Hi! As it's my policy to notify any vendor, I contacted Trend Micro Germany. Here's the reply from Raimund Genes. -------- Original Message -------- Subject: RE: [virushelp-l] (Fwd) InterScan eManager Content Management Notification! (VBS Type Filter) (fwd) Date: Tue, 17 Oct 2000 15:53:44 +0200 From: Raimund_Genes@trendmicro.de InterScan eManager from Trend Micro is a Plug In for InterScan VirusWall which could be used to filter out keyworlds or unwanted attachment types. All the rules are created by the users of InterScan eManager. In this particular case, a customer has created a Policy called "VBS Type Filter" and generated a rule to scan the text for ".vbs". This generates an alert, if the word .vbs will be somewhere in a text file. The mistake in creating the rule has been that the ".vbs" detection has been created under "Content Filter", so it scans the body of a message. To avoid this problem the rule needs to be created under "Specialized Filtering" or "Attachment Filter", depending on the version of eanager. If a rule with "*.vbs" will be created there, it blocks all attachments with the extention ".vbs" mfg Raimund _____________________________________________________________________ Raimund Genes Managing Director Trend Micro Deutschland GmbH Ohmstrasse 3 85716 Unterschleissheim Tel: 089 374797 50 Fax: 089 374797 99 E-Mail: Raimund_Genes@trendmicro.de Web: http://www.trendmicro.de
SYSTEMS 2000 in München: TREND MICRO Halle 5B Stand 145
___________________________________________________________________