Business / Corporate Anti-Virus

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi all,

Currently I administer a network of ~40 computers all running XP SP2
running off MS SBS 2000 as a main server.

Our anti-virus solution is a minimal affair, there is no corporate
software running, just individual free versions of Norton 2003-2005
with trial subscriptions.

And I hate it. Norton Anit-Virus and it's altogether more evil big
brother internet security slow down a computer, it's horrible horrible
bloat wear, they constantly bug you about stuff and updates can only
be run with the user as a local admin.

I need a better solution and I want to implement it within the month.

What I really want is a solution like WSUS; clients installed on all
the workstations with a server side piece of software keeping track of
workstations, monitoring its update status and making sure they are
all up to date and reporting in.

Now I have some solutions in mind like Sophos / F - Secure.

I have a budget of around1000

My priorities are: (greatest first)

- Ease of administration
- Easy on system resources (as compared to Norton)
- Does not require local admins or action from my users
- Allows me to see computer status
- Scalebility
- Cost

Do any of you have any ideas advice on what I should go for? I am most
interested in your "actual" experiences rather than what you have
heard from colleagues but in abscence of that i will accept
opinions ;)

Bear in mind I absolutely want to avoid something like McAfee or
Norton, as they are horrible to use.

many thanks


Re: Business / Corporate Anti-Virus

I am no admin but my university's computer labs (I am a student) use
Trend Micro' OfficeScan solution. I dont know about the cost but from
my observation, it is definitely easy to use, easy on resources and
easy to administer (I have seen the sub-administrator at work at his
desktop). And I must tell you, with regular update, it is a very
effective antivirus. You might want to try it out.


Re: Business / Corporate Anti-Virus

In article <1171278414.337542.176770
@a75g2000cwd.googlegroups.com>, ignoranceisbliss@gmail.com=20
says...
Quoted text here. Click to load it

I had an eval copy of the F-Secure stuff and it looked pretty=20
good. We have a site licence for Sophos and the relevant=20
committees decided to renew, so I didn't get too deep into=20
testing F-Secure, but it may well suit you. The price is OK,=20
iirc. See if you can get an eval copy.
The Small Business version of Sophos should also suit you.=20
Dunno how likely it is you'd get an eval copy.=20
The choice between the two probably comes down mainly to price.
Sophos release updates more frequently than most others, if=20
being as up-to-date as possible matters.
--=20
"I am a bicycle and all the tops of legs have the mountain.=20
It is difficult", I said, making casual conversation.

<lj user=3D"whizzerandchips">

Re: Business / Corporate Anti-Virus

wrote:
Quoted text here. Click to load it

Thanks for your quick replies. I will take a look at Trend Micro's
Office Scan as it was an option I had not considered before.

Do any of you know for sure if F-Secure and / or Sophos is Server /
Client based as this would be an ideal solution for me.

Anybody else with any helpful comments / experiences?


Re: Business / Corporate Anti-Virus

In article <1171280088.726802.303660
@q2g2000cwa.googlegroups.com>, ignoranceisbliss@gmail.com
says...
Quoted text here. Click to load it
Our "full size" Sophos keeps updates, dl'd from Sophos, on a
local 2003server, and the workstations get their updates from
there. The management console runs on the same server.
I assume the small business version works in a similar way.
Updating falls back to Sophos's server if anything goes wrong
with ours.
Offhand I can't recall if the FSecure updates were held on the
local server that ran the management console or if the stations
pulled directly from FSecure - I eval'd 4 products in a month
and some of it's got a bit hazy since!
Anyway, both have central management to control and monitor
policies, updating, etc.
--
"I am a bicycle and all the tops of legs have the mountain.
It is difficult", I said, making casual conversation.

<lj user="whizzerandchips">

Re: Business / Corporate Anti-Virus

Best going is... IMO, Trend Micro's OfficeScan product.

It has fantastic server-side management of clients and it totally
transparent to the user.

Also, it will protect your server (as a client-side AV, not as a
server-specific AV). Trend makes another product specifically to protect
servers. I've never felt the need to purchase it since OfficeScan does a
good job on it's own, even on servers.

-Frank

Hi all,

Currently I administer a network of ~40 computers all running XP SP2
running off MS SBS 2000 as a main server.

Our anti-virus solution is a minimal affair, there is no corporate
software running, just individual free versions of Norton 2003-2005
with trial subscriptions.

And I hate it. Norton Anit-Virus and it's altogether more evil big
brother internet security slow down a computer, it's horrible horrible
bloat wear, they constantly bug you about stuff and updates can only
be run with the user as a local admin.

I need a better solution and I want to implement it within the month.

What I really want is a solution like WSUS; clients installed on all
the workstations with a server side piece of software keeping track of
workstations, monitoring its update status and making sure they are
all up to date and reporting in.

Now I have some solutions in mind like Sophos / F - Secure.

I have a budget of around 1000

My priorities are: (greatest first)

- Ease of administration
- Easy on system resources (as compared to Norton)
- Does not require local admins or action from my users
- Allows me to see computer status
- Scalebility
- Cost

Do any of you have any ideas advice on what I should go for? I am most
interested in your "actual" experiences rather than what you have
heard from colleagues but in abscence of that i will accept
opinions ;)

Bear in mind I absolutely want to avoid something like McAfee or
Norton, as they are horrible to use.

many thanks


Re: Business / Corporate Anti-Virus

We started using AVG Network version one month ago. Centralized management,
installed the admin program on a XP Pro workstation which updates the other
workstations and allows for configuration of shared settings. Very
reasonable price, about $10US/workstation for two year license. So far so
good. Can't say how it rates compared to the alternatives. I agree that the
typical consumer versions of McAfee and Norton should be avoided.
------------------------------
Hi all,

Currently I administer a network of ~40 computers all running XP SP2
running off MS SBS 2000 as a main server.

Our anti-virus solution is a minimal affair, there is no corporate
software running, just individual free versions of Norton 2003-2005
with trial subscriptions.

And I hate it. Norton Anit-Virus and it's altogether more evil big
brother internet security slow down a computer, it's horrible horrible
bloat wear, they constantly bug you about stuff and updates can only
be run with the user as a local admin.

I need a better solution and I want to implement it within the month.

What I really want is a solution like WSUS; clients installed on all
the workstations with a server side piece of software keeping track of
workstations, monitoring its update status and making sure they are
all up to date and reporting in.

Now I have some solutions in mind like Sophos / F - Secure.

I have a budget of around 1000

My priorities are: (greatest first)

- Ease of administration
- Easy on system resources (as compared to Norton)
- Does not require local admins or action from my users
- Allows me to see computer status
- Scalebility
- Cost

Do any of you have any ideas advice on what I should go for? I am most
interested in your "actual" experiences rather than what you have
heard from colleagues but in abscence of that i will accept
opinions ;)

Bear in mind I absolutely want to avoid something like McAfee or
Norton, as they are horrible to use.

many thanks



Re: Business / Corporate Anti-Virus

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Agix wrote:
Quoted text here. Click to load it



NOD32 fits all of your criteria including budget (you'll get a better
long-term deal with a three-year sub though), and it achieved Best
Antivirus Product of 2006 from av-comparatives.org. I don't trust anything
else to protect my customers, be they home or business users.

http://www.eset.com /

Adam Piggott, Proprietor, Proactive Services (Computing).
http://www.proactiveservices.co.uk /

Please replace dot invalid with dot uk to email me.
Apply personally for PGP public key.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)

iD8DBQFF0HW/7uRVdtPsXDkRAtVSAJ4p52MtRGxMANklJQHrZE3wtUt/qACfZj+E
5yiDyv7eSRV13RtKF75K7Mg=
=oW8S
-----END PGP SIGNATURE-----

Re: Business / Corporate Anti-Virus


Hi all,

Currently I administer a network of ~40 computers all running XP SP2
running off MS SBS 2000 as a main server.

Our anti-virus solution is a minimal affair, there is no corporate
software running, just individual free versions of Norton 2003-2005
with trial subscriptions.

And I hate it. Norton Anit-Virus and it's altogether more evil big
brother internet security slow down a computer, it's horrible horrible
bloat wear, they constantly bug you about stuff and updates can only
be run with the user as a local admin.

I need a better solution and I want to implement it within the month.

What I really want is a solution like WSUS; clients installed on all
the workstations with a server side piece of software keeping track of
workstations, monitoring its update status and making sure they are
all up to date and reporting in.

Now I have some solutions in mind like Sophos / F - Secure.

I have a budget of around 1000

My priorities are: (greatest first)

- Ease of administration
- Easy on system resources (as compared to Norton)
- Does not require local admins or action from my users
- Allows me to see computer status
- Scalebility
- Cost

Do any of you have any ideas advice on what I should go for? I am most
interested in your "actual" experiences rather than what you have
heard from colleagues but in abscence of that i will accept
opinions ;)

Bear in mind I absolutely want to avoid something like McAfee or
Norton, as they are horrible to use.

many thanks

I use Sophos small business for my home setup of 3 desktops and 2 laptops.
For a 2 year licence it actually worked out cheaper per seat than Norton.
Been very pleased, it is almost fit and forget :-)

I used to admin a network of 1 server, 25 desktops and a bunch of  laptops
and I evaluated several AV solutions. Sophos was consistently the best.  It
does not slow the system down or cause any other operating problems in my
experience.

Hope this helps

Bob



Re: Business / Corporate Anti-Virus

Quoted text here. Click to load it

Thank you all, Bob, Ayatollah, Adam and Virus Guy,

Your advice and responses are very much valued and appreciated. It's
always nice to get impartial advice from people who use these
programs.

Quoted text here. Click to load it
NAT-router and don't directly face the internet?

Yes, we have one external IP which is PAT  / NAT to the workstations,
through our server. To be perfectly honest, it's managed offices, so
our entire network sits behind some fairly rugged Cisco hardware
firewalls and security kit.

And you are completely right, in my experience over the last few years
it is the browser that is the most vulnerable and if its sealed up
well with SpyBot S&D Immunise then problems are minimal, spybot's
teatimer app is pretty damn good for warning against registry changes
as well, and i like the fact as a power user they let me approve or
deny the changes.

These days as long as your router / gateway has a hardware firewall in
it and all only the most essential ports are open and you are not
stupid enough to open things like port 25 then you will be safe.

This purchase of an AV solution is more to keep the upper echalons
happy. My concerns are with user stupidity in their web browsing
habits rather than attacks.

Thanks for the heads up on NOD32, I will definately check that out, as
will I the Sophos, Trend Micro and F-Secure versions if I can. If I
can find time to test the AVG Network Edition I will give it a go.

Once again guys, many thanks for your help and advice. If I can update
on what I went with I will. Really appreciated.


Re: Business / Corporate Anti-Virus

In article <1171361383.250766.155550
@j27g2000cwj.googlegroups.com>, ignoranceisbliss@gmail.com
says...
Quoted text here. Click to load it

I know SpyBotS&D is freeware, but it's more-or-less a 1 man
band, have you considered making a donation?
--
"I am a bicycle and all the tops of legs have the mountain.
It is difficult", I said, making casual conversation.

<lj user="whizzerandchips">

Re: Business / Corporate Anti-Virus

On Tue, 13 Feb 2007 02:09:43 -0800, Agix wrote:
Quoted text here. Click to load it

If I understand you're using a Dual NIC SBS solution heind the Cisco
Firewall.

The CISCO firewall, depending on what type, should be able to filter
content out of HTTP sessions and SMTP sessions - we use WatchGuard
Firewalls and remove EXE, DLL, etc... from all HTTP Sessions and SMTP
sessions (except for the administrative user machines)

Quoted text here. Click to load it

SB will do little to protect you, you need to be using GPO to push
security settings to each PC for IE, or forcing them to use FireFox 2.x.

Quoted text here. Click to load it

SBS requires port 25 if you use Exchange, but, a firewall would allow SMTP
inbound to the server and outbound from the server and not directly
to/from the workstations and internet. Many firewalls also offer
transparent SMTP proxy services that clean SMTP sessions.

Quoted text here. Click to load it

Symantec Corporate Edition 10.2 For Workstations and Servers is what we
use at all clients for Workstations/Servers/Memory and it works perfectly.
We use GFI Mail Security and GFI Mail Essentials for Spam/AV on the
Exchange store.

--
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an
abusive nature created by PCBUTTS1 and still hosted on his public
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,
http://www.pcbutts1.com/license.htm ,
http://www.pcbutts1.com/downloads/max.htm ,
http://www.pcbutts1.com/downloads/mpv.htm ,
http://www.pcbutts1.com/downloads/wtcpcb.htm ,
http://www.pcbutts1.com/cracks.htm ,
http://www.pcbutts1.com/Loutheasshole.htm
All while spamming his company website at: http://www.seedsv.com

Site Timeline