Figure 82 Distributed Two Tier EMail Design

[View full size image]

Scans messages coming from tho oulsitfa in and vice vmrSfl.

Antivirus Ma;l Servers (SMTP)

Iniefnai Mli.i Server

Scans messages coming from tho oulsitfa in and vice vmrSfl.

Antivirus Ma;l Servers (SMTP)

ftal&ys mail 1rom trulsstfe servers to aniivirus layer: receives scanned mail Irom Internal network and sentis ii outside ltic organiialion

Iniefnai Mli.i Server

Only capable o' sanding to exlemal mail serve?

ftal&ys mail 1rom trulsstfe servers to aniivirus layer: receives scanned mail Irom Internal network and sentis ii outside ltic organiialion

Only capable o' sanding to exlemal mail serve?

RouWs and ¿cans sameserver e-mail, sends all other Internal Mail e-mail to antivirus servers, Ecrvei allows internal us^rs 1c gel mail

Ouïsse SMTP Server

A1/OanolVre Air.'.in/s Stan ftjani

The biggest difference from the previous design is the addition of an antivirus mail layer. This layer scans all incoming and outgoing messages and can comprise several servers, depending on the size of your mail system. AV scanning sits on the internal servers as well, but only for intraserver traffic that has no need to route through the antivirus layer. This keeps the AV load on internal servers small. The types of organizations that should adopt this design typically have many (10+) internal mail servers and several inbound mail relay hosts.

In the event of a zero-day virus outbreak, the antivirus layer should be the first servers to which you add the signature. This prevents any additional inbound infected messages and keeps your organization from sending infected messages externally. Next you must update your internal servers to prevent the virus from spreading to users sharing the same mail server.

100 SEO Tips

100 SEO Tips

100 SEO Tips EVERY SEO Enthusiast Should Know. This Report 100 SEO Tips will help you to Utilize These Tips to Dominate The Search Engine Today.

Get My Free Ebook


Post a comment