Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 11010 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

End point anti-virus email alerts - SMTP Authentication

ChrisH

Hey guys,

I'm being told from my hosting provider that there is no way to get our Sophos virus killer to use SMTP authentication to send virus alerts.  They are insisting that we install an SMTP server into our web-server group, which I am not happy to do.

While I wouldn't want to question my hosting provider, and I appreciate there are ways around this with firewalls etc, I am stunned that Sophos would promote spam in such a way as to demand an SMTP server which is not completely locked down with SMTP auth be avaliable.

Is there any way to enable this feature?  Or do I have to bite the bullet and make an SMTP server without auth avaliable?

Many Thanks,

CH.

:22699


This thread was automatically locked due to age.
Parents
  • 0

    Hey guys,

    Thanks for the pointer Jak,  I'll see if I can play around with that hack and if it works with the client, but from QC's response I have a feeling the answer is going to be a no - it's good to know they are going in the right direction though.

    QC: "The lack of SMTP authentication does not promote SPAM. It can help with relaying "

    Ok, maybe promote was a bit strong, but that is entirely a matter of opinion.

    I personally see that an HTTP client without HTTPS support aids HTTP hijacking, FTP without FTPS (or sFTP) support aids....well....FTP and all of its associated issues and an SMTP client without the full suite of security that SMTP offers aids spammers.  By not supporting SMTP fully Sophos are forcing people to not fully lock down their SMTP host and for us, being PCI compliant, that means we can't use Sophos email alerts in our card data environment as this isn't a good enough business requirement to deploy an open email server, which means down the line when we deploy more servers this puts an end to our use of Sophos.

    To quickly address the one point of my provider: Yes, my provider has a lot of knowlage - I wasn't being sarcastic when I said I didn't want to question them as I see them as the best out there - I was hoping there was some hackduggery (as Jak kindly pointed me to) I could point them to that they may not have known about.  On that note though, it's worth pointing out they don't support Sophos in their high end package - but unfortunatly we are a startup so we can't go there right away.

    :22719
Reply
  • 0

    Hey guys,

    Thanks for the pointer Jak,  I'll see if I can play around with that hack and if it works with the client, but from QC's response I have a feeling the answer is going to be a no - it's good to know they are going in the right direction though.

    QC: "The lack of SMTP authentication does not promote SPAM. It can help with relaying "

    Ok, maybe promote was a bit strong, but that is entirely a matter of opinion.

    I personally see that an HTTP client without HTTPS support aids HTTP hijacking, FTP without FTPS (or sFTP) support aids....well....FTP and all of its associated issues and an SMTP client without the full suite of security that SMTP offers aids spammers.  By not supporting SMTP fully Sophos are forcing people to not fully lock down their SMTP host and for us, being PCI compliant, that means we can't use Sophos email alerts in our card data environment as this isn't a good enough business requirement to deploy an open email server, which means down the line when we deploy more servers this puts an end to our use of Sophos.

    To quickly address the one point of my provider: Yes, my provider has a lot of knowlage - I wasn't being sarcastic when I said I didn't want to question them as I see them as the best out there - I was hoping there was some hackduggery (as Jak kindly pointed me to) I could point them to that they may not have known about.  On that note though, it's worth pointing out they don't support Sophos in their high end package - but unfortunatly we are a startup so we can't go there right away.

    :22719
Children
No Data
Unfiltered HTML