I'm going to be evaulating AV packages over the next month or so, and I'd appreciate any recommendations that you can give. In particular, I am interested in the following criteria:
1) timely signature updates.
2) ability to submit unknown messages for scanning via a web interface, preferrably with immediate feedback.
3) Cost - we have about 400 users and I don't necessarily want to change their desktop app just to run a different scanner on the boundary.
4) Performance - having a resident scanner is good, but not essential; I'd rather the scanner be good than fast.
To date, the McAfee Enterprise Suite we have has been very good, but I am concerned that they are slipping. In particular, I have a sample infected message which uvscan is still failing on under Linux, though the Windows version can flag it. It seems like the not-recently-updated engine under *nix is not cutting it any more.
TIA
John
