Symantec BRIGHTMAIL Installation Guide - Page 16

Symantec Brightmail AntiSpam Overview to DNS lists can thus block or delete mail from these blacklisted hosts. On the other hand, administrators who subscribe to DNS whitelists can leverage a list of legitimate mail servers and senders. You can add a DNS blacklist as a third-party blocked senders list. You can add a DNS whitelist as a third party allowed senders list. - Brightmail Reputation Service Lists: By default, Symantec Brightmail AntiSpam is configured to check mail against three lists, all part of the Brightmail Reputation Service, managed by Symantec. Unlike other lists, which simply aggregate information and are frequently outdated, the Brightmail Reputation Service lists are generated and updated hourly. They are downloaded to your system and updated just like other filters. - The Open Proxy List is a dynamic database containing IP addresses of identity-masking relays, including proxy servers with open or insecure ports. Because open proxy servers allow spammers to conceal their identities and off-load the cost of emailing to other parties, spammers will continually misuse a vulnerable server until it is brought offline or secured. Symantec recommends that organizations secure their proxy servers to ensure that spammers cannot connect to open ports and relay SMTP email. - The Safe List is a list of IP addresses from which virtually no outgoing email is spam. - The Suspect List is a list of IP addresses from which virtually all outgoing email is spam. AntiVirus Filters NOTE: The following information and all other references to antivirus functions assume you have purchased antivirus filtering. Virus experts at Symantec Security Response (SSR) provide up-to-date virus definitions and engines to rid email attachments of viruses. The BLOC-through automated processes monitored by BLOC Technicians-integrates the virus definitions and engines into AntiVirus Filters, tests them, and distributes them to your site. The Brightmail Scanner-using the AntiVirus Cleaner (Cleaner)-filters the attachments of incoming email in search of viruses. If filtering detects no viruses, the message is analyzed for spam. If filtering detects one or more viruses, the policies you have set up go into effect. For example, you can instruct the Brightmail Scanner to delete the message or to clean and then deliver the message. You can also set policies potential virus messages that cannot be processed by the Cleaner. Symantec Brightmail AntiSpam also provides protection against mass-mailing worms, which can leave hundreds of spam messages in their wake. The Worm Auto-Delete feature automatically removes not only the worm but also the associated emails. This convenient feature saves users from having to wade through hundreds of inbox messages that, although clean from viruses, server no valuable purpose. 10 Symantec Brightmail AntiSpam™