"Defense and Depth".. http://en.wikipedia.org/wiki/Defense_in_Depth_(computing)
In my opinion, I have had viruses that were attempted to be uploaded to the filer from users that HAD anti-virus protection, and after I implemented the AV, I was able to scan some of the users shares, and found some viruses. The problem was the users AV definition was out of date.
We use Trend and it is an inline scanner, as well as scans on a weekly basis. I don't care for the trend product, but its what the org has paid for, and it does work. The reporting for this product is very poor at best.
Hope this helps.
Joel Krajden wrote:
Most of our clients (1000) accessing the filers for home directory shares are protected with an anti virus tool that scans a file on opening. There are unmanaged clients which have access to the filers and they may or may not be protected with an anti virus that is up to date, but they only risk infecting their own files in general.
Is there any real benefit to having virus checking implemented on the filer as well. Given that zero day infections will not be stopped, the additional cost of dedicated virus scanners and software licensing is significant, the performance hit with thousands of users will be high; what have other filer administrators used as arguments for or against using these products.
Any experience from administrators where the product has been of value?
Joel