Effective Policies?

[jrjuiliano]

I wanted to see what other people are doing and how effective their policies have been. This is for a networked environment, with NAV CE (or something similar).

Was wondering how you formed your policies for your machines. For example, do you install NAV on EVERY machine in your network? Do you do a full scan every day? Do you have it set to scan ALL files or just specific ones (specific extensions)?

This might help me (and others) form a plan of their own based on 'standard' implementations...

For my network, I have about 20 Win 2000 PC's, one Win 2000 server.

I have two Win 2000 Pro NAV servers, and split off clients based on need to update. The ones that use mail and Internet the most get to update their own defs if they think they are behind. The others are completely managed through policy.

ALL files are scanned as they go. This causes a little bit of drag, but could be worth it in the long run.

ALL PC's run a full virus scan daily. Seems like overkill but we haven't had a problem yet! Might even adjust to even or odd days. As it stands I think this is what is causing the drives to fragment the most.

I use the Live Update Administrator and all my machines get their updates through a local Live Update server.

I think that's about it. How 'bout you? J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[polymath5]

I take a 3 level approach.

I use the MessageLabs SkyScan service. It runs all incoming/outgoing email through 4 different AV engines.

Then I have a WatchGuard Firebox Firewall that denies practially all attachments, except .zip, and office documents. Since it looks at the actual data packets, it can determine if an attachment is buried in another attachment or hidden in some way.

Then I run NAVCE on all computers except the SQL Server. It checks ALL file types

All computers get a full scan nightly (4am)

I only exclude the recovery bin from daily scans and real time scanning.

Hope that helps!

 

[jrjuiliano]

Man, that's pretty serious!
Thanks for replying! J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group