OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Fortinet IDS

From: Don Draper (dondraperconsulting.com)
Date: Thu Oct 14 2004 - 08:30:38 CDT

In-Reply-To: <200407270109.i6R19ZZr041277mx-out.daemonmail.net>

Does anyone know if Fortinet on-board virus scanning uses an SMTP proxy server? Or is it able to accomplish this transparently by simply inspecting the packets as most the IDS/IPS do.

We just purchased a new Proventia M10 from ISS and have discovered that we cannot use it for Anti-Virus (email) or Anti-Spam due the ffact that it uses an on-board SMTP proxy server that does not support SMTP authentication among other issues. The IPS module does not need the proxy and works fine. Having on-board virus scanning at the network edge would be very helpful and Fortinet docs would make you think it is ALL done with packet inspection and without any nasty proxies in the middle. Does anyone know how this works?

TIA,
Don

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------