Re: [squid-users] Antivirus

Well thanks for your answers guys.

In fact this is for a small network (20 users) where the only way to surf
on the Internet is from a squid proxy server. That's why I would like to
make it works with Squid.

Simon, what do you mean by "separate server upstream " ?

Does someone has any experiences with performance ?
I mean, what minimal hardware should I have for a squid
+ Antivirus http scanning for 20~25 users.

Mikael,

----- Original Message -----
From: "Simon White" <simon@mtds.com>
To: <squid-users@squid-cache.org>
Sent: Friday, March 29, 2002 11:08 AM
Subject: Re: [squid-users] Antivirus

> 29-Mar-02 at 10:24, Mikael Chambon (squid-ml@cronos.org) wrote :
> > Hi,
> >
> > I am quite new to squid and I am looking for a robust solution for http
> > anvirus
> > scanning with squid.
> >
> > Someone told me that Viralator was good
(http://viralator.loddington.com/).
> > Is there any other solutions, is it the best one ?
>
> You are sure to take a big performance hit if you scan http traffic
> through an anti virus system.
>
> If you are going to do it, I would recommend a separate server upstream to
> filter http inline... depends on how many users you have of course.
>
> There are lots of anti virus solutions for http traffic, I know that Trend
> Micro also have a product (InterScan Virus Wall) which can scan SMTP, FTP
> and HTTP inline and transparently.
>
> Trend themselves warn against scanning HTTP because of the high overhead,
> however if you need the fullest virus security then you may be considering
> it.
>
> I am not affiliated with Trend. Other better solutions may exist. Just my
> 2 pence worth.
>
> --
> [Simon White. vim/mutt. simon@mtds.com. GIMPS:59.84% see www.mersenne.org]
> Programming today is a race between software engineers striving to build
> bigger and better idiot-proof programs, and the Universe trying to produce
> bigger and better idiots. So far, the Universe is winning. -- Rich Cook
> [Linux user #170823 http://counter.li.org. Home cooked signature rotator.]
>
Received on Fri Mar 29 2002 - 03:40:32 MST