Won't delete infected emails.

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Won't delete infected emails.

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI MailSecurity >> Won't delete infected emails.

Page: [1]

Message

<< Older Topic Newer Topic >>

Won't delete infected emails. - 20.Jun.2004 11:59:00 PM

ratzmilk

Posts: 6
Joined: 27.May2004
From: Brisbane
Status: offline

Infected emails are not deleted, instead, they are cleaned of infection, then sent to the user with a security notice attached saing that the email was infected and has now been deleted.

How stupid is getting an email that says 'this email has been deleted'.

I have changed the setting to quarantine, and then the administrator gets all the infected emails for 'Aproval'. I then set the software back to 'Delete' and it goes back to the same, sending cleaned emails with a notice saying:

Dear Recipient,

This mail has been deleted because a part of it (body or attachment) violated GFI Content Security's security policy.

That mail has been deleted by the GFI Content Security BitDefender Engine Module.

Regards,

GFI Content Security
http://www.gfi.com/

So, how do I get the program to stop telling everyong that it is deleteing the email, and actually get it to delete the email?

Post #: 1

RE: Won't delete infected emails. - 21.Jun.2004 9:44:00 AM

PhilH

Posts: 41
Joined: 19.Jun.2004
From: Dearborn, MI
Status: offline

Mark,

See the thread at http://forums.gfi.com/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=9;t=000377

The fact that the adminstrator has no control over the sending of these idiotic notifications is a MAJOR flaw in Mail Security IMHO.

(in reply to ratzmilk)

Post #: 2

RE: Won't delete infected emails. - 21.Jun.2004 7:59:00 PM

ratzmilk

Posts: 6
Joined: 27.May2004
From: Brisbane
Status: offline

Yes, I had read that posting. Of interest was this:

"In case you are using MailSecurity in VS-API mode, MailSecurity has to abide to certain rules. It is Exchange server that provides the items for scanning by MailSecurity, and MailSecurity can only block items rather then emails. By 'items', I mean message text body, message html body, attachments etc."

This to me appears to suggest that it is Exchange that causes the emails to not be deleted. But that is a cop out, because I was using Trend Micro in VS-API mode and it had no problems what so ever in deleteing infected emails.

So, it can be done. Question is, can GFI impliment this function as their competitors have, or do I just go back to Trend Micro.

I'm in week two of my evaluation of GFI, and with this problem of not being able to delete an infected email, combinded with the other problems I have had, I doubt I'll be making it to week three. Looks like Trend will be getting my license fees for another year.

(in reply to ratzmilk)

Post #: 3

RE: Won't delete infected emails. - 23.Jun.2004 11:01:00 AM

Patrizia

Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline

Hi,

If you want MailSecurity to scan internal mails, then it is not possible to completely block the mails.

However if scanning internal mails is not a priority, you may want to consider installing MailSecurity in SMTP Gateway mode on the Exchange machine. In this mode, MailSecurity can block whole emails even if it is installed on the same machine as Exchange.

[ June 28, 2004, 11:57 AM: Message edited by: Patrizia ]

(in reply to ratzmilk)

Post #: 4