Managed cliend does not support SMTP over TLS ?

Avast Business Avast Distributed Network Manager
1

Does managed client support sending emails using secure SMTP over TLS ?
It seems like it does not support this feauture ???
Email client Thunderbird.

2

Hi Andrius,

and welcome to the avast forums.

No, the mail scanner in the current version of avast does not support scanning of SSL/TLS streams.

Thanks
Vlk

3

Hi Vlk,

thanks for quick reply.
Any plans to release new version with tls support soon?

recently purchased 100 licenses of avast and need tls support…

4

It depends on your definition of soon but I’m afraid it won’t happen too soon…
Honestly, it is not easy. SSL was designed to prevent man-in-the-middle - and that’s what the avast mail scanner really is…

BTW you mentioned SMTP - does that mean that you primarily care about outbound mail? Or did you rather mean POP3/IMAP?

Thanks
Vlk

5

Yes, the question was about outgoing mail.

The problem is that users use TLS for outgoing mail and can’t send emails.

How to disable outgoing mail scanner ?

6

Cannot send emails? That sounds pretty strange… What error message are they getting, exactly?
And is it SMTP on port 25 with STARTTLS, or pure TLS connection on port 465?

Thanks
Vlk

7

SMTP on port 25 with STARTTLS.
And getting this error with thunderbird:

Sending of message failed.
An error ocured sending mail: Unable to connect to SMTP server x.x.x.x via STARTTLS since it doesn’t offer STARTTLS In EHLO reponse. Please verify that your Mail/News account settings are correct and try again.

8

Yes, the mail scanner blocks STARTTLS on port 25. To disable SMTP scanning with ADNM, open properties of the respective group in computer catalog and in “Custom ini” tab put these two lines:

[MailScanner]
StartSmtp=0

9

Where can i find all defined custom ini parameters ?

10

By default, there are no “custom” settings (just the defaults).
Generally, the Custom INI Settings page is for fine-tuning the configuration (i.e. if there’s no GUI control for something, you can usually change it by changing a custom INI setting).

11

But is there a list of settings that can be used ?

12

http://forum.avast.com/index.php?topic=1647.0

But not all of the settings are relevant (and some have dedicated GUI controls).

Cheers
Vlk

13

Thanks.
Waiting for TLS support.