Dual Anti-Virus
Norman® Virus Control and McAfee® Virus Scan
In addition to the award-winning Norman® Virus Control, which comes bundled with modusGate™, Vircom recommends doubling your security with McAfee® Virus Scan, known for its ability to detect non-virus attacks, such as rogue ActiveX controls.
Complete Anti-Malware Solution
Combining these two anti-virus engines with our constant monitoring and proactive anti-malware zero-hour updates provides complimentary, multi-pronged protection against all forms of email malware:
- By using Vircom’s Dual AV solution, the average time required to obtain the latest virus signatures is drastically reduced, enabling a faster response to the latest threats
- Multiple engines provide strength and redundancy to your network by combining different detection methods. Dual AV provides global, round-the-clock coverage, yielding higher, more accurate detection rates of the newest outbreaks
- Each AV has its own strengths and response times depending on the nature of the threat, its propagation channel and its origin. Dual AV and Vircom zero-hour updates ensure you have the right defense at the right time
The Dual AV option is available for modusGate and modusMail - please contact our Sales & System Engineers team to get a quote or more information.
Norman SandBox® technology
Norman’s innovative SandBox® technology detects and isolates existing and zero day threats before they infect your system. It focuses on detecting binary malware and network worms, which are the most common and most damaging forms of malware.
One of the increasingly common ways for malware to infect computers is to exploit vulnerabilities in popular applications and file formats, such as PDF, MS Office and others. Norman SandBox® detects this malware by going through the data file, looking for shell (executable) code. When found, the SandBox locates the entry point of the code and allows the malware to run its course through execution in a simulated environment. For example, malware initiating API calls to delete files from the system will be intercepted: files are then deleted in the SandBox, but not in the actual system. In this way, SandBox technology allows the malware to believe that it inflicted damage when in fact it did nothing but reveal itself to the SandBox.
McAfee bi-directional virus analysis
The McAfee scan engine uses Virtran, a unique proprietary language. Since it is specifically designed for virus detection and cleaning, the engine applies an efficient method for detecting numerous virus variants with little code. This is sometimes referred to as a “generic” detection method. Virtran works by enabling the scanner to locate the specific point in a file containing the virus code. The scanner does not need to “grunt-scan,” or scan from one end of a file or sector to the other, checking for virus code. McAfee AVERT (Anti-Virus Emergency Response Team) researchers can determine where in the file the virus code is located and then program the engine to look in this specific location. The McAfee AVERT team, with its combined years and experience in analyzing viruses, worms and other malicious code, is expert at recognizing which parts of a virus are likely to appear in any new variants of a virus. Detection algorithms therefore use as few “static” strings as possible, making detection of a virus and its variants more “future-proof.” This technology makes it possible to find and remove many viruses of the same family with a single definition, while some anti-virus products are forced to create detection routines for each one individually. Developed over several years, this technology has brought enormous benefit to McAfee customers, who get proactive detection against viruses that don’t yet exist.
