OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: McAffee vs Sophos

From: Graham Hillstomer (ghillstomerpostmaster.co.uk)
Date: Tue Apr 01 2003 - 07:26:02 CST


It's not that Amavis or Amavis-new are bad because there not, but with volumes of 150K+ messages per day, especially on public email services we have seen issues with them. You need to watch all the apps it calls for resource/memory leaks and also that something doesn't peg the CPU to unacceptable levels. What happens is that you need to develop some monitoring tools to monitor the email process tree itself to ensure that everything is doing what it is supposed to do and that your actually working and under acceptable levels.

For low/medium email volumes where email is not critical Amavis-new is fine. You can tinker with it as much as you like :-)

For us in what we do we need more enterprise-class antivirus services that don't need this much attention.

Graham

> I am not comfortable with Amavis-new and large scale scanning but that is
my opinion :-)

I've always used Amavisd with uvscan, and in a new server I was thinking on
using Amavis-new
why do you say that?

is it too slow with large scale scanning?

--
---
Graham Hillstomer II
Senior System Admin *BSD, HP-UX, Solaris
Quality of Service Response Team
Antivirus Solution Manager / SPAM Control Team Assistant
ghillstomerpostmaster.co.uk