On 01/28/2011 10:13 AM, Giles Coochey wrote: > On 28/01/2011 10:11, Giles Coochey wrote: >> On 28/01/2011 10:02, J4K wrote: >>> Good morning everyone (almost the week-end), >>> >>> Is X-IronPort-AV added by SA, or from something else (DCC >>> Clamav ? ) >>> >>> I just noticed that all email from a certain company was flagged with >>> X-IronPort-AV, and I wonder why this is so. >>> >>> I have searched on the usual engine, and saw refereces to this >>> header, but not to the programme. >>> >>> >>> >>> X-IronPort-AV: E=Sophos;i="4.60,386,1291590000"; >>> d="scan'208";a="41500553" >> Sophos is an anti-virus company... I would check their product >> list... probably one of these >> http://www.sophos.com/products/enterprise/email/security-and-control/appliances/ >> > Tell a lie, probably the Cisco Ironport: > http://www.ironport.com/products/ > I imagine it uses the Sophos engine though.... > Cheers Giles. Then I presume its not my server adding the header. It must be Tele2's server somewhere along the way.
S.
