Norman SandBox
Platform independence
Email system independence
Multithreaded solution
Single and centralized point of update
Scalability
Performance
Decompression library

Norman SandBox
Back to top

Norman’s SandBox technology detects new and unknown computer viruses, including trojans and worms. Today, an email worm can infect tens of thousands of workstations in a matter of seconds. The antivirus vendors are expected to find the cure, update the virus definition files, and distribute these to its customers immediately. The need for speed is paramount. Norman’s SandBox is a virtual world where everything is simulated. An emulator provides an environment where possible virus infected executables “run" just as they would do on a real system. When execution stops, the SandBox is analyzed for changes. The SandBox is particularly tuned to find new email-, network- and peer-to-peer worms.

Platform independence
Back to top

NVCNet for ISPs is a platform independent solution that can perform antivirus scanning on email systems running on for example NT, Linux, UNIX, Intel or Alpha. This is a great advantage since many ISPs use a mix of platforms.

Email system independence
Back to top

Many of the ISPs today use their own in-house designed solutions, making it virtually impossible to find AV companies that can provide suitable antivirus software. With the client part of the NVCNet solution, virus scanning can be added to any kind of email system.

Multithreaded solution
Back to top

To make scanning possible in large ISPs that run multiple email servers, web mail servers, and that handle large numbers of emails, NVCNet has been designed so that a single client can run many sessions simultaneously. Also, the server can handle multiple incoming requests from different clients at the same time. Mixed environments are therefore not a problem.

Single and centralized point of update
Back to top

It is important that the solution is running with the latest updates at all times in order to provide maximum protection to the ISPs subscribers. NVCNet has therefore been designed in such a way that the scanning engine and virus definition file upgrades take place on the server, transparent to the clients. In addition, updating is achieved through Norman Internet Update, without the need of any user intervention.

Scalability
Back to top

Scaling antivirus protection can be achieved simply by adding NVCNet servers or clients and can be achieved in a matter of minutes once a client has been integrated.

Performance
Back to top

The speed of an object scanning session is restricted by the network speed. Unlike other scanners that transfer complete objects across the network for scanning, NVCNet transfers relatively small amounts of data between client and server, thus maximizing the efficiency of the scanning session. A single NVCNet server may handle requests from a large ISP user mass.

Decompression library
Back to top

A new advanced decompression module has been developed to scan files that have been compressed with different archive programs. With this module NVC can now scan more than 30 archive types and variants like ZIP, TAR, RAR, ARJ, UUENCODE, ARC etc. Files that contain other files of different archive formats will also be scanned to further increase security. In addition, if malware is found within an archived file, NVC will - if possible - clean the infection and repack the file (only valid for some formats).

.