Install AntiVirus Symantec on Mail-Server Debian 9 with Amavis

[Gianluca Scaglia]

Hi,
I would like to protect the mail-server of our company, which provides the service of email boxes for customers, with Symantec AntiVirus.

These are two servers in geographic cluster, one public and the other of backup that intervenes in case of failure of the master, with Linux Debian 9, Postfix, Amavis, Spamassassin and currently ClamAV.

Symantec antivirus should replace Clamav (low performance) to protect our customers' email accounts so that they do not receive infected emails.

In the configuration file of Amavis  named 15-av_scanners are preconfigured different antivirus software and with regard to Symantec there are these two configurations:

  ### http://www.symantec.com/
  ['Symantec CarrierScan via Symantec CommandLineScanner',
    'cscmdline', '-a scan -i 1 -v -s 127.0.0.1:7777 {}',
    qr/^Files Infected:\s+0$/m, qr/^Infected\b/m,
    qr/^(?:Info|Virus Name):\s+(.+)/m ],

  ### http://www.symantec.com/
  ['Symantec AntiVirus Scan Engine',
    'savsecls', '-server 127.0.0.1:7777 -mode scanrepair -details -verbose {}',
    [0], qr/^Infected\b/m,
    qr/^(?:Info|Virus Name):\s+(.+)/m ],
    # NOTE: check options and patterns to see which entry better applies

I kindly ask what is the best way to protect the mail-server and where to find the prices, files and instructions to proceed.

Thanks a lot,
Luca

[Mick2009]

Hi Luca,

Thanks for the post.  Symantec Endpoint Protection for Linux (SEPFL) ​can do a great job protecting the OS of those machines, but it is not a mail security product.  It is not designed to scan the mail stream or open any propriatary mail-related database or archive files, has no AntiSpam features, etc. There are other services and products that I recommend: 

https://www.symantec.com/products/messaging-gateway

https://www.symantec.com/products/email-security-cloud

Hope this helps!  Getting in touch with Sales is the best move for help determining what's best suited to your needs.