Depending on the licence scheme
Dr.Web for IBM Lotus Domino allows to do the following:
- detect, cure or remove any malicious objects, including e-mail and network worms, rootkits, file viruses, Trojans, bodiless and stealth viruses, polymorphic viruses, macro-viruses and MS Office worms, script viruses, spyware, password stealers, key loggers, paid dialers, adware, suspicious applications, hack tools, backdoors, jokers, spam, phishing, pharming, scamming and bounce messages;
- process incoming and outdoing e-mails “on-the-fly” (in the real-time mode) or as scheduled by an administrator when a server load is minimal. A message body is scanned as well as all its components regardless of the nesting level. According to the scanning results the filter may allow a message, block it, or modify. Dr.Web for IBM Lotus Domino has a unique inbuilt anti-spam that doesn’t require training. It starts working as soon as the first message is received! The anti-spam doesn’t require connection to an external server or access to a database which also saves traffic;
- check documents in specified nsf-bases for viruses;
- examine e-mail messages and analyze all their components;
- cure infected messages and their attached files;
- move infected and suspicious objects to the Quarantine. Lotus Notes client is used to access the quarantined objects;
- process correctly archived files of most known formats, including multi-volume and self-extracting (SFX) archives;
- send scan reports to recipients or other specified addressees using the templates;
- collect statistics on all activities of the system;
- protect its own plug-ins against failures.
Rapid response
The multi-thread scan technology allows scanning files on-the-fly before the received messages are processed by a mail client, so the scan doesn’t affect the receipt of messages by users.
Dr.Web is not an anti-virus only!
Dr.Web successfully detects, cures or removes viruses and all types of malicious objects, including rootkits, mail and network worms, file viruses, Trojan programs, spyware, adware, hacker tools, paid dialers and joke programs.
Unique non-signature detection technology
The Origins Tracing™ technology has been added to traditional signature scan and heuristic analysis. It significantly improves detection of yet unknown viruses. Malicious objects detected using the new technology get the .Origin extension to their names.
Correct scan of archived and packed files
Dr.Web correctly checks the majority of existing formats of packed files and archives with any nesting level, including multi-volume and self-extracting, which is extremely important for e-mail systems. Dr.Web recognizes over 1000 types of archives and packers.
Very frequent updates of the virus database
Updates to the Dr.Web virus database are released as soon as new entries are added – up to several times per hour. "Hot" add-ons are released as soon as a new piece of malware is caught and analyzed. Dr.Web global monitoring network collects samples of new viruses from all over the world. Updates are delivered to customers from several updating servers located in different parts of the globe.
Dr.Web has the most compact virus database
That’s why files are scanned quickly, sparing hard drive disk space and RAM, as well as Internet traffic for downloading of the updates is almost instantaneous. Just one entry in the Dr.Web virus database allows detecting dozens, or hundreds, or even thousands of similar viruses.
The e-mail is filtered for spam by the
vaderetro plug-in using its own library (Vade Retro).
High filtering speed
Due to the dynamically updated code of the anti-spam’s library the filtering speed is always high and the quality of detection is constantly improving. In one second Dr.Web anti-spam checks over one hundred messages for spam on-the-fly (1.9GHz Pentium 4 CPU)! The high speed is combined with resource consumption; the anti-spam perfectly functions on e-mail servers of almost any configuration.
The anti-spam doesn’t require tuning!
Unlike anti-spam solutions based on the Bayesian filter, Dr.Web anti-spam doesn’t require any initial tuning. The anti-spam starts effectively working as soon as the first message is received!
Intelligent spam detection system
Different technologies are used for different types of undesired mail – spam, phishing, pharming, scamming, bounce messages – to ensure yet higher detection rate.
Stand-alone anti-spam saves traffic
The stand-alone anti-spam analyzer module doesn’t require connection to an external server or access to a database which also saves traffic.
The unique technologies!
The unique spam filtering technologies do not require a block list, which means that a company can’t be discredited by a deliberate adding it to such lists.
Regular updates
Anti-spam updates are released on a daily basis and are downloaded by Dr.Web automatic updating utility. The unique technologies allow staying up-to-date with the latest filtering evasion techniques applied by spammers with only one update in 24 hours and, therefore, save traffic.
Vaderetro
Vaderetro is the spam filtering plug-in that uses a library of its own (Vade Retro).
Depending on the analysis each message receives the score from the VadeRetro library – an integer ranging from -10000 to +10000. The less the score is, the more likely the message is to be "legitimate", i.e. not spam. The threshold is set by the
SpamThreshold parameter of the plug-in the configuration file (if the score equals to the value of the
SpamThreshold parameter or if it is greater than this value the message is considered to be spam).
Depending on its configuration the plugin may add one of the following headers to a message after analysis:
-
X-Drweb-SpamScore: n. n – the score given by the VadeRetro library.
-
X-Drweb-SpamState: b. b – yes for spam and messages with viruses and no for non-spam messages and bounces.
-
X-Drweb-SpamState-Num: s. s – classification results of the VadeRetro analysis. s can take the following values: 0, 1, 2 and 3.
0 – a message is not spam, 1 – a message is spam, 2 – a message contains a virus, 3 – a message is a bounce. This header is added if the value for the
ddXDrwebSpamStateNumHeader parameter of the vaderetro plug-in configuration file is set to yes.
-
X-Drweb-SpamVersion: version. version – the version of the VadeRetro library.
This header is added if the value for the AddVersionHeader parameter of the vaderetro plug-in configuration file is set to yes.
Additionally, at the beginning of the "Subject:" field of messages classified as spam, or those containing a virus, the
vaderetro plug-in can add the following:
- X-IS-SPAM, value YES/NO
- X-SPAM-SCORE, a number of points given to the message by VadeRetro
- X-SPAM-AGENT, the version of the VadeRetro library
- X-SPAM-DETAILS, a detailed description of spam returned by the VadeRetro library
- X-SPAM-STATE, current status of a message.
Spam filtering technologies
The anti-spam technologies consist of several thousands of rules which can be divided into several groups.
Heuristic analysis
A highly intelligent technology that empirically analyzes all parts of a message: header, message body, etc. Not only the message itself, but its attachment is analyzed. The heuristic analyzer is being constantly improved; new rules are frequently added.
Counter-reaction
The counter-reaction technique is one of the most advanced and efficient technologies of Dr.Web anti-spam. It helps counteract techniques and tricks used by spammers to avoid detection.
HTML-patterns
Messages containing HTML code are compared with a list of known patterns from the anti-spam library. Such comparison, in combination with data on sizes of images typically used by spammers, helps protect users against spam messages featuring HTML-code, which often contains online images.
Semantic analysis
During a semantic analysis words and phrases of a message are compared with words and phrases typical of spam. A special dictionary is used for the analysis. All words, phrases and symbols are analyzed – both those visible to the human eye and those masqueraded by the technical tricks of spammers.
Anti-scamming technology
Scam (as well as pharming messages – a type of scam-messages) is the most dangerous type of spam, including the so-called “Nigerian” scams, loan scams, lottery and casino scams and false messages from banks and credit organizations. A special module of Dr.Web anti-spam is used to filter scams.
Technical spam filtering
So-called bounces are delivery-failure messages sent by a mail server. An actual recipient of a bounce is not necessarily a sender of an undelivered message; such a message could be sent by a mail worm. Therefore bounces are as unwanted as spam A special module of Dr.Web anti-spam filters such messages as unwanted.
Licensing
The product is licensed per number of protected users. License options: Anti-virus, Anti-virus&Anti-spam.
Types of the license
- Per protected users – any number of users over 5.
- Per protected servers – an unlimited amount of e-mail traffic of one mail server with the number of users within 3 000.
The product is also available in money-saving Dr.Web bundles for small and medium businesses.
Licensed components
- Mail monitor.
- Anti-spam.
- Updating utility.
- Task scheduler.
License options
Special offer! Buy any Dr.Web product for mail protection and get 50% discount for Dr.Web Enterprise Suite. Learn more...
This products is also included into Dr.Web bundles.
