Title:  Does the UW provide any scanning for viruses in email messages?

Question:
I'm aware that installing and maintaining anti-virus software on desktop
computers is essential. But I wonder if there is any scanning of email
messages as they get sent and delivered on UW networks.

Answer:
Most email sent to or from University users using the central email
services is scanned for viruses.  Mail stored in a personal account
(Hotmail,Yahoo!, ISP for example) read from a computer on campus is not
scanned, nor is mail sent to or between departmental mail servers, unless
the department is scanning for email for viruses.

Email virus scanning is not a substitute for running current desktop
anti-virus software.

Here are some additional commonly asked questions and answers.

What product is used?

    We use the PureMessage product from Sophos, Inc., which 
    utilizes the Sophos Anti-Virus engine.  PureMessage is 
    the same product we use to combat unsolicted junk email
    (spam).
 
How often are the virus definition files updated?

    Sophos issues a new file whenever a new virus is 
    discovered.  The new file will be installed on our
    servers within one hour and will be immediately used

What is scanned?

     All messages sent to addresses ending in:
        
        @u.washington.edu
        @washington.edu
        @myuw.net
        @cac.washington.edu
        @alumni.washington.edu
     
     are scanned for viruses.  Additionally, all messages passing
     through the central mail submission computers:

        mailhost.u.washington.edu
        smtp.washington.edu
        smtp.myuw.net
    
     are scanned for viruses.  These are the computers that most desktop
     email clients on campus will use to send out their messages.

What isn't scanned currently?

    Mail sent from one campus department directly to another
      department.
    Mail from outside the UW addressed to a departmental email
      server.
    File attachments in a message which has been digitally signed.
    File attachments which have been compressed with password
      protection.

How does the scanning work? 

    Each message sent to a scanned address (see above) is routed 
    to the 'front-line' mailers for the University which then 
    scan the message. 

    If a virus isn't found, the message is assigned a spam score 
    and sent on it's way.

    If a virus is found, the message is silently discarded.  Due 
    to the prevalence of viruses that forge sender information,
    as well as the prevalence of viruses in general, we no 
    longer provide a notice to the recipient that someone tried
    to send them an infected message, nor do we notify the sender.
 
How much of a delivery delay does the virus scanning introduce?

    The average message experiences a delay of 1-4 seconds, 
    including the time necessary to determine the spam score.
 
What measures should desktop computer users be taking themselves to reduce
the likelihood of virus infections?

    Every individual should use a high-quality anti-virus program, and be 
    sure to update it regularly.

For more information, including how to get anti-virus software, see the
security Web pages at
	http://www.washington.edu/computing/security/
Look in particular at information published under the "Protecting your
computer from viruses" link.

Additional information on our email anti-virus service, including
statistics can be found at 
        http://www.washington.edu/computing/security/virus/viruslog/