Two questions, the second related to the first...
How does ClamAV secure its update virus definition operations from its online servers? I will assume (?) that it uses HTTPS for security, but a security specialist has posed the thoughtful question: seeing as ClamAV updates regularly with definitions obtained from an online server, it creates an opportunity for exploitation - all calls made from ClamAV should be routed through a "next-generation" firewall.
I'm not sure what advantage that would have over the existing firewall (provided by an online hosting agency) traffic being routed out through?
0 Answers