Antigen for Exchange w/SSM 2.0 beta

From: Joe Chromcik (JChromcik_at_MIDDLEATLANTIC.COM)
Date: 10/14/03

  • Next message: Vidler, Christopher MR: "SEC: UNCLASSIFIED --- Some Passwords on 2K Member Servers not wor king???" 
    Date:         Tue, 14 Oct 2003 10:45:21 -0400
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    I am involved with a beta test of Antigen for Exchange w/SSM 2.0 and
    received the following error:

    Antigen real-time scan timed out and recovered. Please contact Sybari.

    Further investigation into the programlog.txt file reveled:

    Wed Oct 08 19:37:05 2003 (1312), "ERROR: Real-time scan exceeded the
    allotted scan time limit"

    I contacted Sybari tech support and was told the following:

    Any time Antigen aborts on a file due to size, it is not infected. There are
    no worms/viruses that are written in code so large we can not finish
    scanning it. We have had zero incidents of infection due to us letting a
    file through that was humongous and contained malicious code.
    I guess Antigen is relying on the exchange box has limits setup.

    ****************************************************************************
    If this email is not intended for you, or you are not responsible for the delivery of this message to the addressee, please note that this message may contain MAP Privileged/Proprietary Information. In such a case, you may not copy or deliver this message to anyone. You should destroy this message and kindly notify the sender by reply email. Information contained in this message that does not relate to the business of MAP is neither endorsed by nor attributable to MAP.
    **************************************************************************** 

    ----
NTBugtraq subscribers save $103.00 off the TICSA exam by using promo
code "NT1003" when registering to take the TICSA exam at www.2test.com.
Prove to your employer and peers that you have the knowledge and
abilities to be an active stakeholder in today's enterprise security.
Become TICSA certified www.trusecure.com/ticsa.  Promotion expires
12/31/03 and cannot be used in combination with other offers.
----
  • Next message: Vidler, Christopher MR: "SEC: UNCLASSIFIED --- Some Passwords on 2K Member Servers not wor king???"