Enterprise anti(everything)ware

Forums › IT Pro and developers › Enterprise anti(everything)ware

Jonski

265 posts

Ultimate Geek

#24379 22-Jul-2008 16:07

OK, I'm tired of removing rootkits from user's pc's... (ntos.exe anyone??)

We have Symantec System Center AV (doesn't work properly with Vista) and Webroot Enterprise (meh) but nasties are still sneaking in.

Question: what is everyone using for enterprise malware protection? Do you like it? Does it do spyware, trojans, rootkits, adware, BHO's and viruses as an all-in-one easy to use package? I'm looking for something that can be administred from a central server, as I have no intention of doing manual client installs. So it should have autodiscover etc.

Thoughts and ratings? Anything in the "not with a bargepole" category?

Cheers
Jon

I reject your reality and substitute my own!
- Adam Savage, Mythbuster

1 | 2

Amanzi
1292 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#150378 22-Jul-2008 16:32

I use and recommend Trend Micro products. CSM suite should fit most NZ businesses, but they also have enterprise level products which suit business with thousands of seats. But in my experience companies often choose their antimalware software based on price alone which is why you see a lot of eTrust and Symantec stuff on the market - they like to give bulk discounts to keep the corporates happy.

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#150949 24-Jul-2008 13:56

I can second amanzi. We moved from SAV Corporate to Trend Micro Officescan and it was the best thing we ever did. It just blows Symantec out of the water in every way.

http://us.trendmicro.com/us/products/enterprise/officescan-client-server-edition/

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

rphenix

985 posts

Ultimate Geek

Lifetime subscriber

#154576 6-Aug-2008 10:39

I moved our whole organisation to McAfee ePolicy Orchestrator/Mcafee Enterprise Antivirus (has a spyware and rootkit detector).

Seems to keep all nasties at bay so far. Our Australian office used to have SAV couldnt wait to get away from the crap.

crapinator

51 posts

Master Geek

#157685 18-Aug-2008 12:04

Nod32 FTW!

http://nod32.co.nz/contact.php

Norton isnt worth a cup of cold sick. Still amazes me how some new HP's ship with it preinstalled - after the 1st reboot, norton installs ans sucks up a huge amount of your new pc's system resources.

I have Nod running in about 10 sites, along with our own - havent had a infiltration for as long as I can remember, its reasonably priced and comes with a remote admin console for push installs and monitoring.

rphenix

985 posts

Ultimate Geek

Lifetime subscriber

#157691 18-Aug-2008 12:27

crapinator: Nod32 FTW!

http://nod32.co.nz/contact.php

Norton isnt worth a cup of cold sick. Still amazes me how some new HP's ship with it preinstalled - after the 1st reboot, norton installs ans sucks up a huge amount of your new pc's system resources.

They usually package pc's with the consumer antivirus solutions which is very heavy compared to the corporate version(s). First thing I do on a new workstation is to remove all the junkware they pre-install.

Only problem with NOD32 I've found is it can get a bad update, and stop exchange from sending/receiving email till you force a manual update used to annoy me at sites I looked after with NOD32. Not sure if that still happens thesedays as I dont work in the same job.

crapinator

51 posts

Master Geek

#157707 18-Aug-2008 13:41

I havent seen that behaviour for about a year or so now, seems to be all sorted

my only gripe with nod32 is the mailmarshal folder exclusions are a bit of a pain to setup..

amanzi

Amanzi
1292 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#157710 18-Aug-2008 13:49

crapinator: I havent seen that behaviour for about a year or so now, seems to be all sorted

my only gripe with nod32 is the mailmarshal folder exclusions are a bit of a pain to setup..

Speaking of Exclusions, one thing I like about Trend Micro's antivirus, is that it will detect if it's running on a domain controller and automatically exclude the necessary directories.

I haven't used Nod32 but I've heard good things about it too. I still prefer Trend though and have had good experiences with their technical support too.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Simonm

181 posts

Master Geek

#157853 18-Aug-2008 22:45

Yes with NOD you have to be carefull with your exclusions. Run a standard setup on an exchange box and watch it die hard

crapinator

51 posts

Master Geek

#157913 19-Aug-2008 09:21

Simonm: Yes with NOD you have to be carefull with your exclusions. Run a standard setup on an exchange box and watch it die hard

BUT.... if you read the install notes (YESH INSTRUCTIONES!) you will know to do this and also the NZ based support at Chilisoft is pretty awesome if you get miffed.

Simonm

181 posts

Master Geek

#157920 19-Aug-2008 10:00

They are good, and making NOD exclusions is a mich nicer job than pulling out ~~teeth..~~ err symantec

amanzi

Amanzi
1292 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#157921 19-Aug-2008 10:01

crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

Simonm

181 posts

Master Geek

#157922 19-Aug-2008 10:07

amanzi:
crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

Thats crazy! Almost as crazy as posting on geekzone rather than doing real work....

crapinator

51 posts

Master Geek

#157927 19-Aug-2008 10:23

amanzi:
crapinator: BUT.... if you read the install notes ...

Are you suggesting that people should actually *read* the install notes...? That's just crazy talk! :)

sorry i should have stated " after all else fails and 4 cups of coffee " if you read the install notes - Gotta beef up those chargeable hours somehow aye guise!

skykissme

219 posts

Master Geek

#157933 19-Aug-2008 10:49

We are using AVG version 7.5 in our office it works great. I'd love to recommend that but when the version 8 comes out. I'm not quite sure... I heard a lot of not so good stuff about scanning all the links and all that.

We were told it has been fixed but haven't tried it myself so.. I'll keep my mouth shut until then.

We'll never be too old to learn, and we learn at least one new thing every day.

crapinator

51 posts

Master Geek

#157950 19-Aug-2008 12:20

personally i have never thought a lot of AVG, in the situations I have seen the free version used its actually pretty much good for peace of mind (for tight people)

i assume that you are running enterprise version or something ?

1 | 2