Hi,
We've implemented Serv-U MFT in our company with a gateway in our DMZ. We are embarking on a project whereby partners SFTP files to us and we obviously want to ensure they are not pushing malware into our network. Any files written to disk will be scanned, but this means they've already hit the internal network and I'd rather have a mechanism that stopped them before this. Serv-U MFT apparently integrates with all well known AV products... but how?
I'm thinking that the gateway maybe able to offload the scanning of traffic to our AV appliances by way of ICAP. This possible? We use Websense/Triton which itself apparently supports ICAP.
The only other way I can see is by writing the files to a quarantine area in the DMZ, triggering a scan and then moving them on afterwards.
Your advice and experiences most welcome. I would have thought that this is a very common requirement?
Regards
Mark