CIPAFilter features

Virus Protection - How it Works

Network-Based

As a firewall or transparent in-line bridge, CIPAFilter will scan and sanitize all traffic automatically and transparently. This happens automatically to ensure that traffic passing from and to the Internet is free of any viruses or other harmful code.

External POP3 and FTP transfers are automatically intercepted and virus scanned,
prior to being delivered to the internal network!

Compressed files are decompressed and scanned as well as SMTP mail transfers
(if setup to relay mail)

All other downloads and traffic from the Internet is scanned

Hourly updates of signature files, nightly updates for engine

Logs are easily accessible to track viruses caught

Many Spy-ware and Ad-Ware applications are caught as well

CIPAFilter uses an open-source anti-virus engine called “ClamAv” in order to catch viruses more effectively and help clients save lots of money on their anti-virus solution.

ClamAv has become increasingly popular and has been modified to work with CIPAFilter. In fact, ClamAv is used in many other commercial applications currently. The engine focuses not only on providing updates to new viruses quickly, but has heuristics designed to recognize variants of worms and viruses, making it able to many times detect and stop viruses prior to any signature file update!

If you want to know how ClamAv response times compare to new viruses, here is just one of many examples of how quickly ClamAv provides signature-file updates compared to other major anti-virus engines.

Antivirus	Date	Time	Sober Worm
Clam-AV	02.05.2005	18:36	Worm.Sober.P
Kaspersky	02.05.2005	18:39	Email-Worm.Win32.Sober.p
F-Prot	02.05.2005	18:54	W32/Sober.O@mm
Gdata AVK	02.05.2005	18:56	Email-Worm.Win32.Sober.p (KAV)
Bitdefender	02.05.2005	19:19	Win32.Sober.O@mm
Sophos	02.05.2005	19:27	W32/Sober-N
Command	02.05.2005	20:07	W32/Sober.O@mm
Ikarus	02.05.2005	20:14	Email-Worm.Win32.Sober.P
Virusbuster	02.05.2005	20:44	I-Worm.Sober.Q
Panda	02.05.2005	20:49	W32/Sober.V.worm
Etrust	02.05.2005	21:54	Win32/Sober.53554!Worm
Antivir	02.05.2005	22:24	Worm/Sober.P
Norman	02.05.2005	22:46	Sober.O@mm
Trend Micro	02.05.2005	23:18	WORM_SOBER.S
AVG	02.05.2005	23:27	I-Worm/Sober.P
McAfee	02.05.2005	23:38	W32/Sober.p@MM
Etrust	03.05.2005	01:15	Win32.Sober.N (VET)
Symantec	03.05.2005	03:38	W32.Sober.O@mm
QuickHeal	03.05.2005	03:28	Sober.p
Dr. Web	03.05.2005	10:46	Win32.HLLM.Generic.345

Software-client

CIPAFilter has long been involved in developing various technologies and staying involved in releasing and modifying open-source software. For this reason, CIPAFilter is working in conjunction with the developers of the freely available ClamAv software client to provide real-time scanning capability.

Currently the client is available and may be setup for nightly scans and hourly updates. Combined with the network-based virus protection it helps increase the virus protection. Check our web-site for updates on the real-time version of ClamWin!