Security Basics mailing list archives

RE: Corporate Antivirus Systems


From: "Ramki B Ramakrishnan" <bramkie () gmail com>
Date: Thu, 16 Jul 2009 14:56:46 +0530

IMO its best to 1) refer to a source like Av-Comparatives and 2) then do a
pilot (on a test network) and decide. 

I made the mistake of skipping the 2nd step; decided on F-secure and now
users are facing performance issues. And the best part is local support
vendor says upgrade hardware; which will not work in the current economic
climate.

TEST before you buy... 

HTH, Thanks
Ramki

-----Original Message-----
From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com] On Behalf Of Jeffrey Walton
Sent: Tuesday, July 14, 2009 11:21 PM
To: Jason Hurst
Cc: Andrew Kuriger; kurt.buff () gmail com; ramiro.caire () gmail com;
security-basics () securityfocus com
Subject: Re: Corporate Antivirus Systems

Av-Comparatives has recently released its annual comparison in May,
located here:
http://www.av-
comparatives.org/images/stories/test/ondret/avc_report22.pdf
Interesting results. I'd like to see other metrics factored into the
testing. For example, module 'robustness'.

For example, suppose a malware author can surreptitiously block the
update service. Then, it does not matter how often the vendor
publishes its updates or how often the client poll for the new
definitions.

I agree theat Microsoft and ESET are among the better products
(Advanced+ rating). But Kaspersky clearly does not belong in the same
category when using additional metrics.

Jeff

On 7/14/09, Jason Hurst <Jason.Hurst () pandarg com> wrote:
Hi everyone,

I would suggest doing some research into selecting an appropriate
anti-virus first. It doesn't matter how good of a management console
you have, if the anti-virus can't catch viruses. :-)

Av-Comparatives has recently released its annual comparison in May,
located here: http://www.av-
comparatives.org/images/stories/test/ondret/avc_report22.pdf

Virus-Bulletin also has its own comparatives, which get awarded its
VB100 award, located here:
http://www.virusbtn.com/vb100/archive/results?display=summary (Free
registration is required to view)

Based on our research, we selected Eset NOD32 as our Anti-virus, and
use their remote administrator server and console.

However, their remote administrator server still has some bugs and
requires some polish.

Jason Hurst
Sr. Network Security Administrator
Panda Restaurant Group
jason.hurst () pandarg com
Please consider the environment before printing this email

[SNIP]

-----------------------------------------------------------------------
-
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an
SSL certificate.  We look at how SSL works, how it benefits your
company and how your customers can tell if a site is secure. You will
find out how to test, purchase, install and use a thawte Digital
Certificate on your Apache web server. Throughout, best practices for
set-up are highlighted to help you ensure efficient ongoing management
of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be44
2f727d1
-----------------------------------------------------------------------
-


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: