Problem with virus making it through the firewall

  • I had installed the package for the antivirus and mailantivirus configured with auto update but still had a virus infect the exchange server.
    I'm just curious if others have had this experience.

  • Rebel Alliance Developer Netgate

    That depends on how the infection managed to get onto the server. Any AV packages on pfSense at the moment are part of web proxy packages, so they only would detect items fetched over HTTP that match their signatures.

    If it came in some other way (mail, local network shares, windows network exploit locally) then it wouldn't matter what you have on the firewall doing AV.

    Doing AV on the firewall is far from perfect and you still need local protection.

  • LAYER 8 Global Moderator

    Lets not forget that there is no scanner on the planet that detects all bad files.

    I have to wonder how your "server" would get infected to be honest - other than some worm running on your network.  Why would you be browsing or executing anything other than trusted exe on a "server" in the first place?

Log in to reply