Security Basics mailing list archives

RE: recommendations for centrally managed corporate antivirus solution


From: "Dan Lynch" <DLynch () placer ca gov>
Date: Thu, 14 Feb 2008 14:51:25 -0800

We've had good experiences with McAfee's desktop anti-virus and ePolicy
Orchestrator server. We support ~3000 clients, and a hundred Windows
servers with a half dozen AV policies, all centrally managed.

We're less pleased with their Secure Content Management perimeter web
and mail AV proxy. Though it does its job just fine (its anti-SPAM
capabilities are notable), it's complex enough that McAfee support is
too often stumped by our questions. In general, it's difficult to get
satisfactory answers in a timely fashion from McAfee support, except for
the most fundamental sorts of questions.

Dan Lynch, CISSP
Information Technology Analyst
County of Placer
Auburn, CA

-----Original Message-----
From: listbounce () securityfocus com 
[mailto:listbounce () securityfocus com] On Behalf Of 
illuminaeti () gmail com
Sent: Thursday, February 14, 2008 7:39 AM
To: security-basics () securityfocus com
Subject: recommendations for centrally managed corporate 
antivirus solution

Hi list



On the different networks I manage, I've been using Symantec 
corporate since version 7. I've never had any major issues 
with it until now. 



Version 11, now called "Symantec endpoint Protection" 
requires IIS and either MS SQL or the symantec embedded 
database. I installed a copy on a test server and it just 
about crippled it. Network access from clients was incredibly 
slow and processor use was hitting %100. I've heard the same 
comments from a collegue who installed it on a new server at 
the customer's request. The file server was virtually 
unusable even before the client was installed on the 
workstation. Also the new GUI is just plain awful. 



 I don't have the time or resources to tweak settings to get 
better performance out of the AV.  

 I've heard good things about NOD32, Sophos and Kaspersky.  
I've started looking around and of course, every website I 
visit tells me the software they sell is the best in the universe. 



So, looking for real answers from real users, I thought I'd 
ask you all about your experience, positive or negative, with 
various corporate antivirus software.



Thanks in advance.








Current thread: