Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

VS API mode Message deletion

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> VS API mode Message deletion Page: [1]
Login
Message << Older Topic   Newer Topic >>
VS API mode Message deletion - 4.Dec.2003 12:29:00 PM   
mbrom

 

Posts: 32
Joined: 4.Sep.2003
Status: offline 		Hello,

I would like to be absolutely clear on something when Mailsecurity is installed in VS API mode. My understanding is that there is no way to delete an entire message if an attachment is blocked or a virus is found in the message. Can some one who has been using the product verify that for me. The documentation suggests that if the virus engines detect a virus you can delete the whole message, but GFI tech support person told me otherwise. This is critical in deciding to evaluate the product. We are also using Mailessentials.

Thanks in advance,
Matt
Post #: 1
RE: VS API mode Message deletion - 4.Dec.2003 1:55:00 PM   
mrc

 

Posts: 148
Joined: 20.May2003
Status: offline 		That was my understanding also, I am running both in gateway mode for that reason. I wanted to remove the entire message, as in it's never gets delivered to Exchange. (from either product)

Mike

(in reply to mbrom)
Post #: 2
RE: VS API mode Message deletion - 4.Dec.2003 3:09:00 PM   
mbrom

 

Posts: 32
Joined: 4.Sep.2003
Status: offline 		Thanks for the feedback Mike.

In the virus scanner engine properties there are options to "Quarentine e-mails" and "delete e-mails". Have you tried doing that with the VS api installation? If you could delete messages that way that may be good enough for my purposes.

Has installing in Gateway mode caused any problems, or additional administration concerns?

Thanks again,
Matt

(in reply to mbrom)
Post #: 3
RE: VS API mode Message deletion - 4.Dec.2003 4:36:00 PM   
mrc

 

Posts: 148
Joined: 20.May2003
Status: offline 		My original MailEssentials install was on the Exchange 2000 server itself. When we decided to also look at MailSecurity, I moved everything over to a dedicated mail relay in gateway mode. So I can't speak from any experience with VSAPI mode. But I was using a different anti-spam product on the Exchange server and had the same problem. It couldn't entirely remove the message, only replace it with a generic one.

I think administration is good in gateway mode. Messages quarantined or deleted for whatever reason, are simply not relayed to Exchange. I can work on and restart the Exchange server and still queue email on the relay, and restart the mail relay without kicking everyone out of Outlook. I also like the idea of isolating viruses before they hit the Exchange server. I still run another AV product on Exchange, although it hasn't detected one since installing MailSecurity. (guess it's working)

Mike

(in reply to mbrom)
Post #: 4
RE: VS API mode Message deletion - 4.Dec.2003 4:56:00 PM   
mbrom

 

Posts: 32
Joined: 4.Sep.2003
Status: offline 		Currently we use Trend Scanmail on the Exchange server. It can delete entire messages when a virus is found or an attachment is blocked. So, using MSEC in VS api mode will allow more junk to get through. It's pretty much a deal breaker if I can't work out a gateway installation. I just don't understand why Scanmail can delete messages, but MSEC can't. I wonder if there is a new MSEC BETA in developement that can.

So you moved Mailessentials over to the gateway. Sure why not.

Matt

(in reply to mbrom)
Post #: 5
RE: VS API mode Message deletion - 3.Feb.2004 7:49:00 PM   
Wally

 

Posts: 38
Joined: 8.Oct.2003
From: Brunei
Status: offline 		Just joining in here as it seems we have no official word from GFI as yet...

The issue of deleting the whole message is an important one - as with the My Doom outbreak we have trapped and deleted over 3000 e-mails - but of course in VSAPI mode we have only removed the attachment and the actual message has still had to be processed and delivered.

IS THERE any way to change this - if not - is GFI listening as this would be a good move for next build - and as others have indicated - if other AV packages are doing it - then it must be technically possible.

Wally

(in reply to mbrom)
Post #: 6
RE: VS API mode Message deletion - 5.Feb.2004 4:44:00 AM   
Nicks

 

Posts: 2771
Joined: 17.Mar.2003
Status: offline 		Hi all,

When MailSecurity is installed in VSAPI mode, MailSecurity has to abide to certain rules. Exchange server that provides the items for scanning by MailSecurity, and MailSecurity can only block items rather then emails. By 'items', I mean message text body, message html body, attachments etc.

When MailSecurity is installed on a Gateway, MailSecurity will have full control of the email. Therefore, the Administrator can configure MailSecurity to only block the item, or to block the whole message when a rule us breached.

Other products that install on Exchange server and are able to block whole messages are most probably not using VSAPI technology, and therefore not fully supported by Microsoft.

GFI recommends having 2 installations of MailSecurity - one on a Gateway to block malicious content coming from the internet, and another on the Exchagne server which will protect the users from any internal virus outbreaks.

More information can be found at in our knowledgebase at http://kbase.gfi.com/showarticle.asp?id=KBID001839

Regards
Nicholas Sciberras

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailSecurity - FAXmaker - MailEssentials - LANguard

[ February 05, 2004, 05:35 PM: Message edited by: nicks ]

(in reply to mbrom)
Post #: 7
RE: VS API mode Message deletion - 5.Feb.2004 8:51:00 PM   
Wally

 

Posts: 38
Joined: 8.Oct.2003
From: Brunei
Status: offline 		Thanks Nicholas - I guess you can't make it any clearer than that - now if only I can convince management to buy me another box.....
Wally [Razz]

(in reply to mbrom)
Post #: 8
RE: VS API mode Message deletion - 16.Feb.2004 1:01:00 PM   
blsmx8

 

Posts: 71
Joined: 6.Apr.2003
Status: offline 		I'm glad I read this before I bought. I would be installing MS on the Exchange Server, same place I have ME9 installed. I would have to use VS API mode because I don't want to build another box as a gateway. I too would like to be able to delete the entire email and not just an attachment if a virus was detected. Are there any plans to change MS so it will do this in VS API mode?

Chuck

(in reply to mbrom)
Post #: 9
RE: VS API mode Message deletion - 17.Feb.2004 7:41:00 AM   
Nicks

 

Posts: 2771
Joined: 17.Mar.2003
Status: offline 		Hi again,

Yes, there are plans to have MailSecurity installed on Exchange server work in non-VSAPI mode. For more information on this, you can join our beta list at http://www.webelists.com/cgi/lyris.pl?site=gfi-beta&page=topic&topic=gfi-beta&text_mode=&lang=english.

You may also want to subscribe to the new builds notification which will notify you of new features included in the new builds. You can do this from http://support.gfi.com

(in reply to mbrom)
Post #: 10
RE: VS API mode Message deletion - 17.Feb.2004 2:43:00 PM   
blsmx8

 

Posts: 71
Joined: 6.Apr.2003
Status: offline 		Nicks,

If I buy MS8 now, will the new feature you are working on be a free upgrade?

Thanks,

Chuck

[ February 17, 2004, 08:43 PM: Message edited by: blsmx8 ]

(in reply to mbrom)
Post #: 11
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> VS API mode Message deletion Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts