RE: Symantec Corporate AntiVirus 8.0 - thoughts

["John Tolmachoff" <sflist-secbasic () reliance net>]

> I have also rolled out Symantec AV Corporate Edition. My only problem is
rolling out clients to the DMZ. Im not sure what ports to open for the
updates, and if ports are opened what security risks are involved.

For security reasons, I have loaded on the administration workstation in the
DMZ the System Console and administer AV from there in the DMZ. Yes, it
requires to points to work from, but it keeps the DMZ separate.

> The other issue is the virus definition are only downloaded once a week
(Wednesday), i fixed this by writing a simple script to download and
extract the definition file and put it in scheduler to run every morning.

Through the definition manager on the server you can configure to update
daily or even continuous update.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com