Ask the Expert

Virus protection on a firewall

I read you should not put virus protection software on a firewall (or even a proxy) to avoid an denial-of-service attack. Why is that?

    Requires Free Membership to View

I assume that your advisors are concerned about performance and/or the security risk of overloading your firewall with functionality. If someone sends a bunch of virus-loaded e-mail to your network, your firewall could choke from all of the traffic. Your best bet is to put antivirus solutions not on the firewall itself, but on your mail server and http/ftp proxy box. If these are separate machines from your firewall, a flood of viral traffic won't kill all of your Internet connectivity, but only those components being attacked. It's a pretty good idea from an architecture perspective to remove these functions from your firewall. Let the firewall focus on firewalling... other systems can do virus protection better.


For more information on this topic, visit these other SearchSecurity.com resources:
Best Web Links: Firewalls
Best Web Links: Secure Messaging


This was first published in October 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: