Most of our clients (1000) accessing the filers for home directory shares are protected with an anti virus tool that scans a file on opening. There are unmanaged clients which have access to the filers and they may or may not be protected with an anti virus that is up to date, but they only risk infecting their own files in general.
Is there any real benefit to having virus checking implemented on the filer as well. Given that zero day infections will not be stopped, the additional cost of dedicated virus scanners and software licensing is significant, the performance hit with thousands of users will be high; what have other filer administrators used as arguments for or against using these products.
Any experience from administrators where the product has been of value?
Joel
"Defense and Depth".. http://en.wikipedia.org/wiki/Defense_in_Depth_(computing)
In my opinion, I have had viruses that were attempted to be uploaded to the filer from users that HAD anti-virus protection, and after I implemented the AV, I was able to scan some of the users shares, and found some viruses. The problem was the users AV definition was out of date.
We use Trend and it is an inline scanner, as well as scans on a weekly basis. I don't care for the trend product, but its what the org has paid for, and it does work. The reporting for this product is very poor at best.
Hope this helps.
Joel Krajden wrote:
Most of our clients (1000) accessing the filers for home directory shares are protected with an anti virus tool that scans a file on opening. There are unmanaged clients which have access to the filers and they may or may not be protected with an anti virus that is up to date, but they only risk infecting their own files in general.
Is there any real benefit to having virus checking implemented on the filer as well. Given that zero day infections will not be stopped, the additional cost of dedicated virus scanners and software licensing is significant, the performance hit with thousands of users will be high; what have other filer administrators used as arguments for or against using these products.
Any experience from administrators where the product has been of value?
Joel
Hi...
Well...we dont use any antivirus at all in our environment...and yes some home directories do have viruses etc...but that doesn't affect other users...since as a policy .exe files are not allowed in home directories...so better let em have it who keep EXEs in their home directories... :) instead of keeping dedicated virus scanner servers,occupying rack space and power coupled with overheads of file access performance etc, better is to have better performance for majority of users and let few have the viruses... Thanx
________________________________ From: steve klise klises@caminomedical.org To: toasters@mathworks.com Sent: Wed, December 9, 2009 2:08:00 AM Subject: Re: Filers and anti virus software benefit
"Defense and Depth".. http://en.wikipedia.org/wiki/Defense_in_Depth_(computing)
In my opinion, I have had viruses that were attempted to be uploaded to the filer from users that HAD anti-virus protection, and after I implemented the AV, I was able to scan some of the users shares, and found some viruses. The problem was the users AV definition was out of date.
We use Trend and it is an inline scanner, as well as scans on a weekly basis. I don't care for the trend product, but its what the org has paid for, and it does work. The reporting for this product is very poor at best.
Hope this helps.
Joel Krajden wrote:
Most of our clients (1000) accessing the filers for home directory shares are protected with an anti virus tool that scans a file on opening. There are unmanaged clients which have access to the filers and they may or may not be protected with an anti virus that is up to date, but they only risk infecting their own files in general.
Is there any real benefit to having virus checking implemented on the filer as well. Given that zero day infections will not be stopped, the additional cost of dedicated virus scanners and software licensing is significant, the performance hit with thousands of users will be high; what have other filer administrators used as arguments for or against using these products.
Any experience from administrators where the product has been of value?
Joel
-
Joel Krajden -
steve klise -
Zeeshan