Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Auto-Preview in Outlook

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Auto-Preview in Outlook Page: [1]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
Auto-Preview in Outlook - 28.Feb.2008 9:17:38 AM   
rich.wenger

 

Posts: 5
Joined: 28.Feb.2008
Status: offline
Hi All,

Our orgainzation uses Outlook 2007 with Exchange Server 2003.  Our anti-virus solution for our Exchanger Server is Symantic Anti-virus for Exchange, we're using Brightmail for anti-spam.  All client PC's are running Symantec Corporate Antivirus.  Assuming anti-virus is correctly working is there a significant threat to client PC's using Outlook with Auto-Preview turned on? 
Post #: 1
RE: Auto-Preview in Outlook - 28.Feb.2008 10:36:55 AM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
This was more of a problem in the past than it is today. With the AV coverage you have I wouldn't think that'd be too much of a problem. I have users that use the preview pane without any problems, although there is still the possibility of a threat reaching the desktop this way. The downside to this is that something can still reach the endpoint, even though the local AV may stop it. You should also take into account anything that may not be detected by the AV solution, but this would typically be zero-day types that the AV has no defiinitions for. 

(in reply to rich.wenger)
Post #: 2
RE: Auto-Preview in Outlook - 28.Feb.2008 10:43:10 AM   
rich.wenger

 

Posts: 5
Joined: 28.Feb.2008
Status: offline
Hi, and thanks for your reply.  I would think that anything that got past the server/desktop anti-virus solution the user would think was safe to open anyway and the net effect would be the same - the virus/malware would be launched?  Obviously this might not be the case in an SMTP/POP3 environment.

(in reply to t0ta11ed)
Post #: 3
RE: Auto-Preview in Outlook - 28.Feb.2008 10:45:38 AM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
You're right, but with the preview pane some threats can automatically download/execute without the user doing anything.

(in reply to rich.wenger)
Post #: 4
RE: Auto-Preview in Outlook - 28.Feb.2008 6:17:30 PM   
Sembee

 

Posts: 3499
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
You could lower the risk if you dropped the Symantec products and used something that works. When spammers are testing their "product" they test it against the market leader - Symantec.

If the message with the infection gets past your gateway, thats it. The user will open the message anyway. I use the preview pane all the time, and I have not had a single infection of my machines (and I view some very dodgy stuff). The preview pane has had its security tightened quite considerably, particularly in Outlook 2007.

However that doesn't take away the main risk, which is the user. With all the best security products in the world if a clueless user clicks on everything or adds the spammer to their safe senders list, then they will have problems.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to t0ta11ed)
Post #: 5
RE: Auto-Preview in Outlook - 28.Feb.2008 6:50:39 PM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
I personally find the Preview Pane annoying and rarely use it. I did have one user that got infected with something through it though, however the local anti virus caught it and I was able to disconnect the machine before it spread while I removed it. Only one incident though. 

_____________________________

Invasion Plans - http://dev.marzopolis.com

(in reply to Sembee)
Post #: 6
RE: Auto-Preview in Outlook - 29.Feb.2008 10:59:35 AM   
rich.wenger

 

Posts: 5
Joined: 28.Feb.2008
Status: offline
As far as SPAM goes we've had tremdous success with Symantec Brightmail.  With very little administration we've managed to reduce SPAM inbound to our Exchange server to an insignificant amount.

(in reply to Sembee)
Post #: 7
RE: Auto-Preview in Outlook - 29.Feb.2008 11:04:30 AM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
Interesting, I've managed to do the same thing with just the built in control in Exchange.

_____________________________

Invasion Plans - http://dev.marzopolis.com

(in reply to rich.wenger)
Post #: 8
RE: Auto-Preview in Outlook - 29.Feb.2008 3:13:41 PM   
rich.wenger

 

Posts: 5
Joined: 28.Feb.2008
Status: offline
Hmmm, I'm wondering how many users you're supporting and still able to control SPAM with only Exchange's native tools?

(in reply to t0ta11ed)
Post #: 9
RE: Auto-Preview in Outlook - 29.Feb.2008 3:21:06 PM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
Small user base, but the controls work well so I don't see it being a problem scaling out. We migrated from Exch 2k3 to 2k7, implmented the anti spam controls and our spam intake went to almost nothing. 

_____________________________

Invasion Plans - http://dev.marzopolis.com

(in reply to rich.wenger)
Post #: 10
RE: Auto-Preview in Outlook - 29.Feb.2008 4:25:11 PM   
Sembee

 

Posts: 3499
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
The built in applications can work very well for many people, and for others they can be close to useless. It very much depends on the type of spam you receive AND the type of messages that you send and receive. I have clients who use IMF and that is with great success, others we have had to hunt around for something that works.

However I usually find that antivirus vendors make poor antispam products. The classic sign of that is when they have to go and buy something else and then proceed to ruin it. Symantec have a track record in this, almost as bad as CA.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to t0ta11ed)
Post #: 11
RE: Auto-Preview in Outlook - 29.Feb.2008 4:27:26 PM   
t0ta11ed

 

Posts: 274
Joined: 2.Feb.2007
From: Mars
Status: offline
True there. Most of the products I've used have totally sucked. The only one other than the baked in Exch controls I liked was Cloudmark.

_____________________________

Invasion Plans - http://dev.marzopolis.com

(in reply to Sembee)
Post #: 12
RE: Auto-Preview in Outlook - 6.Mar.2008 8:00:28 AM   
rich.wenger

 

Posts: 5
Joined: 28.Feb.2008
Status: offline
Our organization supports around 150 users and our SPAM situation was out of control until we brought in Brightmail.  However, I'm still have my doubts about a serious threat from using the Outlook Auto Preview feature.  Again I can only imagine any post arriving in the user's inbox would be assumed safe to open anyway?

(in reply to Sembee)
Post #: 13

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Auto-Preview in Outlook Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts