Trend Micro InterScan Gateway Security Appliance M-Series ...

Trend Micro InterScan Gateway Security Appliance M-Series Administrator’s Guide
3-12
Sam’s
SMTP server
Standard
Reputation
Database
The appliance
Dynamic
Reputation
Database
FIGURE 3-2. How the Standard Reputation and Dynamic Reputation
databases work
Standard: The appliance
queries the Standard
Reputation database
only.
Advanced: The
appliance first queries
the Standard Reputation
database and then, if no
problem is detected,
queries the Dynamic
Reputation database.
John’s
SMTP server
Antivirus
Since viruses are still among the most numerous and serious threats on the Internet,
virus scanning is a critical and integral part of the set of security services in InterScan
Gateway Security Appliance. During a scan, the Trend Micro scan engine works
together with the virus pattern file to perform the first level of detection, using a process
called pattern matching. Since each virus contains a unique “pattern” or string of
telltale characters that distinguish it from any other code, the virus experts at
TrendLabs capture inert snippets of this code in the pattern file. The engine then compares
certain parts of each scanned file to the pattern in the virus pattern file, looking
for a match. When the scan engine detects a file containing a virus or other malware,
it executes an action such as clean, delete, or replace with text/file. You can customize
these actions when you set up your scanning tasks.
InterScan Gateway Security Appliance protects you from a wide range of viruses,
including:
• HTML viruses
• Macro viruses
• ActiveX malicious code
• COM and EXE file infectors