Frequently Asked Questions
Gateway AntiVirus for E-mail
General Questions
Q: What is Gateway AntiVirus for E-mail?
A: Gateway AntiVirus for E-mail (Gateway AV) is the latest add-on security service integrated on the Firebox X and offers the following benefits:
- Combines signature-based scanning with proactive Zero Day protection through deep application inspection to affordably deliver comprehensive protection from e-mail-borne threats.
- The signature database, comprising more than 22,000 signatures of the most active global virus exploits, extends far beyond "in the wild" viruses.
Q: Do I have to purchase Gateway AntiVirus for E-mail separately?
A: Yes. Firebox X add-on security services are sold separately and are priced based on your Firebox X model.
Q: What is the price for Gateway AntiVirus for E-mail?
A: Gateway AntiVirus for E-mail is priced on a per-appliance basis. A one-year initial subscription and subsequent one-year renewal subscriptions are available.
Please contact your reseller, call WatchGuard sales at 800.734.9905 or 206.613.0895, or visit us online at www.watchguard.com/sales for exact pricing.
Q: What is included with a subscription?
A: All Gateway AV subscriptions and renewals include access to ongoing signature updates and engine updates. Technical support and documentation are provided through a LiveSecurity® Service subscription.
Q: Is there a discounted renewal price for Gateway AntiVirus for E-mail after the first year?
A: Yes. One-year renewals are available at a 25% discount on the initial price.
Q: Can I buy Gateway AntiVirus for E-mail at any time?
A: Yes, as long as you meet the system requirements for using Gateway AntiVirus for E-mail. These include:
- WatchGuard Firebox X running WatchGuard System Manager (WSM) 7.3 or later
- Microsoft® Windows 2000, Windows NT, or XP
- SMTP server
Q: Which Firebox X platforms support Gateway AntiVirus for E-mail?
A: Firebox X500, X700, X1000, and X2500 platforms running WSM 7.3 or later support Gateway AntiVirus for E-mail.
Q: What antivirus engine and virus definitions are being used?
A: WatchGuard evaluated the size, performance, features, and value of several solutions available on the market, and opted to integrate the ClamAV antivirus engine and signatures. It benefits our customers for the following key reasons:
- The ClamAV engine supports detection of WildList viruses, zoo viruses, and variants - unlike Fortinet™, which is limited by its WildList implementation.
- The engine has very strong support for compressed files - more than SonicWall® and Fortinet. Supported compression types include: ZIP, RAR (2.0), TAR, GZIP, ARC-style compressed files, MS OLE2, and MS SZDD.
Q: What is the estimated response time when new threats emerge?
A: The community of developers has designed the update engine with rapid response in mind. Firebox X integrates ClamAV, the leading open source AV engine, into the Gateway AntiVirus for E-mail service. ClamAV response times are some of the fastest in the industry. In fact, AV-test.org reported quick detection rates for the ClamAV engine when the recent string of Bagle variants re-appeared, because they identified and delivered a signature within two hours of the virus's propagation. This is a 6th place ranking out of the 23 major antivirus vendors worldwide, including Symantec®, McAfee®, and Computer Associates® to name a few. Av-test.org also reported that it took Fortinet eight hours on average to identify and provide a signature for these same Bagle variants - four times longer than with ClamAV.
Q: Is having antivirus integrated in my security appliance at the gateway all I need to stay secure?
A: No, a sound security strategy implements multiple layers of antivirus scanning, including:
- gateway antivirus protection
- server-based antivirus protection
- desktop antivirus protection
In addition to Gateway AntiVirus for E-mail, WatchGuard also offers bundled managed desktop antivirus clients through our partnership with McAfee. Working together, these two solutions provide a strong combination for protection at the gateway, within the LAN, and for mobile users coming into the network.
Q: Will Gateway AV scan every attachment?
A: Yes, as long as the individual attachment is not larger than the maximum size configured by the network administrator and the attachment is not compressed using a type not supported by WatchGuard (see above for list of supported compression types). Gateway AV will not scan attachments larger than the maximum size configured in the SMTP proxy settings. SMTP attachment settings take priority over Gateway AV settings.
If an email attachment is larger than the maximum size defined in the Gateway AV setting, the administrator can either have that attachment stripped, or have it sent through to the end user. In either situation, the end user will be notified as to the action taken on the attachment and that action will be logged.
|
