Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Outsourcing, Intergration and Cheapware: Page 2 of 3


Guard the Bridge


I have to disagree with a statement Mike Fratto made in the Survivor's Guide article on security (Dec. 16, 2003). He said an e-mail server behind a firewall must have antivirus software to protect internal users from one another.

My organization runs a Network Associates' McAfee WebShield e250 Antivirus appliance in bridge mode between our network and our e-mail server, which runs Novell GroupWise. Because the appliance has two interfaces, and all traffic--internal and external--must go through it to reach a user, all e-mail is scanned by the appliance before being delivered. There are products that perform antivirus scanning on a GroupWise server, but we found them lacking in installation ease or in comprehensiveness/timeliness in regard to signature databases. We also ban mail with executable code.

Kurt Oestreich; Network Engineer
Benton Public Utility District

[email protected]

Mike Fratto replies: Kurt, you're right. I was referring to virus scanning at the network perimeter. Having a bridge-mode scanner in front of your e-mail server is an alternative.


High on Intergration


I was glad to see an article on the excellent Stoneware portal ("Safe Web Passage," Dec. 9, 2003), which we have been using for several years. We chose it due to its high directory integration (edirectory) and are eager to upgrade to version 4 for the VPNish features.


John Carter, Senior Network Systems Programmer
Indiana Purdue University
[email protected]