Re: AV - Full scans or On Access Scans

["Basgen, Brian" <bbasgen () PIMA EDU>]

Matt,

> We also share the same dream.  I wish there was some way to 
> globally modify all BIOS settings to enable WOL.  Half of the 
> PCs deployed here end up being deployed with the setting 
> defaulted to off. 

 We had this problem as well. We have 5,300 windows boxes across 6
campuses, so we just used the brute force method: spend a minute per
machine, and get it done. It was painful at first, but now that it is
done, our end users are *much* happier, and we have ended up saving
ourselves a lot of work as well. 


~~~~~~~~~~~~~~~~~~
Brian Basgen
Information Security
Pima Community College
 
 
 

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jenkins, Matthew
> Sent: Thursday, April 10, 2008 6:29 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] AV - Full scans or On Access Scans
>
> We also share the same dream.  I wish there was some way to 
> globally modify all BIOS settings to enable WOL.  Half of the 
> PCs deployed here end up being deployed with the setting 
> defaulted to off.  Aside, we use VMPS, and from my 
> understanding you can only get WOL packets through a Cisco 
> switch on an unauthorized port using 802.1X.
>
> Matt
>
> Matthew Jenkins
> Network/Server Administrator
> Fairmont State University
> Visit us online at www.fairmontstate.edu
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Eric Case
> Sent: Wednesday, April 09, 2008 11:53 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] AV - Full scans or On Access Scans
>
>       With the diversity of equipment in my college, WOL for 
> all systems is still a dream.  :(  What we do is train the 
> users to log out of the system and leave the system on (with 
> the monitor off).  At
> 9 PM most systems are fully AV scanned.  Some faculty and 
> grad students have asked that the time be moved, so their 
> computers are put in a group with the scheduled scan set for 
> 2 AM.  (Microsoft patches and reboots are scheduled for 5 AM.) -Eric
>
>
>
> Eric Case, CISSP  <ecase () Arizona edu>
> Information Security Officer
> College of Engineering   <http://www.Engr.Arizona.edu>
> 1127 E James E. Rogers Way Room 200
> Tucson, AZ 85721-0020
> Mobile Phone 520-275-6436