Can Smartdefense run in VPN tunnel

[antonyso88]

My CheckPoint Version is AI R55. Can smartdenfense run in VPN tunnel? If yes, can it detect spam mail? Or i need to use SMTP Security Server?

[mcnallym]

You need to use the SMTP Security Server and link to a third party anti-spam product.

Message Filtering directly on the box is R65 with Message Filtering.


SMARTDefense is applied to traffic filtered through the firewall. As the traffic is filtered as it enters and leaves a VPN Tunnel on the firewall then of course SMARTDefense is applied to the traffic going through a VPN Tunnel.

[antonyso88]

It means no other choice except using SMTP security server? As i seen from the SmartDefense, there is a AI has mail option. Can it be used for detecting mail delivery?

[mcnallym]

SMARTDefense looks at SMTP commands and checks that they are valid SMTP, and that no one is attacking an SMTP server. It does not do SPAM or Anti-Virus, ie it checks for valid smtp mail as in is it proper SMTP, it does not check to see if the mail is trying to sell you time share/pr0n, or contains a virus in the payload.

To do Spam and Virus Checking then you need NGX R65 with Messaging Security which is found under Content Inspection, or in previous versions then you need to use an SMTP Security Server and then use that to link to a SPAM/Virus Solution using CVP.

SMARTDefense does not detect delivery, It is not the equivalent of Mailsweeper or Ironport Mail systems, it merely checks that smtp traffic is smtp traffic.

[antonyso88]

I am clear understand now. Thanks a lot.