My MWLUG presentation - Domino Security - not knowing is not an option (2016 edition)
Discussion for this entry is now closed.
Comments (7)
Did you get demoted again? The only session I was able to attend. Thanks and I love your chart
@All, thanks.
@3, the "chart" has been removed from this version....I'm sure someone has a photo of it somewhere on the internet though.
Hi Darren,
This is brilliant, thanks for sharing so much useful information so clearly.
I'm not totally convinced by your comment in slide 27. I'd prefer something was still scanning my NSFs for virus files and quaranting malicious data, rather than just trusting the client's system scanner to quarantine the file when it's run.
We used to use Sophos Puremessage for that, but of course they didn't develop a Domino 9 release. We feel that we've lost a secondary gatekeeper for virus emails due to this issue. Of course, it's great advice to use the best Secure Email Gateway service you can find / afford to ensure that you are send and receiving clean email, but of course you never know what gremlins lurk inside the existing Domino apps and mailboxes.
@6, let me clarify (bearing in mind, security is like religion or politics), I meant do not scan the server side NSF's with the OS virus scanner. They have a habit of quarantining the entire NSF (10GB of it) and will implode your I/O while scanning (but DAOS does help with this). By all means run an AV scanner inside Domino (Symantec Antivirus for Domino springs to mind, and Trend used to have one). Again, whatever lets you sleep at night.
Thanks for sharing!