About Dr.Web

Dr.Web is an application that protects enterprise networks against virus threats and spam. It integrates with the system in order to search and neutralize all types of threats in the stream of data going through Microsoft Internet Security and Acceleration Server (hereinafter – Microsoft ISA Server) and Microsoft Forefront Threat Management Gateway (hereinafter – Microsoft Forefront TMG) via HTTP, FTP, SMTP and POP3 protocols. The application checks the incoming Internet traffic for viruses, dialers, adware, hacktools, jokes and riskware.

The application builds in its filters into Microsoft Firewall Service and Microsoft Forefront TMG Firewall. This allows Dr.Web anti-virus engine receive and process data. Dr.Web operates on a platform that features its own password-protected web interface and an additional web console for advanced configuration.

Dr.Web services installed on different servers can be joined in a cluster (for more information, see Organizing Clusters).

Dr.Web performs the following functions:

•Scans all Microsoft ISA Server and Microsoft Forefront TMG traffic transferred over FTP (including FTP over HTTP), HTTP, SMTP and POP3 protocols.

•Blocks access to infected objects for users within the network protected by Microsoft ISA Server or Microsoft Forefront TMG firewall.

•Isolates infected and suspicious objects in the quarantine.

•Registers incidents in Windows Event log and in the internal event database.

•Filters suspected spam email messages sent via SMTP protocol.

•Adds notifications to email messages containing security threats.

•Restricts access to specific web resources.

•Collects statistics.

•Automatically updates virus databases and components.

•Allows for centralized management of firewalls in a distributed system, including a possibility to group servers in a cluster.

Dr.Web virus databases are constantly updated with new records to provide system protection. The application features a heuristic analyzer that ensures additional protection against viruses and threats that are not yet included into virus databases.