Antivirus Options for a Network

[robphillips79]

It sucks having each individual pc on a network having its own antivirus solution. Not only do you have to ensure that each is getting virus def. updates on a regular basis, but there are always novice users that don't know what to do when being prompted what to do with an infected email.

I know there are solutions out there at the gateway that can scan all incoming/outgoing email on your SMTP port, thus providing one central location to fight virus infections. I've also heard of another scenario in which email is sent from your ISP's POP3 server to another service providers server, which then scans the email, and if it's clean, sends it to your computer.

Just curious what people are familiar with out there and what seems to be the best. Thanks.

 

[spidey07]

Trendmicro has been working really well for us for many years.

The clients automatically update themselves from a central server we have.

every server (not matter what it does e-mail, app, file/print) also updates itself as soon as a new pattern/engine version is released. I belive most of the big 3 do this as well.

for inline scanning of ftp, http, nntp, etc the ositis appliances work well for us.

If you're serious about stopping virusus then you will use a "defense in depth" strategy that scans every place a virus could execute. which means at the bare minium on all pcs and servers.

 

[Boscoh]

I like Trend Micro's products personally. We use pretty much all of their enterprise-class products. They are awesome.

Routing your mail through a provider like Postini or FrontBridge is a good solution as opposed to doing AV+Spam filtering in-house. If you dont keep email AV filtering on the mail server in your network, at least run something on the client-side that filters POP3/SMTP or Outlook Exchange Inboxes. Trend will do this, as should most others.

Spidey: Have you guys seen the new OSCE 6.5 beta? Been working REALLY well for us.

 

[spidey07]

I don't deal much with the virus solutions.

But I will tell you that even though we scan every e-mail on every mail server internal and external...out incoming mail is routed through frontbridge.

can't be too careful.

<---knocks on wood...haven't had an e-mail virus in over 4 years.

 

[Cleaner]

I use Symantec Antivirus Corporate Edition for all the clients. It installs a client on all the machines and downloads the updates automatically. It then pushes the updates to the clients automatically. They don't even realize that its happening. Works great. I also run the Exchange plugin and it scans all the email and takes care of that. It wasn't very expensive maybe $1500 for 50 users. I work in a small office. Anyways I like it very much.

 

[mamisano]

If you already have something Corporate AV installed, you can set up a managed environment. All virus alerts will be sent to the console and the Admin can take care of it from there. The Admin can run scans on clients, push defs, etc all from one centralized console.

I also suggest something at the perimeter to scan incoming traffic, an appliance would be able to handle that. All depends on the size of the environment.