Application filters

Top  Previous  Next

Dr.Web comprises three application filters:

Dr.Web FTP Filter

Dr.Web SMTP Filter

Dr.Web POP3 Filter

Application filters are located in the following directories:

Filter

Path to the filter library

Dr.Web FTP Filter

In case Microsoft ISA Server is used:
%PROGRAMFILES%\Microsoft ISA Server\DrWeb for ISA and TMG\FTPFilter.dll

In case Microsoft Forefront TMG is used:
%PROGRAMFILES%\Microsoft Forefront Threat Management Gateway\DrWeb for ISA and TMG\FTPFilter.dll

Dr.Web SMTP Filter

In case Microsoft ISA Server is used:
%PROGRAMFILES%\Microsoft ISA Server\DrWeb for ISA and TMG\SMTPFilter.dll

In case Microsoft Forefront TMG is used:
%PROGRAMFILES%\Microsoft Forefront Threat Management Gateway\DrWeb for ISA and TMG\SMTPFilter.dll

Dr.Web POP3 Filter

In case Microsoft ISA Server is used:
%PROGRAMFILES%\Microsoft ISA Server\DrWeb for ISA and TMG\POP3Filter.dll

In case Microsoft Forefront TMG is used:
%PROGRAMFILES%\Microsoft Forefront Threat Management Gateway\DrWeb for ISA and TMG\POP3Filter.dll

These filters process the protocols' packets. They analyze the data and block it in case security threats are detected. All filters are available in Microsoft ISA Server or Microsoft Forefront TMG console tree (see Figure 1a, Figure 1b):

On the Application Filters tab of the Configuration -> Add-ins section in Microsoft ISA Server console.

On the Application Filters tab of the System section in Microsoft Forefront TMG console.

filters_zoom50

Figure 1a. Dr.Web application filters in Microsoft ISA Server console

filters_tmg_zoom45

Figure 1b. Dr.Web application filters in Microsoft Forefront TMG console

After the application installation and registration, Dr.Web FTP Filter connects to the FTP protocol events and is displayed on the FTP protocol properties tab in the Microsoft ISA Server and Microsoft Forefront TMG console (see Figure 2).

drweb_ftp_zoom50

Figure 2. Dr.Web FTP Filter on the FTP protocol properties tab

warning_grey

Microsoft ISA Serverand Microsoft Forefront TMG contain FTP Access Filter. If this filter is disabled, the firewall does not control the applications interaction on the FTP protocol level. For operation of Dr.Web FTP Filter, FTP Access Filter needs to be enabled and displayed on the FTP protocol properties tab (see Figure 2).