I have a network with 300 users. How can i detect/log virused users?
If they are supposed to use your mail server for outgoing email, block port 25 outbound to anything except your servers IP and turn on logging for the forwarding rule that does the blocking. If they are free to use any mail server they wish, you’ll find out they’re virused when your network gets blacklisted.
use the filter in this forum. I have yet to have one complaint