snootalope
IS-IT--Management
We currently have an ASA 5510 with no IPS module.
However, we're looking more into the module thinking it can replace a couple of internal components we have..
For one, we have an internal proxy server that filters all http traffic. It can detect malware, grayware, viruses, and anything else that someone can get into through the internet.
Two, we have a virus scanner on our Exchange server that scans all incoming and outgoing messages. Works well.
My question is, can the IPS module in the ASA do what both our proxy and email scanner does?
From what I can tell, the IPS can detect viruses and what not in any traffic. So, does that mean it can detect a virus that's attached to an email inside a zip file?
However, we're looking more into the module thinking it can replace a couple of internal components we have..
For one, we have an internal proxy server that filters all http traffic. It can detect malware, grayware, viruses, and anything else that someone can get into through the internet.
Two, we have a virus scanner on our Exchange server that scans all incoming and outgoing messages. Works well.
My question is, can the IPS module in the ASA do what both our proxy and email scanner does?
From what I can tell, the IPS can detect viruses and what not in any traffic. So, does that mean it can detect a virus that's attached to an email inside a zip file?
