Sophos and PureMessage are trademarks of Sophos Plc and Sophos Group. Sophos PureMessage is an anti-spam program by Sophos plc, which is aimed primarily at corporate environments. Sophos PureMessage for Microsoft Exchange — part of Email Security and Data Protection — blocks spam, viruses, spyware and phishing.
'Why am I still getting spam?'
That is the million dollar question I've been getting from most of my executive colleagues and all I can do at this point is shrug. For the money spent, I expected better performance from a system that touts over 99% spam detection. But since our implementation of the service, I've FWD an avg of 15 spam emails per day to their collection address to report spam until I've had enough and just BAN the offending ISPs of the month, rinse/repeat.
Other Puremessage admins that I've been in contact have gone to a layered approach levering packages like SpamTitan, and It looks like I'll be needing to move that way too. I unfortunate that I have spend more money in licensing fees to compensate for where PM lacks.
If the endpoint side wasn't so solid, I would of jumped ship long ago.
(p.s. During the time I've spend writing this review, I've had a warning that someone ran a background check, and I also received 4 complimentary dinners from outbacksteakhousespecialsgroup.)
+ Read moreON THIS PAGE
The Sophos PureMessage DSM for JSA accepts eventsby using Java Database Connectivity (JDBC).
JSA records all relevant quarantinedemail events. This document provides information about configuring JSA to access the Sophos PureMessage database by using theJDBC protocol.
JSA supports the following Sophos PureMessageversions:
Sophos PureMessage for Microsoft Exchange - Stores eventsin a Microsoft SQL Server database that is specified as
savexquar.Sophos PureMessage for Linux - Stores events in a PostgreSQLdatabase that is specified as
pmx_quarantine.
Here's information on integrating JSA with Sophos:
Integrating JSA with Sophos PureMessage for MicrosoftExchange
Integrating JSA with Sophos PureMessage for Linux
Integrating JSA with Sophos PureMessage forMicrosoft Exchange
Sophos Central Email
You can integrate JSA with Sophos PureMessage forMicrosoft Exchange.
- Log in to the Microsoft SQL Server command-line interface(CLI):
use savexquar; go
- Type the following command to create a SIEM view in yourSophos database to support JSA:
After you create your SIEM view, you must configure JSA to receive event information by using the JDBC protocol. To configurethe Sophos PureMessage DSM with JSA, see Sophos PureMessage.
JDBC Log Source Parameters for Sophos PureMessage
If JSA does not automatically detect the log source,add a Sophos PureMessage log source on the JSA Consoleby using the JDBC protocol.
When using the JDBC protocol, there are specific parametersthat you must use.
Sophos Puremessage End Of Life
The following table describes the parameters that require specificvalues to collect JDBC events from Sophos:
Table 1: JDBC Log Source Parameters for the Sophos PureMessage DSM
Parameter | Value | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Type a name for the log source. The name can't contain spacesand must be unique among all log sources of the log source type thatis configured to use the JDBC protocol. If the log source collects events from a single appliance thathas a static IP address or host name, use the IP address or host nameof the appliance as all or part of the Log Source Identifier value;for example, 192.168.1.1 or JDBC192.168.1.1. If the log source doesn'tcollect events from a single appliance that has a static IP addressor host name, you can use any unique name for the MSDE | |||||||||||
Type Type Type ./psql -d pmx_quarantine After you create your database view, you must configure JSA to receive event information by using the JDBC protocol. If JSA does not automatically detect the log source,add a Sophos PureMessage log source on the JSA Consoleby using the JDBC protocol. When using the JDBC protocol, there are specific parametersthat you must use. The following table describes the parameters that require specificvalues to collect JDBC events from Sophos: Table 2: JDBC Log Source Parameters for the Sophos PureMessage for MicrosoftExchange DSM Parameter Value Type the identifier for the log source. Type the log sourceidentifier in the following format: <Sophos PureMessage Database> isthe database name, as entered in the <Sophos PureMessage Database Server IP orHost Name> is the host name or IP address for this logsource, as entered in the Postgres Type Type Type Configure Database Settings on your Sophos PureMessage to define the parameters required toconfigure the Sophos PureMessage DSM in JSA. |
