Winsock being the Windows TCP/IP interface, MWL receives data packets before they reach enterprise applications, and not at file-system layer. MWL is placed above the Winsock layer and so acts as a gatekeeper of the operating system. It assembles all the packets coming on in different TCP/IP ports and decodes e-mail and Web traffic, FTP and ICQ traffic, all the attachments and passes them through numerous filters. The virus filters, content filters, attachment filters, etc, check the validity of the file content and issue dynamic notifications.
Pierre Tarin, operations director of TCE Netfusion, says MWL technology sees all the data flowing to and from the Internet, thereby allowing it to process the data without applications accessing them. It also provides dynamic compression and decompression of data in order to optimise bandwidth usage.
Other areas where MicroWorld intends to use the MWL technology include firewalls (eConceal), client independent language translation and e-CRM business modules.
One more advantage of eScan and MailScan, says Tarin, is that both are "behaviour-based" rather than "signature-based", which helps to heuristically evaluate threats, rather than solving them in a fixed, algorithmic pattern.
Tarin adds that MailScan and eScan provide automatic detection of worms and viruses, automatic incremental downloads, content scanning for offensive words and phrases, automatic attachment compression and decompression, scanning of compressed attachments, scrapping of mail deletion at the entry level, restriction on sending mails to and receiving from a specified domain name, automatic reply to the administrator, recipients and the sender when infected attachment is found, and downloading of daily updates
Share
