HCL Domino Ideas Portal
Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.
For more information and upcoming events around #dominoforever, please visit our Destination Domino Page
This was NOT shipped. ICAP integration only scans during routing. The mailscan task provides no mechanism for removing infected attachments that weren't found when the message was first routed.
I agree with the creator of the idea. AV software is not a solution in this case, as updating the pattern files takes too long.
When you wait for updated patterns, almost all recipients will have opened the malicious mail. You have to react immediately when mails with unknown malware arrives, that no AV software detects at the time of arrival (real zero hour attacks).
We have a self-developed agent for this. It needs a table with sender, recipient and subject of the malicious mails, It then looks for the mail database in Domino directory based on the recipient's address, searches for the mail by sender and subject and deletes the mail. Based on how fast we get aware of the attack, we can delete up to 80% of the mails before the user opens them.
Yes... exactly as I wrote above: When the pattern file is updated, you can schedule the AV product to run a full scan against all data. This is not a function of Domino, it is a function of the AV product.
No!
As you say, I have AV product, but many spam/virus mails are incomming everyday because pattern files of AV products are provided after spam/virus mail.
We receive spam/virus mails until AV products update pattern files.
My request is search function for these mails(i.e. from address,subject,smtporiginator etc), and delete these mails.
What you are requesting is an Antivirus software. Multiple AV products already exists and every single one is able to scan new emails as well as all data in existing mail files.