Security Basics mailing list archives

Re: Why NOT to disable Real Time Antivirus on Servers


From: Micheal Espinola Jr <michealespinola () gmail com>
Date: Thu, 3 Nov 2005 16:06:14 -0500

Regardless of my already stated opinion, I do agree a lot with what
some of you are saying.  But I think a large part of the mitigation
depends on what you have in place and how its accessed, and how
controlled your environment is.

On 11/2/05, Thierry Zoller <Thierry () sniff-em com> wrote:

gpgn> He argues that since all of the workstations have the antivirus
gpgn> enabled, then there is no way for the virus to get in.

You should not rely on the user to have is AV solution enabled
everytime. Then there are bugs, crashes in the AV soft, rogue
workstations etc. Better have 2 lines of defencse than 1 here imho.

gpgn> Mine argument that a virus can still get in through other
gpgn> means. I need examples and case studies to refer to.





--
ME2  <http://www.santeriasys.net/>


Current thread: