High Level Virus Notification

[talcs]

Is there any way of being notified via email of any new virus threats with a level of severity of HIGH or greater. New virus's posted on the McAfee website are often only noticed a good few hours later.

 

[ReallyTallCupboards]

you need to use McAfee Alert Manager - install it on one of your servers & configure the email notification option so that it notifies you about level 5 events (you'll also need an smtp server for this to work - also specified in the options). You then configure all your virusscan clients to send their alerts to that Alert Manager server. Both Alert Manager & the VirusScan alert configs can be controlled using EPO for a "hands off" approach. hope that helps

 

[ReallyTallCupboards]

sorry - just re-read your post!!
you acually need to sign up for the nai dat update release list (

http://vil.nai.com/vil/join-DAT-list.asp).

NAI's policy is to release an emergency update if a new high level virus is discovered. The dat update email from them tells you about the threat. Here's a sample of the email that I received from them yesterday after the all the MyDoom stuff started happening:

<snip>

The 4319 dat files have been released early due to the High-Outbreak risk assessment of W32/MyDoom@MM.

The 4319 dat files have been posted to the initial NAI servers as of 8:38PM PST, on 01/26/2004. Please allow up to an hour from this posting time for the dat files to be available on all download servers worldwide.

The various 4319 dat file packages can be found at <<

http://www.networkassociates.com/us/downloads/updates/>>.

<snip>

 

[talcs]

That's exactly what I want. Many thanks