Symantec BRIGHTMAIL - SYM ANTISPAM AND, Руководство по установке

Страница: 16 / 160

Symantec Brightmail AntiSpam Overview
10 Symantec Brightmail AntiSpam™
Symantec Brightmail AntiSpam Overview
to DNS lists can thus block or delete mail from these blacklisted hosts. On the other
hand, administrators who subscribe to
DNS whitelists can leverage a list of legitimate
mail servers and senders. You can add a DNS blacklist as a third-party blocked
senders list. You can add a DNS whitelist as a third party allowed senders list.
— Brightmail Reputation Service Lists: By default, Symantec Brightmail
AntiSpam is configured to check mail against three lists, all part of the Brightmail
Reputation Service, managed by Symantec. Unlike other lists, which simply
aggregate information and are frequently outdated, the Brightmail Reputation
Service lists are generated and updated hourly. They are downloaded to your
system and updated just like other filters.
–
The Open Proxy List is a dynamic database containing IP addresses of
identity-masking relays, including proxy servers with open or insecure ports.
Because open proxy servers allow spammers to conceal their identities and
off-load the cost of emailing to other parties, spammers will continually
misuse a vulnerable server until it is brought offline or secured. Symantec
recommends that organizations secure their proxy servers to ensure that
spammers cannot connect to open ports and relay SMTP email.
–
The Safe List is a list of IP addresses from which virtually no outgoing email
is spam.
–
The Suspect List is a list of IP addresses from which virtually all outgoing
email is spam.
AntiVirus Filters
NOTE:
The following information and all other references to antivirus functions assume
you have purchased antivirus filtering.
Virus experts at Symantec Security Response (SSR) provide up-to-date virus definitions
and engines to rid email attachments of viruses.
The BLOC—through automated processes monitored by BLOC Technicians—integrates
the virus definitions and engines into AntiVirus Filters, tests them, and distributes them to
your site.
The Brightmail Scanner—using the AntiVirus Cleaner (Cleaner)—filters the attachments
of incoming email in search of viruses. If filtering detects no viruses, the message is
analyzed for spam. If filtering detects one or more viruses, the policies you have set up go
into effect. For example, you can instruct the Brightmail Scanner to delete the message or
to clean and then deliver the message. You can also set policies potential virus messages
that cannot be processed by the Cleaner.
Symantec Brightmail AntiSpam also provides protection against mass-mailing worms,
which can leave hundreds of spam messages in their wake. The Worm Auto-Delete feature
automatically removes not only the worm but also the associated emails. This convenient
feature saves users from having to wade through hundreds of inbox messages that,
although clean from viruses, server no valuable purpose.