Way to automatically scan quarantined items after update? 1

[ei8ball]

I have several servers located in different cities and I admin them using pcanywhere. I don't touch them but maybe once a week if that. Almost everytime I connect there is a dialog box asking if I want to scan the quarantined files now. What happens is NAV runs the scheduled live update and updates itself, but then waits for a prompt to scan these quarantined files.

Is there any way to automate this so it isn't waiting for the prompt?

Thanks,
8ball You were born an original. Don't die a copy!

 

[Mark1230]

2 ways....

1 If you're using corporate edition then use a quarantine server and have all NAV installs on your servers send any items to a central quarantine, then you only have one to worry about.

2 Don't bother quarantining, just delete. I think that this may be a hang around since the days of tagging a file with a virus... you can't clean it yet but maybe with the next update... sort of attitude. Viruses these days seem to be the file (eg vbs) so I find that mostly there really isn't any point in keeping them.

 

[ei8ball]

Great suggestions Mark,

question, on suggestion 1, if you set your servers to point to one quarantine server, when and if a file is actually cleaned will this cleaned file return to original owner's folder, or wherever the file originally was?

Actually, I'm not even sure that NAV does this setup like normal...?

Thanks again,

8ball You were born an original. Don't die a copy!

 

[Mark1230]

Hi ei8ball,

I'm not sure on the return of the files. I used to use quarantine but eventually got tired of all these files hanging around. Now I've found that Symantec is good enough at cleaning what it can ie some files to not worry about quarantine.

eg:
Attachment: OEMRNCE.EXE
Virus name: W32.Magistr.24876@mm
Action taken: Clean succeeded :
File status: Clean

but as I said, mostly the file that Symantec is reporting on these days IS the virus

eg:
Attachment: Sample.pi
Virus name: W32.Sobig.A@mm
Action taken: Clean failed : Delete succeeded :
File status: Deleted

Rather than keeping stuff in quarantine I've take the "can't clean then delete it" attitude.

Just remember that any Anti Virus software is only as good as the latest patterns that you've loaded. Every computer we have is 'forced' to load new patterns at login at least once a week, if not more often whenever new patterns arise.

Because of our network configuration I can't use Symantec servers so I've been able to do it by running batch jobs & login scripts but it looks like your A-V strategy could well use a Symantec A-V Server setup. Check it out on the Corporate edition CD, it's easy enough to implement.