Re: Exchange Server Virus Scanning

["Lucas, Bryan" <b.lucas () TCU EDU>]

I support environments with both Antigen and Groupshield on the Exchange
Server as well as AV on other inline devices.  

Antigen is my preference, I have worked with it for 4+ years and have
only seen this definition disaster twice, today being #2.  I have less
experience with GS (~1 year) but in that time have seen it have a
definition disaster as well.

IMHO, your risk is about the same.  Being that MS now owns Sybari, I
can't see choosing GS.

As for inline devices or additional layers, I think they are great, but
always secondary and not a replacement for database AV scanning.  One
great thing about an additional layer is today's case.  We were able to
uninstall Antigen and rely on our second layer until we could verify the
solution would work.

Bryan Lucas
Server Administrator
Texas Christian University
(817) 257-6971

-----Original Message-----
From: Tim Rhoades [mailto:trhoades () UWB EDU] 
Sent: Thursday, February 16, 2006 5:21 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Exchange Server Virus Scanning

Hi all, 

We have been using Antigen 8.0 from Sybari to secure our Exchange server
2003 infrastructure. Today's issues with the Kaspersky engine
slowing/breaking mail delivery have our "powers that be" asking
questions about which product is currently the industry standard for
education.

Can I ask if anyone out there in the world of higher Ed has some
personal preferences or areas that I might look to evaluate the
benefits/costs/ and drawbacks of changing horses?

Thanks for any help you can provide. 

--------------------------------------------------- 
Tim Rhoades 
Network Manager 
University of Washington - Bothell