Re: Corporate Antivirus Systems

["Sandeep Cheema" <51l3n7 () live in>]

Hello all,

I agree with Jason that console is not the only thing that is to an AV. You 
have to ensure that the following are also in place:

1) Vendor support: Probably the most important.
2) Footprint of the client.
3) Compatibility with other installed standard applications.
4) Low false positive rate.
5) Logging and reporting from the console.
6) Anti "Anti Virus" Protection efficiency.
7) What else do they offer with the AV ? (like firewall, IPS.......)
8) Response time upon submission of a sample.
9) Update Technology(Incremental or Full)
10) GUI protection from the end users.

Sooner or later an AV vendor will come up with the WOL technology which is 
critical to the business and I think that will separate the leader.

We are using SAV CE 10.x and are in the process of migrating to SEP which 
has become stable now (done well with the QA that we have performed)

Regards, Sandeep

--------------------------------------------------
From: "Jason Hurst" <Jason.Hurst () PandaRG com>
Sent: Tuesday, July 14, 2009 22:37
To: "Andrew Kuriger" <a.kuriger () liquidphlux com>; <kurt.buff () gmail com>; 
<ramiro.caire () gmail com>
Cc: <security-basics () securityfocus com>
Subject: RE: Corporate Antivirus Systems

> Hi everyone,
>
> I would suggest doing some research into selecting an appropriate 
> anti-virus first. It doesn't matter how good of a management console you 
> have, if the anti-virus can't catch viruses. :-)
>
> Av-Comparatives has recently released its annual comparison in May, 
> located here: 
> http://www.av-comparatives.org/images/stories/test/ondret/avc_report22.pdf
>
> Virus-Bulletin also has its own comparatives, which get awarded its VB100 
> award, located here: 
> http://www.virusbtn.com/vb100/archive/results?display=summary (Free 
> registration is required to view)
>
> Based on our research, we selected Eset NOD32 as our Anti-virus, and use 
> their remote administrator server and console.
>
> However, their remote administrator server still has some bugs and 
> requires some polish.
>
> Jason Hurst
> Sr. Network Security Administrator
> Panda Restaurant Group
> jason.hurst () pandarg com
> Please consider the environment before printing this email
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] 
> On Behalf Of Andrew Kuriger
> Sent: Tuesday, July 14, 2009 7:48 AM
> To: kurt.buff () gmail com; ramiro.caire () gmail com
> Cc: security-basics () securityfocus com
> Subject: Re: Corporate AntiVirus Systems
>
>
> Hello Ramiro,
>
> We have been using Trend Micro Office scan for our
> deployments/monitoring. It is all centralized and can be incorporated
> into AD deployments fairly easily. It also has a central console that
> allows you to view the hostnames/IPs of the devices that have a malware
> infection, real-time updates, and SMS/E-mail alerts depending on how you
> set the console up. We have about 3500 hosts and this is an extremely
> manageable system for us.
>
> My 2c.
>
> Have a great day!
> ~A
>
> On 7/14/2009, "Kurt Buff" <kurt.buff () gmail com> wrote:
>
> > On Mon, Jul 13, 2009 at 12:14, Ramiro Caire<ramiro.caire () gmail com> wrote:
> > > Hi,
> > >
> > > can you recommend me some corporate AV system? I mean systems that
> > > consist in a server with a management console
> > > and agents in the clients, which provide easy deployment and 
> > > maintenance.
> > > I remember one product of McAfee (I can't remember the name right now),
> > > similar to "ePolicy Orchestrator Console". That software
> > > allowed to install agents in PC clients through the AD-based domain.
> > >
> > > I'm looking for products like that.
> > >
> > > TIA
> > > cheers
> > > Ramiro
> >
> > Hopefully you're looking for something better than ePO. Heh.
> >
> > We use, and like a lot, the Sunbelt Software solution - VIPRE
> > Enterprise - at $WORK. Moved away from McAfee.
> >
> > Trend and several others also have similar solutions, including, IIRC,
> > Kaspersky and Norman and even (ptui) Symantec.
> >
> > Perhaps AVG does also, but I'm not at all current on their offerings.
> >
> > Kurt
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL 
> > certificate.  We look at how SSL works, how it benefits your company and 
> > how your customers can tell if a site is secure. You will find out how to 
> > test, purchase, install and use a thawte Digital Certificate on your 
> > Apache web server. Throughout, best practices for set-up are highlighted 
> > to help you ensure efficient ongoing management of your encryption keys 
> > and digital certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company and 
> how your customers can tell if a site is secure. You will find out how to 
> test, purchase, install and use a thawte Digital Certificate on your 
> Apache web server. Throughout, best practices for set-up are highlighted 
> to help you ensure efficient ongoing management of your encryption keys 
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company and 
> how your customers can tell if a site is secure. You will find out how to 
> test, purchase, install and use a thawte Digital Certificate on your 
> Apache web server. Throughout, best practices for set-up are highlighted 
> to help you ensure efficient ongoing management of your encryption keys 
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------