Threat emulation for POP3

Biju_Nair · ‎2017-10-23

Hi,

Is it possible to emulate the POP3 traffics. Considering the SB appliance is sitting inline mode.

Regards,

Biju

PhoneBoy · ‎2017-10-23

POP3 is not currently supported.

It's best practice to emulate the email before it hits the POP3 server in any case.

Hugo_vd_Kooij · ‎2017-10-24

I think IMAP makes sense. As it may also be used to upload files or move them around.

And to be honest. A lot can happen between your email being received and the email being retrieved. In the space of a few hours we may learn a lot more about files.

So we should not discard POP and IMAP too easily.

<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>

PhoneBoy · ‎2017-10-24

Even so, Threat Emulation will only emulate a given file once, so seeing it again with Threat Emulation won't do any good.

Thomas_Werner · ‎2017-10-27

Afaik there is currently an ongoing development to support POP3 and IMAP on the Small Business Appliances 14xx.

Check with your local CP SE for more infos.

Regards Thomas

Are you a member of CheckMates?

Threat emulation for POP3