OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: AV Scanning - (Was: Mass emailing worm loose on net...)

From: Anders Norrbring (andersnorrbring.biz)
Date: Thu May 22 2003 - 04:35:34 CDT

> ?? Protection in the servers? Don't you mean protection for the
> clients? AV software is to stop the final client (MUA) misbehaving
> when it receives a virus: the server shouldn't be normally affected.

Simon,
I mean protection for BOTH servers and clients. Since users have a strange
behaviour (far more strange than Windows.. :) ), some of them do almost
anything to "speed up" their workstation, they download apps that promises
to "minimise autorunning applications" etc, etc. In reality, you can't trust
a user to let the AV keep running on their workstation. That's why in some
environments, server AV protection is needed. For example (I know, it's a
horrific one..) I have 4 schools as clients, schools where there are
hundreds of teenagers trying to "break the system". Here it's imperative
with total protection, in everything from workstations to servers and
firewalls.

In a small office, where employees are somewhat knowledgeable and they care
about their production environment, those steps may not be necessary.

Anders Norrbring
Norrbring Consulting