Enterprise anti(everything)ware

Forums › IT Pro and developers › Enterprise anti(everything)ware

Jonski

242 posts

Master Geek
+1 received by user: 29

Topic # 24379 22-Jul-2008 16:07

OK, I'm tired of removing rootkits from user's pc's... (ntos.exe anyone??)

We have Symantec System Center AV (doesn't work properly with Vista) and Webroot Enterprise (meh) but nasties are still sneaking in.

Question: what is everyone using for enterprise malware protection? Do you like it? Does it do spyware, trojans, rootkits, adware, BHO's and viruses as an all-in-one easy to use package? I'm looking for something that can be administred from a central server, as I have no intention of doing manual client installs. So it should have autodiscover etc.

Thoughts and ratings? Anything in the "not with a bargepole" category?

Cheers
Jon

I reject your reality and substitute my own!
- Adam Savage, Mythbuster

1 | 2

Amanzi
878 posts

Ultimate Geek
+1 received by user: 91

Trusted

Subscriber

Reply # 150378 22-Jul-2008 16:32

I use and recommend Trend Micro products. CSM suite should fit most NZ businesses, but they also have enterprise level products which suit business with thousands of seats. But in my experience companies often choose their antimalware software based on price alone which is why you see a lot of eTrust and Symantec stuff on the market - they like to give bulk discounts to keep the corporates happy.

Lias

3360 posts

Uber Geek
+1 received by user: 1837

Trusted

Lifetime subscriber

Reply # 150949 24-Jul-2008 13:56

I can second amanzi. We moved from SAV Corporate to Trend Micro Officescan and it was the best thing we ever did. It just blows Symantec out of the water in every way.

http://us.trendmicro.com/us/products/enterprise/officescan-client-server-edition/

Information wants to be free. The Net interprets censorship as damage and routes around it.

rphenix

868 posts

Ultimate Geek
+1 received by user: 53

Subscriber

Reply # 154576 6-Aug-2008 10:39

I moved our whole organisation to McAfee ePolicy Orchestrator/Mcafee Enterprise Antivirus (has a spyware and rootkit detector).

Seems to keep all nasties at bay so far. Our Australian office used to have SAV couldnt wait to get away from the crap.

crapinator

51 posts

Master Geek

Reply # 157685 18-Aug-2008 12:04

Nod32 FTW!

http://nod32.co.nz/contact.php

Norton isnt worth a cup of cold sick. Still amazes me how some new HP's ship with it preinstalled - after the 1st reboot, norton installs ans sucks up a huge amount of your new pc's system resources.

I have Nod running in about 10 sites, along with our own - havent had a infiltration for as long as I can remember, its reasonably priced and comes with a remote admin console for push installs and monitoring.

rphenix

868 posts

Ultimate Geek
+1 received by user: 53

Subscriber

Reply # 157691 18-Aug-2008 12:27

crapinator: Nod32 FTW!

http://nod32.co.nz/contact.php

Norton isnt worth a cup of cold sick. Still amazes me how some new HP's ship with it preinstalled - after the 1st reboot, norton installs ans sucks up a huge amount of your new pc's system resources.

They usually package pc's with the consumer antivirus solutions which is very heavy compared to the corporate version(s). First thing I do on a new workstation is to remove all the junkware they pre-install.

Only problem with NOD32 I've found is it can get a bad update, and stop exchange from sending/receiving email till you force a manual update used to annoy me at sites I looked after with NOD32. Not sure if that still happens thesedays as I dont work in the same job.

crapinator

51 posts

Master Geek

Reply # 157707 18-Aug-2008 13:41

I havent seen that behaviour for about a year or so now, seems to be all sorted

my only gripe with nod32 is the mailmarshal folder exclusions are a bit of a pain to setup..

amanzi

Amanzi
878 posts

Ultimate Geek
+1 received by user: 91

Trusted

Subscriber

Reply # 157710 18-Aug-2008 13:49

crapinator: I havent seen that behaviour for about a year or so now, seems to be all sorted

my only gripe with nod32 is the mailmarshal folder exclusions are a bit of a pain to setup..

Speaking of Exclusions, one thing I like about Trend Micro's antivirus, is that it will detect if it's running on a domain controller and automatically exclude the necessary directories.

I haven't used Nod32 but I've heard good things about it too. I still prefer Trend though and have had good experiences with their technical support too.

Simonm

181 posts

Master Geek

Reply # 157853 18-Aug-2008 22:45

Yes with NOD you have to be carefull with your exclusions. Run a standard setup on an exchange box and watch it die hard

crapinator

51 posts

Master Geek

Reply # 157913 19-Aug-2008 09:21

Simonm: Yes with NOD you have to be carefull with your exclusions. Run a standard setup on an exchange box and watch it die hard

BUT.... if you read the install notes (YESH INSTRUCTIONES!) you will know to do this and also the NZ based support at Chilisoft is pretty awesome if you get miffed.

Simonm

181 posts

Master Geek

Reply # 157920 19-Aug-2008 10:00

They are good, and making NOD exclusions is a mich nicer job than pulling out ~~teeth..~~ err symantec

amanzi

Amanzi
878 posts

Ultimate Geek
+1 received by user: 91

Trusted

Subscriber

Reply # 157921 19-Aug-2008 10:01

crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

Simonm

181 posts

Master Geek

Reply # 157922 19-Aug-2008 10:07

amanzi:
crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

Thats crazy! Almost as crazy as posting on geekzone rather than doing real work....

crapinator

51 posts

Master Geek

Reply # 157927 19-Aug-2008 10:23

amanzi:
crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

sorry i should have stated " after all else fails and 4 cups of coffee " if you read the install notes - Gotta beef up those chargeable hours somehow aye guise!

skykissme

219 posts

Master Geek

Reply # 157933 19-Aug-2008 10:49

We are using AVG version 7.5 in our office it works great. I'd love to recommend that but when the version 8 comes out. I'm not quite sure... I heard a lot of not so good stuff about scanning all the links and all that.

We were told it has been fixed but haven't tried it myself so.. I'll keep my mouth shut until then.

We'll never be too old to learn, and we learn at least one new thing every day.

crapinator

51 posts

Master Geek

Reply # 157950 19-Aug-2008 12:20

personally i have never thought a lot of AVG, in the situations I have seen the free version used its actually pretty much good for peace of mind (for tight people)

i assume that you are running enterprise version or something ?

1 | 2