Re: Symantec Corporate AntiVirus 8.0 - thoughts

[ktyler () nautilus-ins com]

I have also rolled out Symantec AV Corporate Edition. My only problem is
rolling out clients to the DMZ. Im not sure what ports to open for the
updates, and if ports are opened what security risks are involved.

The other issue is the virus definition are only downloaded once a week
(Wednesday), i fixed this by writing a simple script to download and
extract the definition file and put it in scheduler to run every morning.


                                                                                                                        
         
                      "David Randolph"                                                                                  
         
                      <DRandolph@nstarb        To:       <security-basics () securityfocus com>                         
            
                      ank.com>                 cc:                                                                      
         
                                               Subject:  Re: Symantec Corporate AntiVirus 8.0 - thoughts                
         
                      11/06/2002 02:01                                                                                  
         
                      PM                                                                                                
         
                                                                                                                        
         
                                                                                                                        
         




I just rolled it out across five sites with about 80 desktops & I'll have
to say it's been a lifesaver.  We are a mixed Novell/NT/Linux environment &
so far it's worked great.
All of the tools have worked as expected.  My only complaint is that there
isn't really a Linux piece for it.  I particularly like that I can lock
down the settings so that users can't disable things.


Dave Randolph                 drandolph () nstarbank com
System Admin                    940 383 6233
               Kinder and Gentler IT

> > > Scott Plumlee <scott () plumlee org> 11/06/02 08:12AM >>>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anyone have any opinions on this for managing workstation virus
checkers?  Doing it by myself and trusting the users to update is
getting tedious.  I'm interested in anyone running it on a Novell
network especially.  What do each of the modules provide that you
like/don't like?

Windows client
Netware server package
System center
MMC snap ins
Rollout tool
etc..

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPckjSS7xgTzdLHYCEQJcCwCfcE2YtEcb4smM3tNqhN29zyi2/aEAoIm/
ExkHdIxAuogfz1n7rajiDcyQ
=TJPU
-----END PGP SIGNATURE-----

Scott Plumlee
PGP Public key: http://plumlee.org/pgp/   C23E 2672 FF08 62EA 0796  24CD
2EF1 813C DD2C 7602