Re: windows AV policy support

["Scholz, Greg" <gscholz () KEENE EDU>]

To answer your specific question...you need a mechanism that is
technically able to check for some list of things.  So it depends on
your current technology.  We use CCA and it works reasonably well at
detecting a substantial list including if the product is running and up
to date.

Our experience...

We just went the opposite way.  Last year we implemented CCA and did the
following:
"provided and supported" one AV
"basic support" of 2 other major products
"allowed" anything that CCA could detect (so as long as they had
something they would pass CCA tests) but it would not be supported at
all if it did not work or broke.

We found too many problems trying to tell people what we did or did not
provide for which products.  Also it caused issues when someone had
product X 2006 and it works (because CCA could check it) but then they
upgraded to product X 2007 and it stopped working because CCA had not
caught up yet.

We now only "provide, support and allow" one AV. We have had some
grumbling but those are far fewer than the ambiguous issues we faced
before.

_________________________
Thank you,
Gregory R. Scholz
Lead Network Engineer
Information Technology Group
Keene State College
(603)358-2070
 
--Lead, follow, or get out of the way. 
(author unknown)
 

-----Original Message-----
From: Randy Grimshaw [mailto:rgrimsha () SYR EDU] 
Sent: Thursday, November 30, 2006 3:23 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] windows AV policy support

Background: we are cosidering a change to our AV policy. In the past we
have required that one provided and supported product be used. We are
thinking it might be better to let the students choose from a long list.
Question: how best to enforce that one of a long list is not only
installed but functioning.
Thank you.
<><Randy



<><Randall Grimshaw
Room 203 Machinery Hall
Syracuse University
Syracuse, NY   13244
315-443-5779
rgrimsha () syr edu