Topic: Trend Micro AV

[Adam]

Hello there,

a colleague of mine was looking at using SME5.12 after I told him about it. One thing though: He currently uses Trend Micro AV on his Lotus Notes server for their Anti-virus. Can he setup (easily) the SME server to use the Trend Micro software they already have ?

cheers,

Adam

[Mark Lamberton]

Probably, but would need a bit more info to be definite.

Trend has a number of products, but I suspect you are  referring to their Virus Wall component which is running in a Windows machine of some sort?

Virus Wall consists of three scanners that run as services under WIN/NT or 2K for HTTP, SMTP and FTP.

For SMTP, the firewall (e-smith in this case) would be configured to forward port 25 to the Virus wall scanner which in turn will forward all (scanned and deemed virus-free) traffic to the real SMTP server which, in your colleague's case is currently a version of Lotus Notes which will likely be configured to listen on a port other than 25 (Trend use port 6000 by default), especially if all this currently lives in one machine.  So, if he's going to bin Lotus in favour of e-smith for mail, he needs to:

1. Forward e-smith's port 25 to the IP of the Virus Wall machine;

2. Configure Virus Wall's SMTP scanner to forward back to e-smith on a suitable port other than 25 (6000 if it's the Trend default);

3. Change e-smith's SMTP port to 6000 (assuming the Trend default).

For HTTP, e-smith doesn't change.  The Virus Wall HTTP scanner simply needs to be setup to point to the e-smith proxy.  Browsers are setup to point to the Virus Wall proxy (Trend default port 8080).

For FTP, simply point Virus Wall to the firewall and configure your FTP client to point to the Virus Wall machine.

As an aside, for commercial clients, I tend to keep firewall, AV and server functions separate - i.e. I use e-smith in server-only mode for serving stuff (mail, files, print queues, faxes etc), SmoothWall (www.smoothwall.org for a great GPL firewall product) for firewall stuff and Trend for AV stuff (running under Win-2K) in separate machines.

Hope this is of some help...

Mark Lamberton
Sydney, Aust.

[tim]

Hi
I use Trend's Interscan for Linux on our Smith server (4.1.2).
Had to hack it here and there to make it work, but does it's job well once up and running! Difficult if no Linux knowledge is at hand, but the Trend guys can be helpful too.
As soon as time permits I'm going to try and improve the install for the latest Smith version.

regards

[Dub Dublin]

I'm not sure what one has to do to get the Trend Micro Stuff set up and running with SME, but I can pretty much prove it's possible:

The press release at http://www.antivirus.com/corporate/media/2001/pr091701.htm says that Trend Micro provides the antivirus software that is part of the Mitel ServiceLink subscription.  (I wish the Mitel marketing folks would get a clue and price that service reasonably - if I wanted to pay that much, I'd just buy NetWare6 (which actually kicks butt, BTW) and be done with it.  IMO, the old E-Smith pricing was reasonable, but Mitel's isn't, especially for the target market of SME.  Too bad, there's some value there, but not that much...)

It's not clear from the press release which Trend Micro products are part othe ServiceLink AV solution, but I strongly suspect it's just VirusWall.  Interestingly, Trend doesn't mention support for SME anywhere but the press release - apparently the SME version is not available to the rest of us.

[Bobby]

I have set up Trend to scan mail on e-Smith.  Not the most direct route to make it work, due to the templating system, but can work.

As I recall I just told the MTA to listen on a different port, had Interscan accept the mail and forward to the new port after scanning.

You have to make links to the approriate start-up scripts as Trend expects a different run level.

If someone wants to make a how-to I will be glad to help.  Just don't have the time to write it all nice and pretty, but can give the basics to a keen soul.  :}

/Bobby

[Dub Dublin]

On another note, I just looked at the price for VirusWall: it's over *twice* as expensive as RAV (for a couple of domains, anyway.)

Question for those that have it, or better yet, have used both: Is it worth the extra money?  

So far as I can tell, the primary difference is that VirusWall can filter at the web proxy level, in addition to just the mail scanning that RAV for Mail Servers provides.

Or are some people just skittish about foreign antivirus software? (RAV's phone # is country code 40 - Romania.)

[Stefan Strasser]

Hi all,

it seems that "Bobby" made it. Did anyone find the time to write a little howto as I am a quite new e-smith admin and I am not sure if I'll be able to manage the whole template stuff in an appropriate way. Maybe Bobby can just describe a few steps in more detail here, just some hints where to change what.


Stefan