2]: GroupWise vs Exchange

From: nomad von Fblodilovich <nomad(at)cyberspace.mht.bme.hu>
Date: Thu Mar 27 2003 - 03:17:20 EST

Well, reality is somewhat more complicated. You all have ignored the fact, that antivirus solutions for Exchange hook to the Exchange server via MAPI, ESE API or AVAPI (it is called VS API as well). The first two are trade-offs, and must be used on earlier versions of Exchange. Using MAPI (which is the only solution on pre-Exchange 5.5 SP3 + IS patch servers) couldn't guarantee at all that viruses won't slip through. Actually, it is more than likely that they will! The currently available up to date method is using AVAPI 2, which requires at least Exchange 2000 SP1. This is a much more reliable method than MAPI, ESE API or AVAPI 1, but it still doesn't provide 100% protection. For example (if I remember correctly) there are cases like when although AVAPI flags an outgoing message as infected, the SMTP connector ignores the AVAPI flag, and the message will be sent out nevertheless.

The bottom line is, antivirus protection on an Exchange server is a trade-off, and don't lure yourselves into the false assumptions that it is safe!

B> I don't see how virus outbreaks will be more prevalent with
B> Exchange since it is only an information store. Maybe you mean the
B> Outlook client?

B> I am not an expert in the field of Virii, however, I have not heard of any
B> that attack the Exchange server specifically.  Most of the E-Mail born
B> outbreaks have been because of the Client (Outlook).  If you use MS Exchange

B> or any other E-Mail / Groupware server the possibility for a virus outbreak B> is the same.

---

Powerful Anti-Spam Management and More... SurfControl E-mail Filter puts the brakes on spam and includes e-mail management tools to help combat viruses and confidential data leakage. Download a free trial: http://www.surfcontrol.com/go/zsfvl1 Received on Thu Mar 27 11:30:47 2003