IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

ISAM (Secure Email Gateway) and Falcon AV

  • 1.  ISAM (Secure Email Gateway) and Falcon AV

    Posted Wed February 16, 2022 11:34 AM

    We would like to install Falcon Crowdstrike Antivirus Agent on a ISAM box acting as Maas360 email gateway. Making sure its o.k. and won't affect our support if we do that.



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: ISAM (Secure Email Gateway) and Falcon AV

    Posted Wed February 16, 2022 01:59 PM

    Greg,

    The ISAM appliance is a locked environment. You are not able to install any sort of external software onto the appliance itself.



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: ISAM (Secure Email Gateway) and Falcon AV

    Posted Wed February 16, 2022 04:42 PM

    Hello Greg,

    To add onto 'drcariel's response and caveat:

    It is only possible to install extensions onto the IBM Security Verify Access (formerly Security Access Manager) appliance from the IBM Security App Exchange:

    https://exchange.xforce.ibmcloud.com/hub?br=IdentityandAccess

    You can request new extensions via IDEAS portal for IBM Security Verify Access:

    https://ideas.ibm.com/?interaction=raised

    The App Exchange also allows for community created apps. Please reference the FAQ page for reference on creating community apps:

    https://exchange.xforce.ibmcloud.com/hub/faq

    Furthermore, the IBM Security Verify Access Reverse Proxy has ICAP functionality:

    https://www.ibm.com/docs/en/sva/10.0.3?topic=deployment-internet-content-adaptation-protocol-icap-support

    "Additional examples of ICAP server functions are: virus scanning, language translation, and content filtering."

    So it's possible for you to forward incoming requests/outgoing responses to an ICAP server for inspection. This can help if the Crowdstrike component supports running as a server and using ICAP.

    Hopefully this helps y'all achieve the functionality you desire and secure your emails even better.



    #Support
    #SupportMigration
    #Verify