Sophos PureMessage for Exchange 2010

[Darylrese]

Hi,

 

I have been given downtime on our exchange server on friday to install Sophos PureMessage as we are ridiculed with SPAM emails at the moment.

 

Is Sophos PureMessage easy to install? How should i setup SQL for use with PureMessage and will PureMessage allow the end users to control what is blocked and what is not for inbound email?

 

At the moment we only have Vamsoft ORF filtering software which blocks most of our SPAM but also means we have to manually dig out genuine emails when requested and its very time consuming.

 

We are already licensed for PureMessage under our current agreement

[sukh]

Sorry, no idea, most AS products are like next, next, next....

[RichB]

Pure message is a simple install, no config needed other than an admin email which it emails when any bad language is detected. You can alter the settings to include certain file types and key words not to allow through.

 

So far (over a year) It has not flagged up any emails as spam that arn't. If it did its a 20 second job to release them. Very simple interface to use. It just works (for us).

[m25man]

+1 Its one of their better products set it and forget it. However your better to focus on minimizing what coming in to the exchange box in the first place by filtering at the gateway if possible.

Our firewalls do most of the simple stuff like RBL and Geo IP checking so listed IPs getdropped before they reach exchange, then exchange's own Spam filter is quite effective.

I would be surprised if our Pure Message gets to see more than half a dozed spam messages a day and these are the more sophisticated ones that have managed to dodge the bullet.

[Darylrese]

Thanks guys! Doing the work today, only thing i might struggle with is SQL setup. Was going to builkd a dedicated SQL server but apparently its light weight and doesnt need anything special. Going to keep it all on exchange.

 

Do the users have access to block / unblock sends once they recieve spam mail through the report or read only?

 

We get about 800 spam emails a day!!!! Our firewall etc is hosted at the council and they seem to do little about the problem.

[Darylrese]

Managed to get it installed and working Only thing i need to find out how to do is unblock some suspicious attachments as its quarantining items at the moment which have word documents and pdf's. Any idea how to stop this? Edited February 2, 2013 by Darylrese

[Darylrese]

It been running for a week so far so good! The only thing thats annoying me is i keep getting alerts for encrypted attachments, inbound, outbound and internal but they are only word / excel files. I have turned the administrator alerts off but i am still getting them??

 

 

This administrator alert message is generated by PureMessage because it has encountered the following events.

 

Event(s): Encrypted attachment detected

Message action: No action

Message ID:Message 000000005EB5A08AC05A52469C60EE4D89BD66ED0700995D0AD83AA6BA4FA922424F2977DD000000008D6DE90000E23098BCCE85EB44BCAC2E83E4FD52110011FAFEBFB30000 on server: MCA-SR-EX1. In mailbox: KHobbs

Subject: Shannon Leigh Williams

Sender: @school.sch.uk

Recipient(s): @school.sch.uk

Date: 08/02/2013

Time: 13:24:28

Job: Exchange store scanning

Server:

============================================================

Incident information:

 

Event: Encrypted attachment detected

Location: year9 ict.zip

Replaced with text: No

 

============================================================

 

Edited February 8, 2013 by Darylrese

[Darylrese]

Not to worry, i found it hidden in the exchange store scanning policy