Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Virus Protection
- Thread starter Lando2
- Start date
I have heard that there are a few good products out there, but I have only tried a few. The one I use is Trend ScanMail and it works great for our purposes. It has a real time scanner that scans all messages going through the Exchange server and gives you some flexibility with options like attachment blocking, etc. Like I said, there are quite a few products, so you might want to demo a few to find out what's going to work best for your situation. I do recommend trying ScanMail though.
- Thread starter
- #3
We use Norton Anti-Virus for Exchange. Had to get a new revision when we upgraded to Exchange 2000 but it work like a charm! It has LiveUpdate that can be scheduled (default max is 10 times a month but that can be changed). It uses a scanning engine that scans all mailboxes in the background continually and of course all active mail in real time. We've been using it for over two years and have been very satisfied with the product and the support.
fgaston
IS-IT--Management
- Nov 19, 2001
- 38
We are a dedicated Symantec NAV shop & on switching from Notes to E2K, downloaded trial version of NAV 2.5 for Exchange. Used until today with the Goner & now it's a Goner. The live update limitation of 10X per month killed us (although I read above it can be modified) & when I read to be able to block attachments you have to modify the registry, I said enough.
Pros had been telling me for months, while planning the migration from Notes, to use Trend Micro & that it got in "deeper" than NAV 2.5 in Exchange & offered superior protection. I even bought it & returned it. After bad experience with McAfee products, I became suspicious of anything non Symantec.
Well anyway we deleted NAV today, sensing limitations, & installed Trend Micro with the add-on which permits you to reject emails by sender, subject line, etc. I have to say we were very, very impressed. The installation is intelligent, the options and features are incredible & I can't say enough about the product. Not only did it sense the server & install quickly it immediately began scanning every email (it's still running 5 hours and 80,000 emails later). Maybe NAV does this but the interface is nowhere as slick & customizable.
Also liked the ability to block junk, emails by subject, sender, all types of attachments, etc. from Exchange. Our users spend an inordinate amount of time striking junk mail at client level, even with rules, etc. It's never ending. I hope to put the rules on the server for everyone & block all this junk prior to it reaching the desktop. Also being able to run back & include a subject line to trap just announced viruses before there is even a virus definition. This thing is quick. When we told it to quarantine .exe files, it pulled 140 from within last 3 years, in under a minute, while stick scanning for viruses as mentioned earlier.
The icing on the cake was clicking the Live Update tab (they call it something else) & finding it defaulted to hourly. Hourly vs. 10 times per month is a big difference. I now have a lot more confidence in protecting Exchange coming from the relatively immune Notes environment.
Good luck to all whatever product you decide upon, but we're going with Trend Micro. Who knows: maybe we'll replace NAV across whole network!
Pros had been telling me for months, while planning the migration from Notes, to use Trend Micro & that it got in "deeper" than NAV 2.5 in Exchange & offered superior protection. I even bought it & returned it. After bad experience with McAfee products, I became suspicious of anything non Symantec.
Well anyway we deleted NAV today, sensing limitations, & installed Trend Micro with the add-on which permits you to reject emails by sender, subject line, etc. I have to say we were very, very impressed. The installation is intelligent, the options and features are incredible & I can't say enough about the product. Not only did it sense the server & install quickly it immediately began scanning every email (it's still running 5 hours and 80,000 emails later). Maybe NAV does this but the interface is nowhere as slick & customizable.
Also liked the ability to block junk, emails by subject, sender, all types of attachments, etc. from Exchange. Our users spend an inordinate amount of time striking junk mail at client level, even with rules, etc. It's never ending. I hope to put the rules on the server for everyone & block all this junk prior to it reaching the desktop. Also being able to run back & include a subject line to trap just announced viruses before there is even a virus definition. This thing is quick. When we told it to quarantine .exe files, it pulled 140 from within last 3 years, in under a minute, while stick scanning for viruses as mentioned earlier.
The icing on the cake was clicking the Live Update tab (they call it something else) & finding it defaulted to hourly. Hourly vs. 10 times per month is a big difference. I now have a lot more confidence in protecting Exchange coming from the relatively immune Notes environment.
Good luck to all whatever product you decide upon, but we're going with Trend Micro. Who knows: maybe we'll replace NAV across whole network!
Sophos is in beta with a Exchange2000 agent - MailMonitor for Exchange. You can download it free of charge from their download site. Works in conjunction with your regular Sophos product and uses its virus definitions and scan engine, so when you update your regular product, the mail scanner is updated as well.
If you're got a lot a mail viruses queued up, you could really give it a shot.
Of course, they disclaimer to not use a beta product on a live system, but Sophos is pretty darn good about not releasing anything to the public that isn't stable.
If you're got a lot a mail viruses queued up, you could really give it a shot.
Of course, they disclaimer to not use a beta product on a live system, but Sophos is pretty darn good about not releasing anything to the public that isn't stable.
- Thread starter
- #9
We installed the proper sophos MailMonitor last night (came out of beta yesterday I think), all seems to be working, but I've left all that to my boss, as virus protection a crap job and I want nothing to do with it!
I hate sophos, it seems to flakey, but then it's what we have a licence for already, so we are stuck with it.
I hate sophos, it seems to flakey, but then it's what we have a licence for already, so we are stuck with it.
Well, the thing about Sophos is that it is light on the client's user interface side, as it is really oriented toward an administered network. If by flaky, you mean that there are stability problems, you might want to do some further investigating into other causes as that is what Sophos is known for - not rooting itself into the system like other products. But if you mean flaky, as in how it operates or has an unusual interface, you are right there.
I like the looks of the MMC snap in with the MailMonitor. Their December product update should also be incorporating this into the main program.
Virus protection is a crap job, but at the moment in IT, it is also about the most critical job. I was visiting with some associates the other evening, and we all agreed that viruses are the area that get our undivided attention. Five to ten years ago, it was basic hardware issues like dead hard drives and establishing networks, then Windows9x/NT, then the Internet, and now viruses and other security issues. Nothin' like job security!
I like the looks of the MMC snap in with the MailMonitor. Their December product update should also be incorporating this into the main program.
Virus protection is a crap job, but at the moment in IT, it is also about the most critical job. I was visiting with some associates the other evening, and we all agreed that viruses are the area that get our undivided attention. Five to ten years ago, it was basic hardware issues like dead hard drives and establishing networks, then Windows9x/NT, then the Internet, and now viruses and other security issues. Nothin' like job security!
- Thread starter
- #11
I hate it, once you get the title `virus update person` that's all u ever do, and when the sh`t hits the fan, your the one to blame...
My most used term at the moment "Nothing to do with me, you shouldn't have clicked on that attachment"
My most used term at the moment "Nothing to do with me, you shouldn't have clicked on that attachment"
- Status