Security Basics mailing list archives

Re: recommendations for centrally managed corporate antivirus solution


From: Wes Deviers <wdevie () hrcsb org>
Date: Fri, 15 Feb 2008 11:48:03 -0500

I'll second Kaspersky. We switched recently from a more... "mainstream" AV that kept bogging down the old machines. The product itself is great; if you have Active Directory, the management console works fine. If you don't, you have to do the management based on IP ranges and that's a bit trickier. But then then non-AD set is probably less than 10 installations worldwide any more : (

The management console also gives you the ability to remotely install custom packages with surprisingly little hassle. If you don't already have a remote software installation kit (or don't like the one you have) the Kasperksy console has turned out to be really useful for that as well.

I can't really say much about detection level; we don't get many viruses on the network. But it has a much smaller footprint than other AVs I've used.
Wes

On 02/14/2008 05:20 PM, Jennifer Brooker wrote:
We currently use Kaspersky after switching this year from Symantec
Corporate version 10. We to were Symantec users for many years (and
versions). The initial setup of Kaspersky can be somewhat tricky but it
has been working extremely well for us and has a very small footprint. I
also like the ability of Kaspersky to have nodes update from either the
central server in network or their online server if the node is a mobile
node and out of network coverage. Kaspersky will also quarantine nodes
depending on what rules you setup.
As a side note Kaspersky found at least a dozen infections that Symantec
did not catch.
Jennifer Brooker

Partner, IT Specialist

www.wealthmgmt.com


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Mike Hale
Sent: Thursday, February 14, 2008 1:20 PM
To: illuminaeti () gmail com
Cc: security-basics () securityfocus com
Subject: Re: recommendations for centrally managed corporate antivirus
solution

We just rolled out TrendMicro at my last company.

It worked fairly well.

On 14 Feb 2008 15:38:41 -0000, illuminaeti () gmail com
<illuminaeti () gmail com> wrote:
Hi list


On the different networks I manage, I've been using Symantec corporate
since version 7. I've never had any major issues with it until now.
Version 11, now called "Symantec endpoint Protection" requires IIS and
either MS SQL or the symantec embedded database. I installed a copy on a
test server and it just about crippled it. Network access from clients
was incredibly slow and processor use was hitting %100. I've heard the
same comments from a collegue who installed it on a new server at the
customer's request. The file server was virtually unusable even before
the client was installed on the workstation. Also the new GUI is just
plain awful.

 I don't have the time or resources to tweak settings to get better
performance out of the AV.
 I've heard good things about NOD32, Sophos and Kaspersky.  I've
started looking around and of course, every website I visit tells me the
software they sell is the best in the universe.
So, looking for real answers from real users, I thought I'd ask you
all about your experience, positive or negative, with various corporate
antivirus software.
Thanks in advance.








Current thread: