Difference between revisions of "Scanning Configuration"

From GWAVA Technologies Training
Jump to: navigation, search
(Fingerprinting)
(Fingerprinting)
Line 50: Line 50:
 
== [http://training.gwava.com/index.php/Fingerprinting Fingerprinting] ==
 
== [http://training.gwava.com/index.php/Fingerprinting Fingerprinting] ==
  
The Fingerprinting event interface works like a virus interface does, to identify the patterns of files for specific file types. This allows the fingerprinting interface to identify renamed .exe or other file types, and keep them from advancing through the system. See the Fingerprinting interface for defaults and all included file types. Additional file types cannot be added manually. Default actions for active file types are block and quarantine.
+
The Fingerprinting option allows the blocking of attachments that attempt to disguise what they are.
  
 
== [http://training.gwava.com/index.php/Image_Analyzer Image Analyzer] ==
 
== [http://training.gwava.com/index.php/Image_Analyzer Image Analyzer] ==

Revision as of 21:19, 19 March 2014

Contents

Antivirus

GWAVA will stop viruses before entering the Email system or if they came from an internal source.

Antispam

The Antispam tests are a collection of tests that determine if a message is SPAM.

Spam Detection - What to do for messages classified as SPAM.

SURBL - URLs that are found in the body of a message.

RBL - IP Addresses or DNS names found in the message header.

IP Reputation - Compare IP to known Spamming IP Addresses

SPF - Verify Sending IP address can send for domain.

Denial of Service - Reject IP addresses that attempt too often.

Conversation tracking - Track conversation between people and override SPAM results.

Spam reporting - Report messages that are SPAM.

Text filtering

Text filters allow for scanning of the Subject and or Body. There are 3 types of Text filters:

Subject+body filter - Text filters that apply to both to the Subject and Body of a message.

Subject filter - Text filters that apply to the Subject only.

Body filter - Text filters that apply to the Body only.

MIME filtering

MIME filters allow for scanning of the RAW message data. Every bit will be scanned as is with no decoding of attachments. There are 2 types of MIME filters:

Raw Message filter - Filters for items in the Raw message portion of the MIME file.

Message Header filter - Filters for items in the header of the MIME file.

Oversize

Messages that contain large attachments can be blocked by using the Oversize filter

Undersize

Sending Email servers will probe an email server to try and get small amounts of data in. This can be prevented using the Undersize filter

Fingerprinting

The Fingerprinting option allows the blocking of attachments that attempt to disguise what they are.

Image Analyzer

The Image Analyzer tool will scan messages for pornographic or obscene images.

Attachment Types.

GWAVA has the ability to block message that contain certain Attachment Types.

Source Address Filter

Specific sending email address or domains can be blocked using the Source Address Filter

Destination Address Filter

Recipient email address or domains can be filtered using the Destination Address Filter

IP Address filter

The filter allows specific IP Address to be filtered.

Personal tools
Namespaces

Variants
Actions
Home
Exchange
GroupWise
JAVA
Linux
MTK
Retain
GW Monitoring and Reporting (Redline)
GW Disaster Recovery (Reload)
GW Forensics (Reveal)
GWAVA
Secure Messaging Gateway
GW Mailbox Management (Vertigo)
Windows
Other
User Experience
Toolbox
Languages
Toolbox