Groupshield 6.0

[Javy1]

When Groupshield finds a virus I do not want any alert message to the user or the sender just to the admin. How do I configure that. Currently, Webshield is deleting the infect5ed file and sending a zero K attachment to the user. I will like to set it up in a way that my users will not know when a infected email is send their way. I play with a lot of settings but I can get it to work.

Thanks for any help.

 

[zoeythecat]

I hear you on this. From what Network Associates tells me Groupshield 6.0 does this. I unfortunately have Groupshield 5.2 and have no option to prevent these groupshield emails from making it to the end user. Did you upgrade to 6.0? Or did you do a new install of 6.0? I'm curious what steps you took if you did the upgrade path. Anyway, I believe your solution is this (I confirmed this with Network Associates).

Under "On Access Settings", under "San Email Using", change mode from "VSAPI" to "Transport Scanning".

I don't know enough about this product to know what would be next to get the "Transport Scanning" set properly (or if there is any configuration at all). I tried finding something on

http://www.nai.com

(knowledgebase) but could not find anything. I just know when I spoke with Network Associates they mentioned this is the setting). The only blurb about this from the online manual is this:

Transport scanning is best used when you have configured your Microsoft Exchange 2000 server as a gateway server, as it allows scanning of routed mail (mail that is not destined for the local Microsoft@Exchange Server). Transport scanning also allows you to stop the delivery of unwanted messages.

You may want to call Network Associates to confirm what I am saying is true.

Hope this helps. Let me know how you make out.

Zoey

 

[Javy1]

According to their instruction first you need to remove Groupshield 5.x and then do a full install of Groupshield 6.0. According to the manual old settings will not transfer because they are using a different approach with the new software. I will play around with what you suggested. In the meantime I am stopping the viruses using webshield.

Thanks for your reply!

 

[bulkmail]

Why not just block the any "known" dangers and not have them delivered? At most that might get rid of some of those emails mentioned but not all.

 

[zoeythecat]

And where would you do that in Groupshield 6.0? And any "Known" dangers? Can you be more specific?

 

[bulkmail]

in "on access", in the blocking attachment area, i am blocking known extensions along with some specific files. i have it set to not deliver if it meets any of the criterias i specified and not to give a message to the recipient upon detection. it seems to get rid of most of them cause some users were complaining too much of the groupshield messages filling up thier mailboxes.

 

[zoeythecat]

Bulkmail,

That's good that you figured that out. According to Network Associates there is no way to block the "Alert.txt" from making it to the Intended Recipient even in Groupshield 6.0 (I had noted above Network Associates mentioned that you could do this in 6.0) but according to the following article you can filter and prevent the alert.txt from going to external recipients but not from internal recipients:

https://knowledgemap.nai.com/phpcli...67427&docType=DOC_KnowledgeBase&iterationID=1

So maybe as you noted you have to set criteria and block certain extensions and maybe you could cut down most alerts that way.

 

[bulkmail]

yeah, that's correct, you will only be able to cut down on the alerts that they receive but not all.