Looking for a corporate virus scan 1

[ArizonaGeek]

I need a new virus scan for our company. Don't even think of suggesting Symantec. You might as well suggest AOL as our corporate ISP.

Anyway, I need something that will do server/client antivirus with spyware and adware as well. I'd like an option for a firewall for our laptop users and I need a virus scan for servers (2000 and 2003) ... currently we have about 50 users (50/50 laptop desktop) and about 40 servers. I'd like regular auto updates at longest every week.

I've been looking at Trendmicro, Kaspersky and Sophos. Can you list the good, the bad and the ugly with them all? Got any better suggestions? Thanks!

Cheers
Rob

The answer is always "PEBKAC!

 

[2ffat]

This is what I've experienced. We used Sophos for a number of years. I like it and it works. However, it is expensive. Our CFO said it was too expensive and had me replace it with CA's e-Trust.

e-Trust version 7.x was OK but CA has come out with version 8 and is dropping 7.x support this year. Version 8 has a much higher overhead than 7.x especially when we have remote sites/mobile users that need to use it. It's overhead forced us back to 7.x which means we are also looking for a new AV program.

I understand Sophos has also changed since we stopped using them. I would be interested about overhead and cost for their new product.

ArizonaGeek,
[tab]What are you specific needs for an AV. Do you have remote sites or mobile users that will need access? How many users/seats? Do you need central reporting/control?


James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}

 

[ArizonaGeek]

I would like to have central reporting and control, email alerts would be awesome. I have about a dozen folks that work around the country from their homes so I also need updates for them as well since some connect VPN to us, some don't.

Total I have about 50 users and 40 servers. I just want something that works, where I don't have to spend 3 hours on the phone for simple support calls, I want regular updates, I don't want it to drag a system down and I'd like it to get rid of, or prevent any virus, spyware, adware etc etc etc...

Cheers
Rob

The answer is always "PEBKAC!

 

[Helenp1983]

Hi,

I have a sophos console that allows me to push sophos out and installl it on PC's/servers.

I now scan's for adware and potientally unwanted appliactions.

The cosnole emails me and tell me about virus' on pc's

You can set policys and create folder like in AD.

I have a differnt foler for laptops who have less restrciton for potiental unwanted applications.

On access scanning does not slow the PC down (unlike symantec)

you can turn off on access scan for certain servers via sophos poilciies.(simple to do)

Although full scanning of a PC does slow it down, but it is barable.

you set the scanning time from the consloe also.

Also sophos tech support are fantastic! help you with firewall ports, pushing across vpns and server issues, not just end user simple stuff.

It supports vista and windows 64 bit already.

They have a firewall option but i don't have it

 

[ArizonaGeek]

Awesome thanks for the info! That helps me out a lot! A star for you.

Cheers
Rob

The answer is always "PEBKAC!

 

[Helenp1983]

Weirdly when i renwed sophos, it was cheaper to have 100 machine license than 90, something to check.

 

[mofusjtf]

Look into Trend Micro. They have a SMB product Client/Server Suite that will do everything but the firewall.

For the firewall I would just use the built-in Windows firewall. It is more than sufficient for your mobile users.

 

[ArizonaGeek]

For the firewall I would just use the built-in Windows firewall. It is more than sufficient for your mobile users.

Turn in your geek card, it has been revoked. Windows firewall is NEVER sufficient for ANYTHING.

Cheers
Rob

The answer is always "PEBKAC!

 

[mofusjtf]

Before I turn in my geek card I would like to hear you explanation to why the "Windows Firewall is NEVER sufficeint for ANYTHING"

 

[ArizonaGeek]

It is a very poor excuse for a firewall in XP, in fact it shouldn't even be called a firewall since it only blocks incoming attempts.

It does nothing for outgoing packets and does no packet detection or analysis like a REAL firewall. So if you get a virus or some other malicious code on your computer, it is VERY easy for that code to open a port or turn off the firewall within Windows because the Windows "firewall" doesn't know what it is. If malicious code were sending out a packet to a server around the world saying "Hey I am open, come and get me" Windows firewall would just allow that. A real firewall would determine that a threat was happening and alert you to it. Windows "firewall" has NO alerts to let you know of anything going on.

Windows firewall is NEVER good enough for anything. Maybe if you were behind a real firewall appliance, it would be a good second layer. But thats it.

Cheers
Rob

The answer is always "PEBKAC!

 

[2ffat]

<On Topic>Some research turned up some interesting info. Look Gartner's Magic Quadrant for Endpoint Protection Platforms. You may have to register to see it. It is also available from other online services, too. This one was updated 21 December 2007.

Four protection companies made the "Magic Quadrant." They were Sophos, Trend-Micro, Symantec, and McAfee. The PDF lists the good and bad for each.




James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}

 

[mofusjtf]

So the Windows firewall is sufficient for something

I agree that Symantec is garbage. Trend makes a good product for a good price and has good support. If you are replacing a current AV product most of the manufacturers will have a competitive upgrade option that is a little cheaper.