Security Basics mailing list archives

Fwd: Anti-Virus Updates - How?


From: Captain Bock <captbock () gmail com>
Date: Mon, 3 Aug 2009 17:47:42 +0100

Do you rely only on your user's anti virus only or do you have any
other kind of protection such as edge scanning appliances and mail
server anti-virus systems between them and the real world

I'm asking this because having up to date mail servers and edge
traffic scanners gives you some space to check the users anti virus
system before deploying. I had cases of more than a year without any
virus detection or infection in a user's PC while there were thousands
of detections per day at my appliances and email servers side.

Now if you have no other anti virus security feature but the users
anti virus, I guess it would be better to keep them up to date.
Compare the consequences of an anti virus trash against the
consequences of a major infection caused by the delay of a day or two
in your updates. Also consider the odds..

CB


On Mon, Jul 13, 2009 at 6:01 PM, Mike Hale <eyeronic.design () gmail com> wrote:

I've found that the best way of doing update is for the IT machines to
update first, when the updates come out, and then release the updates
to the general population a week or two after.

In some cases, you really need to release an update or two
immediately, but for most, a week or two of lag time shouldn't cause
any harm.

On Fri, Jul 10, 2009 at 7:49 AM, Ian Bradshaw<ian () ianbradshaw net> wrote:
Hi,

Just wondering if anyone has a plan for deployment of AV updates?

There have been a couple of AV updates that have trashed systems recently
(one from CA and one from McAfee).

Neither of these have affected me (fortunately) but we do have all our
systems set to update to the latest definitions - so guess it will happen at
some point.

The problem is, in a small IT department (4 staff with ~5,000 pcs/laptops
over 10 geographic locations - we don't have much spare time!), what is the
best way to deploy AV updates?

Given the number of updates sent out, it's not feasible to test them all
when they are released.

So, leave auto-update on or hold back and test say once a week and update
then, or what?

Any thoughts? / how do people do it at the moment?

Cheers

I.






------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------





--
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: