I have a proxy server in my DMZ that among other tasks has the role of scanning incoming messages - email, SOAP - for viruses. How do I prove to my team leader that it is performing this role on all incoming messages?

2 Answers 2


You can't really prove it, without going through proxy lo gs, antivirus logs etc., but you can certainly get confidence that it is by sending some test messages through with the EICAR signatures in it (see http://www.eicar.org/anti_virus_test_file.htm).

You can then see whether it flags them.


Logs is the most possible option. Since the server is in the DMZ, it would be rather easy. The AV will log the details of the triggered asset and the "ahost" machine thus proving that the proxy is doing what it is supposed to.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .