Focus: Anti-virus Technology and iQ.Suite Watchdog

1. Which virus scanners are supported by GROUP Technologies?
2. How do I set up my virus scanners and are there compatibility problems?
3. Can I combine iQ.Suite with other anti-virus products?
4. How do I update virus patterns and scan engines?
5. What are the benefits of the virus scanner integration in Watchdog?
6. Does it make sense to integrate multiple virus scanners?
7. Why does iQ.Suite have an integrated unpacker?
8. Which file types should I block?
9. Does it make sense to admit exceptions for special user groups?

Which virus scanners are supported by GROUP Technologies?

Supported AntiVirus Scanners

How do I set up my virus scanners and are there compatibility problems?

A virus scanner is installed according to the procedures provided by the manufacturer. A standard configuration is available for integrating the virus scanners into iQ.Suite. Depending on the installation of your server, some adjustments may be required. To configure your scanners, please refer to the Administration Manual. If using other products under Lotus Domino with integrated virus scanners, there may be compatibility problems. If that should be the case, please contact our Support.

Can I combine iQ.Suite with other anti-virus products?

iQ.Mastering for Domino allows to use other anti-virus solutions in addition to iQ.Suite. Currently supported are Symantec Anti-Virus Filtering and McAfee Groupshield. Support for additional solutions is planned for the future.
With iQ.Suite for Exchange/SMTP, any other anti-virus products can be run on the server without any problems. For detailed configuration information, please contact our Support.

How do I update virus patterns and scan engines?

Depending on the virus scanner used, an automatic update of virus patterns is possible for some products. For other scanners and scan engines, iQ.Suite for MS-Exchange and SMTP requires restarting the GROUP service while iQ.Suite for Lotus Domino up to version 8 requires stopping the Grabbers. This procedure can also be performed through a script.
For details on sample scripts for automatic updates, please contact our Support. For setup and configuration support, please contact your Sales Account Manager at GROUP Technologies.

New as of iQ.Suite for Domino version 8:
Due to the integrated Soap technology, an automatic virus scanner update is possible without restarting the Grabber.

What are the benefits of the virus scanner integration in Watchdog?

It is possible to run multiple virus scanners in parallel:
  • No Single Point of Failure when a virus scanner fails.
  • Improved response times for current virus attacks.
  • Compensation of deficits of individual virus scanners.

Does it make sense to integrate multiple virus scanners?

It can be quite helpful to integrate several virus scanners into Watchdog. As the availability of virus pattern updates varies between manufacturers, using several scanners will increase the recognition rate. In particular regarding new viruses, a parallel use of multiple virus scanners significantly improves the overall security. Also refer to tests under http://www.av-test.org.

Why does iQ.Suite have an integrated unpacker?

Using the integrated iQ.Suite unpacker allows to recognize a lot more archive formats, regardless of the functionality of the virus scanners used. The internal unpackers of the virus scanners are only used optionally.

Which file types should I block?

Executable files are usually not needed and may cause severe damage. Also, a "normal user" will rarely need image, video or music files for his daily work. In most of the cases, attachments such as DOC, PDF or XLS files are used to exchange business-relevant information. Before setting up file restrictions, it may be useful to analyze the email traffic on an individual basis. The attachment types to be blocked should be made public in the company`s e-mail guidelines. The files to be denied can be defined the file restrictions options of a job. This definition can be based on both filename extensions and binary patterns. As the binary pattern is unique for each file type, it can reliably be used to identify manipulated files.

Does it make sense to admit exceptions for special user groups?

For a majority of companies, it will certainly be sensible to admit exceptions to the general file restrictions for individual user groups. For instance, a Publicity ore Marketing department may very well have to work with different image, video or music formats, whereas "normal users" will rarely need such files for his job. Also, administrators might need executable files or the Sales department PowerPoint files.
In each office or department of a company, it may be necessary to authorize specific file formats that are generally considered to inhibit work. In iQ.Suite, such exceptions can easily be defined in the job rules or address settings.